Ubuntu Security Notices

Developers issue an Ubuntu Security Notice when a security issue is fixed in an official Ubuntu package. You can find additional guidance for high-profile vulnerabilities in the Ubuntu Vulnerability Knowledge Base section.

To report a security vulnerability in an Ubuntu package, please contact the Security Team.

The Security Team also produces OVAL files for each Ubuntu release. These are an industry-standard machine-readable format dataset that contain details of all known security vulnerabilities and fixes relevant to the Ubuntu release, and can be used to determine whether a particular patch is appropriate. OVAL files can also be used to audit a system to check whether the latest security fixes have been applied.

Subscribe for updates  

Mailing list Atom RSS

Search USNs

USN ID, name, description or CVE ID contains

Filter by Ubuntu release

21 - 30 of 373 results

USN-2172-1: CUPS vulnerability

24 April 2014

CUPS could be made to expose sensitive information over the network.

  • Ubuntu 13.10 ,
  • 12.10 ,
  • 12.04 ,
  • 10.04

CVE ID

CVE-2014-2856

USN-2170-1: MySQL vulnerabilities

23 April 2014

Several security issues were fixed in MySQL.

  • Ubuntu 14.04 LTS,
  • 13.10 ,
  • 12.10 ,
  • 12.04

CVE ID

CVE-2014-0001, CVE-2014-0384, CVE-2014-2419 + 6 others

USN-2169-2: Django regression

23 April 2014

USN-2169-1 introduced a regression in Django.

  • Ubuntu 14.04 LTS,
  • 13.10 ,
  • 12.10 ,
  • 12.04 ,
  • 10.04

USN-2169-1: Django vulnerabilities

22 April 2014

Several security issues were fixed in Django.

  • Ubuntu 14.04 LTS,
  • 13.10 ,
  • 12.10 ,
  • 12.04 ,
  • 10.04

CVE ID

CVE-2014-0472, CVE-2014-0473, CVE-2014-0474

USN-2168-1: Python Imaging Library vulnerabilities

15 April 2014

Python Imaging Library could be made to overwrite or expose files.

  • Ubuntu 13.10 ,
  • 12.10 ,
  • 12.04 ,
  • 10.04

CVE ID

CVE-2014-1932, CVE-2014-1933

USN-2167-1: curl vulnerabilities

14 April 2014

Several security issues were fixed in curl.

  • Ubuntu 13.10 ,
  • 12.10 ,
  • 12.04 ,
  • 10.04

CVE ID

CVE-2014-0138, CVE-2014-0139

USN-2166-1: Net-SNMP vulnerabilities

14 April 2014

Net-SNMP could be made to crash if it received specially crafted network traffic.

  • Ubuntu 13.10 ,
  • 12.10 ,
  • 12.04 ,
  • 10.04

CVE ID

CVE-2012-6151, CVE-2014-2284, CVE-2014-2285 + 1 other

USN-2165-1: OpenSSL vulnerabilities

7 April 2014

OpenSSL could be made to expose sensitive information over the network, possibly including private keys.

  • Ubuntu 13.10 ,
  • 12.10 ,
  • 12.04

CVE ID

CVE-2014-0076, CVE-2014-0160

USN-2164-1: OpenSSH vulnerability

7 April 2014

A malicious server could bypass OpenSSH SSHFP DNS record checking.

  • Ubuntu 13.10 ,
  • 12.10 ,
  • 12.04

CVE ID

CVE-2014-2653

USN-2163-1: PHP vulnerability

7 April 2014

PHP could be made to crash if it processed a specially crafted file.

  • Ubuntu 13.10 ,
  • 12.10 ,
  • 12.04 ,
  • 10.04

CVE ID

CVE-2014-2270

  1. Previous page
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5
  7. Next page

Resources

Join the discussion

Further reading

Canonical is offering
Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›