Ubuntu Security Notices

Developers issue an Ubuntu Security Notice when a security issue is fixed in an official Ubuntu package. You can find additional guidance for high-profile vulnerabilities in the Ubuntu Vulnerability Knowledge Base section.

To report a security vulnerability in an Ubuntu package, please contact the Security Team.

The Security Team also produces OVAL files for each Ubuntu release. These are an industry-standard machine-readable format dataset that contain details of all known security vulnerabilities and fixes relevant to the Ubuntu release, and can be used to determine whether a particular patch is appropriate. OVAL files can also be used to audit a system to check whether the latest security fixes have been applied.

Subscribe for updates  

Mailing list Atom RSS

Search USNs

USN ID, name, description or CVE ID contains

Filter by Ubuntu release

9 - 18 of 178 results

USN-5225-1: lxml vulnerability

12 January 2022

lxml could be made to execute arbitrary code if it received a specially crafted XML or HTML file.

  • Ubuntu 21.10 ,
  • 21.04 ,
  • 20.04 LTS,
  • 18.04 LTS,
  • 16.04 LTS,
  • 14.04 LTS

CVE ID

CVE-2021-43818

USN-5224-1: Ghostscript vulnerabilities

12 January 2022

Several security issues were fixed in Ghostscript.

  • Ubuntu 21.10 ,
  • 21.04 ,
  • 20.04 LTS,
  • 18.04 LTS

CVE ID

CVE-2021-45944, CVE-2021-45949

USN-5222-1: Apache Log4j 2 vulnerabilities

11 January 2022

Several security issues were fixed in Apache Log4j 2.

  • Ubuntu 21.10 ,
  • 21.04 ,
  • 20.04 LTS,
  • 18.04 LTS

CVE ID

CVE-2021-44832, CVE-2021-45105

USN-5043-2: Exiv2 regression

11 January 2022

USN-5043-1 introduced a regression in Exiv2.

  • Ubuntu 21.10 ,
  • 21.04 ,
  • 20.04 LTS

CVE ID

CVE-2021-37620

USN-5219-1: Linux kernel vulnerability

11 January 2022

The system could be made to crash or run programs as an administrator.

  • Ubuntu 21.10 ,
  • 21.04 ,
  • 20.04 LTS

CVE ID

CVE-2021-4204

USN-5213-1: WebKitGTK vulnerabilities

6 January 2022

Several security issues were fixed in WebKitGTK.

  • Ubuntu 21.10 ,
  • 21.04 ,
  • 20.04 LTS

CVE ID

CVE-2021-30890, CVE-2021-30887

USN-5212-1: Apache HTTP Server vulnerabilities

6 January 2022

Several security issues were fixed in Apache HTTP Server.

  • Ubuntu 21.10 ,
  • 21.04 ,
  • 20.04 LTS,
  • 18.04 LTS

CVE ID

CVE-2021-44790, CVE-2021-44224

USN-5208-1: Linux kernel vulnerabilities

6 January 2022

Several security issues were fixed in the Linux kernel.

  • Ubuntu 21.10 ,
  • 21.04 ,
  • 20.04 LTS

CVE ID

CVE-2021-43389, CVE-2021-4002, CVE-2021-43267 + 4 others

USN-5204-1: Django vulnerabilities

5 January 2022

Several security issues were fixed in Django.

  • Ubuntu 21.10 ,
  • 21.04 ,
  • 20.04 LTS,
  • 18.04 LTS

CVE ID

CVE-2021-45116, CVE-2021-45452, CVE-2021-45115

USN-5186-2: Firefox regressions

20 December 2021

USN-5186-1 caused some minor regressions in Firefox.

  • Ubuntu 21.10 ,
  • 21.04 ,
  • 20.04 LTS,
  • 18.04 LTS
  1. Previous page
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5
  7. Next page

Resources

Join the discussion

Further reading

Canonical is offering
Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›