Ubuntu Security Notices

Developers issue an Ubuntu Security Notice when a security issue is fixed in an official Ubuntu package. You can find additional guidance for high-profile vulnerabilities in the Ubuntu Vulnerability Knowledge Base section.

To report a security vulnerability in an Ubuntu package, please contact the Security Team.

The Security Team also produces OVAL files for each Ubuntu release. These are an industry-standard machine-readable format dataset that contain details of all known security vulnerabilities and fixes relevant to the Ubuntu release, and can be used to determine whether a particular patch is appropriate. OVAL files can also be used to audit a system to check whether the latest security fixes have been applied.

Subscribe for updates  

Mailing list Atom RSS

Search USNs

USN ID, name, description or CVE ID contains

Filter by Ubuntu release

81 - 90 of 274 results

USN-6764-1: libde265 vulnerability

7 May 2024

libde265 could be made to crash if it opened a specially crafted file.

  • Ubuntu 23.10 ,
  • 22.04 LTS,
  • 20.04 LTS,
  • 18.04 LTS,
  • 16.04 LTS

CVE ID

CVE-2023-51792

USN-6757-2: PHP vulnerabilities

2 May 2024

Several security issues were fixed in PHP.

  • Ubuntu 23.10 ,
  • 22.04 LTS,
  • 20.04 LTS

CVE ID

CVE-2022-4900, CVE-2024-2756, CVE-2024-3096

USN-6760-1: Gerbv vulnerability

30 April 2024

Gerbv could be made to crash if it opened a specially crafted input file.

  • Ubuntu 23.10 ,
  • 22.04 LTS,
  • 20.04 LTS,
  • 18.04 LTS,
  • 16.04 LTS,
  • 14.04 LTS

CVE ID

CVE-2023-4508

USN-6761-1: Anope vulnerability

30 April 2024

Anope could be made to bypass authentication checks for suspended accounts.

  • Ubuntu 24.04 LTS,
  • 23.10 ,
  • 22.04 LTS,
  • 20.04 LTS,
  • 18.04 LTS,
  • 16.04 LTS

CVE ID

CVE-2024-30187

USN-6755-1: GNU cpio vulnerabilities

29 April 2024

GNU cpio could be made to write files outside the target directory.

  • Ubuntu 23.10 ,
  • 22.04 LTS,
  • 20.04 LTS

CVE ID

CVE-2023-7207

USN-6756-1: less vulnerability

29 April 2024

less could be made run programs as your login if it opened a specially crafted file.

  • Ubuntu 24.04 LTS,
  • 23.10 ,
  • 22.04 LTS,
  • 20.04 LTS,
  • 18.04 LTS,
  • 16.04 LTS,
  • 14.04 LTS

CVE ID

CVE-2024-32487

USN-6754-1: nghttp2 vulnerabilities

25 April 2024

Several security issues were fixed in nghttp2.

  • Ubuntu 23.10 ,
  • 22.04 LTS,
  • 20.04 LTS,
  • 18.04 LTS,
  • 16.04 LTS

CVE ID

CVE-2024-28182, CVE-2019-9511, CVE-2019-9513 + 1 other

USN-6752-1: FreeRDP vulnerabilities

25 April 2024

Several security issues were fixed in FreeRDP.

  • Ubuntu 23.10 ,
  • 22.04 LTS,
  • 20.04 LTS

CVE ID

CVE-2024-32658, CVE-2024-32659, CVE-2024-32660 + 1 other

USN-6750-1: Thunderbird vulnerabilities

25 April 2024

Several security issues were fixed in Thunderbird.

  • Ubuntu 23.10 ,
  • 22.04 LTS,
  • 20.04 LTS

CVE ID

CVE-2024-3861, CVE-2024-3859, CVE-2024-2609 + 5 others

USN-6749-1: FreeRDP vulnerabilities

24 April 2024

Several security issues were fixed in FreeRDP.

  • Ubuntu 23.10 ,
  • 22.04 LTS,
  • 20.04 LTS

CVE ID

CVE-2024-22211, CVE-2024-32458, CVE-2024-32460 + 4 others

  1. Previous page
  2. 7
  3. 8
  4. 9
  5. 10
  6. 11
  7. Next page

Resources

Join the discussion

Further reading

Canonical is offering
Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›