Ubuntu Security Notices

Developers issue an Ubuntu Security Notice when a security issue is fixed in an official Ubuntu package. You can find additional guidance for high-profile vulnerabilities in the Ubuntu Vulnerability Knowledge Base section.

To report a security vulnerability in an Ubuntu package, please contact the Security Team.

The Security Team also produces OVAL files for each Ubuntu release. These are an industry-standard machine-readable format dataset that contain details of all known security vulnerabilities and fixes relevant to the Ubuntu release, and can be used to determine whether a particular patch is appropriate. OVAL files can also be used to audit a system to check whether the latest security fixes have been applied.

Subscribe for updates  

Mailing list Atom RSS

Search USNs

USN ID, name, description or CVE ID contains


Filter by Ubuntu release

171 - 180 of 222 results

16 January 2019

PolicyKit could allow unintended access.

  • Ubuntu 18.10 ,
  • 18.04 LTS,
  • 16.04 LTS,
  • 14.04 LTS

15 January 2019

Several security issues were fixed in libcaca.

  • Ubuntu 18.10 ,
  • 18.04 LTS,
  • 16.04 LTS,
  • 14.04 LTS

15 January 2019

Several security issues were fixed in libarchive.

  • Ubuntu 18.10 ,
  • 18.04 LTS,
  • 16.04 LTS,
  • 14.04 LTS

15 January 2019

Several security issues were fixed in HAProxy.

  • Ubuntu 18.10 ,
  • 18.04 LTS,
  • 16.04 LTS

14 January 2019

PEAR could be made to run programs if it processed a specially crafted file.

  • Ubuntu 18.10 ,
  • 18.04 LTS,
  • 16.04 LTS

11 January 2019

Several security issues were fixed in systemd.

  • Ubuntu 18.10 ,
  • 18.04 LTS,
  • 16.04 LTS

10 January 2019

Several security issues were fixed in WebKitGTK+.

  • Ubuntu 18.10 ,
  • 18.04 LTS

CVE ID

CVE-2018-4437


10 January 2019

GnuPG could allow unintended access to network services.

  • Ubuntu 18.10 ,
  • 18.04 LTS

10 January 2019

Several security issues were fixed in Exiv2.

  • Ubuntu 18.10 ,
  • 18.04 LTS,
  • 16.04 LTS,
  • 14.04 LTS

9 January 2019

Django could be made to expose spoofed information over the network.

  • Ubuntu 18.10 ,
  • 18.04 LTS,
  • 16.04 LTS,
  • 14.04 LTS

CVE ID

CVE-2019-3498



Resources


Further reading

  • Loading...

Canonical is offering
Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.