Ubuntu Security Notices

Developers issue an Ubuntu Security Notice when a security issue is fixed in an official Ubuntu package. You can find additional guidance for high-profile vulnerabilities in the Ubuntu Vulnerability Knowledge Base section.

To report a security vulnerability in an Ubuntu package, please contact the Security Team.

The Security Team also produces OVAL files for each Ubuntu release. These are an industry-standard machine-readable format dataset that contain details of all known security vulnerabilities and fixes relevant to the Ubuntu release, and can be used to determine whether a particular patch is appropriate. OVAL files can also be used to audit a system to check whether the latest security fixes have been applied.

Subscribe for updates  

Mailing list Atom RSS

Search USNs

USN ID, name, description or CVE ID contains

Filter by Ubuntu release

31 - 40 of 199 results

USN-4381-1: Django vulnerabilities

3 June 2020

Several security issues were fixed in Django.

  • Ubuntu 20.04 LTS,
  • 19.10 ,
  • 18.04 LTS,
  • 16.04 LTS

CVE ID

CVE-2020-13254, CVE-2020-13596

USN-4380-1: Apache Ant vulnerability

1 June 2020

Apache Ant could leak sensitive information or be made to run programs as your login.

  • Ubuntu 19.10

CVE ID

CVE-2020-1945

USN-4379-1: FreeRDP vulnerabilities

1 June 2020

Several security issues were fixed in FreeRDP.

  • Ubuntu 20.04 LTS,
  • 19.10 ,
  • 18.04 LTS

CVE ID

CVE-2018-1000852, CVE-2019-17177, CVE-2020-11042 + 16 others

USN-4377-1: ca-certificates update

1 June 2020

An expired certificate was removed from ca-certificates.

  • Ubuntu 20.04 LTS,
  • 19.10 ,
  • 18.04 LTS,
  • 16.04 LTS

USN-4369-2: Linux kernel regression

28 May 2020

USN-4369-1 introduced a regression in the Linux kernel.

  • Ubuntu 19.10 ,
  • 18.04 LTS

USN-4376-1: OpenSSL vulnerabilities

28 May 2020

Several security issues were fixed in OpenSSL.

  • Ubuntu 19.10 ,
  • 18.04 LTS,
  • 16.04 LTS

CVE ID

CVE-2019-1547, CVE-2019-1549, CVE-2019-1551 + 1 other

USN-4360-4: json-c vulnerability

28 May 2020

json-c could be made to execute arbitrary code if it received a specially crafted JSON file.

  • Ubuntu 20.04 LTS,
  • 19.10 ,
  • 18.04 LTS,
  • 16.04 LTS,
  • 14.04 LTS,
  • 12.04

CVE ID

CVE-2020-12762

USN-4375-1: PHP vulnerability

27 May 2020

PHP could be made to crash if it received a specially crafted file.

  • Ubuntu 20.04 LTS,
  • 19.10 ,
  • 18.04 LTS,
  • 16.04 LTS,
  • 14.04 LTS,
  • 12.04

CVE ID

CVE-2019-11048

USN-4374-1: Unbound vulnerabilities

27 May 2020

Several security issues were fixed in Unbound.

  • Ubuntu 20.04 LTS,
  • 19.10 ,
  • 18.04 LTS

CVE ID

CVE-2020-12662, CVE-2020-12663

USN-4373-1: Thunderbird vulnerabilities

26 May 2020

Several security issues were fixed in Thunderbird.

  • Ubuntu 20.04 LTS,
  • 19.10 ,
  • 18.04 LTS,
  • 16.04 LTS

CVE ID

CVE-2020-6831, CVE-2020-12387, CVE-2020-12392 + 2 others

  1. Previous page
  2. 2
  3. 3
  4. 4
  5. 5
  6. 6
  7. Next page

Resources

Join the discussion

Further reading

Canonical is offering
Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›