Ubuntu Security Notices

Developers issue an Ubuntu Security Notice when a security issue is fixed in an official Ubuntu package. You can find additional guidance for high-profile vulnerabilities in the Ubuntu Vulnerability Knowledge Base section.

To report a security vulnerability in an Ubuntu package, please contact the Security Team.

The Security Team also produces OVAL files for each Ubuntu release. These are an industry-standard machine-readable format dataset that contain details of all known security vulnerabilities and fixes relevant to the Ubuntu release, and can be used to determine whether a particular patch is appropriate. OVAL files can also be used to audit a system to check whether the latest security fixes have been applied.

Subscribe for updates  

Mailing list Atom RSS

Search USNs

USN ID, name, description or CVE ID contains

Filter by Ubuntu release

101 - 110 of 166 results

USN-1909-1: MySQL vulnerabilities

25 July 2013

Several security issues were fixed in MySQL.

  • Ubuntu 13.04 ,
  • 12.10 ,
  • 12.04 ,
  • 10.04

CVE ID

CVE-2013-1861, CVE-2013-2162, CVE-2013-3783 + 5 others

USN-1904-2: libxml2 regression

17 July 2013

USN-1904-1 introduced a regression in libxml2.

  • Ubuntu 13.04 ,
  • 12.10 ,
  • 12.04 ,
  • 10.04

USN-1907-2: IcedTea Web update

16 July 2013

IcedTea Web updated to work with new OpenJDK 7.

  • Ubuntu 13.04 ,
  • 12.10 ,
  • 12.04

USN-1907-1: OpenJDK 7 vulnerabilities

16 July 2013

Several security issues were fixed in OpenJDK 7.

  • Ubuntu 13.04 ,
  • 12.10

CVE ID

CVE-2013-1500, CVE-2013-1571, CVE-2013-2407 + 27 others

USN-1906-1: File Roller vulnerability

16 July 2013

File Roller could be made to create or overwrite files.

  • Ubuntu 13.04 ,
  • 12.10

CVE ID

CVE-2013-4668

USN-1905-1: PHP vulnerabilities

16 July 2013

Several security issues were fixed in PHP.

  • Ubuntu 13.04 ,
  • 12.10 ,
  • 12.04 ,
  • 10.04

CVE ID

CVE-2013-4113, CVE-2013-4635

USN-1903-1: Apache HTTP Server vulnerabilities

15 July 2013

Several security issues were fixed in the Apache HTTP Server.

  • Ubuntu 13.04 ,
  • 12.10 ,
  • 12.04 ,
  • 10.04

CVE ID

CVE-2013-1862, CVE-2013-1896

USN-1904-1: libxml2 vulnerabilities

15 July 2013

Several security issues were fixed in libxml2.

  • Ubuntu 13.04 ,
  • 12.10 ,
  • 12.04 ,
  • 10.04

CVE ID

CVE-2013-0339, CVE-2013-2877

USN-1902-1: Ruby vulnerability

9 July 2013

An attacker could trick Ruby into trusting a rogue server.

  • Ubuntu 13.04 ,
  • 12.10 ,
  • 12.04

CVE ID

CVE-2013-4073

USN-1898-1: OpenSSL vulnerability

4 July 2013

Applications could be made to expose sensitive information over the network.

  • Ubuntu 13.04 ,
  • 12.10 ,
  • 12.04 ,
  • 10.04

CVE ID

CVE-2012-4929

  1. Previous page
  2. 9
  3. 10
  4. 11
  5. 12
  6. 13
  7. Next page

Resources

Join the discussion

Further reading

Canonical is offering
Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›