Ubuntu Security Notices

Developers issue an Ubuntu Security Notice when a security issue is fixed in an official Ubuntu package. You can find additional guidance for high-profile vulnerabilities in the Ubuntu Vulnerability Knowledge Base section.

To report a security vulnerability in an Ubuntu package, please contact the Security Team.

The Security Team also produces OVAL files for each Ubuntu release. These are an industry-standard machine-readable format dataset that contain details of all known security vulnerabilities and fixes relevant to the Ubuntu release, and can be used to determine whether a particular patch is appropriate. OVAL files can also be used to audit a system to check whether the latest security fixes have been applied.

Subscribe for updates  

Mailing list Atom RSS

Search USNs

USN ID, name, description or CVE ID contains

Filter by Ubuntu release

71 - 80 of 243 results

USN-1039-1: AppArmor update

7 January 2011

AppArmor did not properly handle execute permissions under certain circumstances.

  • Ubuntu 10.10 ,
  • 10.04 ,
  • 9.10

USN-1038-1: dpkg vulnerability

6 January 2011

A malicious source package could write files outside the unpack directory.

  • Ubuntu 10.10 ,
  • 10.04 ,
  • 9.10

CVE ID

CVE-2010-1679

USN-1035-1: Evince vulnerabilities

5 January 2011

  • Ubuntu 10.10 ,
  • 10.04 ,
  • 9.10 ,
  • 8.04

CVE ID

CVE-2010-2643, CVE-2010-2641, CVE-2010-2640 + 1 other

USN-1032-1: Exim vulnerability

11 December 2010

A remote attacker could send crafted email to gain root access.

  • Ubuntu 9.10 ,
  • 8.04 ,
  • 6.06

CVE ID

CVE-2010-4344

USN-1019-1: Firefox and Xulrunner vulnerabilities

9 December 2010

Firefox could be made to crash or run programs as your login if it opened a specially crafted website.

  • Ubuntu 10.10 ,
  • 10.04 ,
  • 9.10 ,
  • 8.04

CVE ID

CVE-2010-3776, CVE-2010-3777, CVE-2010-3778 + 9 others

USN-1030-1: Kerberos vulnerabilities

9 December 2010

  • Ubuntu 10.10 ,
  • 10.04 ,
  • 9.10 ,
  • 8.04 ,
  • 6.06

CVE ID

CVE-2010-1323, CVE-2010-1324, CVE-2010-4021 + 1 other

USN-1029-1: OpenSSL vulnerabilities

8 December 2010

  • Ubuntu 10.10 ,
  • 10.04 ,
  • 9.10 ,
  • 8.04 ,
  • 6.06

CVE ID

CVE-2010-4180, CVE-2008-7270

USN-1027-1: Quagga vulnerabilities

7 December 2010

  • Ubuntu 10.04 ,
  • 9.10 ,
  • 8.04 ,
  • 6.06

CVE ID

CVE-2010-2948, CVE-2010-2949

USN-1028-1: ImageMagick vulnerability

7 December 2010

  • Ubuntu 10.10 ,
  • 10.04 ,
  • 9.10 ,
  • 8.04

CVE ID

CVE-2010-4167

USN-1025-1: Bind vulnerabilities

1 December 2010

  • Ubuntu 10.10 ,
  • 10.04 ,
  • 9.10 ,
  • 8.04 ,
  • 6.06

CVE ID

CVE-2010-3613, CVE-2010-3614

  1. Previous page
  2. 6
  3. 7
  4. 8
  5. 9
  6. 10
  7. Next page

Resources

Join the discussion

Further reading

Canonical is offering
Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›