Canonical Security Advisories: November 2017 — Canonical Security Advisories

UBUNTU-CVE-2017-12636

USNExploitedCISA KEV listedHIGH2017-11-14

CVEs:CVE-2017-12636

Affected products

Product	Status	Vendor	Package	Ecosystem
couchdb	affected	Ubuntu:16.04:LTS	couchdb	—

Upstream advisory

UBUNTU-CVE-2017-16651

USNExploitedCISA KEV listedHIGH2017-11-09

CVEs:CVE-2017-16651

Affected products

Product	Status	Vendor	Package	Ecosystem
roundcube	affected	Ubuntu:Pro:16.04:LTS	roundcube	—

Upstream advisory

UBUNTU-CVE-2017-16994

USNExploitedCISA KEV listedMEDIUM2017-11-27

CVEs:CVE-2017-16994

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:16.04:LTS	linux-oem	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2017-12635

USNExploitedVulnCheck KEV listedCRITICAL2017-11-14

CVEs:CVE-2017-12635

Affected products

Product	Status	Vendor	Package	Ecosystem
couchdb	affected	Ubuntu:16.04:LTS	couchdb	—

Upstream advisory

USN-3481-1

USNExploitedVulnCheck KEV listedHIGH2017-11-16

webkit2gtk vulnerabilities

CVEs:CVE-2017-13783 CVE-2017-13784 CVE-2017-13785 CVE-2017-13788 CVE-2017-13791 CVE-2017-13792 CVE-2017-13793 CVE-2017-13794 CVE-2017-13795 CVE-2017-13796 CVE-2017-13798 CVE-2017-13802 CVE-2017-13803

Affected products

Product	Status	Vendor	Package	Ecosystem
webkit2gtk	affected	Ubuntu:16.04:LTS	webkit2gtk	—

Upstream advisory

UBUNTU-CVE-2017-16944

USNWeaponized exploitHIGH2017-11-25

CVEs:CVE-2017-16944

Affected products

Product	Status	Vendor	Package	Ecosystem
exim4	affected	Ubuntu:14.04:LTS	exim4	—
exim4	affected	Ubuntu:16.04:LTS	exim4	—

Upstream advisory

UBUNTU-CVE-2017-16943

USNWeaponized exploitCRITICAL2017-11-25

CVEs:CVE-2017-16943

Affected products

Product	Status	Vendor	Package	Ecosystem
exim4	affected	Ubuntu:14.04:LTS	exim4	—
exim4	affected	Ubuntu:16.04:LTS	exim4	—

Upstream advisory

UBUNTU-CVE-2017-16642

USNWeaponized exploitHIGH2017-11-07

CVEs:CVE-2017-16642

Affected products

Product	Status	Vendor	Package	Ecosystem
php5	affected	Ubuntu:14.04:LTS	php5	—
php7.0	affected	Ubuntu:16.04:LTS	php7.0	—

Upstream advisory

UBUNTU-CVE-2017-16352

USNWeaponized exploitHIGH2017-11-01

CVEs:CVE-2017-16352

Affected products

Product	Status	Vendor	Package	Ecosystem
graphicsmagick	affected	Ubuntu:16.04:LTS	graphicsmagick	—
graphicsmagick	affected	Ubuntu:Pro:14.04:LTS	graphicsmagick	—

Upstream advisory

UBUNTU-CVE-2017-16353

USNWeaponized exploitMEDIUM2017-11-01

CVEs:CVE-2017-16353

Affected products

Product	Status	Vendor	Package	Ecosystem
graphicsmagick	affected	Ubuntu:16.04:LTS	graphicsmagick	—
graphicsmagick	affected	Ubuntu:Pro:14.04:LTS	graphicsmagick	—

Upstream advisory

UBUNTU-CVE-2017-16544

USNWeaponized exploitHIGH2017-11-20

CVEs:CVE-2017-16544

Affected products

Product	Status	Vendor	Package	Ecosystem
busybox	affected	Ubuntu:14.04:LTS	busybox	—
busybox	affected	Ubuntu:16.04:LTS	busybox	—
busybox	affected	Ubuntu:18.04:LTS	busybox	—

Upstream advisory

UBUNTU-CVE-2017-16541

USNWeaponized exploitMEDIUM2017-11-04

CVEs:CVE-2017-16541

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:18.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:16.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2017-1000405

USNWeaponized exploitHIGH2017-11-29

CVEs:CVE-2017-1000405

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:16.04:LTS	linux-oem	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2017-15288

USNWeaponized exploitHIGH2017-11-15

CVEs:CVE-2017-15288

Affected products

Product	Status	Vendor	Package	Ecosystem
scala	affected	Ubuntu:16.04:LTS	scala	—

Upstream advisory

UBUNTU-CVE-2017-11213

USNActive exploitation (sightings)CRITICAL2017-11-15

CVEs:CVE-2017-11213

Affected products

Product	Status	Vendor	Package	Ecosystem
flashplugin-nonfree	affected	Ubuntu:14.04:LTS	flashplugin-nonfree	—
flashplugin-nonfree	affected	Ubuntu:16.04:LTS	flashplugin-nonfree	—

Upstream advisory

USN-3475-1

USNPoC exploitNONE2017-11-06

openssl vulnerabilities

CVEs:CVE-2017-3735 CVE-2017-3736

Affected products

Product	Status	Vendor	Package	Ecosystem
openssl	affected	Ubuntu:16.04:LTS	openssl	—
openssl	affected	Ubuntu:14.04:LTS	openssl	—

Upstream advisory

USN-3498-1

USNPoC exploitCRITICAL2017-11-29

curl vulnerabilities

CVEs:CVE-2017-8816 CVE-2017-8817

Affected products

Product	Status	Vendor	Package	Ecosystem
curl	affected	Ubuntu:16.04:LTS	curl	—
curl	affected	Ubuntu:14.04:LTS	curl	—

Upstream advisory

UBUNTU-CVE-2017-8817

USNPoC exploitCRITICAL2017-11-29

CVEs:CVE-2017-8817

Affected products

Product	Status	Vendor	Package	Ecosystem
curl	affected	Ubuntu:16.04:LTS	curl	—
curl	affected	Ubuntu:14.04:LTS	curl	—

Upstream advisory

UBUNTU-CVE-2017-3736

USNPoC exploitMEDIUM2017-11-02

CVEs:CVE-2017-3736

Affected products

Product	Status	Vendor	Package	Ecosystem
openssl	affected	Ubuntu:16.04:LTS	openssl	—
openssl	affected	Ubuntu:18.04:LTS	openssl	—

Upstream advisory

UBUNTU-CVE-2017-8816

USNPoC exploitCRITICAL2017-11-29

CVEs:CVE-2017-8816

Affected products

Product	Status	Vendor	Package	Ecosystem
curl	affected	Ubuntu:16.04:LTS	curl	—

Upstream advisory

USN-3496-3

USNPoC exploitCRITICAL2017-11-28

python3.4, python3.5 vulnerability

CVEs:CVE-2017-1000158

Affected products

Product	Status	Vendor	Package	Ecosystem
python3.4	affected	Ubuntu:14.04:LTS	python3.4	—
python3.5	affected	Ubuntu:16.04:LTS	python3.5	—

Upstream advisory

USN-3496-1

USNPoC exploitCRITICAL2017-11-28

python2.7 vulnerability

CVEs:CVE-2017-1000158

Affected products

Product	Status	Vendor	Package	Ecosystem
python2.7	affected	Ubuntu:16.04:LTS	python2.7	—
python2.7	affected	Ubuntu:14.04:LTS	python2.7	—

Upstream advisory

UBUNTU-CVE-2017-1000158

USNPoC exploitCRITICAL2017-11-17

CVEs:CVE-2017-1000158

Affected products

Product	Status	Vendor	Package	Ecosystem
python2.7	affected	Ubuntu:14.04:LTS	python2.7	—
python2.7	affected	Ubuntu:16.04:LTS	python2.7	—
python3.4	affected	Ubuntu:14.04:LTS	python3.4	—
python3.5	affected	Ubuntu:14.04:LTS	python3.5	—
python3.5	affected	Ubuntu:16.04:LTS	python3.5	—

Upstream advisory

USN-3479-1

USNPoC exploitCRITICAL2017-11-14

postgresql-9.3, postgresql-9.5, postgresql-9.6 vulnerabilities

CVEs:CVE-2017-15098 CVE-2017-15099

Affected products

Product	Status	Vendor	Package	Ecosystem
postgresql-9.3	affected	Ubuntu:14.04:LTS	postgresql-9.3	—
postgresql-9.5	affected	Ubuntu:16.04:LTS	postgresql-9.5	—

Upstream advisory

UBUNTU-CVE-2017-15099

USNPoC exploitMEDIUM2017-11-09

CVEs:CVE-2017-15099

Affected products

Product	Status	Vendor	Package	Ecosystem
postgresql-9.5	affected	Ubuntu:16.04:LTS	postgresql-9.5	—

Upstream advisory

USN-3478-1

USNPoC exploitCRITICAL2017-11-13

perl vulnerabilities

CVEs:CVE-2017-12837 CVE-2017-12883

Affected products

Product	Status	Vendor	Package	Ecosystem
perl	affected	Ubuntu:14.04:LTS	perl	—
perl	affected	Ubuntu:16.04:LTS	perl	—

Upstream advisory

UBUNTU-CVE-2017-16932

USNPoC exploitHIGH2017-11-23

CVEs:CVE-2017-16932

Affected products

Product	Status	Vendor	Package	Ecosystem
libxml2	affected	Ubuntu:16.04:LTS	libxml2	—
libxml2	affected	Ubuntu:14.04:LTS	libxml2	—
libxml2	affected	Ubuntu:18.04:LTS	libxml2	—

Upstream advisory

UBUNTU-CVE-2017-1000190

USNPoC exploitCRITICAL2017-11-17

CVEs:CVE-2017-1000190

Affected products

Product	Status	Vendor	Package	Ecosystem
simple-xml	affected	Ubuntu:18.04:LTS	simple-xml	—
simple-xml	affected	Ubuntu:16.04:LTS	simple-xml	—

Upstream advisory

UBUNTU-CVE-2017-16931

USNPoC exploitCRITICAL2017-11-23

CVEs:CVE-2017-16931

Affected products

Product	Status	Vendor	Package	Ecosystem
libxml2	affected	Ubuntu:16.04:LTS	libxml2	—
libxml2	affected	Ubuntu:14.04:LTS	libxml2	—

Upstream advisory

UBUNTU-CVE-2017-16516

USNPoC exploitHIGH2017-11-03

CVEs:CVE-2017-16516

Affected products

Product	Status	Vendor	Package	Ecosystem
ruby-yajl	affected	Ubuntu:16.04:LTS	ruby-yajl	—
yajl	affected	Ubuntu:20.04:LTS	yajl	—
yajl	affected	Ubuntu:Pro:16.04:LTS	yajl	—
yajl	affected	Ubuntu:22.04:LTS	yajl	—
yajl	affected	Ubuntu:Pro:18.04:LTS	yajl	—
yajl	affected	Ubuntu:Pro:14.04:LTS	yajl	—

Upstream advisory

UBUNTU-CVE-2017-16808

USNPoC exploitMEDIUM2017-11-13

CVEs:CVE-2017-16808

Affected products

Product	Status	Vendor	Package	Ecosystem
tcpdump	affected	Ubuntu:16.04:LTS	tcpdump	—
tcpdump	affected	Ubuntu:18.04:LTS	tcpdump	—
tcpdump	affected	Ubuntu:Pro:14.04:LTS	tcpdump	—

Upstream advisory

UBUNTU-CVE-2017-14992

USNPoC exploitMEDIUM2017-11-01

CVEs:CVE-2017-14992

Affected products

Product	Status	Vendor	Package	Ecosystem
docker.io	affected	Ubuntu:18.04:LTS	docker.io	—
docker.io	affected	Ubuntu:16.04:LTS	docker.io	—
golang-github-vbatts-tar-split	affected	Ubuntu:16.04:LTS	golang-github-vbatts-tar-split	—

Upstream advisory

UBUNTU-CVE-2017-16939

USNPoC exploitHIGH2017-11-24

CVEs:CVE-2017-16939

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-euclid	affected	Ubuntu:16.04:LTS	linux-euclid	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:16.04:LTS	linux-oem	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2017-11089

USNPoC exploitHIGH2017-11-16

CVEs:CVE-2017-11089

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:14.04:LTS	linux	—
linux	affected	Ubuntu:16.04:LTS	linux	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke	affected	Ubuntu:16.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

USN-3485-1

USNPoC exploitHIGH2017-11-21

linux, linux-aws, linux-gke, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities

CVEs:CVE-2017-15265 CVE-2017-15299 CVE-2017-15649 CVE-2017-15951 CVE-2017-16525 CVE-2017-16526 CVE-2017-16527 CVE-2017-16529 CVE-2017-16530 CVE-2017-16531 CVE-2017-16533 CVE-2017-16534 CVE-2017-16535

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-gke	affected	Ubuntu:16.04:LTS	linux-gke	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2017-15115

USNPoC exploitHIGH2017-11-15

CVEs:CVE-2017-15115

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-6.11	affected	Ubuntu:24.04:LTS	linux-azure-6.11	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fde-5.15	affected	Ubuntu:Pro:20.04:LTS	linux-azure-fde-5.15	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp-6.11	affected	Ubuntu:24.04:LTS	linux-gcp-6.11	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe-6.11	affected	Ubuntu:24.04:LTS	linux-hwe-6.11	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lowlatency-hwe-6.11	affected	Ubuntu:24.04:LTS	linux-lowlatency-hwe-6.11	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:16.04:LTS	linux-oem	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2017-12193

USNPoC exploitMEDIUM2017-11-18

CVEs:CVE-2017-12193

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:16.04:LTS	linux-oem	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2017-0861

USNPoC exploitHIGH2017-11-16

CVEs:CVE-2017-0861

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-6.11	affected	Ubuntu:24.04:LTS	linux-azure-6.11	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fde-5.15	affected	Ubuntu:Pro:20.04:LTS	linux-azure-fde-5.15	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp-6.11	affected	Ubuntu:24.04:LTS	linux-gcp-6.11	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe-6.11	affected	Ubuntu:24.04:LTS	linux-hwe-6.11	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lowlatency-hwe-6.11	affected	Ubuntu:24.04:LTS	linux-lowlatency-hwe-6.11	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:16.04:LTS	linux-oem	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2017-16534

USNPoC exploitMEDIUM2017-11-03

CVEs:CVE-2017-16534

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gke	affected	Ubuntu:16.04:LTS	linux-gke	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

USN-3500-1

USNPoC exploitNONE2017-11-29

libxfont, libxfont1, libxfont2 vulnerability

CVEs:CVE-2017-16611

Affected products

Product	Status	Vendor	Package	Ecosystem
libxfont	affected	Ubuntu:16.04:LTS	libxfont	—
libxfont	affected	Ubuntu:14.04:LTS	libxfont	—
libxfont2	affected	Ubuntu:16.04:LTS	libxfont2	—

Upstream advisory

UBUNTU-CVE-2017-16611

USNPoC exploitMEDIUM2017-11-28

CVEs:CVE-2017-16611

Affected products

Product	Status	Vendor	Package	Ecosystem
libxfont	affected	Ubuntu:16.04:LTS	libxfont	—
libxfont	affected	Ubuntu:14.04:LTS	libxfont	—
libxfont2	affected	Ubuntu:16.04:LTS	libxfont2	—

Upstream advisory

UBUNTU-CVE-2017-16649

USNPoC exploitMEDIUM2017-11-07

CVEs:CVE-2017-16649

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-6.11	affected	Ubuntu:24.04:LTS	linux-azure-6.11	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fde-5.15	affected	Ubuntu:Pro:20.04:LTS	linux-azure-fde-5.15	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp-6.11	affected	Ubuntu:24.04:LTS	linux-gcp-6.11	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe-6.11	affected	Ubuntu:24.04:LTS	linux-hwe-6.11	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lowlatency-hwe-6.11	affected	Ubuntu:24.04:LTS	linux-lowlatency-hwe-6.11	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:16.04:LTS	linux-oem	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2017-16650

USNPoC exploitMEDIUM2017-11-07

CVEs:CVE-2017-16650

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:16.04:LTS	linux-oem	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2017-16645

USNPoC exploitMEDIUM2017-11-07

CVEs:CVE-2017-16645

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:16.04:LTS	linux-oem	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2017-16532

USNPoC exploitMEDIUM2017-11-03

CVEs:CVE-2017-16532

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-6.11	affected	Ubuntu:24.04:LTS	linux-azure-6.11	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fde-5.15	affected	Ubuntu:Pro:20.04:LTS	linux-azure-fde-5.15	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp-6.11	affected	Ubuntu:24.04:LTS	linux-gcp-6.11	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe-6.11	affected	Ubuntu:24.04:LTS	linux-hwe-6.11	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lowlatency-hwe-6.11	affected	Ubuntu:24.04:LTS	linux-lowlatency-hwe-6.11	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:16.04:LTS	linux-oem	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2017-16644

USNPoC exploitMEDIUM2017-11-07

CVEs:CVE-2017-16644

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:14.04:LTS	linux	—
linux	affected	Ubuntu:16.04:LTS	linux	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fde-5.15	affected	Ubuntu:Pro:20.04:LTS	linux-azure-fde-5.15	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2017-16529

USNPoC exploitMEDIUM2017-11-03

CVEs:CVE-2017-16529

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:14.04:LTS	linux	—
linux	affected	Ubuntu:16.04:LTS	linux	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-6.11	affected	Ubuntu:24.04:LTS	linux-azure-6.11	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fde-5.15	affected	Ubuntu:Pro:20.04:LTS	linux-azure-fde-5.15	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp-6.11	affected	Ubuntu:24.04:LTS	linux-gcp-6.11	—
linux-gke	affected	Ubuntu:16.04:LTS	linux-gke	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe-6.11	affected	Ubuntu:24.04:LTS	linux-hwe-6.11	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lowlatency-hwe-6.11	affected	Ubuntu:24.04:LTS	linux-lowlatency-hwe-6.11	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2017-16531

USNPoC exploitMEDIUM2017-11-03

CVEs:CVE-2017-16531

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-6.11	affected	Ubuntu:24.04:LTS	linux-azure-6.11	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fde-5.15	affected	Ubuntu:Pro:20.04:LTS	linux-azure-fde-5.15	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp-6.11	affected	Ubuntu:24.04:LTS	linux-gcp-6.11	—
linux-gke	affected	Ubuntu:16.04:LTS	linux-gke	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe-6.11	affected	Ubuntu:24.04:LTS	linux-hwe-6.11	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lowlatency-hwe-6.11	affected	Ubuntu:24.04:LTS	linux-lowlatency-hwe-6.11	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2017-16537

USNPoC exploitMEDIUM2017-11-03

CVEs:CVE-2017-16537

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:14.04:LTS	linux	—
linux	affected	Ubuntu:16.04:LTS	linux	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-6.11	affected	Ubuntu:24.04:LTS	linux-azure-6.11	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fde-5.15	affected	Ubuntu:Pro:20.04:LTS	linux-azure-fde-5.15	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp-6.11	affected	Ubuntu:24.04:LTS	linux-gcp-6.11	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe-6.11	affected	Ubuntu:24.04:LTS	linux-hwe-6.11	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lowlatency-hwe-6.11	affected	Ubuntu:24.04:LTS	linux-lowlatency-hwe-6.11	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:16.04:LTS	linux-oem	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2017-16538

USNPoC exploitMEDIUM2017-11-03

CVEs:CVE-2017-16538

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2017-16646

USNPoC exploitMEDIUM2017-11-07

CVEs:CVE-2017-16646

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux	affected	Ubuntu:16.04:LTS	linux	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-6.11	affected	Ubuntu:24.04:LTS	linux-azure-6.11	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fde-5.15	affected	Ubuntu:Pro:20.04:LTS	linux-azure-fde-5.15	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp-6.11	affected	Ubuntu:24.04:LTS	linux-gcp-6.11	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe-6.11	affected	Ubuntu:24.04:LTS	linux-hwe-6.11	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lowlatency-hwe-6.11	affected	Ubuntu:24.04:LTS	linux-lowlatency-hwe-6.11	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:16.04:LTS	linux-oem	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2017-16647

USNPoC exploitMEDIUM2017-11-07

CVEs:CVE-2017-16647

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-oem	affected	Ubuntu:16.04:LTS	linux-oem	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—

Upstream advisory

UBUNTU-CVE-2017-15306

USNPoC exploitMEDIUM2017-11-06

CVEs:CVE-2017-15306

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-oem	affected	Ubuntu:16.04:LTS	linux-oem	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—

Upstream advisory

UBUNTU-CVE-2017-16525

USNPoC exploitMEDIUM2017-11-03

CVEs:CVE-2017-16525

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke	affected	Ubuntu:16.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2017-16530

USNPoC exploitMEDIUM2017-11-03

CVEs:CVE-2017-16530

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-6.11	affected	Ubuntu:24.04:LTS	linux-azure-6.11	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp-6.11	affected	Ubuntu:24.04:LTS	linux-gcp-6.11	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke	affected	Ubuntu:16.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe-6.11	affected	Ubuntu:24.04:LTS	linux-hwe-6.11	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lowlatency-hwe-6.11	affected	Ubuntu:24.04:LTS	linux-lowlatency-hwe-6.11	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2017-16533

USNPoC exploitMEDIUM2017-11-03

CVEs:CVE-2017-16533

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-6.11	affected	Ubuntu:24.04:LTS	linux-azure-6.11	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fde-5.15	affected	Ubuntu:Pro:20.04:LTS	linux-azure-fde-5.15	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp-6.11	affected	Ubuntu:24.04:LTS	linux-gcp-6.11	—
linux-gke	affected	Ubuntu:16.04:LTS	linux-gke	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe-6.11	affected	Ubuntu:24.04:LTS	linux-hwe-6.11	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lowlatency-hwe-6.11	affected	Ubuntu:24.04:LTS	linux-lowlatency-hwe-6.11	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2017-16536

USNPoC exploitMEDIUM2017-11-03

CVEs:CVE-2017-16536

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2017-16527

USNPoC exploitMEDIUM2017-11-03

CVEs:CVE-2017-16527

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:14.04:LTS	linux	—
linux	affected	Ubuntu:16.04:LTS	linux	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-6.11	affected	Ubuntu:24.04:LTS	linux-azure-6.11	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fde-5.15	affected	Ubuntu:Pro:20.04:LTS	linux-azure-fde-5.15	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp-6.11	affected	Ubuntu:24.04:LTS	linux-gcp-6.11	—
linux-gke	affected	Ubuntu:16.04:LTS	linux-gke	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe-6.11	affected	Ubuntu:24.04:LTS	linux-hwe-6.11	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lowlatency-hwe-6.11	affected	Ubuntu:24.04:LTS	linux-lowlatency-hwe-6.11	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2017-16528

USNPoC exploitMEDIUM2017-11-03

CVEs:CVE-2017-16528

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2017-16526

USNPoC exploitHIGH2017-11-03

CVEs:CVE-2017-16526

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:14.04:LTS	linux	—
linux	affected	Ubuntu:16.04:LTS	linux	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gke	affected	Ubuntu:16.04:LTS	linux-gke	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

USN-3486-1

USNEPSS <= 49%CRITICAL2017-11-21

samba vulnerabilities

CVEs:CVE-2017-14746 CVE-2017-15275

Affected products

Product	Status	Vendor	Package	Ecosystem
samba	affected	Ubuntu:14.04:LTS	samba	—
samba	affected	Ubuntu:16.04:LTS	samba	—

Upstream advisory

UBUNTU-CVE-2017-15275

USNEPSS <= 49%HIGH2017-11-21

CVEs:CVE-2017-15275

Affected products

Product	Status	Vendor	Package	Ecosystem
samba	affected	Ubuntu:14.04:LTS	samba	—
samba	affected	Ubuntu:16.04:LTS	samba	—

Upstream advisory

UBUNTU-CVE-2017-16844

USNEPSS <= 49%CRITICAL2017-11-16

CVEs:CVE-2017-16844

Affected products

Product	Status	Vendor	Package	Ecosystem
procmail	affected	Ubuntu:16.04:LTS	procmail	—
procmail	affected	Ubuntu:14.04:LTS	procmail	—

Upstream advisory

UBUNTU-CVE-2017-14746

USNEPSS <= 49%CRITICAL2017-11-21

CVEs:CVE-2017-14746

Affected products

Product	Status	Vendor	Package	Ecosystem
samba	affected	Ubuntu:14.04:LTS	samba	—
samba	affected	Ubuntu:16.04:LTS	samba	—

Upstream advisory

UBUNTU-CVE-2017-16613

USNEPSS <= 49%CRITICAL2017-11-21

CVEs:CVE-2017-16613

Affected products

Product	Status	Vendor	Package	Ecosystem
swauth	affected	Ubuntu:16.04:LTS	swauth	—

Upstream advisory

UBUNTU-CVE-2017-15088

USNEPSS <= 49%CRITICAL2017-11-08

CVEs:CVE-2017-15088

Affected products

Product	Status	Vendor	Package	Ecosystem
krb5	affected	Ubuntu:Pro:16.04:LTS	krb5	—
krb5	affected	Ubuntu:Pro:14.04:LTS	krb5	—

Upstream advisory

USN-3477-1

USNEPSS <= 49%HIGH2017-11-16

firefox vulnerabilities

CVEs:CVE-2017-7826 CVE-2017-7827 CVE-2017-7828 CVE-2017-7830 CVE-2017-7831 CVE-2017-7832 CVE-2017-7833 CVE-2017-7834 CVE-2017-7835 CVE-2017-7837 CVE-2017-7838 CVE-2017-7839 CVE-2017-7840 CVE-2017-7842

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:14.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—

Upstream advisory

UBUNTU-CVE-2017-7828

USNEPSS <= 49%CRITICAL2017-11-15

CVEs:CVE-2017-7828

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:14.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—
thunderbird	affected	Ubuntu:14.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:16.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2017-16510

USNEPSS <= 49%CRITICAL2017-11-02

CVEs:CVE-2017-16510

Affected products

Product	Status	Vendor	Package	Ecosystem
wordpress	affected	Ubuntu:16.04:LTS	wordpress	—

Upstream advisory

UBUNTU-CVE-2017-3112

USNEPSS <= 49%CRITICAL2017-11-15

CVEs:CVE-2017-3112

Affected products

Product	Status	Vendor	Package	Ecosystem
flashplugin-nonfree	affected	Ubuntu:14.04:LTS	flashplugin-nonfree	—
flashplugin-nonfree	affected	Ubuntu:16.04:LTS	flashplugin-nonfree	—

Upstream advisory

UBUNTU-CVE-2017-3114

USNEPSS <= 49%CRITICAL2017-11-15

CVEs:CVE-2017-3114

Affected products

Product	Status	Vendor	Package	Ecosystem
flashplugin-nonfree	affected	Ubuntu:14.04:LTS	flashplugin-nonfree	—
flashplugin-nonfree	affected	Ubuntu:16.04:LTS	flashplugin-nonfree	—

Upstream advisory

UBUNTU-CVE-2008-7319

USNEPSS <= 49%CRITICAL2017-11-07

CVEs:CVE-2008-7319

Affected products

Product	Status	Vendor	Package	Ecosystem
libnet-ping-external-perl	affected	Ubuntu:16.04:LTS	libnet-ping-external-perl	—

Upstream advisory

UBUNTU-CVE-2017-11215

USNEPSS <= 49%CRITICAL2017-11-15

CVEs:CVE-2017-11215

Affected products

Product	Status	Vendor	Package	Ecosystem
flashplugin-nonfree	affected	Ubuntu:16.04:LTS	flashplugin-nonfree	—
flashplugin-nonfree	affected	Ubuntu:14.04:LTS	flashplugin-nonfree	—

Upstream advisory

UBUNTU-CVE-2017-11225

USNEPSS <= 49%CRITICAL2017-11-15

CVEs:CVE-2017-11225

Affected products

Product	Status	Vendor	Package	Ecosystem
flashplugin-nonfree	affected	Ubuntu:14.04:LTS	flashplugin-nonfree	—
flashplugin-nonfree	affected	Ubuntu:16.04:LTS	flashplugin-nonfree	—

Upstream advisory

UBUNTU-CVE-2017-16926

USNEPSS <= 49%CRITICAL2017-11-22

CVEs:CVE-2017-16926

Affected products

Product	Status	Vendor	Package	Ecosystem
ohcount	affected	Ubuntu:16.04:LTS	ohcount	—

Upstream advisory

USN-3492-1

USNEPSS <= 49%HIGH2017-11-22

libraw vulnerabilities

CVEs:CVE-2015-3885 CVE-2015-8366 CVE-2015-8367 CVE-2017-6886 CVE-2017-6887 CVE-2017-13735 CVE-2017-14265 CVE-2017-14348 CVE-2017-14608

Affected products

Product	Status	Vendor	Package	Ecosystem
libraw	affected	Ubuntu:14.04:LTS	libraw	—
libraw	affected	Ubuntu:16.04:LTS	libraw	—

Upstream advisory

USN-3501-1

USNEPSS <= 49%CRITICAL2017-11-29

libxcursor vulnerability

CVEs:CVE-2017-16612

Affected products

Product	Status	Vendor	Package	Ecosystem
libxcursor	affected	Ubuntu:16.04:LTS	libxcursor	—
libxcursor	affected	Ubuntu:14.04:LTS	libxcursor	—

Upstream advisory

UBUNTU-CVE-2017-16612

USNEPSS <= 49%HIGH2017-11-28

CVEs:CVE-2017-16612

Affected products

Product	Status	Vendor	Package	Ecosystem
libxcursor	affected	Ubuntu:16.04:LTS	libxcursor	—
libxcursor	affected	Ubuntu:14.04:LTS	libxcursor	—
wayland	affected	Ubuntu:16.04:LTS	wayland	—
wayland	affected	Ubuntu:14.04:LTS	wayland	—

Upstream advisory

UBUNTU-CVE-2017-16548

USNEPSS <= 49%CRITICAL2017-11-06

CVEs:CVE-2017-16548

Affected products

Product	Status	Vendor	Package	Ecosystem
rsync	affected	Ubuntu:14.04:LTS	rsync	—
rsync	affected	Ubuntu:16.04:LTS	rsync	—

Upstream advisory

UBUNTU-CVE-2017-15399

USNEPSS <= 49%HIGH2017-11-07

CVEs:CVE-2017-15399

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—
oxide-qt	affected	Ubuntu:16.04:LTS	oxide-qt	—

Upstream advisory

UBUNTU-CVE-2017-16672

USNEPSS <= 49%MEDIUM2017-11-09

CVEs:CVE-2017-16672

Affected products

Product	Status	Vendor	Package	Ecosystem
asterisk	affected	Ubuntu:Pro:16.04:LTS	asterisk	—

Upstream advisory

UBUNTU-CVE-2017-16660

USNEPSS <= 49%HIGH2017-11-08

CVEs:CVE-2017-16660

Affected products

Product	Status	Vendor	Package	Ecosystem
cacti	affected	Ubuntu:18.04:LTS	cacti	—

Upstream advisory

UBUNTU-CVE-2017-8807

USNEPSS <= 49%CRITICAL2017-11-16

CVEs:CVE-2017-8807

Affected products

Product	Status	Vendor	Package	Ecosystem
varnish	affected	Ubuntu:Pro:16.04:LTS	varnish	—

Upstream advisory

UBUNTU-CVE-2017-16820

USNEPSS <= 49%CRITICAL2017-11-14

CVEs:CVE-2017-16820

Affected products

Product	Status	Vendor	Package	Ecosystem
collectd	affected	Ubuntu:Pro:16.04:LTS	collectd	—
collectd	affected	Ubuntu:Pro:14.04:LTS	collectd	—

Upstream advisory

UBUNTU-CVE-2017-1000203

USNEPSS <= 49%HIGH2017-11-17

CVEs:CVE-2017-1000203

Affected products

Product	Status	Vendor	Package	Ecosystem
root-system	affected	Ubuntu:Pro:16.04:LTS	root-system	—
root-system	affected	Ubuntu:Pro:14.04:LTS	root-system	—

Upstream advisory

UBUNTU-CVE-2017-15398

USNEPSS <= 49%CRITICAL2017-11-07

CVEs:CVE-2017-15398

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—
oxide-qt	affected	Ubuntu:16.04:LTS	oxide-qt	—

Upstream advisory

UBUNTU-CVE-2017-15098

USNEPSS <= 49%HIGH2017-11-09

CVEs:CVE-2017-15098

Affected products

Product	Status	Vendor	Package	Ecosystem
postgresql-9.3	affected	Ubuntu:14.04:LTS	postgresql-9.3	—
postgresql-9.5	affected	Ubuntu:16.04:LTS	postgresql-9.5	—

Upstream advisory

UBUNTU-CVE-2017-16872

USNEPSS <= 49%CRITICAL2017-11-17

CVEs:CVE-2017-16872

Affected products

Product	Status	Vendor	Package	Ecosystem
pjproject	affected	Ubuntu:16.04:LTS	pjproject	—

Upstream advisory

UBUNTU-CVE-2017-16669

USNEPSS <= 49%HIGH2017-11-09

CVEs:CVE-2017-16669

Affected products

Product	Status	Vendor	Package	Ecosystem
graphicsmagick	affected	Ubuntu:16.04:LTS	graphicsmagick	—
graphicsmagick	affected	Ubuntu:Pro:14.04:LTS	graphicsmagick	—

Upstream advisory

UBUNTU-CVE-2017-16875

USNEPSS <= 49%HIGH2017-11-17

CVEs:CVE-2017-16875

Affected products

Product	Status	Vendor	Package	Ecosystem
pjproject	affected	Ubuntu:16.04:LTS	pjproject	—

Upstream advisory

UBUNTU-CVE-2017-16671

USNEPSS <= 49%HIGH2017-11-09

CVEs:CVE-2017-16671

Affected products

Product	Status	Vendor	Package	Ecosystem
asterisk	affected	Ubuntu:Pro:16.04:LTS	asterisk	—

Upstream advisory

UBUNTU-CVE-2017-16840

USNEPSS <= 49%CRITICAL2017-11-21

CVEs:CVE-2017-16840

Affected products

Product	Status	Vendor	Package	Ecosystem
ffmpeg	affected	Ubuntu:18.04:LTS	ffmpeg	—

Upstream advisory

UBUNTU-CVE-2017-15119

USNEPSS <= 49%HIGH2017-11-28

CVEs:CVE-2017-15119

Affected products

Product	Status	Vendor	Package	Ecosystem
qemu	affected	Ubuntu:16.04:LTS	qemu	—

Upstream advisory

UBUNTU-CVE-2017-7826

USNEPSS <= 49%CRITICAL2017-11-15

CVEs:CVE-2017-7826

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:14.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—
thunderbird	affected	Ubuntu:16.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:14.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2016-8628

USNEPSS <= 49%CRITICAL2017-11-10

CVEs:CVE-2016-8628

Affected products

Product	Status	Vendor	Package	Ecosystem
ansible	affected	Ubuntu:16.04:LTS	ansible	—

Upstream advisory

UBUNTU-CVE-2017-16641

USNEPSS <= 49%HIGH2017-11-07

CVEs:CVE-2017-16641

Affected products

Product	Status	Vendor	Package	Ecosystem
cacti	affected	Ubuntu:Pro:16.04:LTS	cacti	—
cacti	affected	Ubuntu:Pro:14.04:LTS	cacti	—

Upstream advisory

UBUNTU-CVE-2017-16845

USNEPSS <= 49%CRITICAL2017-11-16

CVEs:CVE-2017-16845

Affected products

Product	Status	Vendor	Package	Ecosystem
qemu	affected	Ubuntu:16.04:LTS	qemu	—
qemu	affected	Ubuntu:18.04:LTS	qemu	—

Upstream advisory

UBUNTU-CVE-2017-16803

USNEPSS <= 49%HIGH2017-11-13

CVEs:CVE-2017-16803

Affected products

Product	Status	Vendor	Package	Ecosystem
libav	affected	Ubuntu:Pro:14.04:LTS	libav	—

Upstream advisory

UBUNTU-CVE-2017-17042

USNEPSS <= 49%HIGH2017-11-28

CVEs:CVE-2017-17042

Affected products

Product	Status	Vendor	Package	Ecosystem
yard	affected	Ubuntu:Pro:16.04:LTS	yard	—

Upstream advisory

USN-3472-1

USNEPSS <= 49%HIGH2017-11-02

libreoffice vulnerabilities

CVEs:CVE-2017-12607 CVE-2017-12608

Affected products

Product	Status	Vendor	Package	Ecosystem
libreoffice	affected	Ubuntu:14.04:LTS	libreoffice	—

Upstream advisory

UBUNTU-CVE-2017-15923

USNEPSS <= 49%HIGH2017-11-15

CVEs:CVE-2017-15923

Affected products

Product	Status	Vendor	Package	Ecosystem
konversation	affected	Ubuntu:14.04:LTS	konversation	—
konversation	affected	Ubuntu:16.04:LTS	konversation	—

Upstream advisory

UBUNTU-CVE-2017-7827

USNEPSS <= 49%CRITICAL2017-11-15

CVEs:CVE-2017-7827

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—
firefox	affected	Ubuntu:14.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—

Upstream advisory

USN-3491-1

USNEPSS <= 49%HIGH2017-11-22

ldns vulnerabilities

CVEs:CVE-2014-3209 CVE-2017-1000231 CVE-2017-1000232

Affected products

Product	Status	Vendor	Package	Ecosystem
ldns	affected	Ubuntu:16.04:LTS	ldns	—
ldns	affected	Ubuntu:14.04:LTS	ldns	—

Upstream advisory

UBUNTU-CVE-2017-1000231

USNEPSS <= 49%CRITICAL2017-11-16

CVEs:CVE-2017-1000231

Affected products

Product	Status	Vendor	Package	Ecosystem
ldns	affected	Ubuntu:16.04:LTS	ldns	—
ldns	affected	Ubuntu:14.04:LTS	ldns	—

Upstream advisory

UBUNTU-CVE-2017-10873

USNEPSS <= 49%HIGH2017-11-01

CVEs:CVE-2017-10873

Affected products

Product	Status	Vendor	Package	Ecosystem
openam	affected	Ubuntu:16.04:LTS	openam	—

Upstream advisory

UBUNTU-CVE-2017-8028

USNEPSS <= 49%HIGH2017-11-27

CVEs:CVE-2017-8028

Affected products

Product	Status	Vendor	Package	Ecosystem
libspring-ldap-java	affected	Ubuntu:14.04:LTS	libspring-ldap-java	—

Upstream advisory

UBUNTU-CVE-2017-14868

USNEPSS <= 49%HIGH2017-11-30

CVEs:CVE-2017-14868

Affected products

Product	Status	Vendor	Package	Ecosystem
restlet	affected	Ubuntu:18.04:LTS	restlet	—
restlet	affected	Ubuntu:16.04:LTS	restlet	—

Upstream advisory

UBUNTU-CVE-2017-16664

USNEPSS <= 49%HIGH2017-11-21

CVEs:CVE-2017-16664

Affected products

Product	Status	Vendor	Package	Ecosystem
otrs2	affected	Ubuntu:16.04:LTS	otrs2	—

Upstream advisory

UBUNTU-CVE-2016-10700

USNEPSS <= 49%HIGH2017-11-24

CVEs:CVE-2016-10700

Affected products

Product	Status	Vendor	Package	Ecosystem
cacti	affected	Ubuntu:16.04:LTS	cacti	—
cacti	affected	Ubuntu:14.04:LTS	cacti	—

Upstream advisory

UBUNTU-CVE-2016-8614

USNEPSS <= 49%HIGH2017-11-10

CVEs:CVE-2016-8614

Affected products

Product	Status	Vendor	Package	Ecosystem
ansible	affected	Ubuntu:Pro:16.04:LTS	ansible	—
ansible	affected	Ubuntu:Pro:14.04:LTS	ansible	—

Upstream advisory

UBUNTU-CVE-2017-7830

USNEPSS <= 49%MEDIUM2017-11-15

CVEs:CVE-2017-7830

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:18.04:LTS	firefox	—
firefox	affected	Ubuntu:14.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
thunderbird	affected	Ubuntu:14.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:16.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2017-16248

USNEPSS <= 49%HIGH2017-11-01

CVEs:CVE-2017-16248

Affected products

Product	Status	Vendor	Package	Ecosystem
libcatalyst-plugin-static-simple-perl	affected	Ubuntu:16.04:LTS	libcatalyst-plugin-static-simple-perl	—

Upstream advisory

UBUNTU-CVE-2017-14949

USNEPSS <= 49%HIGH2017-11-30

CVEs:CVE-2017-14949

Affected products

Product	Status	Vendor	Package	Ecosystem
restlet	affected	Ubuntu:18.04:LTS	restlet	—
restlet	affected	Ubuntu:16.04:LTS	restlet	—

Upstream advisory

UBUNTU-CVE-2017-16879

USNEPSS <= 49%HIGH2017-11-22

CVEs:CVE-2017-16879

Affected products

Product	Status	Vendor	Package	Ecosystem
ncurses	affected	Ubuntu:Pro:16.04:LTS	ncurses	—
ncurses	affected	Ubuntu:Pro:14.04:LTS	ncurses	—

Upstream advisory

UBUNTU-CVE-2017-16547

USNEPSS <= 49%HIGH2017-11-06

CVEs:CVE-2017-16547

Affected products

Product	Status	Vendor	Package	Ecosystem
graphicsmagick	affected	Ubuntu:16.04:LTS	graphicsmagick	—
graphicsmagick	affected	Ubuntu:Pro:14.04:LTS	graphicsmagick	—

Upstream advisory

UBUNTU-CVE-2017-1000232

USNEPSS <= 49%CRITICAL2017-11-16

CVEs:CVE-2017-1000232

Affected products

Product	Status	Vendor	Package	Ecosystem
ldns	affected	Ubuntu:16.04:LTS	ldns	—
ldns	affected	Ubuntu:14.04:LTS	ldns	—

Upstream advisory

UBUNTU-CVE-2017-1000189

USNEPSS <= 49%HIGH2017-11-17

CVEs:CVE-2017-1000189

Affected products

Product	Status	Vendor	Package	Ecosystem
node-ejs	affected	Ubuntu:18.04:LTS	node-ejs	—

Upstream advisory

UBUNTU-CVE-2017-16545

USNEPSS <= 49%HIGH2017-11-05

CVEs:CVE-2017-16545

Affected products

Product	Status	Vendor	Package	Ecosystem
graphicsmagick	affected	Ubuntu:16.04:LTS	graphicsmagick	—
graphicsmagick	affected	Ubuntu:Pro:14.04:LTS	graphicsmagick	—

Upstream advisory

UBUNTU-CVE-2017-16830

USNEPSS <= 49%HIGH2017-11-15

CVEs:CVE-2017-16830

Affected products

Product	Status	Vendor	Package	Ecosystem
binutils	affected	Ubuntu:18.04:LTS	binutils	—

Upstream advisory

UBUNTU-CVE-2017-16546

USNEPSS <= 49%HIGH2017-11-05

CVEs:CVE-2017-16546

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:14.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:16.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2017-12110

USNEPSS <= 49%HIGH2017-11-20

CVEs:CVE-2017-12110

Affected products

Product	Status	Vendor	Package	Ecosystem
r-cran-readxl	affected	Ubuntu:16.04:LTS	r-cran-readxl	—

Upstream advisory

UBUNTU-CVE-2017-12111

USNEPSS <= 49%HIGH2017-11-20

CVEs:CVE-2017-12111

Affected products

Product	Status	Vendor	Package	Ecosystem
r-cran-readxl	affected	Ubuntu:16.04:LTS	r-cran-readxl	—

Upstream advisory

UBUNTU-CVE-2017-2897

USNEPSS <= 49%HIGH2017-11-20

CVEs:CVE-2017-2897

Affected products

Product	Status	Vendor	Package	Ecosystem
r-cran-readxl	affected	Ubuntu:16.04:LTS	r-cran-readxl	—

Upstream advisory

UBUNTU-CVE-2017-2919

USNEPSS <= 49%HIGH2017-11-20

CVEs:CVE-2017-2919

Affected products

Product	Status	Vendor	Package	Ecosystem
r-cran-readxl	affected	Ubuntu:16.04:LTS	r-cran-readxl	—

Upstream advisory

UBUNTU-CVE-2017-2896

USNEPSS <= 49%HIGH2017-11-20

CVEs:CVE-2017-2896

Affected products

Product	Status	Vendor	Package	Ecosystem
r-cran-readxl	affected	Ubuntu:16.04:LTS	r-cran-readxl	—

Upstream advisory

UBUNTU-CVE-2017-15672

USNEPSS <= 49%HIGH2017-11-06

CVEs:CVE-2017-15672

Affected products

Product	Status	Vendor	Package	Ecosystem
ffmpeg	affected	Ubuntu:16.04:LTS	ffmpeg	—
libav	affected	Ubuntu:Pro:14.04:LTS	libav	—

Upstream advisory

UBUNTU-CVE-2017-1000248

USNEPSS <= 49%CRITICAL2017-11-17

CVEs:CVE-2017-1000248

Affected products

Product	Status	Vendor	Package	Ecosystem
ruby-redis-store	affected	Ubuntu:16.04:LTS	ruby-redis-store	—

Upstream advisory

UBUNTU-CVE-2017-5533

USNEPSS <= 49%CRITICAL2017-11-15

CVEs:CVE-2017-5533

Affected products

Product	Status	Vendor	Package	Ecosystem
jasperreports	affected	Ubuntu:16.04:LTS	jasperreports	—
jasperreports	affected	Ubuntu:18.04:LTS	jasperreports	—

Upstream advisory

UBUNTU-CVE-2017-1000229

USNEPSS <= 49%HIGH2017-11-17

CVEs:CVE-2017-1000229

Affected products

Product	Status	Vendor	Package	Ecosystem
optipng	affected	Ubuntu:14.04:LTS	optipng	—
optipng	affected	Ubuntu:16.04:LTS	optipng	—

Upstream advisory

UBUNTU-CVE-2017-1000206

USNEPSS <= 49%CRITICAL2017-11-17

CVEs:CVE-2017-1000206

Affected products

Product	Status	Vendor	Package	Ecosystem
htslib	affected	Ubuntu:Pro:16.04:LTS	htslib	—

Upstream advisory

UBUNTU-CVE-2017-16539

USNEPSS <= 49%MEDIUM2017-11-04

CVEs:CVE-2017-16539

Affected products

Product	Status	Vendor	Package	Ecosystem
docker.io	affected	Ubuntu:18.04:LTS	docker.io	—
docker.io	affected	Ubuntu:16.04:LTS	docker.io	—

Upstream advisory

UBUNTU-CVE-2017-17081

USNEPSS <= 49%MEDIUM2017-11-30

CVEs:CVE-2017-17081

Affected products

Product	Status	Vendor	Package	Ecosystem
ffmpeg	affected	Ubuntu:16.04:LTS	ffmpeg	—
oxide-qt	affected	Ubuntu:16.04:LTS	oxide-qt	—
qtwebengine-opensource-src	affected	Ubuntu:25.10	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:18.04:LTS	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:22.04:LTS	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:20.04:LTS	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:24.04:LTS	qtwebengine-opensource-src	—

Upstream advisory

UBUNTU-CVE-2017-16826

USNEPSS <= 49%HIGH2017-11-15

CVEs:CVE-2017-16826

Affected products

Product	Status	Vendor	Package	Ecosystem
binutils	affected	Ubuntu:Pro:16.04:LTS	binutils	—
binutils	affected	Ubuntu:Pro:14.04:LTS	binutils	—

Upstream advisory

UBUNTU-CVE-2017-16828

USNEPSS <= 49%HIGH2017-11-15

CVEs:CVE-2017-16828

Affected products

Product	Status	Vendor	Package	Ecosystem
binutils	affected	Ubuntu:Pro:16.04:LTS	binutils	—
binutils	affected	Ubuntu:Pro:14.04:LTS	binutils	—

Upstream advisory

UBUNTU-CVE-2017-16829

USNEPSS <= 49%HIGH2017-11-15

CVEs:CVE-2017-16829

Affected products

Product	Status	Vendor	Package	Ecosystem
binutils	affected	Ubuntu:18.04:LTS	binutils	—

Upstream advisory

UBUNTU-CVE-2017-16831

USNEPSS <= 49%HIGH2017-11-15

CVEs:CVE-2017-16831

Affected products

Product	Status	Vendor	Package	Ecosystem
binutils	affected	Ubuntu:Pro:16.04:LTS	binutils	—
binutils	affected	Ubuntu:Pro:14.04:LTS	binutils	—

Upstream advisory

UBUNTU-CVE-2017-16832

USNEPSS <= 49%HIGH2017-11-15

CVEs:CVE-2017-16832

Affected products

Product	Status	Vendor	Package	Ecosystem
binutils	affected	Ubuntu:Pro:16.04:LTS	binutils	—
binutils	affected	Ubuntu:Pro:14.04:LTS	binutils	—

Upstream advisory

UBUNTU-CVE-2017-16938

USNEPSS <= 49%HIGH2017-11-24

CVEs:CVE-2017-16938

Affected products

Product	Status	Vendor	Package	Ecosystem
optipng	affected	Ubuntu:16.04:LTS	optipng	—

Upstream advisory

UBUNTU-CVE-2017-16827

USNEPSS <= 49%HIGH2017-11-15

CVEs:CVE-2017-16827

Affected products

Product	Status	Vendor	Package	Ecosystem
binutils	affected	Ubuntu:Pro:16.04:LTS	binutils	—
binutils	affected	Ubuntu:Pro:14.04:LTS	binutils	—

Upstream advisory

UBUNTU-CVE-2017-15864

USNEPSS <= 49%HIGH2017-11-16

CVEs:CVE-2017-15864

Affected products

Product	Status	Vendor	Package	Ecosystem
otrs2	affected	Ubuntu:18.04:LTS	otrs2	—
otrs2	affected	Ubuntu:16.04:LTS	otrs2	—

Upstream advisory

UBUNTU-CVE-2017-16908

USNEPSS <= 49%MEDIUM2017-11-20

CVEs:CVE-2017-16908

Affected products

Product	Status	Vendor	Package	Ecosystem
php-horde-kronolith	affected	Ubuntu:18.04:LTS	php-horde-kronolith	—

Upstream advisory

UBUNTU-CVE-2017-1000211

USNEPSS <= 49%MEDIUM2017-11-17

CVEs:CVE-2017-1000211

Affected products

Product	Status	Vendor	Package	Ecosystem
lynx	affected	Ubuntu:Pro:16.04:LTS	lynx	—

Upstream advisory

UBUNTU-CVE-2017-16804

USNEPSS <= 49%MEDIUM2017-11-13

CVEs:CVE-2017-16804

Affected products

Product	Status	Vendor	Package	Ecosystem
redmine	affected	Ubuntu:16.04:LTS	redmine	—

Upstream advisory

UBUNTU-CVE-2017-7831

USNEPSS <= 49%MEDIUM2017-11-15

CVEs:CVE-2017-7831

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:14.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—

Upstream advisory

UBUNTU-CVE-2017-15535

USNEPSS <= 49%CRITICAL2017-11-01

CVEs:CVE-2017-15535

Affected products

Product	Status	Vendor	Package	Ecosystem
mongodb	affected	Ubuntu:18.04:LTS	mongodb	—

Upstream advisory

USN-3474-1

USNEPSS <= 49%HIGH2017-11-06

liblouis vulnerability

CVEs:CVE-2014-8184

Affected products

Product	Status	Vendor	Package	Ecosystem
liblouis	affected	Ubuntu:14.04:LTS	liblouis	—

Upstream advisory

UBUNTU-CVE-2017-7842

USNEPSS <= 49%MEDIUM2017-11-15

CVEs:CVE-2017-7842

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:14.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—

Upstream advisory

UBUNTU-CVE-2017-7834

USNEPSS <= 49%MEDIUM2017-11-15

CVEs:CVE-2017-7834

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:14.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—

Upstream advisory

UBUNTU-CVE-2017-7835

USNEPSS <= 49%HIGH2017-11-15

CVEs:CVE-2017-7835

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:14.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—

Upstream advisory

UBUNTU-CVE-2017-15101

USNEPSS <= 49%CRITICAL2017-11-24

CVEs:CVE-2017-15101

Affected products

Product	Status	Vendor	Package	Ecosystem
liblouis	affected	Ubuntu:14.04:LTS	liblouis	—

Upstream advisory

UBUNTU-CVE-2017-7832

USNEPSS <= 49%MEDIUM2017-11-15

CVEs:CVE-2017-7832

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:14.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—

Upstream advisory

UBUNTU-CVE-2017-15114

USNEPSS <= 49%HIGH2017-11-27

CVEs:CVE-2017-15114

Affected products

Product	Status	Vendor	Package	Ecosystem
tripleo-heat-templates	affected	Ubuntu:16.04:LTS	tripleo-heat-templates	—
tripleo-heat-templates	affected	Ubuntu:18.04:LTS	tripleo-heat-templates	—

Upstream advisory

UBUNTU-CVE-2017-16896

USNEPSS <= 49%CRITICAL2017-11-20

CVEs:CVE-2017-16896

Affected products

Product	Status	Vendor	Package	Ecosystem
tt-rss	affected	Ubuntu:16.04:LTS	tt-rss	—
tt-rss	affected	Ubuntu:18.04:LTS	tt-rss	—
tt-rss	affected	Ubuntu:22.04:LTS	tt-rss	—

Upstream advisory

UBUNTU-CVE-2017-16661

USNEPSS <= 49%MEDIUM2017-11-08

CVEs:CVE-2017-16661

Affected products

Product	Status	Vendor	Package	Ecosystem
cacti	affected	Ubuntu:18.04:LTS	cacti	—

Upstream advisory

UBUNTU-CVE-2017-7833

USNEPSS <= 49%MEDIUM2017-11-15

CVEs:CVE-2017-7833

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:14.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—

Upstream advisory

UBUNTU-CVE-2017-7837

USNEPSS <= 49%MEDIUM2017-11-15

CVEs:CVE-2017-7837

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:14.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—

Upstream advisory

UBUNTU-CVE-2017-7838

USNEPSS <= 49%MEDIUM2017-11-15

CVEs:CVE-2017-7838

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:14.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—

Upstream advisory

UBUNTU-CVE-2017-16667

USNEPSS <= 49%HIGH2017-11-08

CVEs:CVE-2017-16667

Affected products

Product	Status	Vendor	Package	Ecosystem
backintime	affected	Ubuntu:16.04:LTS	backintime	—
backintime	affected	Ubuntu:18.04:LTS	backintime	—

Upstream advisory

UBUNTU-CVE-2017-16239

USNEPSS <= 49%MEDIUM2017-11-14

CVEs:CVE-2017-16239

Affected products

Product	Status	Vendor	Package	Ecosystem
nova	affected	Ubuntu:Pro:16.04:LTS	nova	—

Upstream advisory

UBUNTU-CVE-2017-1000159

USNEPSS <= 49%HIGH2017-11-27

CVEs:CVE-2017-1000159

Affected products

Product	Status	Vendor	Package	Ecosystem
atril	affected	Ubuntu:16.04:LTS	atril	—
evince	affected	Ubuntu:14.04:LTS	evince	—
evince	affected	Ubuntu:16.04:LTS	evince	—

Upstream advisory

UBUNTU-CVE-2017-16853

USNEPSS <= 49%HIGH2017-11-16

CVEs:CVE-2017-16853

Affected products

Product	Status	Vendor	Package	Ecosystem
opensaml2	affected	Ubuntu:14.04:LTS	opensaml2	—
opensaml2	affected	Ubuntu:16.04:LTS	opensaml2	—

Upstream advisory

UBUNTU-CVE-2017-5729

USNEPSS <= 49%HIGH2017-11-21

CVEs:CVE-2017-5729

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-firmware	affected	Ubuntu:18.04:LTS	linux-firmware	—
linux-firmware	affected	Ubuntu:14.04:LTS	linux-firmware	—
linux-firmware	affected	Ubuntu:16.04:LTS	linux-firmware	—

Upstream advisory

UBUNTU-CVE-2017-0841

USNEPSS <= 49%HIGH2017-11-07

CVEs:CVE-2017-0841

Affected products

Product	Status	Vendor	Package	Ecosystem
android-platform-system-core	affected	Ubuntu:16.04:LTS	android-platform-system-core	—

Upstream advisory

UBUNTU-CVE-2017-0833

USNEPSS <= 49%HIGH2017-11-07

CVEs:CVE-2017-0833

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	Ubuntu:16.04:LTS	android	—

Upstream advisory

UBUNTU-CVE-2017-0834

USNEPSS <= 49%HIGH2017-11-07

CVEs:CVE-2017-0834

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	Ubuntu:16.04:LTS	android	—

Upstream advisory

UBUNTU-CVE-2017-0835

USNEPSS <= 49%HIGH2017-11-07

CVEs:CVE-2017-0835

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	Ubuntu:16.04:LTS	android	—

Upstream advisory

UBUNTU-CVE-2017-17080

USNEPSS <= 49%MEDIUM2017-11-30

CVEs:CVE-2017-17080

Affected products

Product	Status	Vendor	Package	Ecosystem
binutils	affected	Ubuntu:Pro:16.04:LTS	binutils	—
binutils	affected	Ubuntu:Pro:14.04:LTS	binutils	—

Upstream advisory

UBUNTU-CVE-2017-1000188

USNEPSS <= 49%MEDIUM2017-11-17

CVEs:CVE-2017-1000188

Affected products

Product	Status	Vendor	Package	Ecosystem
node-ejs	affected	Ubuntu:18.04:LTS	node-ejs	—
node-ejs	affected	Ubuntu:22.04:LTS	node-ejs	—
node-ejs	affected	Ubuntu:20.04:LTS	node-ejs	—

Upstream advisory

UBUNTU-CVE-2017-0832

USNEPSS <= 49%HIGH2017-11-07

CVEs:CVE-2017-0832

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	Ubuntu:16.04:LTS	android	—

Upstream advisory

UBUNTU-CVE-2017-16942

USNEPSS <= 49%MEDIUM2017-11-25

CVEs:CVE-2017-16942

Affected products

Product	Status	Vendor	Package	Ecosystem
libsndfile	affected	Ubuntu:16.04:LTS	libsndfile	—
libsndfile	affected	Ubuntu:Pro:14.04:LTS	libsndfile	—

Upstream advisory

UBUNTU-CVE-2017-16796

USNEPSS <= 49%HIGH2017-11-12

CVEs:CVE-2017-16796

Affected products

Product	Status	Vendor	Package	Ecosystem
swftools	affected	Ubuntu:18.04:LTS	swftools	—
swftools	affected	Ubuntu:16.04:LTS	swftools	—

Upstream advisory

UBUNTU-CVE-2017-1000121

USNEPSS <= 49%CRITICAL2017-11-01

CVEs:CVE-2017-1000121

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—

Upstream advisory

UBUNTU-CVE-2017-16797

USNEPSS <= 49%HIGH2017-11-12

CVEs:CVE-2017-16797

Affected products

Product	Status	Vendor	Package	Ecosystem
swftools	affected	Ubuntu:18.04:LTS	swftools	—
swftools	affected	Ubuntu:16.04:LTS	swftools	—

Upstream advisory

UBUNTU-CVE-2017-16793

USNEPSS <= 49%HIGH2017-11-12

CVEs:CVE-2017-16793

Affected products

Product	Status	Vendor	Package	Ecosystem
swftools	affected	Ubuntu:18.04:LTS	swftools	—
swftools	affected	Ubuntu:16.04:LTS	swftools	—

Upstream advisory

UBUNTU-CVE-2017-16711

USNEPSS <= 49%MEDIUM2017-11-09

CVEs:CVE-2017-16711

Affected products

Product	Status	Vendor	Package	Ecosystem
swftools	affected	Ubuntu:18.04:LTS	swftools	—
swftools	affected	Ubuntu:16.04:LTS	swftools	—

Upstream advisory

UBUNTU-CVE-2017-16359

USNEPSS <= 49%MEDIUM2017-11-01

CVEs:CVE-2017-16359

Affected products

Product	Status	Vendor	Package	Ecosystem
radare2	affected	Ubuntu:18.04:LTS	radare2	—

Upstream advisory

UBUNTU-CVE-2017-13135

USNEPSS <= 49%HIGH2017-11-16

CVEs:CVE-2017-13135

Affected products

Product	Status	Vendor	Package	Ecosystem
x265	affected	Ubuntu:Pro:16.04:LTS	x265	—

Upstream advisory

UBUNTU-CVE-2017-7839

USNEPSS <= 49%MEDIUM2017-11-15

CVEs:CVE-2017-7839

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:14.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—

Upstream advisory

UBUNTU-CVE-2017-7840

USNEPSS <= 49%MEDIUM2017-11-15

CVEs:CVE-2017-7840

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:14.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—

Upstream advisory

UBUNTU-CVE-2017-16852

USNEPSS <= 49%HIGH2017-11-16

CVEs:CVE-2017-16852

Affected products

Product	Status	Vendor	Package	Ecosystem
shibboleth-sp2	affected	Ubuntu:16.04:LTS	shibboleth-sp2	—

Upstream advisory

UBUNTU-CVE-2017-16906

USNEPSS <= 49%MEDIUM2017-11-20

CVEs:CVE-2017-16906

Affected products

Product	Status	Vendor	Package	Ecosystem
php-horde-kronolith	affected	Ubuntu:18.04:LTS	php-horde-kronolith	—
php-horde-kronolith	affected	Ubuntu:16.04:LTS	php-horde-kronolith	—

Upstream advisory

UBUNTU-CVE-2017-1000122

USNEPSS <= 49%MEDIUM2017-11-01

CVEs:CVE-2017-1000122

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—

Upstream advisory

UBUNTU-CVE-2017-16907

USNEPSS <= 49%MEDIUM2017-11-20

CVEs:CVE-2017-16907

Affected products

Product	Status	Vendor	Package	Ecosystem
php-horde	affected	Ubuntu:16.04:LTS	php-horde	—
php-horde	affected	Ubuntu:18.04:LTS	php-horde	—
php-horde-core	affected	Ubuntu:16.04:LTS	php-horde-core	—
php-horde-core	affected	Ubuntu:Pro:14.04:LTS	php-horde-core	—
php-horde-core	affected	Ubuntu:18.04:LTS	php-horde-core	—

Upstream advisory

UBUNTU-CVE-2017-16883

USNEPSS <= 49%MEDIUM2017-11-18

CVEs:CVE-2017-16883

Affected products

Product	Status	Vendor	Package	Ecosystem
ming	affected	Ubuntu:16.04:LTS	ming	—

Upstream advisory

UBUNTU-CVE-2017-16357

USNEPSS <= 49%HIGH2017-11-01

CVEs:CVE-2017-16357

Affected products

Product	Status	Vendor	Package	Ecosystem
radare2	affected	Ubuntu:18.04:LTS	radare2	—

Upstream advisory

UBUNTU-CVE-2017-16805

USNEPSS <= 49%MEDIUM2017-11-13

CVEs:CVE-2017-16805

Affected products

Product	Status	Vendor	Package	Ecosystem
radare2	affected	Ubuntu:16.04:LTS	radare2	—

Upstream advisory

UBUNTU-CVE-2017-16868

USNEPSS <= 49%MEDIUM2017-11-17

CVEs:CVE-2017-16868

Affected products

Product	Status	Vendor	Package	Ecosystem
swftools	affected	Ubuntu:18.04:LTS	swftools	—
swftools	affected	Ubuntu:16.04:LTS	swftools	—

Upstream advisory

UBUNTU-CVE-2017-16794

USNEPSS <= 49%MEDIUM2017-11-12

CVEs:CVE-2017-16794

Affected products

Product	Status	Vendor	Package	Ecosystem
swftools	affected	Ubuntu:18.04:LTS	swftools	—
swftools	affected	Ubuntu:16.04:LTS	swftools	—

Upstream advisory

UBUNTU-CVE-2017-16869

USNEPSS <= 49%HIGH2017-11-17

CVEs:CVE-2017-16869

Affected products

Product	Status	Vendor	Package	Ecosystem
upx-ucl	affected	Ubuntu:18.04:LTS	upx-ucl	—

Upstream advisory

UBUNTU-CVE-2017-16785

USNEPSS <= 49%MEDIUM2017-11-10

CVEs:CVE-2017-16785

Affected products

Product	Status	Vendor	Package	Ecosystem
cacti	affected	Ubuntu:18.04:LTS	cacti	—

Upstream advisory

UBUNTU-CVE-2017-16358

USNEPSS <= 49%HIGH2017-11-01

CVEs:CVE-2017-16358

Affected products

Product	Status	Vendor	Package	Ecosystem
radare2	affected	Ubuntu:18.04:LTS	radare2	—

Upstream advisory

UBUNTU-CVE-2017-1000246

USNEPSS <= 49%MEDIUM2017-11-17

CVEs:CVE-2017-1000246

Affected products

Product	Status	Vendor	Package	Ecosystem
python-pysaml2	affected	Ubuntu:18.04:LTS	python-pysaml2	—
python-pysaml2	affected	Ubuntu:Pro:16.04:LTS	python-pysaml2	—

Upstream advisory

UBUNTU-CVE-2017-16663

USNEPSS <= 49%MEDIUM2017-11-08

CVEs:CVE-2017-16663

Affected products

Product	Status	Vendor	Package	Ecosystem
sam2p	affected	Ubuntu:14.04:LTS	sam2p	—
sam2p	affected	Ubuntu:16.04:LTS	sam2p	—

Upstream advisory

UBUNTU-CVE-2017-1000187

USNEPSS <= 49%HIGH2017-11-17

CVEs:CVE-2017-1000187

Affected products

Product	Status	Vendor	Package	Ecosystem
swftools	affected	Ubuntu:18.04:LTS	swftools	—
swftools	affected	Ubuntu:16.04:LTS	swftools	—

Upstream advisory

UBUNTU-CVE-2017-17054

USNEPSS <= 49%MEDIUM2017-11-29

CVEs:CVE-2017-17054

Affected products

Product	Status	Vendor	Package	Ecosystem
aubio	affected	Ubuntu:16.04:LTS	aubio	—
aubio	affected	Ubuntu:18.04:LTS	aubio	—

Upstream advisory

UBUNTU-CVE-2017-16898

USNEPSS <= 49%MEDIUM2017-11-20

CVEs:CVE-2017-16898

Affected products

Product	Status	Vendor	Package	Ecosystem
ming	affected	Ubuntu:16.04:LTS	ming	—

Upstream advisory

UBUNTU-CVE-2017-1000174

USNEPSS <= 49%MEDIUM2017-11-17

CVEs:CVE-2017-1000174

Affected products

Product	Status	Vendor	Package	Ecosystem
swftools	affected	Ubuntu:18.04:LTS	swftools	—
swftools	affected	Ubuntu:16.04:LTS	swftools	—

Upstream advisory

UBUNTU-CVE-2017-1000182

USNEPSS <= 49%MEDIUM2017-11-17

CVEs:CVE-2017-1000182

Affected products

Product	Status	Vendor	Package	Ecosystem
swftools	affected	Ubuntu:16.04:LTS	swftools	—
swftools	affected	Ubuntu:18.04:LTS	swftools	—

Upstream advisory

UBUNTU-CVE-2017-1000176

USNEPSS <= 49%MEDIUM2017-11-17

CVEs:CVE-2017-1000176

Affected products

Product	Status	Vendor	Package	Ecosystem
swftools	affected	Ubuntu:18.04:LTS	swftools	—
swftools	affected	Ubuntu:16.04:LTS	swftools	—

Upstream advisory

UBUNTU-CVE-2017-1000185

USNEPSS <= 49%MEDIUM2017-11-17

CVEs:CVE-2017-1000185

Affected products

Product	Status	Vendor	Package	Ecosystem
swftools	affected	Ubuntu:18.04:LTS	swftools	—
swftools	affected	Ubuntu:16.04:LTS	swftools	—

Upstream advisory

UBUNTU-CVE-2017-1000186

USNEPSS <= 49%MEDIUM2017-11-17

CVEs:CVE-2017-1000186

Affected products

Product	Status	Vendor	Package	Ecosystem
swftools	affected	Ubuntu:18.04:LTS	swftools	—
swftools	affected	Ubuntu:16.04:LTS	swftools	—

Upstream advisory

UBUNTU-CVE-2017-5532

USNEPSS <= 49%MEDIUM2017-11-15

CVEs:CVE-2017-5532

Affected products

Product	Status	Vendor	Package	Ecosystem
jasperreports	affected	Ubuntu:16.04:LTS	jasperreports	—
jasperreports	affected	Ubuntu:18.04:LTS	jasperreports	—

Upstream advisory

UBUNTU-CVE-2017-1001001

USNEPSS <= 49%MEDIUM2017-11-01

CVEs:CVE-2017-1001001

Affected products

Product	Status	Vendor	Package	Ecosystem
pluxml	affected	Ubuntu:16.04:LTS	pluxml	—
pluxml	affected	Ubuntu:18.04:LTS	pluxml	—

Upstream advisory

UBUNTU-CVE-2017-15566

USNEPSS <= 49%HIGH2017-11-01

CVEs:CVE-2017-15566

Affected products

Product	Status	Vendor	Package	Ecosystem
slurm-llnl	affected	Ubuntu:Pro:16.04:LTS	slurm-llnl	—

Upstream advisory

USN-3489-1

USNEPSS <= 49%HIGH2017-11-21

db5.3 vulnerability

CVEs:CVE-2017-10140

Affected products

Product	Status	Vendor	Package	Ecosystem
db5.3	affected	Ubuntu:16.04:LTS	db5.3	—
db5.3	affected	Ubuntu:14.04:LTS	db5.3	—

Upstream advisory

UBUNTU-CVE-2017-7519

USNEPSS <= 49%MEDIUM2017-11-02

CVEs:CVE-2017-7519

Affected products

Product	Status	Vendor	Package	Ecosystem
ceph	affected	Ubuntu:18.04:LTS	ceph	—
ceph	affected	Ubuntu:16.04:LTS	ceph	—

Upstream advisory

UBUNTU-CVE-2017-16643

USNEPSS <= 49%MEDIUM2017-11-07

CVEs:CVE-2017-16643

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-6.11	affected	Ubuntu:24.04:LTS	linux-azure-6.11	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fde-5.15	affected	Ubuntu:Pro:20.04:LTS	linux-azure-fde-5.15	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp-6.11	affected	Ubuntu:24.04:LTS	linux-gcp-6.11	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe-6.11	affected	Ubuntu:24.04:LTS	linux-hwe-6.11	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lowlatency-hwe-6.11	affected	Ubuntu:24.04:LTS	linux-lowlatency-hwe-6.11	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:16.04:LTS	linux-oem	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2017-14180

USNEPSS <= 49%HIGH2017-11-15

CVEs:CVE-2017-14180

Affected products

Product	Status	Vendor	Package	Ecosystem
apport	affected	Ubuntu:14.04:LTS	apport	—
apport	affected	Ubuntu:16.04:LTS	apport	—

Upstream advisory

UBUNTU-CVE-2017-17044

USNEPSS <= 49%MEDIUM2017-11-28

CVEs:CVE-2017-17044

Affected products

Product	Status	Vendor	Package	Ecosystem
xen	affected	Ubuntu:16.04:LTS	xen	—
xen	affected	Ubuntu:18.04:LTS	xen	—

Upstream advisory

UBUNTU-CVE-2017-17045

USNEPSS <= 49%HIGH2017-11-28

CVEs:CVE-2017-17045

Affected products

Product	Status	Vendor	Package	Ecosystem
xen	affected	Ubuntu:16.04:LTS	xen	—
xen	affected	Ubuntu:18.04:LTS	xen	—

Upstream advisory

UBUNTU-CVE-2017-8806

USNEPSS <= 49%MEDIUM2017-11-09

CVEs:CVE-2017-8806

Affected products

Product	Status	Vendor	Package	Ecosystem
postgresql-common	affected	Ubuntu:16.04:LTS	postgresql-common	—
postgresql-common	affected	Ubuntu:14.04:LTS	postgresql-common	—

Upstream advisory

UBUNTU-CVE-2017-16837

USNEPSS <= 49%HIGH2017-11-16

CVEs:CVE-2017-16837

Affected products

Product	Status	Vendor	Package	Ecosystem
tboot	affected	Ubuntu:16.04:LTS	tboot	—
tboot	affected	Ubuntu:18.04:LTS	tboot	—
tboot	affected	Ubuntu:20.04:LTS	tboot	—

Upstream advisory

UBUNTU-CVE-2017-16927

USNEPSS <= 49%HIGH2017-11-23

CVEs:CVE-2017-16927

Affected products

Product	Status	Vendor	Package	Ecosystem
xrdp	affected	Ubuntu:Pro:14.04:LTS	xrdp	—
xrdp	affected	Ubuntu:Pro:16.04:LTS	xrdp	—

Upstream advisory

UBUNTU-CVE-2017-7501

USNEPSS <= 49%HIGH2017-11-22

CVEs:CVE-2017-7501

Affected products

Product	Status	Vendor	Package	Ecosystem
rpm	affected	Ubuntu:Pro:14.04:LTS	rpm	—
rpm	affected	Ubuntu:Pro:16.04:LTS	rpm	—

Upstream advisory

UBUNTU-CVE-2017-14177

USNEPSS <= 49%HIGH2017-11-15

CVEs:CVE-2017-14177

Affected products

Product	Status	Vendor	Package	Ecosystem
apport	affected	Ubuntu:14.04:LTS	apport	—
apport	affected	Ubuntu:16.04:LTS	apport	—

Upstream advisory

UBUNTU-CVE-2017-15102

USNEPSS <= 49%MEDIUM2017-11-15

CVEs:CVE-2017-15102

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:14.04:LTS	linux	—
linux-azure-6.11	affected	Ubuntu:24.04:LTS	linux-azure-6.11	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fde-5.15	affected	Ubuntu:Pro:20.04:LTS	linux-azure-fde-5.15	—
linux-gcp-6.11	affected	Ubuntu:24.04:LTS	linux-gcp-6.11	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gkeop	affected	Ubuntu:20.04:LTS	linux-gkeop	—
linux-hwe-6.11	affected	Ubuntu:24.04:LTS	linux-hwe-6.11	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-lowlatency-hwe-6.11	affected	Ubuntu:24.04:LTS	linux-lowlatency-hwe-6.11	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:24.04:LTS	linux-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:24.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2017-16648

USNEPSS <= 49%MEDIUM2017-11-07

CVEs:CVE-2017-16648

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:14.04:LTS	linux-azure	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—

Upstream advisory

UBUNTU-CVE-2017-16535

USNEPSS <= 49%MEDIUM2017-11-03

CVEs:CVE-2017-16535

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke	affected	Ubuntu:16.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:16.04:LTS	linux-oem	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2017-15116

USNEPSS <= 49%MEDIUM2017-11-30

CVEs:CVE-2017-15116

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gkeop	affected	Ubuntu:20.04:LTS	linux-gkeop	—
linux-gkeop-5.15	affected	Ubuntu:20.04:LTS	linux-gkeop-5.15	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—

Upstream advisory

UBUNTU-CVE-2017-17053

USNEPSS <= 49%HIGH2017-11-29

CVEs:CVE-2017-17053

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—

Upstream advisory

UBUNTU-CVE-2017-17052

USNEPSS <= 49%HIGH2017-11-29

CVEs:CVE-2017-17052

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—

Upstream advisory

UBUNTU-CVE-2017-17046

USNEPSS <= 49%MEDIUM2017-11-28

CVEs:CVE-2017-17046

Affected products

Product	Status	Vendor	Package	Ecosystem
xen	affected	Ubuntu:16.04:LTS	xen	—
xen	affected	Ubuntu:18.04:LTS	xen	—

Upstream advisory

UBUNTU-CVE-2017-0849

USNEPSS <= 49%MEDIUM2017-11-16

CVEs:CVE-2017-0849

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	Ubuntu:16.04:LTS	android	—

Upstream advisory

UBUNTU-CVE-2017-14179

USNEPSS <= 49%HIGH2017-11-15

CVEs:CVE-2017-14179

Affected products

Product	Status	Vendor	Package	Ecosystem
apport	affected	Ubuntu:14.04:LTS	apport	—

Upstream advisory

UBUNTU-CVE-2017-16933

USNEPSS <= 49%HIGH2017-11-24

CVEs:CVE-2017-16933

Affected products

Product	Status	Vendor	Package	Ecosystem
icinga2	affected	Ubuntu:16.04:LTS	icinga2	—
icinga2	affected	Ubuntu:18.04:LTS	icinga2	—

Upstream advisory

UBUNTU-CVE-2017-0862

USNEPSS <= 49%HIGH2017-11-16

CVEs:CVE-2017-0862

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-azure	affected	Ubuntu:14.04:LTS	linux-azure	—

Upstream advisory

UBUNTU-CVE-2017-0863

USNEPSS <= 49%HIGH2017-11-16

CVEs:CVE-2017-0863

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-azure	affected	Ubuntu:14.04:LTS	linux-azure	—

Upstream advisory

USN-3497-1

USNAll remaining2017-11-29

openjdk-7 vulnerabilities

Affected products

Product	Status	Vendor	Package	Ecosystem
openjdk-7	affected	Ubuntu:14.04:LTS	openjdk-7	—

Upstream advisory

USN-3477-2

USNAll remainingHIGH2017-11-27

firefox regression

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:14.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—

Upstream advisory

USN-3495-1

USNAll remaining2017-11-27

optipng vulnerability

Affected products

Product	Status	Vendor	Package	Ecosystem
optipng	affected	Ubuntu:14.04:LTS	optipng	—
optipng	affected	Ubuntu:16.04:LTS	optipng	—

Upstream advisory

USN-3494-1

USNAll remaining2017-11-27

libxml-libxml-perl vulnerability

Affected products

Product	Status	Vendor	Package	Ecosystem
libxml-libxml-perl	affected	Ubuntu:16.04:LTS	libxml-libxml-perl	—
libxml-libxml-perl	affected	Ubuntu:14.04:LTS	libxml-libxml-perl	—

Upstream advisory

USN-3485-3

USNAll remaining2017-11-21

linux-aws vulnerabilities

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—

Upstream advisory

USN-3484-3

USNAll remaining2017-11-21

linux-gcp vulnerability

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—

Upstream advisory

USN-3488-1

USNAll remaining2017-11-21

linux-azure vulnerability

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—

Upstream advisory

USN-3485-2

USNAll remaining2017-11-21

linux-lts-xenial vulnerabilities

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—

Upstream advisory

USN-3484-2

USNAll remaining2017-11-21

linux-hwe vulnerability

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—

Upstream advisory

USN-3480-2

USNAll remaining2017-11-20

apport regressions

Affected products

Product	Status	Vendor	Package	Ecosystem
apport	affected	Ubuntu:16.04:LTS	apport	—

Upstream advisory

USN-3483-1

USNAll remaining2017-11-20

procmail vulnerability

Affected products

Product	Status	Vendor	Package	Ecosystem
procmail	affected	Ubuntu:16.04:LTS	procmail	—
procmail	affected	Ubuntu:14.04:LTS	procmail	—

Upstream advisory

USN-3480-1

USNAll remaining2017-11-15

apport vulnerabilities

Affected products

Product	Status	Vendor	Package	Ecosystem
apport	affected	Ubuntu:14.04:LTS	apport	—
apport	affected	Ubuntu:16.04:LTS	apport	—

Upstream advisory

USN-3476-1

USNAll remaining2017-11-09

postgresql-common vulnerabilities

Affected products

Product	Status	Vendor	Package	Ecosystem
postgresql-common	affected	Ubuntu:16.04:LTS	postgresql-common	—
postgresql-common	affected	Ubuntu:14.04:LTS	postgresql-common	—

Upstream advisory

USN-3473-1

USNAll remaining2017-11-08

openjdk-8 vulnerabilities

Affected products

Product	Status	Vendor	Package	Ecosystem
openjdk-8	affected	Ubuntu:16.04:LTS	openjdk-8	—

Upstream advisory

What would you fix first?

Advisories

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products