Canonical Security Advisories: November 2018 — Canonical Security Advisories

UBUNTU-CVE-2018-19518

USNExploitedCISA KEV listedHIGH2018-11-25

CVEs:CVE-2018-19518

Affected products

Product	Status	Vendor	Package	Ecosystem
php7.0	affected	Ubuntu:16.04:LTS	php7.0	—
php7.2	affected	Ubuntu:18.04:LTS	php7.2	—
php-imap	affected	Ubuntu:14.04:LTS	php-imap	—
uw-imap	affected	Ubuntu:16.04:LTS	uw-imap	—
uw-imap	affected	Ubuntu:18.04:LTS	uw-imap	—
uw-imap	affected	Ubuntu:Pro:14.04:LTS	uw-imap	—

Upstream advisory

USN-3816-1

USNExploitedCISA KEV listedNONE2018-11-12

systemd vulnerabilities

CVEs:CVE-2018-6954 CVE-2018-15686 CVE-2018-15687

Affected products

Product	Status	Vendor	Package	Ecosystem
systemd	affected	Ubuntu	—	—
systemd	affected	Ubuntu:18.04:LTS	systemd	—
systemd	affected	Ubuntu:16.04:LTS	systemd	—

Upstream advisory

USN-3828-1

USNExploitedVulnCheck KEV listedHIGH2018-11-27

webkit2gtk vulnerabilities

CVEs:CVE-2018-4345 CVE-2018-4372 CVE-2018-4386

Affected products

Product	Status	Vendor	Package	Ecosystem
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—

Upstream advisory

UBUNTU-CVE-2018-18956

USNExploitedVulnCheck KEV listedHIGH2018-11-05

CVEs:CVE-2018-18956

Affected products

Product	Status	Vendor	Package	Ecosystem
suricata	affected	Ubuntu:16.04:LTS	suricata	—
suricata	affected	Ubuntu:18.04:LTS	suricata	—

Upstream advisory

USN-3809-1

USNWeaponized exploitHIGH2018-11-06

openssh vulnerabilities

CVEs:CVE-2016-10708 CVE-2018-15473

Affected products

Product	Status	Vendor	Package	Ecosystem
openssh	affected	Ubuntu:14.04:LTS	openssh	—
openssh	affected	Ubuntu:18.04:LTS	openssh	—
openssh	affected	Ubuntu:16.04:LTS	openssh	—

Upstream advisory

USN-3826-1

USNWeaponized exploitHIGH2018-11-26

qemu vulnerabilities

CVEs:CVE-2018-10839 CVE-2018-11806 CVE-2018-12617 CVE-2018-16847 CVE-2018-17958 CVE-2018-17962 CVE-2018-17963 CVE-2018-18849 CVE-2018-18954 CVE-2018-19364

Affected products

Product	Status	Vendor	Package	Ecosystem
qemu	affected	Ubuntu:18.04:LTS	qemu	—
qemu	affected	Ubuntu:16.04:LTS	qemu	—
qemu	affected	Ubuntu:14.04:LTS	qemu	—

Upstream advisory

UBUNTU-CVE-2018-18955

USNWeaponized exploitHIGH2018-11-16

CVEs:CVE-2018-18955

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:18.04:LTS	linux	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:14.04:LTS	linux-azure	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—

Upstream advisory

UBUNTU-CVE-2018-15537

USNWeaponized exploitHIGH2018-11-29

CVEs:CVE-2018-15537

Affected products

Product	Status	Vendor	Package	Ecosystem
ocsinventory-server	affected	Ubuntu:16.04:LTS	ocsinventory-server	—
ocsinventory-server	affected	Ubuntu:20.04:LTS	ocsinventory-server	—
ocsinventory-server	affected	Ubuntu:22.04:LTS	ocsinventory-server	—
ocsinventory-server	affected	Ubuntu:18.04:LTS	ocsinventory-server	—
ocsinventory-server	affected	Ubuntu:25.10	ocsinventory-server	—
ocsinventory-server	affected	Ubuntu:24.04:LTS	ocsinventory-server	—

Upstream advisory

UBUNTU-CVE-2018-18820

USNActive exploitation (sightings)HIGH2018-11-05

CVEs:CVE-2018-18820

Affected products

Product	Status	Vendor	Package	Ecosystem
icecast2	affected	Ubuntu:16.04:LTS	icecast2	—
icecast2	affected	Ubuntu:18.04:LTS	icecast2	—

Upstream advisory

UBUNTU-CVE-2018-8416

USNActive exploitation (sightings)MEDIUM2018-11-13

CVEs:CVE-2018-8416

Affected products

Product	Status	Vendor	Package	Ecosystem
mono	affected	Ubuntu:16.04:LTS	mono	—
mono	affected	Ubuntu:25.10	mono	—
mono	affected	Ubuntu:22.04:LTS	mono	—
mono	affected	Ubuntu:20.04:LTS	mono	—
mono	affected	Ubuntu:18.04:LTS	mono	—
mono	affected	Ubuntu:24.04:LTS	mono	—
mono	affected	Ubuntu:14.04:LTS	mono	—
mono-reference-assemblies	affected	Ubuntu:16.04:LTS	mono-reference-assemblies	—
mono-reference-assemblies	affected	Ubuntu:18.04:LTS	mono-reference-assemblies	—

Upstream advisory

UBUNTU-CVE-2018-12116

USNActive exploitation (sightings)HIGH2018-11-28

CVEs:CVE-2018-12116

Affected products

Product	Status	Vendor	Package	Ecosystem
nodejs	affected	Ubuntu:Pro:18.04:LTS	nodejs	—

Upstream advisory

UBUNTU-CVE-2018-19406

USNActive exploitation (sightings)MEDIUM2018-11-21

CVEs:CVE-2018-19406

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:18.04:LTS	linux	—
linux	affected	Ubuntu:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:14.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2018-19206

USNPoC exploitMEDIUM2018-11-12

CVEs:CVE-2018-19206

Affected products

Product	Status	Vendor	Package	Ecosystem
roundcube	affected	Ubuntu:Pro:18.04:LTS	roundcube	—
roundcube	affected	Ubuntu:Pro:16.04:LTS	roundcube	—

Upstream advisory

UBUNTU-CVE-2018-16843

USNPoC exploitHIGH2018-11-06

CVEs:CVE-2018-16843

Affected products

Product	Status	Vendor	Package	Ecosystem
nginx	affected	Ubuntu:16.04:LTS	nginx	—
nginx	affected	Ubuntu:18.04:LTS	nginx	—

Upstream advisory

UBUNTU-CVE-2018-12122

USNPoC exploitHIGH2018-11-28

CVEs:CVE-2018-12122

Affected products

Product	Status	Vendor	Package	Ecosystem
nodejs	affected	Ubuntu:Pro:18.04:LTS	nodejs	—
nodejs	affected	Ubuntu:Pro:14.04:LTS	nodejs	—
nodejs	affected	Ubuntu:Pro:16.04:LTS	nodejs	—

Upstream advisory

USN-3817-1

USNPoC exploitCRITICAL2018-11-13

python2.7, python3.4, python3.5 vulnerabilities

CVEs:CVE-2018-1060 CVE-2018-1061 CVE-2018-14647 CVE-2018-1000030 CVE-2018-1000802

Affected products

Product	Status	Vendor	Package	Ecosystem
python2.7	affected	Ubuntu:18.04:LTS	python2.7	—
python2.7	affected	—	—	—
python2.7	affected	Ubuntu:16.04:LTS	python2.7	—
python2.7	affected	Ubuntu:14.04:LTS	python2.7	—
python3.4	affected	Ubuntu:14.04:LTS	python3.4	—
python3.5	affected	Ubuntu:16.04:LTS	python3.5	—

Upstream advisory

UBUNTU-CVE-2018-19052

USNPoC exploitHIGH2018-11-07

CVEs:CVE-2018-19052

Affected products

Product	Status	Vendor	Package	Ecosystem
lighttpd	affected	Ubuntu:Pro:18.04:LTS	lighttpd	—
lighttpd	affected	Ubuntu:Pro:14.04:LTS	lighttpd	—
lighttpd	affected	Ubuntu:Pro:16.04:LTS	lighttpd	—

Upstream advisory

UBUNTU-CVE-2018-16844

USNPoC exploitHIGH2018-11-06

CVEs:CVE-2018-16844

Affected products

Product	Status	Vendor	Package	Ecosystem
nginx	affected	Ubuntu:16.04:LTS	nginx	—
nginx	affected	Ubuntu:18.04:LTS	nginx	—

Upstream advisory

UBUNTU-CVE-2018-18312

USNPoC exploitCRITICAL2018-11-29

CVEs:CVE-2018-18312

Affected products

Product	Status	Vendor	Package	Ecosystem
perl	affected	Ubuntu:18.04:LTS	perl	—
perl	affected	Ubuntu:16.04:LTS	perl	—

Upstream advisory

UBUNTU-CVE-2018-18311

USNPoC exploitCRITICAL2018-11-29

CVEs:CVE-2018-18311

Affected products

Product	Status	Vendor	Package	Ecosystem
perl	affected	Ubuntu:14.04:LTS	perl	—
perl	affected	Ubuntu:18.04:LTS	perl	—
perl	affected	Ubuntu:16.04:LTS	perl	—

Upstream advisory

USN-3808-1

USNPoC exploitCRITICAL2018-11-05

ruby1.9.1, ruby2.0, ruby2.3, ruby2.5 vulnerabilities

CVEs:CVE-2018-16395 CVE-2018-16396

Affected products

Product	Status	Vendor	Package	Ecosystem
ruby1.9.1	affected	Ubuntu:14.04:LTS	ruby1.9.1	—
ruby2.0	affected	Ubuntu:14.04:LTS	ruby2.0	—
ruby2.3	affected	Ubuntu:16.04:LTS	ruby2.3	—
ruby2.5	affected	Ubuntu:18.04:LTS	ruby2.5	—

Upstream advisory

UBUNTU-CVE-2018-16845

USNPoC exploitHIGH2018-11-06

CVEs:CVE-2018-16845

Affected products

Product	Status	Vendor	Package	Ecosystem
nginx	affected	Ubuntu:16.04:LTS	nginx	—
nginx	affected	Ubuntu:14.04:LTS	nginx	—
nginx	affected	Ubuntu:18.04:LTS	nginx	—

Upstream advisory

UBUNTU-CVE-2018-18313

USNPoC exploitCRITICAL2018-11-05

CVEs:CVE-2018-18313

Affected products

Product	Status	Vendor	Package	Ecosystem
perl	affected	Ubuntu:14.04:LTS	perl	—
perl	affected	Ubuntu:18.04:LTS	perl	—
perl	affected	Ubuntu:16.04:LTS	perl	—

Upstream advisory

UBUNTU-CVE-2018-18314

USNPoC exploitCRITICAL2018-11-29

CVEs:CVE-2018-18314

Affected products

Product	Status	Vendor	Package	Ecosystem
perl	affected	Ubuntu:18.04:LTS	perl	—
perl	affected	Ubuntu:16.04:LTS	perl	—

Upstream advisory

UBUNTU-CVE-2018-12120

USNPoC exploitHIGH2018-11-28

CVEs:CVE-2018-12120

Affected products

Product	Status	Vendor	Package	Ecosystem
nodejs	affected	Ubuntu:18.04:LTS	nodejs	—

Upstream advisory

USN-3815-1

USNPoC exploitCRITICAL2018-11-12

gettext vulnerability

CVEs:CVE-2018-18751

Affected products

Product	Status	Vendor	Package	Ecosystem
gettext	affected	Ubuntu:14.04:LTS	gettext	—
gettext	affected	Ubuntu:18.04:LTS	gettext	—
gettext	affected	Ubuntu:16.04:LTS	gettext	—

Upstream advisory

UBUNTU-CVE-2018-19486

USNPoC exploitCRITICAL2018-11-23

CVEs:CVE-2018-19486

Affected products

Product	Status	Vendor	Package	Ecosystem
git	affected	Ubuntu:18.04:LTS	git	—

Upstream advisory

UBUNTU-CVE-2018-16476

USNPoC exploitHIGH2018-11-30

CVEs:CVE-2018-16476

Affected products

Product	Status	Vendor	Package	Ecosystem
access	affected	Cloudflare	—	—
rails	affected	Ubuntu:Pro:20.04:LTS	rails	—
rails	affected	Ubuntu:Pro:22.04:LTS	rails	—
rails	affected	Ubuntu:Pro:16.04:LTS	rails	—
rails	affected	Ubuntu:Pro:18.04:LTS	rails	—

Upstream advisory

UBUNTU-CVE-2018-19519

USNPoC exploitMEDIUM2018-11-25

CVEs:CVE-2018-19519

Affected products

Product	Status	Vendor	Package	Ecosystem
tcpdump	affected	Ubuntu:18.04:LTS	tcpdump	—
tcpdump	affected	Ubuntu:16.04:LTS	tcpdump	—
tcpdump	affected	Ubuntu:Pro:14.04:LTS	tcpdump	—

Upstream advisory

UBUNTU-CVE-2018-16854

USNPoC exploitHIGH2018-11-20

CVEs:CVE-2018-16854

Affected products

Product	Status	Vendor	Package	Ecosystem
moodle	affected	Ubuntu:18.04:LTS	moodle	—
moodle	affected	Ubuntu:16.04:LTS	moodle	—

Upstream advisory

UBUNTU-CVE-2018-16472

USNPoC exploitHIGH2018-11-06

CVEs:CVE-2018-16472

Affected products

Product	Status	Vendor	Package	Ecosystem
node-cached-path-relative	affected	Ubuntu:18.04:LTS	node-cached-path-relative	—

Upstream advisory

UBUNTU-CVE-2018-18439

USNPoC exploitCRITICAL2018-11-02

CVEs:CVE-2018-18439

Affected products

Product	Status	Vendor	Package	Ecosystem
u-boot	affected	Ubuntu:16.04:LTS	u-boot	—

Upstream advisory

UBUNTU-CVE-2018-16471

USNPoC exploitMEDIUM2018-11-06

CVEs:CVE-2018-16471

Affected products

Product	Status	Vendor	Package	Ecosystem
ruby-rack	affected	Ubuntu:18.04:LTS	ruby-rack	—
ruby-rack	affected	Ubuntu:16.04:LTS	ruby-rack	—

Upstream advisory

UBUNTU-CVE-2018-19664

USNPoC exploitMEDIUM2018-11-29

CVEs:CVE-2018-19664

Affected products

Product	Status	Vendor	Package	Ecosystem
libjpeg-turbo	affected	Ubuntu:18.04:LTS	libjpeg-turbo	—
libjpeg-turbo	affected	Ubuntu:16.04:LTS	libjpeg-turbo	—
libjpeg-turbo	affected	Ubuntu:14.04:LTS	libjpeg-turbo	—

Upstream advisory

USN-3807-1

USNPoC exploitCRITICAL2018-11-05

network-manager vulnerability

CVEs:CVE-2018-15688

Affected products

Product	Status	Vendor	Package	Ecosystem
network-manager	affected	Ubuntu:16.04:LTS	network-manager	—
network-manager	affected	Ubuntu:18.04:LTS	network-manager	—

Upstream advisory

USN-3806-1

USNPoC exploitCRITICAL2018-11-05

systemd vulnerability

CVEs:CVE-2018-15688

Affected products

Product	Status	Vendor	Package	Ecosystem
systemd	affected	Ubuntu:18.04:LTS	systemd	—
systemd	affected	Ubuntu:16.04:LTS	systemd	—

Upstream advisory

UBUNTU-CVE-2018-19205

USNPoC exploitHIGH2018-11-12

CVEs:CVE-2018-19205

Affected products

Product	Status	Vendor	Package	Ecosystem
roundcube	affected	Ubuntu:Pro:18.04:LTS	roundcube	—
roundcube	affected	Ubuntu:Pro:16.04:LTS	roundcube	—

Upstream advisory

UBUNTU-CVE-2015-9274

USNPoC exploitMEDIUM2018-11-15

CVEs:CVE-2015-9274

Affected products

Product	Status	Vendor	Package	Ecosystem
harfbuzz	affected	Ubuntu:Pro:16.04:LTS	harfbuzz	—

Upstream advisory

UBUNTU-CVE-2018-18440

USNPoC exploitHIGH2018-11-02

CVEs:CVE-2018-18440

Affected products

Product	Status	Vendor	Package	Ecosystem
u-boot	affected	Ubuntu:16.04:LTS	u-boot	—

Upstream advisory

USN-3822-1

USNPoC exploitHIGH2018-11-14

linux vulnerabilities

CVEs:CVE-2016-9588 CVE-2017-13168 CVE-2017-16649 CVE-2018-9363 CVE-2018-16658

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:14.04:LTS	linux	—
linux	affected	Ubuntu	—	—

Upstream advisory

USN-3820-1

USNPoC exploitHIGH2018-11-14

linux, linux-aws, linux-azure, linux-gcp, linux-kvm, linux-oem, linux-raspi2 vulnerabilities

CVEs:CVE-2017-13168 CVE-2018-9363 CVE-2018-15471 CVE-2018-16658

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu	—	—
linux	affected	Ubuntu:18.04:LTS	linux	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—

Upstream advisory

USN-3786-2

USNPoC exploitHIGH2018-11-06

libxkbcommon vulnerabilities

CVEs:CVE-2018-15853 CVE-2018-15854 CVE-2018-15855 CVE-2018-15856 CVE-2018-15857 CVE-2018-15858 CVE-2018-15859 CVE-2018-15861 CVE-2018-15862 CVE-2018-15863 CVE-2018-15864

Affected products

Product	Status	Vendor	Package	Ecosystem
libxkbcommon	affected	Ubuntu:18.04:LTS	libxkbcommon	—

Upstream advisory

USN-3816-2

USNPoC exploitNONE2018-11-19

systemd vulnerability

CVEs:CVE-2018-6954

Affected products

Product	Status	Vendor	Package	Ecosystem
systemd	affected	Ubuntu	—	—
systemd	affected	Ubuntu:18.04:LTS	systemd	—
systemd	affected	Ubuntu:16.04:LTS	systemd	—

Upstream advisory

UBUNTU-CVE-2018-14646

USNPoC exploitMEDIUM2018-11-26

CVEs:CVE-2018-14646

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:18.04:LTS	linux	—
linux	affected	Ubuntu:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:14.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-edge	affected	Ubuntu:18.04:LTS	linux-azure-edge	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2018-19627

USNEPSS <= 49%HIGH2018-11-29

CVEs:CVE-2018-19627

Affected products

Product	Status	Vendor	Package	Ecosystem
wireshark	affected	Ubuntu:16.04:LTS	wireshark	—
wireshark	affected	Ubuntu:18.04:LTS	wireshark	—
wireshark	affected	Ubuntu:14.04:LTS	wireshark	—

Upstream advisory

UBUNTU-CVE-2018-12121

USNEPSS <= 49%HIGH2018-11-28

CVEs:CVE-2018-12121

Affected products

Product	Status	Vendor	Package	Ecosystem
nodejs	affected	Ubuntu:Pro:14.04:LTS	nodejs	—
nodejs	affected	Ubuntu:Pro:18.04:LTS	nodejs	—
nodejs	affected	Ubuntu:Pro:16.04:LTS	nodejs	—

Upstream advisory

USN-3831-1

USNEPSS <= 49%HIGH2018-11-29

ghostscript vulnerabilities

CVEs:CVE-2018-19409 CVE-2018-19475 CVE-2018-19476 CVE-2018-19477

Affected products

Product	Status	Vendor	Package	Ecosystem
ghostscript	affected	Ubuntu:16.04:LTS	ghostscript	—
ghostscript	affected	Ubuntu:14.04:LTS	ghostscript	—
ghostscript	affected	Ubuntu:18.04:LTS	ghostscript	—

Upstream advisory

UBUNTU-CVE-2018-19475

USNEPSS <= 49%HIGH2018-11-23

CVEs:CVE-2018-19475

Affected products

Product	Status	Vendor	Package	Ecosystem
ghostscript	affected	Ubuntu:16.04:LTS	ghostscript	—
ghostscript	affected	Ubuntu:14.04:LTS	ghostscript	—
ghostscript	affected	Ubuntu:18.04:LTS	ghostscript	—

Upstream advisory

USN-3825-1

USNEPSS <= 49%NONE2018-11-21

libapache2-mod-perl2 vulnerability

CVEs:CVE-2011-2767

Affected products

Product	Status	Vendor	Package	Ecosystem
libapache2-mod-perl2	affected	Ubuntu:14.04:LTS	libapache2-mod-perl2	—
libapache2-mod-perl2	affected	Ubuntu:18.04:LTS	libapache2-mod-perl2	—
libapache2-mod-perl2	affected	Ubuntu:16.04:LTS	libapache2-mod-perl2	—

Upstream advisory

UBUNTU-CVE-2018-8787

USNEPSS <= 49%CRITICAL2018-11-29

CVEs:CVE-2018-8787

Affected products

Product	Status	Vendor	Package	Ecosystem
freerdp	affected	Ubuntu:16.04:LTS	freerdp	—
freerdp	affected	Ubuntu:18.04:LTS	freerdp	—
freerdp	affected	Ubuntu:14.04:LTS	freerdp	—
freerdp2	affected	Ubuntu:18.04:LTS	freerdp2	—

Upstream advisory

UBUNTU-CVE-2018-8786

USNEPSS <= 49%CRITICAL2018-11-29

CVEs:CVE-2018-8786

Affected products

Product	Status	Vendor	Package	Ecosystem
freerdp	affected	Ubuntu:16.04:LTS	freerdp	—
freerdp	affected	Ubuntu:18.04:LTS	freerdp	—
freerdp	affected	Ubuntu:14.04:LTS	freerdp	—
freerdp2	affected	Ubuntu:18.04:LTS	freerdp2	—

Upstream advisory

UBUNTU-CVE-2018-19409

USNEPSS <= 49%CRITICAL2018-11-21

CVEs:CVE-2018-19409

Affected products

Product	Status	Vendor	Package	Ecosystem
ghostscript	affected	Ubuntu:16.04:LTS	ghostscript	—
ghostscript	affected	Ubuntu:14.04:LTS	ghostscript	—
ghostscript	affected	Ubuntu:18.04:LTS	ghostscript	—

Upstream advisory

UBUNTU-CVE-2018-8788

USNEPSS <= 49%CRITICAL2018-11-29

CVEs:CVE-2018-8788

Affected products

Product	Status	Vendor	Package	Ecosystem
freerdp	affected	Ubuntu:16.04:LTS	freerdp	—
freerdp	affected	Ubuntu:18.04:LTS	freerdp	—
freerdp2	affected	Ubuntu:18.04:LTS	freerdp2	—

Upstream advisory

UBUNTU-CVE-2018-8784

USNEPSS <= 49%CRITICAL2018-11-29

CVEs:CVE-2018-8784

Affected products

Product	Status	Vendor	Package	Ecosystem
freerdp2	affected	Ubuntu:18.04:LTS	freerdp2	—

Upstream advisory

UBUNTU-CVE-2018-8785

USNEPSS <= 49%CRITICAL2018-11-29

CVEs:CVE-2018-8785

Affected products

Product	Status	Vendor	Package	Ecosystem
freerdp2	affected	Ubuntu:18.04:LTS	freerdp2	—

Upstream advisory

UBUNTU-CVE-2018-10851

USNEPSS <= 49%HIGH2018-11-06

CVEs:CVE-2018-10851

Affected products

Product	Status	Vendor	Package	Ecosystem
pdns	affected	Ubuntu:Pro:18.04:LTS	pdns	—
pdns	affected	Ubuntu:Pro:16.04:LTS	pdns	—
pdns-recursor	affected	Ubuntu:Pro:18.04:LTS	pdns-recursor	—
pdns-recursor	affected	Ubuntu:Pro:16.04:LTS	pdns-recursor	—

Upstream advisory

UBUNTU-CVE-2018-8789

USNEPSS <= 49%HIGH2018-11-29

CVEs:CVE-2018-8789

Affected products

Product	Status	Vendor	Package	Ecosystem
freerdp	affected	Ubuntu:16.04:LTS	freerdp	—
freerdp	affected	Ubuntu:18.04:LTS	freerdp	—
freerdp2	affected	Ubuntu:18.04:LTS	freerdp2	—

Upstream advisory

UBUNTU-CVE-2018-19274

USNEPSS <= 49%HIGH2018-11-17

CVEs:CVE-2018-19274

Affected products

Product	Status	Vendor	Package	Ecosystem
phpbb3	affected	Ubuntu:Pro:14.04:LTS	phpbb3	—
phpbb3	affected	Ubuntu:16.04:LTS	phpbb3	—

Upstream advisory

USN-3827-1

USNEPSS <= 49%HIGH2018-11-27

samba vulnerabilities

CVEs:CVE-2018-14629 CVE-2018-16841 CVE-2018-16851

Affected products

Product	Status	Vendor	Package	Ecosystem
samba	affected	Ubuntu:14.04:LTS	samba	—
samba	affected	Ubuntu:16.04:LTS	samba	—
samba	affected	Ubuntu:18.04:LTS	samba	—

Upstream advisory

UBUNTU-CVE-2018-14629

USNEPSS <= 49%MEDIUM2018-11-27

CVEs:CVE-2018-14629

Affected products

Product	Status	Vendor	Package	Ecosystem
samba	affected	Ubuntu:14.04:LTS	samba	—
samba	affected	Ubuntu:18.04:LTS	samba	—
samba	affected	Ubuntu:16.04:LTS	samba	—

Upstream advisory

USN-3818-1

USNEPSS <= 49%CRITICAL2018-11-14

postgresql-10 vulnerability

CVEs:CVE-2018-16850

Affected products

Product	Status	Vendor	Package	Ecosystem
postgresql-10	affected	Ubuntu:18.04:LTS	postgresql-10	—

Upstream advisory

UBUNTU-CVE-2018-16850

USNEPSS <= 49%CRITICAL2018-11-08

CVEs:CVE-2018-16850

Affected products

Product	Status	Vendor	Package	Ecosystem
postgresql-10	affected	Ubuntu:18.04:LTS	postgresql-10	—

Upstream advisory

UBUNTU-CVE-2018-14644

USNEPSS <= 49%MEDIUM2018-11-06

CVEs:CVE-2018-14644

Affected products

Product	Status	Vendor	Package	Ecosystem
pdns-recursor	affected	Ubuntu:Pro:18.04:LTS	pdns-recursor	—
pdns-recursor	affected	Ubuntu:Pro:16.04:LTS	pdns-recursor	—

Upstream advisory

UBUNTU-CVE-2018-16841

USNEPSS <= 49%MEDIUM2018-11-27

CVEs:CVE-2018-16841

Affected products

Product	Status	Vendor	Package	Ecosystem
samba	affected	Ubuntu:18.04:LTS	samba	—
samba	affected	Ubuntu:14.04:LTS	samba	—
samba	affected	Ubuntu:16.04:LTS	samba	—

Upstream advisory

UBUNTU-CVE-2018-19623

USNEPSS <= 49%HIGH2018-11-29

CVEs:CVE-2018-19623

Affected products

Product	Status	Vendor	Package	Ecosystem
wireshark	affected	Ubuntu:14.04:LTS	wireshark	—
wireshark	affected	Ubuntu:18.04:LTS	wireshark	—
wireshark	affected	Ubuntu:16.04:LTS	wireshark	—

Upstream advisory

UBUNTU-CVE-2018-12123

USNEPSS <= 49%MEDIUM2018-11-28

CVEs:CVE-2018-12123

Affected products

Product	Status	Vendor	Package	Ecosystem
nodejs	affected	Ubuntu:Pro:18.04:LTS	nodejs	—
nodejs	affected	Ubuntu:Pro:14.04:LTS	nodejs	—
nodejs	affected	Ubuntu:Pro:16.04:LTS	nodejs	—

Upstream advisory

UBUNTU-CVE-2018-19115

USNEPSS <= 49%CRITICAL2018-11-08

CVEs:CVE-2018-19115

Affected products

Product	Status	Vendor	Package	Ecosystem
keepalived	affected	Ubuntu:18.04:LTS	keepalived	—
keepalived	affected	Ubuntu:16.04:LTS	keepalived	—
keepalived	affected	Ubuntu:Pro:14.04:LTS	keepalived	—

Upstream advisory

UBUNTU-CVE-2018-19210

USNEPSS <= 49%MEDIUM2018-11-12

CVEs:CVE-2018-19210

Affected products

Product	Status	Vendor	Package	Ecosystem
tiff	affected	Ubuntu:18.04:LTS	tiff	—
tiff	affected	Ubuntu:16.04:LTS	tiff	—
tiff	affected	Ubuntu:14.04:LTS	tiff	—

Upstream advisory

UBUNTU-CVE-2018-3977

USNEPSS <= 49%HIGH2018-11-01

CVEs:CVE-2018-3977

Affected products

Product	Status	Vendor	Package	Ecosystem
libsdl2-image	affected	Ubuntu:Pro:14.04:LTS	libsdl2-image	—
sdl-image1.2	affected	Ubuntu:Pro:14.04:LTS	sdl-image1.2	—
sdl-image1.2	affected	Ubuntu:16.04:LTS	sdl-image1.2	—
sdl-image1.2	affected	Ubuntu:18.04:LTS	sdl-image1.2	—

Upstream advisory

UBUNTU-CVE-2014-10077

USNEPSS <= 49%HIGH2018-11-06

CVEs:CVE-2014-10077

Affected products

Product	Status	Vendor	Package	Ecosystem
ruby-i18n	affected	Ubuntu:16.04:LTS	ruby-i18n	—
ruby-i18n	affected	Ubuntu:Pro:14.04:LTS	ruby-i18n	—
ruby-i18n	affected	Ubuntu:18.04:LTS	ruby-i18n	—

Upstream advisory

UBUNTU-CVE-2018-16851

USNEPSS <= 49%MEDIUM2018-11-27

CVEs:CVE-2018-16851

Affected products

Product	Status	Vendor	Package	Ecosystem
samba	affected	Ubuntu:18.04:LTS	samba	—
samba	affected	Ubuntu:14.04:LTS	samba	—
samba	affected	Ubuntu:16.04:LTS	samba	—

Upstream advisory

UBUNTU-CVE-2018-19622

USNEPSS <= 49%HIGH2018-11-29

CVEs:CVE-2018-19622

Affected products

Product	Status	Vendor	Package	Ecosystem
wireshark	affected	Ubuntu:14.04:LTS	wireshark	—
wireshark	affected	Ubuntu:18.04:LTS	wireshark	—
wireshark	affected	Ubuntu:16.04:LTS	wireshark	—

Upstream advisory

UBUNTU-CVE-2018-19628

USNEPSS <= 49%HIGH2018-11-29

CVEs:CVE-2018-19628

Affected products

Product	Status	Vendor	Package	Ecosystem
wireshark	affected	Ubuntu:14.04:LTS	wireshark	—
wireshark	affected	Ubuntu:18.04:LTS	wireshark	—
wireshark	affected	Ubuntu:16.04:LTS	wireshark	—

Upstream advisory

USN-3814-2

USNEPSS <= 49%HIGH2018-11-13

clamav vulnerabilities

CVEs:CVE-2018-18584 CVE-2018-18585

Affected products

Product	Status	Vendor	Package	Ecosystem
clamav	affected	Ubuntu:14.04:LTS	clamav	—

Upstream advisory

USN-3814-1

USNEPSS <= 49%HIGH2018-11-12

libmspack vulnerabilities

CVEs:CVE-2018-18584 CVE-2018-18585

Affected products

Product	Status	Vendor	Package	Ecosystem
libmspack	affected	Ubuntu:16.04:LTS	libmspack	—
libmspack	affected	Ubuntu:18.04:LTS	libmspack	—

Upstream advisory

UBUNTU-CVE-2018-18926

USNEPSS <= 49%CRITICAL2018-11-04

CVEs:CVE-2018-18926

Affected products

Product	Status	Vendor	Package	Ecosystem
golang-code.gitea-git	affected	Ubuntu:22.04:LTS	golang-code.gitea-git	—
golang-code.gitea-git	affected	Ubuntu:20.04:LTS	golang-code.gitea-git	—
golang-code.gitea-git	affected	Ubuntu:18.04:LTS	golang-code.gitea-git	—

Upstream advisory

UBUNTU-CVE-2018-19476

USNEPSS <= 49%HIGH2018-11-23

CVEs:CVE-2018-19476

Affected products

Product	Status	Vendor	Package	Ecosystem
ghostscript	affected	Ubuntu:16.04:LTS	ghostscript	—
ghostscript	affected	Ubuntu:14.04:LTS	ghostscript	—
ghostscript	affected	Ubuntu:18.04:LTS	ghostscript	—

Upstream advisory

UBUNTU-CVE-2018-19477

USNEPSS <= 49%HIGH2018-11-23

CVEs:CVE-2018-19477

Affected products

Product	Status	Vendor	Package	Ecosystem
ghostscript	affected	Ubuntu:18.04:LTS	ghostscript	—
ghostscript	affected	Ubuntu:16.04:LTS	ghostscript	—
ghostscript	affected	Ubuntu:14.04:LTS	ghostscript	—

Upstream advisory

UBUNTU-CVE-2018-19432

USNEPSS <= 49%MEDIUM2018-11-22

CVEs:CVE-2018-19432

Affected products

Product	Status	Vendor	Package	Ecosystem
libsndfile	affected	Ubuntu:Pro:14.04:LTS	libsndfile	—
libsndfile	affected	Ubuntu:18.04:LTS	libsndfile	—
libsndfile	affected	Ubuntu:16.04:LTS	libsndfile	—

Upstream advisory

USN-3821-2

USNEPSS <= 49%HIGH2018-11-14

linux-lts-xenial, linux-aws vulnerabilities

CVEs:CVE-2018-10880 CVE-2018-13053 CVE-2018-13096 CVE-2018-14609 CVE-2018-14617 CVE-2018-17972 CVE-2018-18021

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—

Upstream advisory

USN-3821-1

USNEPSS <= 49%HIGH2018-11-14

linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities

CVEs:CVE-2018-10880 CVE-2018-13053 CVE-2018-13096 CVE-2018-14609 CVE-2018-14617 CVE-2018-17972 CVE-2018-18021

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2018-19655

USNEPSS <= 49%HIGH2018-11-29

CVEs:CVE-2018-19655

Affected products

Product	Status	Vendor	Package	Ecosystem
dcraw	affected	Ubuntu:20.04:LTS	dcraw	—
dcraw	affected	Ubuntu:16.04:LTS	dcraw	—
dcraw	affected	Ubuntu:22.04:LTS	dcraw	—
dcraw	affected	Ubuntu:18.04:LTS	dcraw	—
ufraw	affected	Ubuntu:16.04:LTS	ufraw	—
ufraw	affected	Ubuntu:18.04:LTS	ufraw	—

Upstream advisory

UBUNTU-CVE-2018-19541

USNEPSS <= 49%HIGH2018-11-26

CVEs:CVE-2018-19541

Affected products

Product	Status	Vendor	Package	Ecosystem
jasper	affected	Ubuntu:16.04:LTS	jasper	—

Upstream advisory

UBUNTU-CVE-2018-14626

USNEPSS <= 49%HIGH2018-11-06

CVEs:CVE-2018-14626

Affected products

Product	Status	Vendor	Package	Ecosystem
pdns	affected	Ubuntu:Pro:18.04:LTS	pdns	—
pdns-recursor	affected	Ubuntu:Pro:18.04:LTS	pdns-recursor	—
pdns-recursor	affected	Ubuntu:Pro:16.04:LTS	pdns-recursor	—

Upstream advisory

UBUNTU-CVE-2018-14663

USNEPSS <= 49%MEDIUM2018-11-26

CVEs:CVE-2018-14663

Affected products

Product	Status	Vendor	Package	Ecosystem
dnsdist	affected	Ubuntu:16.04:LTS	dnsdist	—
dnsdist	affected	Ubuntu:Pro:18.04:LTS	dnsdist	—

Upstream advisory

UBUNTU-CVE-2018-17187

USNEPSS <= 49%HIGH2018-11-13

CVEs:CVE-2018-17187

Affected products

Product	Status	Vendor	Package	Ecosystem
qpid-proton	affected	Ubuntu:16.04:LTS	qpid-proton	—
qpid-proton	affected	Ubuntu:18.04:LTS	qpid-proton	—

Upstream advisory

UBUNTU-CVE-2018-14660

USNEPSS <= 49%MEDIUM2018-11-01

CVEs:CVE-2018-14660

Affected products

Product	Status	Vendor	Package	Ecosystem
glusterfs	affected	Ubuntu:Pro:18.04:LTS	glusterfs	—

Upstream advisory

UBUNTU-CVE-2018-19200

USNEPSS <= 49%HIGH2018-11-12

CVEs:CVE-2018-19200

Affected products

Product	Status	Vendor	Package	Ecosystem
uriparser	affected	Ubuntu:Pro:14.04:LTS	uriparser	—
uriparser	affected	Ubuntu:18.04:LTS	uriparser	—

Upstream advisory

UBUNTU-CVE-2018-19149

USNEPSS <= 49%MEDIUM2018-11-10

CVEs:CVE-2018-19149

Affected products

Product	Status	Vendor	Package	Ecosystem
poppler	affected	Ubuntu:14.04:LTS	poppler	—
poppler	affected	Ubuntu:16.04:LTS	poppler	—

Upstream advisory

UBUNTU-CVE-2018-19045

USNEPSS <= 49%HIGH2018-11-08

CVEs:CVE-2018-19045

Affected products

Product	Status	Vendor	Package	Ecosystem
keepalived	affected	Ubuntu:18.04:LTS	keepalived	—

Upstream advisory

UBUNTU-CVE-2018-19198

USNEPSS <= 49%CRITICAL2018-11-12

CVEs:CVE-2018-19198

Affected products

Product	Status	Vendor	Package	Ecosystem
uriparser	affected	Ubuntu:Pro:14.04:LTS	uriparser	—
uriparser	affected	Ubuntu:18.04:LTS	uriparser	—

Upstream advisory

UBUNTU-CVE-2018-19199

USNEPSS <= 49%CRITICAL2018-11-12

CVEs:CVE-2018-19199

Affected products

Product	Status	Vendor	Package	Ecosystem
uriparser	affected	Ubuntu:Pro:14.04:LTS	uriparser	—
uriparser	affected	Ubuntu:18.04:LTS	uriparser	—

Upstream advisory

UBUNTU-CVE-2018-19662

USNEPSS <= 49%HIGH2018-11-29

CVEs:CVE-2018-19662

Affected products

Product	Status	Vendor	Package	Ecosystem
libsndfile	affected	Ubuntu:18.04:LTS	libsndfile	—
libsndfile	affected	Ubuntu:16.04:LTS	libsndfile	—
libsndfile	affected	Ubuntu:Pro:14.04:LTS	libsndfile	—

Upstream advisory

UBUNTU-CVE-2018-19540

USNEPSS <= 49%HIGH2018-11-26

CVEs:CVE-2018-19540

Affected products

Product	Status	Vendor	Package	Ecosystem
jasper	affected	Ubuntu:16.04:LTS	jasper	—

Upstream advisory

UBUNTU-CVE-2018-19296

USNEPSS <= 49%HIGH2018-11-16

CVEs:CVE-2018-19296

Affected products

Product	Status	Vendor	Package	Ecosystem
libphp-phpmailer	affected	Ubuntu:18.04:LTS	libphp-phpmailer	—
libphp-phpmailer	affected	Ubuntu:Pro:16.04:LTS	libphp-phpmailer	—

Upstream advisory

UBUNTU-CVE-2018-19661

USNEPSS <= 49%MEDIUM2018-11-29

CVEs:CVE-2018-19661

Affected products

Product	Status	Vendor	Package	Ecosystem
libsndfile	affected	Ubuntu:16.04:LTS	libsndfile	—
libsndfile	affected	Ubuntu:Pro:14.04:LTS	libsndfile	—
libsndfile	affected	Ubuntu:18.04:LTS	libsndfile	—

Upstream advisory

UBUNTU-CVE-2018-19535

USNEPSS <= 49%MEDIUM2018-11-25

CVEs:CVE-2018-19535

Affected products

Product	Status	Vendor	Package	Ecosystem
exiv2	affected	Ubuntu:18.04:LTS	exiv2	—
exiv2	affected	Ubuntu:16.04:LTS	exiv2	—

Upstream advisory

UBUNTU-CVE-2018-21000

USNEPSS <= 49%CRITICAL2018-11-27

CVEs:CVE-2018-21000

Affected products

Product	Status	Vendor	Package	Ecosystem
rust-safe-transmute	affected	Ubuntu:20.04:LTS	rust-safe-transmute	—
rust-safe-transmute	affected	Ubuntu:22.04:LTS	rust-safe-transmute	—
rust-safe-transmute	affected	Ubuntu:25.10	rust-safe-transmute	—
rust-safe-transmute	affected	Ubuntu:24.04:LTS	rust-safe-transmute	—

Upstream advisory

UBUNTU-CVE-2016-2120

USNEPSS <= 49%HIGH2018-11-01

CVEs:CVE-2016-2120

Affected products

Product	Status	Vendor	Package	Ecosystem
pdns	affected	Ubuntu:Pro:16.04:LTS	pdns	—

Upstream advisory

UBUNTU-CVE-2018-18897

USNEPSS <= 49%MEDIUM2018-11-02

CVEs:CVE-2018-18897

Affected products

Product	Status	Vendor	Package	Ecosystem
poppler	affected	Ubuntu:18.04:LTS	poppler	—
poppler	affected	Ubuntu:16.04:LTS	poppler	—

Upstream advisory

UBUNTU-CVE-2018-19539

USNEPSS <= 49%MEDIUM2018-11-26

CVEs:CVE-2018-19539

Affected products

Product	Status	Vendor	Package	Ecosystem
jasper	affected	Ubuntu:16.04:LTS	jasper	—

Upstream advisory

UBUNTU-CVE-2018-19542

USNEPSS <= 49%MEDIUM2018-11-26

CVEs:CVE-2018-19542

Affected products

Product	Status	Vendor	Package	Ecosystem
jasper	affected	Ubuntu:16.04:LTS	jasper	—

Upstream advisory

UBUNTU-CVE-2018-17960

USNEPSS <= 49%MEDIUM2018-11-14

CVEs:CVE-2018-17960

Affected products

Product	Status	Vendor	Package	Ecosystem
ckeditor	affected	Ubuntu:Pro:16.04:LTS	ckeditor	—
ckeditor	affected	Ubuntu:Pro:18.04:LTS	ckeditor	—

Upstream advisory

UBUNTU-CVE-2018-19108

USNEPSS <= 49%MEDIUM2018-11-08

CVEs:CVE-2018-19108

Affected products

Product	Status	Vendor	Package	Ecosystem
exiv2	affected	Ubuntu:16.04:LTS	exiv2	—
exiv2	affected	Ubuntu:18.04:LTS	exiv2	—

Upstream advisory

USN-3810-1

USNEPSS <= 49%CRITICAL2018-11-06

ppp vulnerability

CVEs:CVE-2018-11574

Affected products

Product	Status	Vendor	Package	Ecosystem
ppp	affected	Ubuntu:14.04:LTS	ppp	—
ppp	affected	Ubuntu:16.04:LTS	ppp	—
ppp	affected	Ubuntu:18.04:LTS	ppp	—

Upstream advisory

UBUNTU-CVE-2018-19058

USNEPSS <= 49%MEDIUM2018-11-07

CVEs:CVE-2018-19058

Affected products

Product	Status	Vendor	Package	Ecosystem
poppler	affected	Ubuntu:14.04:LTS	poppler	—
poppler	affected	Ubuntu:18.04:LTS	poppler	—
poppler	affected	Ubuntu:16.04:LTS	poppler	—

Upstream advisory

UBUNTU-CVE-2018-19059

USNEPSS <= 49%MEDIUM2018-11-07

CVEs:CVE-2018-19059

Affected products

Product	Status	Vendor	Package	Ecosystem
poppler	affected	Ubuntu:14.04:LTS	poppler	—
poppler	affected	Ubuntu:18.04:LTS	poppler	—
poppler	affected	Ubuntu:16.04:LTS	poppler	—

Upstream advisory

UBUNTU-CVE-2018-19107

USNEPSS <= 49%MEDIUM2018-11-08

CVEs:CVE-2018-19107

Affected products

Product	Status	Vendor	Package	Ecosystem
exiv2	affected	Ubuntu:18.04:LTS	exiv2	—
exiv2	affected	Ubuntu:16.04:LTS	exiv2	—

Upstream advisory

UBUNTU-CVE-2018-19490

USNEPSS <= 49%HIGH2018-11-23

CVEs:CVE-2018-19490

Affected products

Product	Status	Vendor	Package	Ecosystem
gnuplot	affected	Ubuntu:Pro:18.04:LTS	gnuplot	—
gnuplot	affected	Ubuntu:16.04:LTS	gnuplot	—
gnuplot	affected	Ubuntu:Pro:14.04:LTS	gnuplot	—
gnuplot5	affected	Ubuntu:16.04:LTS	gnuplot5	—

Upstream advisory

UBUNTU-CVE-2018-19492

USNEPSS <= 49%HIGH2018-11-23

CVEs:CVE-2018-19492

Affected products

Product	Status	Vendor	Package	Ecosystem
gnuplot	affected	Ubuntu:Pro:18.04:LTS	gnuplot	—
gnuplot	affected	Ubuntu:16.04:LTS	gnuplot	—
gnuplot	affected	Ubuntu:Pro:14.04:LTS	gnuplot	—
gnuplot5	affected	Ubuntu:16.04:LTS	gnuplot5	—

Upstream advisory

UBUNTU-CVE-2018-19491

USNEPSS <= 49%HIGH2018-11-23

CVEs:CVE-2018-19491

Affected products

Product	Status	Vendor	Package	Ecosystem
gnuplot	affected	Ubuntu:16.04:LTS	gnuplot	—
gnuplot	affected	Ubuntu:Pro:14.04:LTS	gnuplot	—
gnuplot	affected	Ubuntu:Pro:18.04:LTS	gnuplot	—
gnuplot5	affected	Ubuntu:16.04:LTS	gnuplot5	—

Upstream advisory

UBUNTU-CVE-2018-19060

USNEPSS <= 49%MEDIUM2018-11-07

CVEs:CVE-2018-19060

Affected products

Product	Status	Vendor	Package	Ecosystem
poppler	affected	Ubuntu:14.04:LTS	poppler	—
poppler	affected	Ubuntu:18.04:LTS	poppler	—
poppler	affected	Ubuntu:16.04:LTS	poppler	—

Upstream advisory

UBUNTU-CVE-2018-19758

USNEPSS <= 49%MEDIUM2018-11-29

CVEs:CVE-2018-19758

Affected products

Product	Status	Vendor	Package	Ecosystem
libsndfile	affected	Ubuntu:16.04:LTS	libsndfile	—
libsndfile	affected	Ubuntu:Pro:14.04:LTS	libsndfile	—
libsndfile	affected	Ubuntu:18.04:LTS	libsndfile	—

Upstream advisory

UBUNTU-CVE-2018-19532

USNEPSS <= 49%HIGH2018-11-26

CVEs:CVE-2018-19532

Affected products

Product	Status	Vendor	Package	Ecosystem
libpodofo	affected	Ubuntu:Pro:18.04:LTS	libpodofo	—
libpodofo	affected	Ubuntu:Pro:16.04:LTS	libpodofo	—
libpodofo	affected	Ubuntu:Pro:14.04:LTS	libpodofo	—

Upstream advisory

UBUNTU-CVE-2018-19139

USNEPSS <= 49%MEDIUM2018-11-09

CVEs:CVE-2018-19139

Affected products

Product	Status	Vendor	Package	Ecosystem
jasper	affected	Ubuntu:16.04:LTS	jasper	—

Upstream advisory

UBUNTU-CVE-2018-19543

USNEPSS <= 49%HIGH2018-11-26

CVEs:CVE-2018-19543

Affected products

Product	Status	Vendor	Package	Ecosystem
jasper	affected	Ubuntu:16.04:LTS	jasper	—

Upstream advisory

UBUNTU-CVE-2018-19105

USNEPSS <= 49%HIGH2018-11-08

CVEs:CVE-2018-19105

Affected products

Product	Status	Vendor	Package	Ecosystem
librecad	affected	Ubuntu:Pro:16.04:LTS	librecad	—
librecad	affected	Ubuntu:18.04:LTS	librecad	—
librecad	affected	Ubuntu:Pro:18.04:LTS	librecad	—

Upstream advisory

UBUNTU-CVE-2018-19497

USNEPSS <= 49%MEDIUM2018-11-29

CVEs:CVE-2018-19497

Affected products

Product	Status	Vendor	Package	Ecosystem
sleuthkit	affected	Ubuntu:18.04:LTS	sleuthkit	—

Upstream advisory

UBUNTU-CVE-2018-16849

USNEPSS <= 49%HIGH2018-11-02

CVEs:CVE-2018-16849

Affected products

Product	Status	Vendor	Package	Ecosystem
mistral	affected	Ubuntu:Pro:16.04:LTS	mistral	—
mistral	affected	Ubuntu:Pro:18.04:LTS	mistral	—

Upstream advisory

UBUNTU-CVE-2018-19502

USNEPSS <= 49%HIGH2018-11-23

CVEs:CVE-2018-19502

Affected products

Product	Status	Vendor	Package	Ecosystem
faad2	affected	Ubuntu:Pro:14.04:LTS	faad2	—
faad2	affected	Ubuntu:Pro:18.04:LTS	faad2	—
faad2	affected	Ubuntu:Pro:16.04:LTS	faad2	—

Upstream advisory

UBUNTU-CVE-2018-19351

USNEPSS <= 49%MEDIUM2018-11-18

CVEs:CVE-2018-19351

Affected products

Product	Status	Vendor	Package	Ecosystem
jupyter-notebook	affected	Ubuntu:18.04:LTS	jupyter-notebook	—

Upstream advisory

UBUNTU-CVE-2018-19208

USNEPSS <= 49%MEDIUM2018-11-12

CVEs:CVE-2018-19208

Affected products

Product	Status	Vendor	Package	Ecosystem
libwpd	affected	Ubuntu:18.04:LTS	libwpd	—
libwpd	affected	Ubuntu:16.04:LTS	libwpd	—

Upstream advisory

UBUNTU-CVE-2018-19120

USNEPSS <= 49%HIGH2018-11-29

CVEs:CVE-2018-19120

Affected products

Product	Status	Vendor	Package	Ecosystem
kde-runtime	affected	Ubuntu:18.04:LTS	kde-runtime	—
kde-runtime	affected	Ubuntu:16.04:LTS	kde-runtime	—
kio-extras	affected	Ubuntu:18.04:LTS	kio-extras	—
kio-extras	affected	Ubuntu:24.04:LTS	kio-extras	—
kio-extras	affected	Ubuntu:16.04:LTS	kio-extras	—
kio-extras	affected	Ubuntu:25.10	kio-extras	—
kio-extras	affected	Ubuntu:22.04:LTS	kio-extras	—
kio-extras	affected	Ubuntu:20.04:LTS	kio-extras	—

Upstream advisory

UBUNTU-CVE-2018-19503

USNEPSS <= 49%HIGH2018-11-23

CVEs:CVE-2018-19503

Affected products

Product	Status	Vendor	Package	Ecosystem
faad2	affected	Ubuntu:Pro:14.04:LTS	faad2	—
faad2	affected	Ubuntu:Pro:18.04:LTS	faad2	—
faad2	affected	Ubuntu:Pro:16.04:LTS	faad2	—

Upstream advisory

UBUNTU-CVE-2018-19624

USNEPSS <= 49%MEDIUM2018-11-29

CVEs:CVE-2018-19624

Affected products

Product	Status	Vendor	Package	Ecosystem
wireshark	affected	Ubuntu:14.04:LTS	wireshark	—
wireshark	affected	Ubuntu:18.04:LTS	wireshark	—
wireshark	affected	Ubuntu:16.04:LTS	wireshark	—

Upstream advisory

UBUNTU-CVE-2018-19626

USNEPSS <= 49%MEDIUM2018-11-29

CVEs:CVE-2018-19626

Affected products

Product	Status	Vendor	Package	Ecosystem
wireshark	affected	Ubuntu:14.04:LTS	wireshark	—
wireshark	affected	Ubuntu:18.04:LTS	wireshark	—
wireshark	affected	Ubuntu:16.04:LTS	wireshark	—

Upstream advisory

UBUNTU-CVE-2018-9536

USNEPSS <= 49%HIGH2018-11-06

CVEs:CVE-2018-9536

Affected products

Product	Status	Vendor	Package	Ecosystem
fdkaac	affected	Ubuntu:Pro:16.04:LTS	fdkaac	—
fdkaac	affected	Ubuntu:Pro:18.04:LTS	fdkaac	—
fdkaac	affected	Ubuntu:25.10	fdkaac	—
fdkaac	affected	Ubuntu:Pro:20.04:LTS	fdkaac	—
fdkaac	affected	Ubuntu:Pro:22.04:LTS	fdkaac	—
fdkaac	affected	Ubuntu:Pro:24.04:LTS	fdkaac	—

Upstream advisory

UBUNTU-CVE-2018-19625

USNEPSS <= 49%MEDIUM2018-11-29

CVEs:CVE-2018-19625

Affected products

Product	Status	Vendor	Package	Ecosystem
wireshark	affected	Ubuntu:14.04:LTS	wireshark	—
wireshark	affected	Ubuntu:18.04:LTS	wireshark	—
wireshark	affected	Ubuntu:16.04:LTS	wireshark	—

Upstream advisory

UBUNTU-CVE-2018-19504

USNEPSS <= 49%HIGH2018-11-23

CVEs:CVE-2018-19504

Affected products

Product	Status	Vendor	Package	Ecosystem
faad2	affected	Ubuntu:Pro:18.04:LTS	faad2	—
faad2	affected	Ubuntu:Pro:14.04:LTS	faad2	—
faad2	affected	Ubuntu:Pro:16.04:LTS	faad2	—

Upstream advisory

UBUNTU-CVE-2018-19214

USNEPSS <= 49%HIGH2018-11-12

CVEs:CVE-2018-19214

Affected products

Product	Status	Vendor	Package	Ecosystem
nasm	affected	Ubuntu:18.04:LTS	nasm	—
nasm	affected	Ubuntu:22.04:LTS	nasm	—
nasm	affected	Ubuntu:25.10	nasm	—
nasm	affected	Ubuntu:16.04:LTS	nasm	—
nasm	affected	Ubuntu:24.04:LTS	nasm	—
nasm	affected	Ubuntu:20.04:LTS	nasm	—

Upstream advisory

UBUNTU-CVE-2018-19216

USNEPSS <= 49%HIGH2018-11-12

CVEs:CVE-2018-19216

Affected products

Product	Status	Vendor	Package	Ecosystem
nasm	affected	Ubuntu:22.04:LTS	nasm	—
nasm	affected	Ubuntu:25.10	nasm	—
nasm	affected	Ubuntu:16.04:LTS	nasm	—
nasm	affected	Ubuntu:24.04:LTS	nasm	—
nasm	affected	Ubuntu:20.04:LTS	nasm	—

Upstream advisory

UBUNTU-CVE-2018-19215

USNEPSS <= 49%HIGH2018-11-12

CVEs:CVE-2018-19215

Affected products

Product	Status	Vendor	Package	Ecosystem
nasm	affected	Ubuntu:22.04:LTS	nasm	—
nasm	affected	Ubuntu:25.10	nasm	—
nasm	affected	Ubuntu:18.04:LTS	nasm	—
nasm	affected	Ubuntu:16.04:LTS	nasm	—
nasm	affected	Ubuntu:24.04:LTS	nasm	—
nasm	affected	Ubuntu:20.04:LTS	nasm	—

Upstream advisory

UBUNTU-CVE-2018-19218

USNEPSS <= 49%MEDIUM2018-11-12

CVEs:CVE-2018-19218

Affected products

Product	Status	Vendor	Package	Ecosystem
libsass	affected	Ubuntu:24.04:LTS	libsass	—
libsass	affected	Ubuntu:20.04:LTS	libsass	—
libsass	affected	Ubuntu:Pro:18.04:LTS	libsass	—
libsass	affected	Ubuntu:22.04:LTS	libsass	—
libsass	affected	Ubuntu:16.04:LTS	libsass	—

Upstream advisory

UBUNTU-CVE-2018-19217

USNEPSS <= 49%MEDIUM2018-11-12

CVEs:CVE-2018-19217

Affected products

Product	Status	Vendor	Package	Ecosystem
ncurses	affected	Ubuntu:Pro:16.04:LTS	ncurses	—
ncurses	affected	Ubuntu:Pro:14.04:LTS	ncurses	—

Upstream advisory

UBUNTU-CVE-2018-19777

USNEPSS <= 49%MEDIUM2018-11-30

CVEs:CVE-2018-19777

Affected products

Product	Status	Vendor	Package	Ecosystem
mupdf	affected	Ubuntu:Pro:18.04:LTS	mupdf	—
mupdf	affected	Ubuntu:Pro:16.04:LTS	mupdf	—

Upstream advisory

UBUNTU-CVE-2018-17478

USNEPSS <= 49%HIGH2018-11-12

CVEs:CVE-2018-17478

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2018-19443

USNEPSS <= 49%MEDIUM2018-11-22

CVEs:CVE-2018-19443

Affected products

Product	Status	Vendor	Package	Ecosystem
tryton-client	affected	Ubuntu:24.04:LTS	tryton-client	—
tryton-client	affected	Ubuntu:16.04:LTS	tryton-client	—
tryton-client	affected	Ubuntu:25.10	tryton-client	—
tryton-client	affected	Ubuntu:20.04:LTS	tryton-client	—
tryton-client	affected	Ubuntu:22.04:LTS	tryton-client	—
tryton-client	affected	Ubuntu:18.04:LTS	tryton-client	—

Upstream advisory

UBUNTU-CVE-2018-19565

USNEPSS <= 49%HIGH2018-11-26

CVEs:CVE-2018-19565

Affected products

Product	Status	Vendor	Package	Ecosystem
dcraw	affected	Ubuntu:24.04:LTS	dcraw	—
dcraw	affected	Ubuntu:22.04:LTS	dcraw	—
dcraw	affected	Ubuntu:20.04:LTS	dcraw	—
dcraw	affected	Ubuntu:18.04:LTS	dcraw	—
dcraw	affected	Ubuntu:25.10	dcraw	—
dcraw	affected	Ubuntu:16.04:LTS	dcraw	—

Upstream advisory

UBUNTU-CVE-2018-19566

USNEPSS <= 49%HIGH2018-11-26

CVEs:CVE-2018-19566

Affected products

Product	Status	Vendor	Package	Ecosystem
dcraw	affected	Ubuntu:24.04:LTS	dcraw	—
dcraw	affected	Ubuntu:22.04:LTS	dcraw	—
dcraw	affected	Ubuntu:20.04:LTS	dcraw	—
dcraw	affected	Ubuntu:18.04:LTS	dcraw	—
dcraw	affected	Ubuntu:25.10	dcraw	—
dcraw	affected	Ubuntu:16.04:LTS	dcraw	—

Upstream advisory

UBUNTU-CVE-2018-19760

USNEPSS <= 49%HIGH2018-11-30

CVEs:CVE-2018-19760

Affected products

Product	Status	Vendor	Package	Ecosystem
confuse	affected	Ubuntu:16.04:LTS	confuse	—
confuse	affected	Ubuntu:14.04:LTS	confuse	—
confuse	affected	Ubuntu:18.04:LTS	confuse	—

Upstream advisory

UBUNTU-CVE-2018-19128

USNEPSS <= 49%MEDIUM2018-11-09

CVEs:CVE-2018-19128

Affected products

Product	Status	Vendor	Package	Ecosystem
libav	affected	Ubuntu:Pro:14.04:LTS	libav	—

Upstream advisory

UBUNTU-CVE-2018-19219

USNEPSS <= 49%MEDIUM2018-11-12

CVEs:CVE-2018-19219

Affected products

Product	Status	Vendor	Package	Ecosystem
libsass	affected	Ubuntu:24.04:LTS	libsass	—
libsass	affected	Ubuntu:20.04:LTS	libsass	—
libsass	affected	Ubuntu:Pro:18.04:LTS	libsass	—
libsass	affected	Ubuntu:22.04:LTS	libsass	—
libsass	affected	Ubuntu:16.04:LTS	libsass	—

Upstream advisory

UBUNTU-CVE-2018-19755

USNEPSS <= 49%MEDIUM2018-11-30

CVEs:CVE-2018-19755

Affected products

Product	Status	Vendor	Package	Ecosystem
nasm	affected	Ubuntu:22.04:LTS	nasm	—
nasm	affected	Ubuntu:25.10	nasm	—
nasm	affected	Ubuntu:18.04:LTS	nasm	—
nasm	affected	Ubuntu:16.04:LTS	nasm	—
nasm	affected	Ubuntu:24.04:LTS	nasm	—
nasm	affected	Ubuntu:20.04:LTS	nasm	—

Upstream advisory

UBUNTU-CVE-2018-19567

USNEPSS <= 49%MEDIUM2018-11-26

CVEs:CVE-2018-19567

Affected products

Product	Status	Vendor	Package	Ecosystem
dcraw	affected	Ubuntu:24.04:LTS	dcraw	—
dcraw	affected	Ubuntu:22.04:LTS	dcraw	—
dcraw	affected	Ubuntu:20.04:LTS	dcraw	—
dcraw	affected	Ubuntu:18.04:LTS	dcraw	—
dcraw	affected	Ubuntu:25.10	dcraw	—
dcraw	affected	Ubuntu:16.04:LTS	dcraw	—

Upstream advisory

UBUNTU-CVE-2018-19568

USNEPSS <= 49%MEDIUM2018-11-26

CVEs:CVE-2018-19568

Affected products

Product	Status	Vendor	Package	Ecosystem
dcraw	affected	Ubuntu:24.04:LTS	dcraw	—
dcraw	affected	Ubuntu:22.04:LTS	dcraw	—
dcraw	affected	Ubuntu:20.04:LTS	dcraw	—
dcraw	affected	Ubuntu:18.04:LTS	dcraw	—
dcraw	affected	Ubuntu:25.10	dcraw	—
dcraw	affected	Ubuntu:16.04:LTS	dcraw	—

Upstream advisory

UBUNTU-CVE-2018-19129

USNEPSS <= 49%MEDIUM2018-11-09

CVEs:CVE-2018-19129

Affected products

Product	Status	Vendor	Package	Ecosystem
libav	affected	Ubuntu:Pro:14.04:LTS	libav	—

Upstream advisory

UBUNTU-CVE-2018-17479

USNEPSS <= 49%HIGH2018-11-20

CVEs:CVE-2018-17479

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2018-19757

USNEPSS <= 49%MEDIUM2018-11-30

CVEs:CVE-2018-19757

Affected products

Product	Status	Vendor	Package	Ecosystem
libsixel	affected	Ubuntu:18.04:LTS	libsixel	—
libsixel	affected	Ubuntu:16.04:LTS	libsixel	—

Upstream advisory

UBUNTU-CVE-2018-19143

USNEPSS <= 49%MEDIUM2018-11-11

CVEs:CVE-2018-19143

Affected products

Product	Status	Vendor	Package	Ecosystem
otrs2	affected	Ubuntu:18.04:LTS	otrs2	—
otrs2	affected	Ubuntu:16.04:LTS	otrs2	—

Upstream advisory

UBUNTU-CVE-2018-19212

USNEPSS <= 49%MEDIUM2018-11-12

CVEs:CVE-2018-19212

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	Ubuntu:16.04:LTS	android	—
oxide-qt	affected	Ubuntu:16.04:LTS	oxide-qt	—
sludge	affected	Ubuntu:24.04:LTS	sludge	—
sludge	affected	Ubuntu:22.04:LTS	sludge	—
sludge	affected	Ubuntu:16.04:LTS	sludge	—
sludge	affected	Ubuntu:18.04:LTS	sludge	—
sludge	affected	Ubuntu:25.10	sludge	—
sludge	affected	Ubuntu:20.04:LTS	sludge	—

Upstream advisory

UBUNTU-CVE-2018-19211

USNEPSS <= 49%MEDIUM2018-11-12

CVEs:CVE-2018-19211

Affected products

Product	Status	Vendor	Package	Ecosystem
ncurses	affected	Ubuntu:Pro:16.04:LTS	ncurses	—
ncurses	affected	Ubuntu:Pro:14.04:LTS	ncurses	—
ncurses	affected	Ubuntu:18.04:LTS	ncurses	—

Upstream advisory

UBUNTU-CVE-2018-19762

USNEPSS <= 49%HIGH2018-11-30

CVEs:CVE-2018-19762

Affected products

Product	Status	Vendor	Package	Ecosystem
libsixel	affected	Ubuntu:18.04:LTS	libsixel	—
libsixel	affected	Ubuntu:16.04:LTS	libsixel	—

Upstream advisory

UBUNTU-CVE-2018-19209

USNEPSS <= 49%MEDIUM2018-11-12

CVEs:CVE-2018-19209

Affected products

Product	Status	Vendor	Package	Ecosystem
nasm	affected	Ubuntu:22.04:LTS	nasm	—
nasm	affected	Ubuntu:25.10	nasm	—
nasm	affected	Ubuntu:18.04:LTS	nasm	—
nasm	affected	Ubuntu:16.04:LTS	nasm	—
nasm	affected	Ubuntu:24.04:LTS	nasm	—
nasm	affected	Ubuntu:20.04:LTS	nasm	—

Upstream advisory

UBUNTU-CVE-2018-19213

USNEPSS <= 49%MEDIUM2018-11-12

CVEs:CVE-2018-19213

Affected products

Product	Status	Vendor	Package	Ecosystem
nasm	affected	Ubuntu:22.04:LTS	nasm	—
nasm	affected	Ubuntu:25.10	nasm	—
nasm	affected	Ubuntu:18.04:LTS	nasm	—
nasm	affected	Ubuntu:16.04:LTS	nasm	—
nasm	affected	Ubuntu:24.04:LTS	nasm	—
nasm	affected	Ubuntu:20.04:LTS	nasm	—

Upstream advisory

UBUNTU-CVE-2018-19756

USNEPSS <= 49%MEDIUM2018-11-30

CVEs:CVE-2018-19756

Affected products

Product	Status	Vendor	Package	Ecosystem
libsixel	affected	Ubuntu:18.04:LTS	libsixel	—
libsixel	affected	Ubuntu:16.04:LTS	libsixel	—

Upstream advisory

UBUNTU-CVE-2018-19759

USNEPSS <= 49%MEDIUM2018-11-30

CVEs:CVE-2018-19759

Affected products

Product	Status	Vendor	Package	Ecosystem
libsixel	affected	Ubuntu:16.04:LTS	libsixel	—
libsixel	affected	Ubuntu:18.04:LTS	libsixel	—

Upstream advisory

UBUNTU-CVE-2018-19761

USNEPSS <= 49%MEDIUM2018-11-30

CVEs:CVE-2018-19761

Affected products

Product	Status	Vendor	Package	Ecosystem
libsixel	affected	Ubuntu:18.04:LTS	libsixel	—
libsixel	affected	Ubuntu:16.04:LTS	libsixel	—

Upstream advisory

UBUNTU-CVE-2018-19763

USNEPSS <= 49%MEDIUM2018-11-30

CVEs:CVE-2018-19763

Affected products

Product	Status	Vendor	Package	Ecosystem
libsixel	affected	Ubuntu:16.04:LTS	libsixel	—
libsixel	affected	Ubuntu:18.04:LTS	libsixel	—

Upstream advisory

UBUNTU-CVE-2018-19141

USNEPSS <= 49%MEDIUM2018-11-11

CVEs:CVE-2018-19141

Affected products

Product	Status	Vendor	Package	Ecosystem
otrs2	affected	Ubuntu:16.04:LTS	otrs2	—

Upstream advisory

UBUNTU-CVE-2018-19142

USNEPSS <= 49%MEDIUM2018-11-11

CVEs:CVE-2018-19142

Affected products

Product	Status	Vendor	Package	Ecosystem
otrs2	affected	Ubuntu:18.04:LTS	otrs2	—
otrs2	affected	Ubuntu:16.04:LTS	otrs2	—

Upstream advisory

UBUNTU-CVE-2018-16847

USNEPSS <= 49%HIGH2018-11-01

CVEs:CVE-2018-16847

Affected products

Product	Status	Vendor	Package	Ecosystem
qemu	affected	Ubuntu:18.04:LTS	qemu	—

Upstream advisory

UBUNTU-CVE-2018-16862

USNEPSS <= 49%MEDIUM2018-11-26

CVEs:CVE-2018-16862

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:18.04:LTS	linux	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-aws-fips	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-azure-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-gcp-fips	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2018-19364

USNEPSS <= 49%MEDIUM2018-11-20

CVEs:CVE-2018-19364

Affected products

Product	Status	Vendor	Package	Ecosystem
qemu	affected	Ubuntu:16.04:LTS	qemu	—
qemu	affected	Ubuntu:18.04:LTS	qemu	—
qemu	affected	Ubuntu:14.04:LTS	qemu	—

Upstream advisory

UBUNTU-CVE-2018-18954

USNEPSS <= 49%MEDIUM2018-11-15

CVEs:CVE-2018-18954

Affected products

Product	Status	Vendor	Package	Ecosystem
qemu	affected	Ubuntu:18.04:LTS	qemu	—

Upstream advisory

UBUNTU-CVE-2018-19044

USNEPSS <= 49%MEDIUM2018-11-08

CVEs:CVE-2018-19044

Affected products

Product	Status	Vendor	Package	Ecosystem
keepalived	affected	Ubuntu:18.04:LTS	keepalived	—

Upstream advisory

UBUNTU-CVE-2018-19407

USNEPSS <= 49%MEDIUM2018-11-20

CVEs:CVE-2018-19407

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:18.04:LTS	linux	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:14.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp-edge	affected	Ubuntu:18.04:LTS	linux-gcp-edge	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2018-18883

USNEPSS <= 49%HIGH2018-11-01

CVEs:CVE-2018-18883

Affected products

Product	Status	Vendor	Package	Ecosystem
xen	affected	Ubuntu:18.04:LTS	xen	—

Upstream advisory

UBUNTU-CVE-2018-19489

USNEPSS <= 49%MEDIUM2018-11-25

CVEs:CVE-2018-19489

Affected products

Product	Status	Vendor	Package	Ecosystem
qemu	affected	Ubuntu:16.04:LTS	qemu	—
qemu	affected	Ubuntu:18.04:LTS	qemu	—
qemu	affected	Ubuntu:14.04:LTS	qemu	—

Upstream advisory

UBUNTU-CVE-2018-6260

USNEPSS <= 49%MEDIUM2018-11-13

CVEs:CVE-2018-6260

Affected products

Product	Status	Vendor	Package	Ecosystem
nvidia-graphics-drivers-304	affected	Ubuntu:16.04:LTS	nvidia-graphics-drivers-304	—
nvidia-graphics-drivers-340	affected	Ubuntu:16.04:LTS	nvidia-graphics-drivers-340	—
nvidia-graphics-drivers-340	affected	Ubuntu:18.04:LTS	nvidia-graphics-drivers-340	—
nvidia-graphics-drivers-384	affected	Ubuntu:16.04:LTS	nvidia-graphics-drivers-384	—
nvidia-graphics-drivers-390	affected	Ubuntu:18.04:LTS	nvidia-graphics-drivers-390	—

Upstream advisory

UBUNTU-CVE-2018-19046

USNEPSS <= 49%MEDIUM2018-11-08

CVEs:CVE-2018-19046

Affected products

Product	Status	Vendor	Package	Ecosystem
keepalived	affected	Ubuntu:18.04:LTS	keepalived	—

Upstream advisory

UBUNTU-CVE-2018-9543

USNEPSS <= 49%MEDIUM2018-11-06

CVEs:CVE-2018-9543

Affected products

Product	Status	Vendor	Package	Ecosystem
f2fs-tools	affected	Ubuntu:18.04:LTS	f2fs-tools	—
f2fs-tools	affected	Ubuntu:22.04:LTS	f2fs-tools	—
f2fs-tools	affected	Ubuntu:25.10	f2fs-tools	—
f2fs-tools	affected	Ubuntu:24.04:LTS	f2fs-tools	—
f2fs-tools	affected	Ubuntu:20.04:LTS	f2fs-tools	—
f2fs-tools	affected	Ubuntu:16.04:LTS	f2fs-tools	—

Upstream advisory

USN-3833-1

USNAll remaining2018-11-30

linux-aws vulnerabilities

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—

Upstream advisory

USN-3795-3

USNAll remainingCRITICAL2018-11-29

libssh regression

Affected products

Product	Status	Vendor	Package	Ecosystem
libssh	affected	Ubuntu:18.04:LTS	libssh	—
libssh	affected	Ubuntu:16.04:LTS	libssh	—
libssh	affected	Ubuntu:14.04:LTS	libssh	—

Upstream advisory

USN-3830-1

USNAll remaining2018-11-28

openjdk-8, openjdk-lts regression

Affected products

Product	Status	Vendor	Package	Ecosystem
openjdk-8	affected	Ubuntu:16.04:LTS	openjdk-8	—
openjdk-lts	affected	Ubuntu:18.04:LTS	openjdk-lts	—

Upstream advisory

USN-3816-3

USNAll remainingNONE2018-11-27

systemd regression

Affected products

Product	Status	Vendor	Package	Ecosystem
systemd	affected	Ubuntu	—	—
systemd	affected	Ubuntu:16.04:LTS	systemd	—

Upstream advisory

USN-3829-1

USNAll remaining2018-11-27

git vulnerabilities

Affected products

Product	Status	Vendor	Package	Ecosystem
git	affected	Ubuntu:18.04:LTS	git	—
git	affected	Ubuntu:14.04:LTS	git	—
git	affected	Ubuntu:16.04:LTS	git	—

Upstream advisory

USN-3801-2

USNAll remainingHIGH2018-11-23

firefox regressions

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:14.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—

Upstream advisory

UBUNTU-CVE-2008-7320

USNAll remainingMEDIUM2018-11-18

Affected products

Product	Status	Vendor	Package	Ecosystem
seahorse	affected	Ubuntu:22.04:LTS	seahorse	—
seahorse	affected	Ubuntu:Pro:18.04:LTS	seahorse	—
seahorse	affected	Ubuntu:24.04:LTS	seahorse	—
seahorse	affected	Ubuntu:Pro:16.04:LTS	seahorse	—
seahorse	affected	Ubuntu:20.04:LTS	seahorse	—

Upstream advisory

UBUNTU-CVE-2018-19358

USNAll remainingHIGH2018-11-18

Affected products

Product	Status	Vendor	Package	Ecosystem
gnome-keyring	affected	Ubuntu:22.04:LTS	gnome-keyring	—
gnome-keyring	affected	Ubuntu:Pro:18.04:LTS	gnome-keyring	—
gnome-keyring	affected	Ubuntu:24.04:LTS	gnome-keyring	—
gnome-keyring	affected	Ubuntu:Pro:16.04:LTS	gnome-keyring	—
gnome-keyring	affected	Ubuntu:20.04:LTS	gnome-keyring	—

Upstream advisory

USN-3824-1

USNAll remaining2018-11-16

openjdk-7 vulnerabilities

Affected products

Product	Status	Vendor	Package	Ecosystem
openjdk-7	affected	Ubuntu:14.04:LTS	openjdk-7	—

Upstream advisory

USN-3820-3

USNAll remaining2018-11-14

linux-azure vulnerabilities

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-azure	affected	Ubuntu:14.04:LTS	linux-azure	—

Upstream advisory

USN-3820-2

USNAll remaining2018-11-14

linux-hwe, linux-azure, linux-gcp vulnerabilities

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—

Upstream advisory

UBUNTU-CVE-2018-19130

USNAll remainingMEDIUM2018-11-09

Affected products

Product	Status	Vendor	Package	Ecosystem
libav	affected	Ubuntu:Pro:14.04:LTS	libav	—

Upstream advisory

USN-3813-1

USNAll remaining2018-11-08

pyopenssl vulnerabilities

Affected products

Product	Status	Vendor	Package	Ecosystem
pyopenssl	affected	Ubuntu:16.04:LTS	pyopenssl	—

Upstream advisory

USN-3812-1

USNAll remaining2018-11-07

nginx vulnerabilities

Affected products

Product	Status	Vendor	Package	Ecosystem
nginx	affected	Ubuntu:16.04:LTS	nginx	—
nginx	affected	Ubuntu:14.04:LTS	nginx	—
nginx	affected	Ubuntu:18.04:LTS	nginx	—

Upstream advisory

USN-3811-1

USNAll remaining2018-11-06

spamassassin vulnerabilities

Affected products

Product	Status	Vendor	Package	Ecosystem
spamassassin	affected	Ubuntu:14.04:LTS	spamassassin	—
spamassassin	affected	Ubuntu:18.04:LTS	spamassassin	—
spamassassin	affected	Ubuntu:16.04:LTS	spamassassin	—

Upstream advisory

What would you fix first?

Advisories

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products