Canonical Security Advisories: December 2018 — Canonical Security Advisories

UBUNTU-CVE-2018-1160

USNExploitedCISA KEV listedCRITICAL2018-12-20

CVEs:CVE-2018-1160

Affected products

Product	Status	Vendor	Package	Ecosystem
netatalk	affected	Ubuntu:14.04:LTS	netatalk	—
netatalk	affected	Ubuntu:18.04:LTS	netatalk	—
netatalk	affected	Ubuntu:16.04:LTS	netatalk	—

Upstream advisory

UBUNTU-CVE-2018-15982

USNExploitedCISA KEV listedCRITICAL2018-12-06

CVEs:CVE-2018-15982

Affected products

Product	Status	Vendor	Package	Ecosystem
flashplugin-nonfree	affected	Ubuntu:14.04:LTS	flashplugin-nonfree	—
flashplugin-nonfree	affected	Ubuntu:16.04:LTS	flashplugin-nonfree	—
flashplugin-nonfree	affected	Ubuntu:18.04:LTS	flashplugin-nonfree	—

Upstream advisory

UBUNTU-CVE-2018-17480

USNExploitedCISA KEV listedHIGH2018-12-05

CVEs:CVE-2018-17480

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2018-4438

USNExploitedCISA KEV listedHIGH2018-12-06

CVEs:CVE-2018-4438

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:16.04:LTS	webkit2gtk	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—

Upstream advisory

UBUNTU-CVE-2018-4442

USNExploitedCISA KEV listedHIGH2018-12-06

CVEs:CVE-2018-4442

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:16.04:LTS	webkit2gtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—

Upstream advisory

UBUNTU-CVE-2018-18335

USNExploitedCISA KEV listedHIGH2018-12-05

CVEs:CVE-2018-18335

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2018-18356

USNExploitedCISA KEV listedHIGH2018-12-05

CVEs:CVE-2018-18356

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—
firefox	affected	Ubuntu:14.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
thunderbird	affected	Ubuntu:16.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:14.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2018-18342

USNExploitedCISA KEV listedHIGH2018-12-05

CVEs:CVE-2018-18342

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2018-18351

USNExploitedCISA KEV listedMEDIUM2018-12-05

CVEs:CVE-2018-18351

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2018-18337

USNExploitedCISA KEV listedHIGH2018-12-05

CVEs:CVE-2018-18337

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2018-17481

USNExploitedCISA KEV listedHIGH2018-12-05

CVEs:CVE-2018-17481

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2018-18336

USNExploitedCISA KEV listedHIGH2018-12-05

CVEs:CVE-2018-18336

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2018-18344

USNExploitedCISA KEV listedMEDIUM2018-12-05

CVEs:CVE-2018-18344

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2018-18341

USNExploitedCISA KEV listedHIGH2018-12-05

CVEs:CVE-2018-18341

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2018-18345

USNExploitedCISA KEV listedMEDIUM2018-12-05

CVEs:CVE-2018-18345

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2018-18338

USNExploitedCISA KEV listedHIGH2018-12-05

CVEs:CVE-2018-18338

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2018-18339

USNExploitedCISA KEV listedHIGH2018-12-05

CVEs:CVE-2018-18339

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2018-18354

USNExploitedCISA KEV listedHIGH2018-12-05

CVEs:CVE-2018-18354

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2018-18359

USNExploitedCISA KEV listedHIGH2018-12-05

CVEs:CVE-2018-18359

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2018-18352

USNExploitedCISA KEV listedMEDIUM2018-12-05

CVEs:CVE-2018-18352

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2018-18340

USNExploitedCISA KEV listedHIGH2018-12-05

CVEs:CVE-2018-18340

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2018-18347

USNExploitedCISA KEV listedHIGH2018-12-05

CVEs:CVE-2018-18347

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2018-18343

USNExploitedCISA KEV listedHIGH2018-12-05

CVEs:CVE-2018-18343

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2018-18350

USNExploitedCISA KEV listedMEDIUM2018-12-05

CVEs:CVE-2018-18350

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2018-18353

USNExploitedCISA KEV listedMEDIUM2018-12-05

CVEs:CVE-2018-18353

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2018-18346

USNExploitedCISA KEV listedMEDIUM2018-12-05

CVEs:CVE-2018-18346

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2018-18355

USNExploitedCISA KEV listedMEDIUM2018-12-05

CVEs:CVE-2018-18355

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2018-18357

USNExploitedCISA KEV listedMEDIUM2018-12-05

CVEs:CVE-2018-18357

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2018-18348

USNExploitedCISA KEV listedMEDIUM2018-12-05

CVEs:CVE-2018-18348

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2018-18349

USNExploitedCISA KEV listedMEDIUM2018-12-05

CVEs:CVE-2018-18349

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2018-18358

USNExploitedCISA KEV listedMEDIUM2018-12-05

CVEs:CVE-2018-18358

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2018-4443

USNExploitedVulnCheck KEV listedHIGH2018-12-05

CVEs:CVE-2018-4443

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:16.04:LTS	webkit2gtk	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—

Upstream advisory

UBUNTU-CVE-2018-1002105

USNWeaponized exploitCRITICAL2018-12-05

CVEs:CVE-2018-1002105

Affected products

Product	Status	Vendor	Package	Ecosystem
kubernetes	affected	Ubuntu:24.04:LTS	kubernetes	—
kubernetes	affected	Ubuntu:Pro:20.04:LTS	kubernetes	—
kubernetes	affected	Ubuntu:22.04:LTS	kubernetes	—

Upstream advisory

UBUNTU-CVE-2018-1000888

USNWeaponized exploitHIGH2018-12-27

CVEs:CVE-2018-1000888

Affected products

Product	Status	Vendor	Package	Ecosystem
php-pear	affected	Ubuntu:16.04:LTS	php-pear	—
php-pear	affected	Ubuntu:18.04:LTS	php-pear	—

Upstream advisory

UBUNTU-CVE-2018-19877

USNWeaponized exploitMEDIUM2018-12-05

CVEs:CVE-2018-19877

Affected products

Product	Status	Vendor	Package	Ecosystem
loganalyzer	affected	Ubuntu:18.04:LTS	loganalyzer	—
loganalyzer	affected	Ubuntu:22.04:LTS	loganalyzer	—
loganalyzer	affected	Ubuntu:16.04:LTS	loganalyzer	—
loganalyzer	affected	Ubuntu:20.04:LTS	loganalyzer	—

Upstream advisory

UBUNTU-CVE-2018-4441

USNWeaponized exploitHIGH2018-12-05

CVEs:CVE-2018-4441

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
webkit2gtk	affected	Ubuntu:16.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—

Upstream advisory

USN-3840-1

USNWeaponized exploit2018-12-06

openssl, openssl1.0 vulnerabilities

CVEs:CVE-2018-0734 CVE-2018-0735 CVE-2018-5407

Affected products

Product	Status	Vendor	Package	Ecosystem
openssl	affected	Ubuntu:16.04:LTS	openssl	—
openssl	affected	Ubuntu:18.04:LTS	openssl	—
openssl	affected	Ubuntu:14.04:LTS	openssl	—
openssl1.0	affected	Ubuntu:18.04:LTS	openssl1.0	—

Upstream advisory

USN-3836-1

USNWeaponized exploitHIGH2018-12-03

linux, linux-gcp, linux-kvm, linux-raspi2 vulnerabilities

CVEs:CVE-2018-6559 CVE-2018-18955

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu	—	—
linux	affected	Ubuntu:18.04:LTS	linux	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—

Upstream advisory

UBUNTU-CVE-2018-19799

USNWeaponized exploitMEDIUM2018-12-26

CVEs:CVE-2018-19799

Affected products

Product	Status	Vendor	Package	Ecosystem
dolibarr	affected	Ubuntu:16.04:LTS	dolibarr	—

Upstream advisory

UBUNTU-CVE-2018-19838

USNWeaponized exploitMEDIUM2018-12-04

CVEs:CVE-2018-19838

Affected products

Product	Status	Vendor	Package	Ecosystem
libsass	affected	Ubuntu:Pro:18.04:LTS	libsass	—
libsass	affected	Ubuntu:16.04:LTS	libsass	—

Upstream advisory

UBUNTU-CVE-2018-18397

USNWeaponized exploitMEDIUM2018-12-12

CVEs:CVE-2018-18397

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:18.04:LTS	linux	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:14.04:LTS	linux-azure	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp-edge	affected	Ubuntu:18.04:LTS	linux-gcp-edge	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—

Upstream advisory

UBUNTU-CVE-2018-20506

USNActive exploitation (sightings)HIGH2018-12-21

CVEs:CVE-2018-20506

Affected products

Product	Status	Vendor	Package	Ecosystem
sqlite3	affected	Ubuntu:Pro:14.04:LTS	sqlite3	—
sqlite3	affected	Ubuntu:16.04:LTS	sqlite3	—
sqlite3	affected	Ubuntu:18.04:LTS	sqlite3	—

Upstream advisory

UBUNTU-CVE-2018-20505

USNActive exploitation (sightings)HIGH2018-12-21

CVEs:CVE-2018-20505

Affected products

Product	Status	Vendor	Package	Ecosystem
sqlite3	affected	Ubuntu:18.04:LTS	sqlite3	—

Upstream advisory

UBUNTU-CVE-2018-19968

USNActive exploitation (sightings)MEDIUM2018-12-11

CVEs:CVE-2018-19968

Affected products

Product	Status	Vendor	Package	Ecosystem
phpmyadmin	affected	Ubuntu:Pro:16.04:LTS	phpmyadmin	—
phpmyadmin	affected	Ubuntu:18.04:LTS	phpmyadmin	—
phpmyadmin	affected	Ubuntu:Pro:14.04:LTS	phpmyadmin	—

Upstream advisory

USN-3837-2

USNActive exploitation (sightings)HIGH2018-12-11

poppler regression

CVEs:CVE-2018-16646 CVE-2018-19149

Affected products

Product	Status	Vendor	Package	Ecosystem
poppler	affected	Ubuntu:16.04:LTS	poppler	—
poppler	affected	Ubuntu:14.04:LTS	poppler	—
poppler	affected	Ubuntu:18.04:LTS	poppler	—

Upstream advisory

USN-3837-1

USNActive exploitation (sightings)HIGH2018-12-04

poppler vulnerabilities

CVEs:CVE-2018-16646 CVE-2018-19058 CVE-2018-19059 CVE-2018-19060 CVE-2018-19149

Affected products

Product	Status	Vendor	Package	Ecosystem
poppler	affected	Ubuntu:14.04:LTS	poppler	—
poppler	affected	Ubuntu:18.04:LTS	poppler	—
poppler	affected	Ubuntu:16.04:LTS	poppler	—

Upstream advisory

UBUNTU-CVE-2018-19970

USNActive exploitation (sightings)MEDIUM2018-12-11

CVEs:CVE-2018-19970

Affected products

Product	Status	Vendor	Package	Ecosystem
phpmyadmin	affected	Ubuntu:Pro:16.04:LTS	phpmyadmin	—
phpmyadmin	affected	Ubuntu:18.04:LTS	phpmyadmin	—
phpmyadmin	affected	Ubuntu:Pro:14.04:LTS	phpmyadmin	—

Upstream advisory

UBUNTU-CVE-2018-19969

USNActive exploitation (sightings)HIGH2018-12-11

CVEs:CVE-2018-19969

Affected products

Product	Status	Vendor	Package	Ecosystem
phpmyadmin	affected	Ubuntu:Pro:16.04:LTS	phpmyadmin	—
phpmyadmin	affected	Ubuntu:Pro:18.04:LTS	phpmyadmin	—
phpmyadmin	affected	Ubuntu:Pro:14.04:LTS	phpmyadmin	—

Upstream advisory

UBUNTU-CVE-2018-20483

USNActive exploitation (sightings)HIGH2018-12-26

CVEs:CVE-2018-20483

Affected products

Product	Status	Vendor	Package	Ecosystem
wget	affected	Ubuntu:18.04:LTS	wget	—

Upstream advisory

UBUNTU-CVE-2018-20148

USNPoC exploitCRITICAL2018-12-14

CVEs:CVE-2018-20148

Affected products

Product	Status	Vendor	Package	Ecosystem
wordpress	affected	Ubuntu:16.04:LTS	wordpress	—
wordpress	affected	Ubuntu:18.04:LTS	wordpress	—

Upstream advisory

USN-3834-1

USNPoC exploitCRITICAL2018-12-03

perl vulnerabilities

CVEs:CVE-2018-18311 CVE-2018-18312 CVE-2018-18313 CVE-2018-18314

Affected products

Product	Status	Vendor	Package	Ecosystem
perl	affected	Ubuntu:14.04:LTS	perl	—
perl	affected	Ubuntu:18.04:LTS	perl	—
perl	affected	Ubuntu	—	—
perl	affected	Ubuntu:16.04:LTS	perl	—

Upstream advisory

UBUNTU-CVE-2018-19788

USNPoC exploitHIGH2018-12-03

CVEs:CVE-2018-19788

Affected products

Product	Status	Vendor	Package	Ecosystem
policykit-1	affected	Ubuntu:16.04:LTS	policykit-1	—
policykit-1	affected	Ubuntu:18.04:LTS	policykit-1	—
policykit-1	affected	Ubuntu:14.04:LTS	policykit-1	—

Upstream advisory

UBUNTU-CVE-2018-16875

USNPoC exploitHIGH2018-12-14

CVEs:CVE-2018-16875

Affected products

Product	Status	Vendor	Package	Ecosystem
golang-1.10	affected	Ubuntu:18.04:LTS	golang-1.10	—
golang-1.10	affected	Ubuntu:14.04:LTS	golang-1.10	—
golang-1.10	affected	Ubuntu:16.04:LTS	golang-1.10	—
golang-1.6	affected	Ubuntu:16.04:LTS	golang-1.6	—
golang-1.8	affected	Ubuntu:18.04:LTS	golang-1.8	—
golang-1.9	affected	Ubuntu:18.04:LTS	golang-1.9	—

Upstream advisory

UBUNTU-CVE-2018-19935

USNPoC exploitHIGH2018-12-07

CVEs:CVE-2018-19935

Affected products

Product	Status	Vendor	Package	Ecosystem
php7.0	affected	Ubuntu:16.04:LTS	php7.0	—
php7.2	affected	Ubuntu:18.04:LTS	php7.2	—
php-imap	affected	Ubuntu:14.04:LTS	php-imap	—

Upstream advisory

UBUNTU-CVE-2018-20406

USNPoC exploitHIGH2018-12-23

CVEs:CVE-2018-20406

Affected products

Product	Status	Vendor	Package	Ecosystem
python3.4	affected	Ubuntu:Pro:14.04:LTS	python3.4	—
python3.5	affected	Ubuntu:Pro:14.04:LTS	python3.5	—
python3.5	affected	Ubuntu:16.04:LTS	python3.5	—
python3.6	affected	Ubuntu:18.04:LTS	python3.6	—

Upstream advisory

UBUNTU-CVE-2018-19591

USNPoC exploitHIGH2018-12-04

CVEs:CVE-2018-19591

Affected products

Product	Status	Vendor	Package	Ecosystem
glibc	affected	Ubuntu:18.04:LTS	glibc	—

Upstream advisory

UBUNTU-CVE-2018-20433

USNPoC exploitCRITICAL2018-12-24

CVEs:CVE-2018-20433

Affected products

Product	Status	Vendor	Package	Ecosystem
c3p0	affected	Ubuntu:16.04:LTS	c3p0	—
c3p0	affected	Ubuntu:18.04:LTS	c3p0	—
c3p0	affected	Ubuntu:14.04:LTS	c3p0	—

Upstream advisory

UBUNTU-CVE-2018-20060

USNPoC exploitCRITICAL2018-12-11

CVEs:CVE-2018-20060

Affected products

Product	Status	Vendor	Package	Ecosystem
python-urllib3	affected	Ubuntu:18.04:LTS	python-urllib3	—
python-urllib3	affected	Ubuntu:Pro:14.04:LTS	python-urllib3	—
python-urllib3	affected	Ubuntu:16.04:LTS	python-urllib3	—

Upstream advisory

UBUNTU-CVE-2018-1000840

USNPoC exploitMEDIUM2018-12-20

CVEs:CVE-2018-1000840

Affected products

Product	Status	Vendor	Package	Ecosystem
processing-core	affected	Ubuntu:22.04:LTS	processing-core	—
processing-core	affected	Ubuntu:20.04:LTS	processing-core	—
processing-core	affected	Ubuntu:24.04:LTS	processing-core	—
processing-core	affected	Ubuntu:16.04:LTS	processing-core	—
processing-core	affected	Ubuntu:25.10	processing-core	—
processing-core	affected	Ubuntu:18.04:LTS	processing-core	—

Upstream advisory

UBUNTU-CVE-2018-20330

USNPoC exploitHIGH2018-12-21

CVEs:CVE-2018-20330

Affected products

Product	Status	Vendor	Package	Ecosystem
libjpeg-turbo	affected	Ubuntu:16.04:LTS	libjpeg-turbo	—
libjpeg-turbo	affected	Ubuntu:14.04:LTS	libjpeg-turbo	—
libjpeg-turbo	affected	Ubuntu:18.04:LTS	libjpeg-turbo	—

Upstream advisory

UBUNTU-CVE-2018-16869

USNPoC exploitMEDIUM2018-12-03

CVEs:CVE-2018-16869

Affected products

Product	Status	Vendor	Package	Ecosystem
nettle	affected	Ubuntu:18.04:LTS	nettle	—
nettle	affected	Ubuntu:14.04:LTS	nettle	—
nettle	affected	Ubuntu:16.04:LTS	nettle	—

Upstream advisory

UBUNTU-CVE-2018-20194

USNPoC exploitHIGH2018-12-18

CVEs:CVE-2018-20194

Affected products

Product	Status	Vendor	Package	Ecosystem
faad2	affected	Ubuntu:Pro:14.04:LTS	faad2	—
faad2	affected	Ubuntu:Pro:18.04:LTS	faad2	—
faad2	affected	Ubuntu:Pro:16.04:LTS	faad2	—

Upstream advisory

UBUNTU-CVE-2018-20362

USNPoC exploitMEDIUM2018-12-22

CVEs:CVE-2018-20362

Affected products

Product	Status	Vendor	Package	Ecosystem
faad2	affected	Ubuntu:Pro:14.04:LTS	faad2	—
faad2	affected	Ubuntu:Pro:18.04:LTS	faad2	—
faad2	affected	Ubuntu:Pro:16.04:LTS	faad2	—

Upstream advisory

UBUNTU-CVE-2018-20195

USNPoC exploitMEDIUM2018-12-18

CVEs:CVE-2018-20195

Affected products

Product	Status	Vendor	Package	Ecosystem
faad2	affected	Ubuntu:Pro:14.04:LTS	faad2	—
faad2	affected	Ubuntu:Pro:18.04:LTS	faad2	—
faad2	affected	Ubuntu:Pro:16.04:LTS	faad2	—

Upstream advisory

UBUNTU-CVE-2018-11790

USNPoC exploitHIGH2018-12-31

CVEs:CVE-2018-11790

Affected products

Product	Status	Vendor	Package	Ecosystem
libreoffice	affected	Ubuntu:14.04:LTS	libreoffice	—

Upstream advisory

UBUNTU-CVE-2018-19985

USNPoC exploitMEDIUM2018-12-24

CVEs:CVE-2018-19985

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:18.04:LTS	linux	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-aws-fips	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-azure-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-gcp-fips	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2018-9568

USNPoC exploitHIGH2018-12-04

CVEs:CVE-2018-9568

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

USN-3849-1

USNPoC exploitHIGH2018-12-20

linux vulnerabilities

CVEs:CVE-2017-2647 CVE-2018-10902 CVE-2018-12896 CVE-2018-14734 CVE-2018-16276 CVE-2018-18386 CVE-2018-18690 CVE-2018-18710

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:14.04:LTS	linux	—

Upstream advisory

USN-3847-1

USNPoC exploitHIGH2018-12-20

linux, linux-aws, linux-azure, linux-gcp, linux-kvm, linux-oem, linux-raspi2 vulnerabilities

CVEs:CVE-2018-10902 CVE-2018-12896 CVE-2018-14734 CVE-2018-16276 CVE-2018-18445 CVE-2018-18690 CVE-2018-18710

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:18.04:LTS	linux	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—

Upstream advisory

UBUNTU-CVE-2018-1000876

USNPoC exploitHIGH2018-12-20

CVEs:CVE-2018-1000876

Affected products

Product	Status	Vendor	Package	Ecosystem
binutils	affected	Ubuntu:Pro:16.04:LTS	binutils	—
binutils	affected	Ubuntu:Pro:14.04:LTS	binutils	—
binutils	affected	Ubuntu:18.04:LTS	binutils	—

Upstream advisory

UBUNTU-CVE-2018-20169

USNPoC exploitMEDIUM2018-12-17

CVEs:CVE-2018-20169

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux	affected	Ubuntu:18.04:LTS	linux	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-aws-fips	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-azure-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-gcp-fips	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2018-20482

USNPoC exploitMEDIUM2018-12-26

CVEs:CVE-2018-20482

Affected products

Product	Status	Vendor	Package	Ecosystem
tar	affected	Ubuntu:18.04:LTS	tar	—
tar	affected	Ubuntu:16.04:LTS	tar	—
tar	affected	Ubuntu:Pro:14.04:LTS	tar	—

Upstream advisory

USN-3842-1

USNPoC exploitMEDIUM2018-12-10

cups vulnerability

CVEs:CVE-2018-4700

Affected products

Product	Status	Vendor	Package	Ecosystem
cups	affected	Ubuntu:18.04:LTS	cups	—
cups	affected	Ubuntu:16.04:LTS	cups	—
cups	affected	Ubuntu:14.04:LTS	cups	—

Upstream advisory

UBUNTU-CVE-2018-4700

USNPoC exploitMEDIUM2018-12-07

CVEs:CVE-2018-4700

Affected products

Product	Status	Vendor	Package	Ecosystem
cups	affected	Ubuntu:14.04:LTS	cups	—
cups	affected	Ubuntu:18.04:LTS	cups	—
cups	affected	Ubuntu:16.04:LTS	cups	—

Upstream advisory

UBUNTU-CVE-2018-16873

USNEPSS 49-79%HIGH2018-12-14

CVEs:CVE-2018-16873

Affected products

Product	Status	Vendor	Package	Ecosystem
golang-1.10	affected	Ubuntu:16.04:LTS	golang-1.10	—
golang-1.10	affected	Ubuntu:18.04:LTS	golang-1.10	—
golang-1.10	affected	Ubuntu:14.04:LTS	golang-1.10	—
golang-1.6	affected	Ubuntu:16.04:LTS	golang-1.6	—
golang-1.8	affected	Ubuntu:18.04:LTS	golang-1.8	—
golang-1.9	affected	Ubuntu:18.04:LTS	golang-1.9	—

Upstream advisory

UBUNTU-CVE-2018-16855

USNEPSS 49-79%HIGH2018-12-03

CVEs:CVE-2018-16855

Affected products

Product	Status	Vendor	Package	Ecosystem
pdns-recursor	affected	Ubuntu:Pro:18.04:LTS	pdns-recursor	—

Upstream advisory

UBUNTU-CVE-2018-12404

USNEPSS <= 49%MEDIUM2018-12-12

CVEs:CVE-2018-12404

Affected products

Product	Status	Vendor	Package	Ecosystem
nss	affected	Ubuntu:14.04:LTS	nss	—
nss	affected	Ubuntu:16.04:LTS	nss	—
nss	affected	Ubuntu:18.04:LTS	nss	—

Upstream advisory

UBUNTU-CVE-2018-6307

USNEPSS <= 49%HIGH2018-12-19

CVEs:CVE-2018-6307

Affected products

Product	Status	Vendor	Package	Ecosystem
libvncserver	affected	Ubuntu:14.04:LTS	libvncserver	—
libvncserver	affected	Ubuntu:18.04:LTS	libvncserver	—
libvncserver	affected	Ubuntu:16.04:LTS	libvncserver	—

Upstream advisory

UBUNTU-CVE-2018-15127

USNEPSS <= 49%CRITICAL2018-12-19

CVEs:CVE-2018-15127

Affected products

Product	Status	Vendor	Package	Ecosystem
italc	affected	Ubuntu:16.04:LTS	italc	—
italc	affected	Ubuntu:18.04:LTS	italc	—
libvncserver	affected	Ubuntu:18.04:LTS	libvncserver	—
libvncserver	affected	Ubuntu:14.04:LTS	libvncserver	—
libvncserver	affected	Ubuntu:16.04:LTS	libvncserver	—

Upstream advisory

UBUNTU-CVE-2018-15126

USNEPSS <= 49%CRITICAL2018-12-19

CVEs:CVE-2018-15126

Affected products

Product	Status	Vendor	Package	Ecosystem
libvncserver	affected	Ubuntu:18.04:LTS	libvncserver	—
libvncserver	affected	Ubuntu:14.04:LTS	libvncserver	—
libvncserver	affected	Ubuntu:16.04:LTS	libvncserver	—

Upstream advisory

USN-3844-1

USNEPSS <= 49%HIGH2018-12-11

firefox vulnerabilities

CVEs:CVE-2018-12405 CVE-2018-12406 CVE-2018-12407 CVE-2018-17466 CVE-2018-18492 CVE-2018-18493 CVE-2018-18494 CVE-2018-18495 CVE-2018-18497 CVE-2018-18498

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:14.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—

Upstream advisory

UBUNTU-CVE-2018-18492

USNEPSS <= 49%CRITICAL2018-12-11

CVEs:CVE-2018-18492

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:14.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—
thunderbird	affected	Ubuntu:14.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:16.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2018-20019

USNEPSS <= 49%CRITICAL2018-12-19

CVEs:CVE-2018-20019

Affected products

Product	Status	Vendor	Package	Ecosystem
italc	affected	Ubuntu:16.04:LTS	italc	—
italc	affected	Ubuntu:18.04:LTS	italc	—
libvncserver	affected	Ubuntu:14.04:LTS	libvncserver	—
libvncserver	affected	Ubuntu:18.04:LTS	libvncserver	—
libvncserver	affected	Ubuntu:16.04:LTS	libvncserver	—

Upstream advisory

UBUNTU-CVE-2018-20020

USNEPSS <= 49%CRITICAL2018-12-19

CVEs:CVE-2018-20020

Affected products

Product	Status	Vendor	Package	Ecosystem
italc	affected	Ubuntu:16.04:LTS	italc	—
italc	affected	Ubuntu:18.04:LTS	italc	—
libvncserver	affected	Ubuntu:16.04:LTS	libvncserver	—
libvncserver	affected	Ubuntu:18.04:LTS	libvncserver	—
libvncserver	affected	Ubuntu:14.04:LTS	libvncserver	—
ssvnc	affected	Ubuntu:18.04:LTS	ssvnc	—
ssvnc	affected	Ubuntu:16.04:LTS	ssvnc	—
tightvnc	affected	Ubuntu:22.04:LTS	tightvnc	—
tightvnc	affected	Ubuntu:24.04:LTS	tightvnc	—
tightvnc	affected	Ubuntu:18.04:LTS	tightvnc	—
tightvnc	affected	Ubuntu:25.10	tightvnc	—
tightvnc	affected	Ubuntu:Pro:14.04:LTS	tightvnc	—
tightvnc	affected	Ubuntu:20.04:LTS	tightvnc	—
tightvnc	affected	Ubuntu:16.04:LTS	tightvnc	—

Upstream advisory

USN-3845-1

USNEPSS <= 49%CRITICAL2018-12-12

freerdp, freerdp2 vulnerabilities

CVEs:CVE-2018-8784 CVE-2018-8785 CVE-2018-8786 CVE-2018-8787 CVE-2018-8788 CVE-2018-8789

Affected products

Product	Status	Vendor	Package	Ecosystem
freerdp	affected	Ubuntu:16.04:LTS	freerdp	—
freerdp	affected	Ubuntu:14.04:LTS	freerdp	—
freerdp2	affected	Ubuntu:18.04:LTS	freerdp2	—

Upstream advisory

UBUNTU-CVE-2018-17191

USNEPSS <= 49%CRITICAL2018-12-31

CVEs:CVE-2018-17191

Affected products

Product	Status	Vendor	Package	Ecosystem
netbeans	affected	Ubuntu:16.04:LTS	netbeans	—

Upstream advisory

UBUNTU-CVE-2018-19039

USNEPSS <= 49%MEDIUM2018-12-13

CVEs:CVE-2018-19039

Affected products

Product	Status	Vendor	Package	Ecosystem
grafana	affected	Ubuntu:16.04:LTS	grafana	—

Upstream advisory

UBUNTU-CVE-2018-20103

USNEPSS <= 49%HIGH2018-12-12

CVEs:CVE-2018-20103

Affected products

Product	Status	Vendor	Package	Ecosystem
haproxy	affected	Ubuntu:18.04:LTS	haproxy	—

Upstream advisory

UBUNTU-CVE-2018-1000832

USNEPSS <= 49%CRITICAL2018-12-20

CVEs:CVE-2018-1000832

Affected products

Product	Status	Vendor	Package	Ecosystem
zoneminder	affected	Ubuntu:Pro:16.04:LTS	zoneminder	—

Upstream advisory

UBUNTU-CVE-2018-17197

USNEPSS <= 49%MEDIUM2018-12-24

CVEs:CVE-2018-17197

Affected products

Product	Status	Vendor	Package	Ecosystem
tika	affected	Ubuntu:16.04:LTS	tika	—
tika	affected	Ubuntu:18.04:LTS	tika	—
tika	affected	Ubuntu:25.10	tika	—

Upstream advisory

UBUNTU-CVE-2018-20151

USNEPSS <= 49%HIGH2018-12-14

CVEs:CVE-2018-20151

Affected products

Product	Status	Vendor	Package	Ecosystem
wordpress	affected	Ubuntu:18.04:LTS	wordpress	—
wordpress	affected	Ubuntu:16.04:LTS	wordpress	—

Upstream advisory

UBUNTU-CVE-2018-16874

USNEPSS <= 49%HIGH2018-12-14

CVEs:CVE-2018-16874

Affected products

Product	Status	Vendor	Package	Ecosystem
golang-1.10	affected	Ubuntu:14.04:LTS	golang-1.10	—
golang-1.10	affected	Ubuntu:16.04:LTS	golang-1.10	—
golang-1.10	affected	Ubuntu:18.04:LTS	golang-1.10	—
golang-1.6	affected	Ubuntu:16.04:LTS	golang-1.6	—
golang-1.8	affected	Ubuntu:18.04:LTS	golang-1.8	—
golang-1.9	affected	Ubuntu:18.04:LTS	golang-1.9	—

Upstream advisory

UBUNTU-CVE-2018-18493

USNEPSS <= 49%CRITICAL2018-12-11

CVEs:CVE-2018-18493

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:14.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:14.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:16.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2018-1000873

USNEPSS <= 49%MEDIUM2018-12-20

CVEs:CVE-2018-1000873

Affected products

Product	Status	Vendor	Package	Ecosystem
jackson-databind	affected	Ubuntu:24.04:LTS	jackson-databind	—
jackson-databind	affected	Ubuntu:Pro:16.04:LTS	jackson-databind	—
jackson-databind	affected	Ubuntu:25.10	jackson-databind	—
jackson-databind	affected	Ubuntu:Pro:14.04:LTS	jackson-databind	—
jackson-databind	affected	Ubuntu:20.04:LTS	jackson-databind	—
jackson-databind	affected	Ubuntu:22.04:LTS	jackson-databind	—
jackson-databind	affected	Ubuntu:18.04:LTS	jackson-databind	—

Upstream advisory

UBUNTU-CVE-2018-1000877

USNEPSS <= 49%HIGH2018-12-20

CVEs:CVE-2018-1000877

Affected products

Product	Status	Vendor	Package	Ecosystem
libarchive	affected	Ubuntu:16.04:LTS	libarchive	—
libarchive	affected	Ubuntu:18.04:LTS	libarchive	—
libarchive	affected	Ubuntu:14.04:LTS	libarchive	—

Upstream advisory

UBUNTU-CVE-2018-20615

USNEPSS <= 49%HIGH2018-12-31

CVEs:CVE-2018-20615

Affected products

Product	Status	Vendor	Package	Ecosystem
haproxy	affected	Ubuntu:18.04:LTS	haproxy	—

Upstream advisory

UBUNTU-CVE-2018-1000878

USNEPSS <= 49%HIGH2018-12-20

CVEs:CVE-2018-1000878

Affected products

Product	Status	Vendor	Package	Ecosystem
libarchive	affected	Ubuntu:16.04:LTS	libarchive	—
libarchive	affected	Ubuntu:18.04:LTS	libarchive	—
libarchive	affected	Ubuntu:14.04:LTS	libarchive	—

Upstream advisory

UBUNTU-CVE-2018-20815

USNEPSS <= 49%CRITICAL2018-12-31

CVEs:CVE-2018-20815

Affected products

Product	Status	Vendor	Package	Ecosystem
qemu	affected	Ubuntu:16.04:LTS	qemu	—
qemu	affected	Ubuntu:18.04:LTS	qemu	—
qemu	affected	Ubuntu:14.04:LTS	qemu	—

Upstream advisory

UBUNTU-CVE-2018-20102

USNEPSS <= 49%HIGH2018-12-12

CVEs:CVE-2018-20102

Affected products

Product	Status	Vendor	Package	Ecosystem
haproxy	affected	Ubuntu:18.04:LTS	haproxy	—
haproxy	affected	Ubuntu:16.04:LTS	haproxy	—

Upstream advisory

UBUNTU-CVE-2018-20150

USNEPSS <= 49%MEDIUM2018-12-14

CVEs:CVE-2018-20150

Affected products

Product	Status	Vendor	Package	Ecosystem
wordpress	affected	Ubuntu:16.04:LTS	wordpress	—
wordpress	affected	Ubuntu:18.04:LTS	wordpress	—

Upstream advisory

UBUNTU-CVE-2018-1000880

USNEPSS <= 49%MEDIUM2018-12-20

CVEs:CVE-2018-1000880

Affected products

Product	Status	Vendor	Package	Ecosystem
libarchive	affected	Ubuntu:18.04:LTS	libarchive	—

Upstream advisory

UBUNTU-CVE-2018-18498

USNEPSS <= 49%CRITICAL2018-12-11

CVEs:CVE-2018-18498

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:14.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:14.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:16.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2018-19857

USNEPSS <= 49%CRITICAL2018-12-05

CVEs:CVE-2018-19857

Affected products

Product	Status	Vendor	Package	Ecosystem
vlc	affected	Ubuntu:18.04:LTS	vlc	—
vlc	affected	Ubuntu:Pro:16.04:LTS	vlc	—

Upstream advisory

UBUNTU-CVE-2018-20152

USNEPSS <= 49%MEDIUM2018-12-14

CVEs:CVE-2018-20152

Affected products

Product	Status	Vendor	Package	Ecosystem
wordpress	affected	Ubuntu:16.04:LTS	wordpress	—
wordpress	affected	Ubuntu:18.04:LTS	wordpress	—

Upstream advisory

UBUNTU-CVE-2018-19789

USNEPSS <= 49%MEDIUM2018-12-18

CVEs:CVE-2018-19789

Affected products

Product	Status	Vendor	Package	Ecosystem
symfony	affected	Ubuntu:Pro:18.04:LTS	symfony	—
symfony	affected	Ubuntu:16.04:LTS	symfony	—

Upstream advisory

UBUNTU-CVE-2018-20021

USNEPSS <= 49%HIGH2018-12-19

CVEs:CVE-2018-20021

Affected products

Product	Status	Vendor	Package	Ecosystem
italc	affected	Ubuntu:18.04:LTS	italc	—
italc	affected	Ubuntu:16.04:LTS	italc	—
libvncserver	affected	Ubuntu:16.04:LTS	libvncserver	—
libvncserver	affected	Ubuntu:14.04:LTS	libvncserver	—
libvncserver	affected	Ubuntu:18.04:LTS	libvncserver	—
ssvnc	affected	Ubuntu:16.04:LTS	ssvnc	—
ssvnc	affected	Ubuntu:18.04:LTS	ssvnc	—
tightvnc	affected	Ubuntu:16.04:LTS	tightvnc	—
tightvnc	affected	Ubuntu:18.04:LTS	tightvnc	—
tightvnc	affected	Ubuntu:25.10	tightvnc	—
tightvnc	affected	Ubuntu:Pro:14.04:LTS	tightvnc	—
tightvnc	affected	Ubuntu:22.04:LTS	tightvnc	—
tightvnc	affected	Ubuntu:20.04:LTS	tightvnc	—
tightvnc	affected	Ubuntu:24.04:LTS	tightvnc	—

Upstream advisory

UBUNTU-CVE-2018-20481

USNEPSS <= 49%MEDIUM2018-12-25

CVEs:CVE-2018-20481

Affected products

Product	Status	Vendor	Package	Ecosystem
poppler	affected	Ubuntu:14.04:LTS	poppler	—
poppler	affected	Ubuntu:18.04:LTS	poppler	—
poppler	affected	Ubuntu:16.04:LTS	poppler	—

Upstream advisory

UBUNTU-CVE-2018-19873

USNEPSS <= 49%CRITICAL2018-12-18

CVEs:CVE-2018-19873

Affected products

Product	Status	Vendor	Package	Ecosystem
qtbase-opensource-src	affected	Ubuntu:16.04:LTS	qtbase-opensource-src	—
qtbase-opensource-src	affected	Ubuntu:18.04:LTS	qtbase-opensource-src	—

Upstream advisory

USN-3848-1

USNEPSS <= 49%HIGH2018-12-20

linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities

CVEs:CVE-2017-18174 CVE-2018-12896 CVE-2018-18690 CVE-2018-18710

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2018-15983

USNEPSS <= 49%HIGH2018-12-06

CVEs:CVE-2018-15983

Affected products

Product	Status	Vendor	Package	Ecosystem
flashplugin-nonfree	affected	Ubuntu:14.04:LTS	flashplugin-nonfree	—
flashplugin-nonfree	affected	Ubuntu:18.04:LTS	flashplugin-nonfree	—
flashplugin-nonfree	affected	Ubuntu:16.04:LTS	flashplugin-nonfree	—

Upstream advisory

UBUNTU-CVE-2018-12407

USNEPSS <= 49%CRITICAL2018-12-11

CVEs:CVE-2018-12407

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:18.04:LTS	firefox	—
firefox	affected	Ubuntu:14.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—

Upstream advisory

UBUNTU-CVE-2018-20024

USNEPSS <= 49%HIGH2018-12-19

CVEs:CVE-2018-20024

Affected products

Product	Status	Vendor	Package	Ecosystem
italc	affected	Ubuntu:18.04:LTS	italc	—
italc	affected	Ubuntu:16.04:LTS	italc	—
libvncserver	affected	Ubuntu:16.04:LTS	libvncserver	—
libvncserver	affected	Ubuntu:14.04:LTS	libvncserver	—
libvncserver	affected	Ubuntu:18.04:LTS	libvncserver	—
ssvnc	affected	Ubuntu:18.04:LTS	ssvnc	—
ssvnc	affected	Ubuntu:16.04:LTS	ssvnc	—

Upstream advisory

UBUNTU-CVE-2018-1000833

USNEPSS <= 49%CRITICAL2018-12-20

CVEs:CVE-2018-1000833

Affected products

Product	Status	Vendor	Package	Ecosystem
zoneminder	affected	Ubuntu:Pro:16.04:LTS	zoneminder	—

Upstream advisory

UBUNTU-CVE-2018-12405

USNEPSS <= 49%CRITICAL2018-12-11

CVEs:CVE-2018-12405

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—
firefox	affected	Ubuntu:14.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:14.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:16.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2018-20147

USNEPSS <= 49%MEDIUM2018-12-14

CVEs:CVE-2018-20147

Affected products

Product	Status	Vendor	Package	Ecosystem
wordpress	affected	Ubuntu:16.04:LTS	wordpress	—
wordpress	affected	Ubuntu:18.04:LTS	wordpress	—

Upstream advisory

UBUNTU-CVE-2018-20467

USNEPSS <= 49%MEDIUM2018-12-25

CVEs:CVE-2018-20467

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:16.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:Pro:14.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2018-20022

USNEPSS <= 49%HIGH2018-12-19

CVEs:CVE-2018-20022

Affected products

Product	Status	Vendor	Package	Ecosystem
italc	affected	Ubuntu:18.04:LTS	italc	—
italc	affected	Ubuntu:16.04:LTS	italc	—
libvncserver	affected	Ubuntu:16.04:LTS	libvncserver	—
libvncserver	affected	Ubuntu:14.04:LTS	libvncserver	—
libvncserver	affected	Ubuntu:18.04:LTS	libvncserver	—
ssvnc	affected	Ubuntu:16.04:LTS	ssvnc	—
ssvnc	affected	Ubuntu:18.04:LTS	ssvnc	—
tightvnc	affected	Ubuntu:24.04:LTS	tightvnc	—
tightvnc	affected	Ubuntu:18.04:LTS	tightvnc	—
tightvnc	affected	Ubuntu:25.10	tightvnc	—
tightvnc	affected	Ubuntu:Pro:14.04:LTS	tightvnc	—
tightvnc	affected	Ubuntu:22.04:LTS	tightvnc	—
tightvnc	affected	Ubuntu:20.04:LTS	tightvnc	—
tightvnc	affected	Ubuntu:16.04:LTS	tightvnc	—

Upstream advisory

UBUNTU-CVE-2018-20622

USNEPSS <= 49%MEDIUM2018-12-31

CVEs:CVE-2018-20622

Affected products

Product	Status	Vendor	Package	Ecosystem
jasper	affected	Ubuntu:16.04:LTS	jasper	—

Upstream advisory

UBUNTU-CVE-2018-20149

USNEPSS <= 49%MEDIUM2018-12-14

CVEs:CVE-2018-20149

Affected products

Product	Status	Vendor	Package	Ecosystem
wordpress	affected	Ubuntu:16.04:LTS	wordpress	—
wordpress	affected	Ubuntu:18.04:LTS	wordpress	—

Upstream advisory

UBUNTU-CVE-2018-20584

USNEPSS <= 49%MEDIUM2018-12-30

CVEs:CVE-2018-20584

Affected products

Product	Status	Vendor	Package	Ecosystem
jasper	affected	Ubuntu:16.04:LTS	jasper	—

Upstream advisory

UBUNTU-CVE-2018-19134

USNEPSS <= 49%HIGH2018-12-17

CVEs:CVE-2018-19134

Affected products

Product	Status	Vendor	Package	Ecosystem
ghostscript	affected	Ubuntu:14.04:LTS	ghostscript	—
ghostscript	affected	Ubuntu:16.04:LTS	ghostscript	—
ghostscript	affected	Ubuntu:18.04:LTS	ghostscript	—

Upstream advisory

UBUNTU-CVE-2018-20363

USNEPSS <= 49%MEDIUM2018-12-22

CVEs:CVE-2018-20363

Affected products

Product	Status	Vendor	Package	Ecosystem
darktable	affected	Ubuntu:22.04:LTS	darktable	—
darktable	affected	Ubuntu:24.04:LTS	darktable	—
darktable	affected	Ubuntu:20.04:LTS	darktable	—
darktable	affected	Ubuntu:25.10	darktable	—
darktable	affected	Ubuntu:16.04:LTS	darktable	—
darktable	affected	Ubuntu:18.04:LTS	darktable	—
dcraw	affected	Ubuntu:24.04:LTS	dcraw	—
dcraw	affected	Ubuntu:22.04:LTS	dcraw	—
dcraw	affected	Ubuntu:20.04:LTS	dcraw	—
dcraw	affected	Ubuntu:18.04:LTS	dcraw	—
dcraw	affected	Ubuntu:25.10	dcraw	—
dcraw	affected	Ubuntu:16.04:LTS	dcraw	—
exactimage	affected	Ubuntu:16.04:LTS	exactimage	—
exactimage	affected	Ubuntu:18.04:LTS	exactimage	—
exactimage	affected	Ubuntu:24.04:LTS	exactimage	—
exactimage	affected	Ubuntu:22.04:LTS	exactimage	—
exactimage	affected	Ubuntu:25.10	exactimage	—
exactimage	affected	Ubuntu:20.04:LTS	exactimage	—
kodi	affected	Ubuntu:18.04:LTS	kodi	—
kodi	affected	Ubuntu:22.04:LTS	kodi	—
kodi	affected	Ubuntu:25.10	kodi	—
kodi	affected	Ubuntu:16.04:LTS	kodi	—
kodi	affected	Ubuntu:24.04:LTS	kodi	—
kodi	affected	Ubuntu:20.04:LTS	kodi	—
libraw	affected	Ubuntu:16.04:LTS	libraw	—
libraw	affected	Ubuntu:18.04:LTS	libraw	—
rawtherapee	affected	Ubuntu:18.04:LTS	rawtherapee	—
rawtherapee	affected	Ubuntu:22.04:LTS	rawtherapee	—
rawtherapee	affected	Ubuntu:20.04:LTS	rawtherapee	—
rawtherapee	affected	Ubuntu:16.04:LTS	rawtherapee	—
rawtherapee	affected	Ubuntu:25.10	rawtherapee	—
rawtherapee	affected	Ubuntu:24.04:LTS	rawtherapee	—
ufraw	affected	Ubuntu:18.04:LTS	ufraw	—
ufraw	affected	Ubuntu:16.04:LTS	ufraw	—

Upstream advisory

UBUNTU-CVE-2018-5808

USNEPSS <= 49%HIGH2018-12-07

CVEs:CVE-2018-5808

Affected products

Product	Status	Vendor	Package	Ecosystem
darktable	affected	Ubuntu:20.04:LTS	darktable	—
darktable	affected	Ubuntu:22.04:LTS	darktable	—
darktable	affected	Ubuntu:25.10	darktable	—
darktable	affected	Ubuntu:18.04:LTS	darktable	—
darktable	affected	Ubuntu:24.04:LTS	darktable	—
darktable	affected	Ubuntu:16.04:LTS	darktable	—
dcraw	affected	Ubuntu:25.10	dcraw	—
dcraw	affected	Ubuntu:22.04:LTS	dcraw	—
dcraw	affected	Ubuntu:20.04:LTS	dcraw	—
dcraw	affected	Ubuntu:24.04:LTS	dcraw	—
dcraw	affected	Ubuntu:16.04:LTS	dcraw	—
dcraw	affected	Ubuntu:18.04:LTS	dcraw	—
exactimage	affected	Ubuntu:22.04:LTS	exactimage	—
exactimage	affected	Ubuntu:18.04:LTS	exactimage	—
exactimage	affected	Ubuntu:25.10	exactimage	—
exactimage	affected	Ubuntu:24.04:LTS	exactimage	—
exactimage	affected	Ubuntu:20.04:LTS	exactimage	—
exactimage	affected	Ubuntu:16.04:LTS	exactimage	—
kodi	affected	Ubuntu:25.10	kodi	—
kodi	affected	Ubuntu:24.04:LTS	kodi	—
kodi	affected	Ubuntu:18.04:LTS	kodi	—
kodi	affected	Ubuntu:22.04:LTS	kodi	—
kodi	affected	Ubuntu:16.04:LTS	kodi	—
kodi	affected	Ubuntu:20.04:LTS	kodi	—
libraw	affected	Ubuntu:18.04:LTS	libraw	—
libraw	affected	Ubuntu:16.04:LTS	libraw	—
libraw	affected	Ubuntu:14.04:LTS	libraw	—
rawtherapee	affected	Ubuntu:20.04:LTS	rawtherapee	—
rawtherapee	affected	Ubuntu:25.10	rawtherapee	—
rawtherapee	affected	Ubuntu:24.04:LTS	rawtherapee	—
rawtherapee	affected	Ubuntu:22.04:LTS	rawtherapee	—
rawtherapee	affected	Ubuntu:16.04:LTS	rawtherapee	—
rawtherapee	affected	Ubuntu:18.04:LTS	rawtherapee	—
ufraw	affected	Ubuntu:18.04:LTS	ufraw	—
ufraw	affected	Ubuntu:16.04:LTS	ufraw	—

Upstream advisory

UBUNTU-CVE-2018-5809

USNEPSS <= 49%HIGH2018-12-07

CVEs:CVE-2018-5809

Affected products

Product	Status	Vendor	Package	Ecosystem
darktable	affected	Ubuntu:20.04:LTS	darktable	—
darktable	affected	Ubuntu:22.04:LTS	darktable	—
darktable	affected	Ubuntu:25.10	darktable	—
darktable	affected	Ubuntu:18.04:LTS	darktable	—
darktable	affected	Ubuntu:24.04:LTS	darktable	—
darktable	affected	Ubuntu:16.04:LTS	darktable	—
dcraw	affected	Ubuntu:25.10	dcraw	—
dcraw	affected	Ubuntu:22.04:LTS	dcraw	—
dcraw	affected	Ubuntu:20.04:LTS	dcraw	—
dcraw	affected	Ubuntu:24.04:LTS	dcraw	—
dcraw	affected	Ubuntu:16.04:LTS	dcraw	—
dcraw	affected	Ubuntu:18.04:LTS	dcraw	—
exactimage	affected	Ubuntu:22.04:LTS	exactimage	—
exactimage	affected	Ubuntu:18.04:LTS	exactimage	—
exactimage	affected	Ubuntu:25.10	exactimage	—
exactimage	affected	Ubuntu:24.04:LTS	exactimage	—
exactimage	affected	Ubuntu:20.04:LTS	exactimage	—
exactimage	affected	Ubuntu:16.04:LTS	exactimage	—
kodi	affected	Ubuntu:25.10	kodi	—
kodi	affected	Ubuntu:24.04:LTS	kodi	—
kodi	affected	Ubuntu:18.04:LTS	kodi	—
kodi	affected	Ubuntu:22.04:LTS	kodi	—
kodi	affected	Ubuntu:16.04:LTS	kodi	—
kodi	affected	Ubuntu:20.04:LTS	kodi	—
libraw	affected	Ubuntu:18.04:LTS	libraw	—
libraw	affected	Ubuntu:16.04:LTS	libraw	—
libraw	affected	Ubuntu:14.04:LTS	libraw	—
rawtherapee	affected	Ubuntu:20.04:LTS	rawtherapee	—
rawtherapee	affected	Ubuntu:25.10	rawtherapee	—
rawtherapee	affected	Ubuntu:24.04:LTS	rawtherapee	—
rawtherapee	affected	Ubuntu:22.04:LTS	rawtherapee	—
rawtherapee	affected	Ubuntu:16.04:LTS	rawtherapee	—
rawtherapee	affected	Ubuntu:18.04:LTS	rawtherapee	—
ufraw	affected	Ubuntu:18.04:LTS	ufraw	—
ufraw	affected	Ubuntu:16.04:LTS	ufraw	—

Upstream advisory

UBUNTU-CVE-2018-20365

USNEPSS <= 49%MEDIUM2018-12-22

CVEs:CVE-2018-20365

Affected products

Product	Status	Vendor	Package	Ecosystem
darktable	affected	Ubuntu:22.04:LTS	darktable	—
darktable	affected	Ubuntu:20.04:LTS	darktable	—
darktable	affected	Ubuntu:24.04:LTS	darktable	—
darktable	affected	Ubuntu:16.04:LTS	darktable	—
darktable	affected	Ubuntu:25.10	darktable	—
darktable	affected	Ubuntu:18.04:LTS	darktable	—
dcraw	affected	Ubuntu:24.04:LTS	dcraw	—
dcraw	affected	Ubuntu:25.10	dcraw	—
dcraw	affected	Ubuntu:20.04:LTS	dcraw	—
dcraw	affected	Ubuntu:22.04:LTS	dcraw	—
dcraw	affected	Ubuntu:16.04:LTS	dcraw	—
dcraw	affected	Ubuntu:18.04:LTS	dcraw	—
exactimage	affected	Ubuntu:25.10	exactimage	—
exactimage	affected	Ubuntu:24.04:LTS	exactimage	—
exactimage	affected	Ubuntu:16.04:LTS	exactimage	—
exactimage	affected	Ubuntu:20.04:LTS	exactimage	—
exactimage	affected	Ubuntu:18.04:LTS	exactimage	—
exactimage	affected	Ubuntu:22.04:LTS	exactimage	—
kodi	affected	Ubuntu:25.10	kodi	—
kodi	affected	Ubuntu:16.04:LTS	kodi	—
kodi	affected	Ubuntu:20.04:LTS	kodi	—
kodi	affected	Ubuntu:24.04:LTS	kodi	—
kodi	affected	Ubuntu:22.04:LTS	kodi	—
kodi	affected	Ubuntu:18.04:LTS	kodi	—
libraw	affected	Ubuntu:16.04:LTS	libraw	—
libraw	affected	Ubuntu:18.04:LTS	libraw	—
rawtherapee	affected	Ubuntu:16.04:LTS	rawtherapee	—
rawtherapee	affected	Ubuntu:24.04:LTS	rawtherapee	—
rawtherapee	affected	Ubuntu:18.04:LTS	rawtherapee	—
rawtherapee	affected	Ubuntu:22.04:LTS	rawtherapee	—
rawtherapee	affected	Ubuntu:20.04:LTS	rawtherapee	—
rawtherapee	affected	Ubuntu:25.10	rawtherapee	—
ufraw	affected	Ubuntu:16.04:LTS	ufraw	—
ufraw	affected	Ubuntu:18.04:LTS	ufraw	—

Upstream advisory

UBUNTU-CVE-2018-1000852

USNEPSS <= 49%CRITICAL2018-12-20

CVEs:CVE-2018-1000852

Affected products

Product	Status	Vendor	Package	Ecosystem
freerdp2	affected	Ubuntu:18.04:LTS	freerdp2	—

Upstream advisory

UBUNTU-CVE-2018-20167

USNEPSS <= 49%HIGH2018-12-17

CVEs:CVE-2018-20167

Affected products

Product	Status	Vendor	Package	Ecosystem
terminology	affected	Ubuntu:20.04:LTS	terminology	—
terminology	affected	Ubuntu:16.04:LTS	terminology	—
terminology	affected	Ubuntu:18.04:LTS	terminology	—
terminology	affected	Ubuntu:22.04:LTS	terminology	—

Upstream advisory

UBUNTU-CVE-2018-20364

USNEPSS <= 49%MEDIUM2018-12-22

CVEs:CVE-2018-20364

Affected products

Product	Status	Vendor	Package	Ecosystem
darktable	affected	Ubuntu:22.04:LTS	darktable	—
darktable	affected	Ubuntu:20.04:LTS	darktable	—
darktable	affected	Ubuntu:24.04:LTS	darktable	—
darktable	affected	Ubuntu:16.04:LTS	darktable	—
darktable	affected	Ubuntu:25.10	darktable	—
darktable	affected	Ubuntu:18.04:LTS	darktable	—
dcraw	affected	Ubuntu:24.04:LTS	dcraw	—
dcraw	affected	Ubuntu:25.10	dcraw	—
dcraw	affected	Ubuntu:20.04:LTS	dcraw	—
dcraw	affected	Ubuntu:22.04:LTS	dcraw	—
dcraw	affected	Ubuntu:16.04:LTS	dcraw	—
dcraw	affected	Ubuntu:18.04:LTS	dcraw	—
exactimage	affected	Ubuntu:25.10	exactimage	—
exactimage	affected	Ubuntu:24.04:LTS	exactimage	—
exactimage	affected	Ubuntu:16.04:LTS	exactimage	—
exactimage	affected	Ubuntu:20.04:LTS	exactimage	—
exactimage	affected	Ubuntu:18.04:LTS	exactimage	—
exactimage	affected	Ubuntu:22.04:LTS	exactimage	—
kodi	affected	Ubuntu:25.10	kodi	—
kodi	affected	Ubuntu:16.04:LTS	kodi	—
kodi	affected	Ubuntu:20.04:LTS	kodi	—
kodi	affected	Ubuntu:24.04:LTS	kodi	—
kodi	affected	Ubuntu:22.04:LTS	kodi	—
kodi	affected	Ubuntu:18.04:LTS	kodi	—
libraw	affected	Ubuntu:16.04:LTS	libraw	—
libraw	affected	Ubuntu:18.04:LTS	libraw	—
rawtherapee	affected	Ubuntu:16.04:LTS	rawtherapee	—
rawtherapee	affected	Ubuntu:24.04:LTS	rawtherapee	—
rawtherapee	affected	Ubuntu:18.04:LTS	rawtherapee	—
rawtherapee	affected	Ubuntu:22.04:LTS	rawtherapee	—
rawtherapee	affected	Ubuntu:20.04:LTS	rawtherapee	—
rawtherapee	affected	Ubuntu:25.10	rawtherapee	—
ufraw	affected	Ubuntu:16.04:LTS	ufraw	—
ufraw	affected	Ubuntu:18.04:LTS	ufraw	—

Upstream advisory

UBUNTU-CVE-2018-20190

USNEPSS <= 49%MEDIUM2018-12-17

CVEs:CVE-2018-20190

Affected products

Product	Status	Vendor	Package	Ecosystem
libsass	affected	Ubuntu:Pro:18.04:LTS	libsass	—

Upstream advisory

UBUNTU-CVE-2018-18245

USNEPSS <= 49%MEDIUM2018-12-17

CVEs:CVE-2018-18245

Affected products

Product	Status	Vendor	Package	Ecosystem
nagios3	affected	Ubuntu:16.04:LTS	nagios3	—
nagios3	affected	Ubuntu:18.04:LTS	nagios3	—

Upstream advisory

USN-3839-1

USNEPSS <= 49%HIGH2018-12-06

wavpack vulnerabilities

CVEs:CVE-2018-19840 CVE-2018-19841

Affected products

Product	Status	Vendor	Package	Ecosystem
wavpack	affected	Ubuntu:16.04:LTS	wavpack	—
wavpack	affected	Ubuntu:14.04:LTS	wavpack	—
wavpack	affected	Ubuntu:18.04:LTS	wavpack	—

Upstream advisory

UBUNTU-CVE-2018-19841

USNEPSS <= 49%MEDIUM2018-12-04

CVEs:CVE-2018-19841

Affected products

Product	Status	Vendor	Package	Ecosystem
wavpack	affected	Ubuntu:18.04:LTS	wavpack	—

Upstream advisory

UBUNTU-CVE-2018-20573

USNEPSS <= 49%MEDIUM2018-12-28

CVEs:CVE-2018-20573

Affected products

Product	Status	Vendor	Package	Ecosystem
yaml-cpp	affected	Ubuntu:16.04:LTS	yaml-cpp	—
yaml-cpp	affected	Ubuntu:14.04:LTS	yaml-cpp	—
yaml-cpp	affected	Ubuntu:18.04:LTS	yaml-cpp	—
yaml-cpp	affected	Ubuntu:20.04:LTS	yaml-cpp	—
yaml-cpp0.3	affected	Ubuntu:18.04:LTS	yaml-cpp0.3	—
yaml-cpp0.3	affected	Ubuntu:16.04:LTS	yaml-cpp0.3	—

Upstream advisory

UBUNTU-CVE-2018-20574

USNEPSS <= 49%MEDIUM2018-12-28

CVEs:CVE-2018-20574

Affected products

Product	Status	Vendor	Package	Ecosystem
yaml-cpp	affected	Ubuntu:16.04:LTS	yaml-cpp	—
yaml-cpp	affected	Ubuntu:14.04:LTS	yaml-cpp	—
yaml-cpp	affected	Ubuntu:18.04:LTS	yaml-cpp	—
yaml-cpp	affected	Ubuntu:20.04:LTS	yaml-cpp	—
yaml-cpp0.3	affected	Ubuntu:18.04:LTS	yaml-cpp0.3	—
yaml-cpp0.3	affected	Ubuntu:16.04:LTS	yaml-cpp0.3	—

Upstream advisory

UBUNTU-CVE-2018-25011

USNEPSS <= 49%CRITICAL2018-12-31

CVEs:CVE-2018-25011

Affected products

Product	Status	Vendor	Package	Ecosystem
libwebp	affected	Ubuntu:Pro:14.04:LTS	libwebp	—
libwebp	affected	Ubuntu:18.04:LTS	libwebp	—
libwebp	affected	Ubuntu:Pro:16.04:LTS	libwebp	—
libwebp	affected	Ubuntu:20.04:LTS	libwebp	—

Upstream advisory

UBUNTU-CVE-2018-15518

USNEPSS <= 49%HIGH2018-12-18

CVEs:CVE-2018-15518

Affected products

Product	Status	Vendor	Package	Ecosystem
qtbase-opensource-src	affected	Ubuntu:16.04:LTS	qtbase-opensource-src	—
qtbase-opensource-src	affected	Ubuntu:18.04:LTS	qtbase-opensource-src	—

Upstream advisory

UBUNTU-CVE-2018-20023

USNEPSS <= 49%HIGH2018-12-19

CVEs:CVE-2018-20023

Affected products

Product	Status	Vendor	Package	Ecosystem
italc	affected	Ubuntu:16.04:LTS	italc	—
italc	affected	Ubuntu:18.04:LTS	italc	—
libvncserver	affected	Ubuntu:18.04:LTS	libvncserver	—
libvncserver	affected	Ubuntu:14.04:LTS	libvncserver	—
libvncserver	affected	Ubuntu:16.04:LTS	libvncserver	—

Upstream advisory

UBUNTU-CVE-2018-16876

USNEPSS <= 49%HIGH2018-12-18

CVEs:CVE-2018-16876

Affected products

Product	Status	Vendor	Package	Ecosystem
ansible	affected	Ubuntu:18.04:LTS	ansible	—

Upstream advisory

UBUNTU-CVE-2018-19787

USNEPSS <= 49%MEDIUM2018-12-02

CVEs:CVE-2018-19787

Affected products

Product	Status	Vendor	Package	Ecosystem
lxml	affected	Ubuntu:14.04:LTS	lxml	—
lxml	affected	Ubuntu:16.04:LTS	lxml	—
lxml	affected	Ubuntu:18.04:LTS	lxml	—

Upstream advisory

UBUNTU-CVE-2018-19870

USNEPSS <= 49%HIGH2018-12-26

CVEs:CVE-2018-19870

Affected products

Product	Status	Vendor	Package	Ecosystem
qtbase-opensource-src	affected	Ubuntu:16.04:LTS	qtbase-opensource-src	—
qtbase-opensource-src	affected	Ubuntu:18.04:LTS	qtbase-opensource-src	—

Upstream advisory

UBUNTU-CVE-2018-20545

USNEPSS <= 49%HIGH2018-12-28

CVEs:CVE-2018-20545

Affected products

Product	Status	Vendor	Package	Ecosystem
libcaca	affected	Ubuntu:18.04:LTS	libcaca	—
libcaca	affected	Ubuntu:14.04:LTS	libcaca	—
libcaca	affected	Ubuntu:16.04:LTS	libcaca	—

Upstream advisory

UBUNTU-CVE-2018-20534

USNEPSS <= 49%MEDIUM2018-12-28

CVEs:CVE-2018-20534

Affected products

Product	Status	Vendor	Package	Ecosystem
libsolv	affected	Ubuntu:Pro:16.04:LTS	libsolv	—
libsolv	affected	Ubuntu:Pro:18.04:LTS	libsolv	—

Upstream advisory

UBUNTU-CVE-2018-20546

USNEPSS <= 49%HIGH2018-12-28

CVEs:CVE-2018-20546

Affected products

Product	Status	Vendor	Package	Ecosystem
libcaca	affected	Ubuntu:18.04:LTS	libcaca	—
libcaca	affected	Ubuntu:14.04:LTS	libcaca	—
libcaca	affected	Ubuntu:16.04:LTS	libcaca	—

Upstream advisory

UBUNTU-CVE-2018-20184

USNEPSS <= 49%MEDIUM2018-12-17

CVEs:CVE-2018-20184

Affected products

Product	Status	Vendor	Package	Ecosystem
graphicsmagick	affected	Ubuntu:Pro:16.04:LTS	graphicsmagick	—
graphicsmagick	affected	Ubuntu:Pro:14.04:LTS	graphicsmagick	—
graphicsmagick	affected	Ubuntu:18.04:LTS	graphicsmagick	—

Upstream advisory

UBUNTU-CVE-2018-19840

USNEPSS <= 49%MEDIUM2018-12-04

CVEs:CVE-2018-19840

Affected products

Product	Status	Vendor	Package	Ecosystem
wavpack	affected	Ubuntu:16.04:LTS	wavpack	—
wavpack	affected	Ubuntu:14.04:LTS	wavpack	—
wavpack	affected	Ubuntu:18.04:LTS	wavpack	—

Upstream advisory

UBUNTU-CVE-2018-20189

USNEPSS <= 49%MEDIUM2018-12-17

CVEs:CVE-2018-20189

Affected products

Product	Status	Vendor	Package	Ecosystem
graphicsmagick	affected	Ubuntu:Pro:16.04:LTS	graphicsmagick	—
graphicsmagick	affected	Ubuntu:Pro:14.04:LTS	graphicsmagick	—
graphicsmagick	affected	Ubuntu:18.04:LTS	graphicsmagick	—

Upstream advisory

UBUNTU-CVE-2018-20570

USNEPSS <= 49%MEDIUM2018-12-28

CVEs:CVE-2018-20570

Affected products

Product	Status	Vendor	Package	Ecosystem
jasper	affected	Ubuntu:16.04:LTS	jasper	—

Upstream advisory

UBUNTU-CVE-2018-20430

USNEPSS <= 49%MEDIUM2018-12-24

CVEs:CVE-2018-20430

Affected products

Product	Status	Vendor	Package	Ecosystem
libextractor	affected	Ubuntu:Pro:14.04:LTS	libextractor	—
libextractor	affected	Ubuntu:16.04:LTS	libextractor	—
libextractor	affected	Ubuntu:18.04:LTS	libextractor	—

Upstream advisory

UBUNTU-CVE-2018-20431

USNEPSS <= 49%MEDIUM2018-12-24

CVEs:CVE-2018-20431

Affected products

Product	Status	Vendor	Package	Ecosystem
libextractor	affected	Ubuntu:Pro:14.04:LTS	libextractor	—
libextractor	affected	Ubuntu:16.04:LTS	libextractor	—
libextractor	affected	Ubuntu:18.04:LTS	libextractor	—

Upstream advisory

UBUNTU-CVE-2018-25010

USNEPSS <= 49%CRITICAL2018-12-31

CVEs:CVE-2018-25010

Affected products

Product	Status	Vendor	Package	Ecosystem
libwebp	affected	Ubuntu:18.04:LTS	libwebp	—
libwebp	affected	Ubuntu:Pro:14.04:LTS	libwebp	—
libwebp	affected	Ubuntu:Pro:16.04:LTS	libwebp	—
libwebp	affected	Ubuntu:20.04:LTS	libwebp	—

Upstream advisory

UBUNTU-CVE-2018-25014

USNEPSS <= 49%CRITICAL2018-12-31

CVEs:CVE-2018-25014

Affected products

Product	Status	Vendor	Package	Ecosystem
libwebp	affected	Ubuntu:18.04:LTS	libwebp	—
libwebp	affected	Ubuntu:Pro:14.04:LTS	libwebp	—
libwebp	affected	Ubuntu:Pro:16.04:LTS	libwebp	—
libwebp	affected	Ubuntu:20.04:LTS	libwebp	—

Upstream advisory

USN-3838-1

USNEPSS <= 49%HIGH2018-12-06

libraw vulnerabilities

CVEs:CVE-2018-5807 CVE-2018-5810 CVE-2018-5811 CVE-2018-5812 CVE-2018-5813 CVE-2018-5815 CVE-2018-5816

Affected products

Product	Status	Vendor	Package	Ecosystem
libraw	affected	Ubuntu:16.04:LTS	libraw	—
libraw	affected	Ubuntu:14.04:LTS	libraw	—
libraw	affected	Ubuntu:18.04:LTS	libraw	—

Upstream advisory

UBUNTU-CVE-2018-19869

USNEPSS <= 49%MEDIUM2018-12-26

CVEs:CVE-2018-19869

Affected products

Product	Status	Vendor	Package	Ecosystem
qt4-x11	affected	Ubuntu:14.04:LTS	qt4-x11	—
qt4-x11	affected	Ubuntu:16.04:LTS	qt4-x11	—
qt4-x11	affected	Ubuntu:18.04:LTS	qt4-x11	—
qtsvg-opensource-src	affected	Ubuntu:18.04:LTS	qtsvg-opensource-src	—
qtsvg-opensource-src	affected	Ubuntu:16.04:LTS	qtsvg-opensource-src	—

Upstream advisory

UBUNTU-CVE-2018-19865

USNEPSS <= 49%HIGH2018-12-05

CVEs:CVE-2018-19865

Affected products

Product	Status	Vendor	Package	Ecosystem
qtvirtualkeyboard-opensource-src	affected	Ubuntu:22.04:LTS	qtvirtualkeyboard-opensource-src	—
qtvirtualkeyboard-opensource-src	affected	Ubuntu:18.04:LTS	qtvirtualkeyboard-opensource-src	—
qtvirtualkeyboard-opensource-src	affected	Ubuntu:24.04:LTS	qtvirtualkeyboard-opensource-src	—
qtvirtualkeyboard-opensource-src	affected	Ubuntu:20.04:LTS	qtvirtualkeyboard-opensource-src	—
qtvirtualkeyboard-opensource-src	affected	Ubuntu:25.10	qtvirtualkeyboard-opensource-src	—

Upstream advisory

UBUNTU-CVE-2018-20533

USNEPSS <= 49%MEDIUM2018-12-28

CVEs:CVE-2018-20533

Affected products

Product	Status	Vendor	Package	Ecosystem
libsolv	affected	Ubuntu:Pro:16.04:LTS	libsolv	—
libsolv	affected	Ubuntu:Pro:18.04:LTS	libsolv	—

Upstream advisory

UBUNTU-CVE-2018-19839

USNEPSS <= 49%MEDIUM2018-12-04

CVEs:CVE-2018-19839

Affected products

Product	Status	Vendor	Package	Ecosystem
libsass	affected	Ubuntu:Pro:18.04:LTS	libsass	—
libsass	affected	Ubuntu:16.04:LTS	libsass	—

Upstream advisory

UBUNTU-CVE-2018-20532

USNEPSS <= 49%MEDIUM2018-12-28

CVEs:CVE-2018-20532

Affected products

Product	Status	Vendor	Package	Ecosystem
libsolv	affected	Ubuntu:Pro:16.04:LTS	libsolv	—
libsolv	affected	Ubuntu:Pro:18.04:LTS	libsolv	—

Upstream advisory

UBUNTU-CVE-2018-20185

USNEPSS <= 49%MEDIUM2018-12-17

CVEs:CVE-2018-20185

Affected products

Product	Status	Vendor	Package	Ecosystem
graphicsmagick	affected	Ubuntu:Pro:16.04:LTS	graphicsmagick	—
graphicsmagick	affected	Ubuntu:Pro:14.04:LTS	graphicsmagick	—
graphicsmagick	affected	Ubuntu:18.04:LTS	graphicsmagick	—

Upstream advisory

UBUNTU-CVE-2018-25009

USNEPSS <= 49%CRITICAL2018-12-31

CVEs:CVE-2018-25009

Affected products

Product	Status	Vendor	Package	Ecosystem
libwebp	affected	Ubuntu:18.04:LTS	libwebp	—
libwebp	affected	Ubuntu:Pro:14.04:LTS	libwebp	—
libwebp	affected	Ubuntu:Pro:16.04:LTS	libwebp	—
libwebp	affected	Ubuntu:20.04:LTS	libwebp	—

Upstream advisory

UBUNTU-CVE-2018-20337

USNEPSS <= 49%HIGH2018-12-21

CVEs:CVE-2018-20337

Affected products

Product	Status	Vendor	Package	Ecosystem
darktable	affected	Ubuntu:16.04:LTS	darktable	—
darktable	affected	Ubuntu:24.04:LTS	darktable	—
darktable	affected	Ubuntu:20.04:LTS	darktable	—
darktable	affected	Ubuntu:18.04:LTS	darktable	—
darktable	affected	Ubuntu:22.04:LTS	darktable	—
darktable	affected	Ubuntu:25.10	darktable	—
dcraw	affected	Ubuntu:25.10	dcraw	—
dcraw	affected	Ubuntu:20.04:LTS	dcraw	—
dcraw	affected	Ubuntu:16.04:LTS	dcraw	—
dcraw	affected	Ubuntu:18.04:LTS	dcraw	—
dcraw	affected	Ubuntu:22.04:LTS	dcraw	—
dcraw	affected	Ubuntu:24.04:LTS	dcraw	—
exactimage	affected	Ubuntu:18.04:LTS	exactimage	—
exactimage	affected	Ubuntu:24.04:LTS	exactimage	—
exactimage	affected	Ubuntu:16.04:LTS	exactimage	—
exactimage	affected	Ubuntu:20.04:LTS	exactimage	—
exactimage	affected	Ubuntu:25.10	exactimage	—
exactimage	affected	Ubuntu:22.04:LTS	exactimage	—
kodi	affected	Ubuntu:16.04:LTS	kodi	—
kodi	affected	Ubuntu:25.10	kodi	—
kodi	affected	Ubuntu:22.04:LTS	kodi	—
kodi	affected	Ubuntu:18.04:LTS	kodi	—
kodi	affected	Ubuntu:24.04:LTS	kodi	—
kodi	affected	Ubuntu:20.04:LTS	kodi	—
libraw	affected	Ubuntu:18.04:LTS	libraw	—
rawtherapee	affected	Ubuntu:16.04:LTS	rawtherapee	—
rawtherapee	affected	Ubuntu:24.04:LTS	rawtherapee	—
rawtherapee	affected	Ubuntu:20.04:LTS	rawtherapee	—
rawtherapee	affected	Ubuntu:22.04:LTS	rawtherapee	—
rawtherapee	affected	Ubuntu:25.10	rawtherapee	—
rawtherapee	affected	Ubuntu:18.04:LTS	rawtherapee	—
ufraw	affected	Ubuntu:18.04:LTS	ufraw	—
ufraw	affected	Ubuntu:16.04:LTS	ufraw	—

Upstream advisory

UBUNTU-CVE-2018-25012

USNEPSS <= 49%CRITICAL2018-12-31

CVEs:CVE-2018-25012

Affected products

Product	Status	Vendor	Package	Ecosystem
libwebp	affected	Ubuntu:18.04:LTS	libwebp	—
libwebp	affected	Ubuntu:Pro:14.04:LTS	libwebp	—
libwebp	affected	Ubuntu:Pro:16.04:LTS	libwebp	—
libwebp	affected	Ubuntu:20.04:LTS	libwebp	—

Upstream advisory

UBUNTU-CVE-2018-25013

USNEPSS <= 49%CRITICAL2018-12-31

CVEs:CVE-2018-25013

Affected products

Product	Status	Vendor	Package	Ecosystem
libwebp	affected	Ubuntu:18.04:LTS	libwebp	—
libwebp	affected	Ubuntu:Pro:14.04:LTS	libwebp	—
libwebp	affected	Ubuntu:Pro:16.04:LTS	libwebp	—
libwebp	affected	Ubuntu:20.04:LTS	libwebp	—

Upstream advisory

UBUNTU-CVE-2018-20153

USNEPSS <= 49%MEDIUM2018-12-14

CVEs:CVE-2018-20153

Affected products

Product	Status	Vendor	Package	Ecosystem
wordpress	affected	Ubuntu:16.04:LTS	wordpress	—
wordpress	affected	Ubuntu:18.04:LTS	wordpress	—

Upstream advisory

UBUNTU-CVE-2018-19827

USNEPSS <= 49%HIGH2018-12-03

CVEs:CVE-2018-19827

Affected products

Product	Status	Vendor	Package	Ecosystem
libsass	affected	Ubuntu:Pro:18.04:LTS	libsass	—

Upstream advisory

UBUNTU-CVE-2018-20004

USNEPSS <= 49%HIGH2018-12-10

CVEs:CVE-2018-20004

Affected products

Product	Status	Vendor	Package	Ecosystem
mxml	affected	Ubuntu:16.04:LTS	mxml	—
mxml	affected	Ubuntu:18.04:LTS	mxml	—

Upstream advisory

UBUNTU-CVE-2018-20551

USNEPSS <= 49%MEDIUM2018-12-28

CVEs:CVE-2018-20551

Affected products

Product	Status	Vendor	Package	Ecosystem
poppler	affected	Ubuntu:18.04:LTS	poppler	—
poppler	affected	Ubuntu:16.04:LTS	poppler	—

Upstream advisory

UBUNTU-CVE-2018-18508

USNEPSS <= 49%MEDIUM2018-12-31

CVEs:CVE-2018-18508

Affected products

Product	Status	Vendor	Package	Ecosystem
nss	affected	Ubuntu:16.04:LTS	nss	—
nss	affected	Ubuntu:18.04:LTS	nss	—
nss	affected	Ubuntu:14.04:LTS	nss	—

Upstream advisory

UBUNTU-CVE-2018-19932

USNEPSS <= 49%MEDIUM2018-12-07

CVEs:CVE-2018-19932

Affected products

Product	Status	Vendor	Package	Ecosystem
binutils	affected	Ubuntu:Pro:16.04:LTS	binutils	—
binutils	affected	Ubuntu:Pro:14.04:LTS	binutils	—
binutils	affected	Ubuntu:18.04:LTS	binutils	—

Upstream advisory

UBUNTU-CVE-2018-1000825

USNEPSS <= 49%CRITICAL2018-12-20

CVEs:CVE-2018-1000825

Affected products

Product	Status	Vendor	Package	Ecosystem
freecol	affected	Ubuntu:16.04:LTS	freecol	—
freecol	affected	Ubuntu:18.04:LTS	freecol	—

Upstream advisory

UBUNTU-CVE-2018-6334

USNEPSS <= 49%CRITICAL2018-12-31

CVEs:CVE-2018-6334

Affected products

Product	Status	Vendor	Package	Ecosystem
hhvm	affected	Ubuntu:18.04:LTS	hhvm	—
hhvm	affected	Ubuntu:16.04:LTS	hhvm	—

Upstream advisory

UBUNTU-CVE-2018-20544

USNEPSS <= 49%MEDIUM2018-12-28

CVEs:CVE-2018-20544

Affected products

Product	Status	Vendor	Package	Ecosystem
libcaca	affected	Ubuntu:18.04:LTS	libcaca	—
libcaca	affected	Ubuntu:14.04:LTS	libcaca	—
libcaca	affected	Ubuntu:16.04:LTS	libcaca	—

Upstream advisory

UBUNTU-CVE-2018-19871

USNEPSS <= 49%MEDIUM2018-12-26

CVEs:CVE-2018-19871

Affected products

Product	Status	Vendor	Package	Ecosystem
qt4-x11	affected	Ubuntu:18.04:LTS	qt4-x11	—
qt4-x11	affected	Ubuntu:14.04:LTS	qt4-x11	—
qt4-x11	affected	Ubuntu:16.04:LTS	qt4-x11	—
qtimageformats-opensource-src	affected	Ubuntu:25.10	qtimageformats-opensource-src	—
qtimageformats-opensource-src	affected	Ubuntu:16.04:LTS	qtimageformats-opensource-src	—
qtimageformats-opensource-src	affected	Ubuntu:24.04:LTS	qtimageformats-opensource-src	—
qtimageformats-opensource-src	affected	Ubuntu:22.04:LTS	qtimageformats-opensource-src	—
qtimageformats-opensource-src	affected	Ubuntu:18.04:LTS	qtimageformats-opensource-src	—
qtimageformats-opensource-src	affected	Ubuntu:20.04:LTS	qtimageformats-opensource-src	—

Upstream advisory

UBUNTU-CVE-2018-1279

USNEPSS <= 49%HIGH2018-12-10

CVEs:CVE-2018-1279

Affected products

Product	Status	Vendor	Package	Ecosystem
rabbitmq-server	affected	Ubuntu:20.04:LTS	rabbitmq-server	—
rabbitmq-server	affected	Ubuntu:Pro:16.04:LTS	rabbitmq-server	—
rabbitmq-server	affected	Ubuntu:18.04:LTS	rabbitmq-server	—

Upstream advisory

UBUNTU-CVE-2018-19797

USNEPSS <= 49%MEDIUM2018-12-03

CVEs:CVE-2018-19797

Affected products

Product	Status	Vendor	Package	Ecosystem
libsass	affected	Ubuntu:Pro:18.04:LTS	libsass	—
libsass	affected	Ubuntu:16.04:LTS	libsass	—

Upstream advisory

UBUNTU-CVE-2018-20549

USNEPSS <= 49%HIGH2018-12-28

CVEs:CVE-2018-20549

Affected products

Product	Status	Vendor	Package	Ecosystem
libcaca	affected	Ubuntu:18.04:LTS	libcaca	—
libcaca	affected	Ubuntu:14.04:LTS	libcaca	—
libcaca	affected	Ubuntu:16.04:LTS	libcaca	—

Upstream advisory

UBUNTU-CVE-2018-20002

USNEPSS <= 49%MEDIUM2018-12-10

CVEs:CVE-2018-20002

Affected products

Product	Status	Vendor	Package	Ecosystem
binutils	affected	Ubuntu:18.04:LTS	binutils	—
binutils	affected	Ubuntu:Pro:14.04:LTS	binutils	—
binutils	affected	Ubuntu:Pro:16.04:LTS	binutils	—

Upstream advisory

UBUNTU-CVE-2018-20623

USNEPSS <= 49%MEDIUM2018-12-31

CVEs:CVE-2018-20623

Affected products

Product	Status	Vendor	Package	Ecosystem
binutils	affected	Ubuntu:Pro:16.04:LTS	binutils	—
binutils	affected	Ubuntu:Pro:14.04:LTS	binutils	—
binutils	affected	Ubuntu:18.04:LTS	binutils	—

Upstream advisory

UBUNTU-CVE-2018-20548

USNEPSS <= 49%HIGH2018-12-28

CVEs:CVE-2018-20548

Affected products

Product	Status	Vendor	Package	Ecosystem
libcaca	affected	Ubuntu:18.04:LTS	libcaca	—
libcaca	affected	Ubuntu:14.04:LTS	libcaca	—
libcaca	affected	Ubuntu:16.04:LTS	libcaca	—

Upstream advisory

UBUNTU-CVE-2018-20547

USNEPSS <= 49%HIGH2018-12-28

CVEs:CVE-2018-20547

Affected products

Product	Status	Vendor	Package	Ecosystem
libcaca	affected	Ubuntu:14.04:LTS	libcaca	—
libcaca	affected	Ubuntu:16.04:LTS	libcaca	—
libcaca	affected	Ubuntu:18.04:LTS	libcaca	—

Upstream advisory

UBUNTU-CVE-2018-19837

USNEPSS <= 49%MEDIUM2018-12-04

CVEs:CVE-2018-19837

Affected products

Product	Status	Vendor	Package	Ecosystem
libsass	affected	Ubuntu:Pro:18.04:LTS	libsass	—
libsass	affected	Ubuntu:16.04:LTS	libsass	—

Upstream advisory

UBUNTU-CVE-2018-20996

USNEPSS <= 49%CRITICAL2018-12-09

CVEs:CVE-2018-20996

Affected products

Product	Status	Vendor	Package	Ecosystem
rust-crossbeam-epoch	affected	Ubuntu:24.04:LTS	rust-crossbeam-epoch	—
rust-crossbeam-epoch	affected	Ubuntu:25.10	rust-crossbeam-epoch	—
rust-crossbeam-epoch	affected	Ubuntu:22.04:LTS	rust-crossbeam-epoch	—
rust-crossbeam-epoch	affected	Ubuntu:20.04:LTS	rust-crossbeam-epoch	—

Upstream advisory

UBUNTU-CVE-2018-5804

USNEPSS <= 49%MEDIUM2018-12-07

CVEs:CVE-2018-5804

Affected products

Product	Status	Vendor	Package	Ecosystem
darktable	affected	Ubuntu:18.04:LTS	darktable	—
darktable	affected	Ubuntu:24.04:LTS	darktable	—
darktable	affected	Ubuntu:20.04:LTS	darktable	—
darktable	affected	Ubuntu:16.04:LTS	darktable	—
darktable	affected	Ubuntu:25.10	darktable	—
darktable	affected	Ubuntu:22.04:LTS	darktable	—
dcraw	affected	Ubuntu:20.04:LTS	dcraw	—
dcraw	affected	Ubuntu:24.04:LTS	dcraw	—
dcraw	affected	Ubuntu:22.04:LTS	dcraw	—
dcraw	affected	Ubuntu:18.04:LTS	dcraw	—
dcraw	affected	Ubuntu:25.10	dcraw	—
dcraw	affected	Ubuntu:16.04:LTS	dcraw	—
exactimage	affected	Ubuntu:18.04:LTS	exactimage	—
exactimage	affected	Ubuntu:16.04:LTS	exactimage	—
exactimage	affected	Ubuntu:22.04:LTS	exactimage	—
exactimage	affected	Ubuntu:24.04:LTS	exactimage	—
exactimage	affected	Ubuntu:25.10	exactimage	—
exactimage	affected	Ubuntu:20.04:LTS	exactimage	—
kodi	affected	Ubuntu:18.04:LTS	kodi	—
kodi	affected	Ubuntu:22.04:LTS	kodi	—
kodi	affected	Ubuntu:25.10	kodi	—
kodi	affected	Ubuntu:16.04:LTS	kodi	—
kodi	affected	Ubuntu:20.04:LTS	kodi	—
kodi	affected	Ubuntu:24.04:LTS	kodi	—
libraw	affected	Ubuntu:16.04:LTS	libraw	—
rawtherapee	affected	Ubuntu:25.10	rawtherapee	—
rawtherapee	affected	Ubuntu:22.04:LTS	rawtherapee	—
rawtherapee	affected	Ubuntu:18.04:LTS	rawtherapee	—
rawtherapee	affected	Ubuntu:20.04:LTS	rawtherapee	—
rawtherapee	affected	Ubuntu:24.04:LTS	rawtherapee	—
rawtherapee	affected	Ubuntu:16.04:LTS	rawtherapee	—
ufraw	affected	Ubuntu:18.04:LTS	ufraw	—
ufraw	affected	Ubuntu:16.04:LTS	ufraw	—

Upstream advisory

UBUNTU-CVE-2018-18509

USNEPSS <= 49%MEDIUM2018-12-31

CVEs:CVE-2018-18509

Affected products

Product	Status	Vendor	Package	Ecosystem
thunderbird	affected	Ubuntu:14.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:16.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2018-1000875

USNEPSS <= 49%CRITICAL2018-12-20

CVEs:CVE-2018-1000875

Affected products

Product	Status	Vendor	Package	Ecosystem
boinc	affected	Ubuntu:Pro:20.04:LTS	boinc	—
boinc	affected	Ubuntu:Pro:16.04:LTS	boinc	—
boinc	affected	Ubuntu:Pro:18.04:LTS	boinc	—

Upstream advisory

UBUNTU-CVE-2018-18495

USNEPSS <= 49%MEDIUM2018-12-11

CVEs:CVE-2018-18495

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:14.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—

Upstream advisory

UBUNTU-CVE-2018-18511

USNEPSS <= 49%MEDIUM2018-12-31

CVEs:CVE-2018-18511

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—
firefox	affected	Ubuntu:14.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
thunderbird	affected	Ubuntu:16.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2018-1000871

USNEPSS <= 49%CRITICAL2018-12-20

CVEs:CVE-2018-1000871

Affected products

Product	Status	Vendor	Package	Ecosystem
hoteldruid	affected	Ubuntu:20.04:LTS	hoteldruid	—
hoteldruid	affected	Ubuntu:16.04:LTS	hoteldruid	—
hoteldruid	affected	Ubuntu:22.04:LTS	hoteldruid	—
hoteldruid	affected	Ubuntu:24.04:LTS	hoteldruid	—
hoteldruid	affected	Ubuntu:25.10	hoteldruid	—
hoteldruid	affected	Ubuntu:18.04:LTS	hoteldruid	—

Upstream advisory

UBUNTU-CVE-2018-19931

USNEPSS <= 49%HIGH2018-12-07

CVEs:CVE-2018-19931

Affected products

Product	Status	Vendor	Package	Ecosystem
binutils	affected	Ubuntu:Pro:16.04:LTS	binutils	—
binutils	affected	Ubuntu:Pro:14.04:LTS	binutils	—
binutils	affected	Ubuntu:18.04:LTS	binutils	—

Upstream advisory

UBUNTU-CVE-2018-20349

USNEPSS <= 49%MEDIUM2018-12-22

CVEs:CVE-2018-20349

Affected products

Product	Status	Vendor	Package	Ecosystem
igraph	affected	Ubuntu:16.04:LTS	igraph	—
igraph	affected	Ubuntu:18.04:LTS	igraph	—

Upstream advisory

UBUNTU-CVE-2018-18494

USNEPSS <= 49%MEDIUM2018-12-11

CVEs:CVE-2018-18494

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:14.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:14.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:16.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2018-20452

USNEPSS <= 49%HIGH2018-12-25

CVEs:CVE-2018-20452

Affected products

Product	Status	Vendor	Package	Ecosystem
r-cran-readxl	affected	Ubuntu:24.04:LTS	r-cran-readxl	—
r-cran-readxl	affected	Ubuntu:22.04:LTS	r-cran-readxl	—
r-cran-readxl	affected	Ubuntu:18.04:LTS	r-cran-readxl	—
r-cran-readxl	affected	Ubuntu:20.04:LTS	r-cran-readxl	—
r-cran-readxl	affected	Ubuntu:16.04:LTS	r-cran-readxl	—
r-cran-readxl	affected	Ubuntu:25.10	r-cran-readxl	—

Upstream advisory

UBUNTU-CVE-2018-20425

USNEPSS <= 49%HIGH2018-12-24

CVEs:CVE-2018-20425

Affected products

Product	Status	Vendor	Package	Ecosystem
ming	affected	Ubuntu:16.04:LTS	ming	—

Upstream advisory

UBUNTU-CVE-2018-20426

USNEPSS <= 49%HIGH2018-12-24

CVEs:CVE-2018-20426

Affected products

Product	Status	Vendor	Package	Ecosystem
ming	affected	Ubuntu:16.04:LTS	ming	—

Upstream advisory

UBUNTU-CVE-2018-20428

USNEPSS <= 49%HIGH2018-12-24

CVEs:CVE-2018-20428

Affected products

Product	Status	Vendor	Package	Ecosystem
ming	affected	Ubuntu:16.04:LTS	ming	—

Upstream advisory

UBUNTU-CVE-2018-20429

USNEPSS <= 49%HIGH2018-12-24

CVEs:CVE-2018-20429

Affected products

Product	Status	Vendor	Package	Ecosystem
ming	affected	Ubuntu:16.04:LTS	ming	—

Upstream advisory

UBUNTU-CVE-2018-20592

USNEPSS <= 49%MEDIUM2018-12-30

CVEs:CVE-2018-20592

Affected products

Product	Status	Vendor	Package	Ecosystem
mxml	affected	Ubuntu:16.04:LTS	mxml	—
mxml	affected	Ubuntu:20.04:LTS	mxml	—
mxml	affected	Ubuntu:25.10	mxml	—
mxml	affected	Ubuntu:22.04:LTS	mxml	—
mxml	affected	Ubuntu:24.04:LTS	mxml	—
mxml	affected	Ubuntu:18.04:LTS	mxml	—

Upstream advisory

UBUNTU-CVE-2018-18249

USNEPSS <= 49%CRITICAL2018-12-17

CVEs:CVE-2018-18249

Affected products

Product	Status	Vendor	Package	Ecosystem
icingaweb2	affected	Ubuntu:16.04:LTS	icingaweb2	—
icingaweb2	affected	Ubuntu:22.04:LTS	icingaweb2	—
icingaweb2	affected	Ubuntu:20.04:LTS	icingaweb2	—
icingaweb2	affected	Ubuntu:25.10	icingaweb2	—
icingaweb2	affected	Ubuntu:18.04:LTS	icingaweb2	—
icingaweb2	affected	Ubuntu:24.04:LTS	icingaweb2	—

Upstream advisory

USN-3843-1

USNEPSS <= 49%CRITICAL2018-12-11

pixman vulnerability

CVEs:CVE-2015-5297

Affected products

Product	Status	Vendor	Package	Ecosystem
pixman	affected	Ubuntu	—	—
pixman	affected	Ubuntu:14.04:LTS	pixman	—

Upstream advisory

UBUNTU-CVE-2018-19790

USNEPSS <= 49%MEDIUM2018-12-18

CVEs:CVE-2018-19790

Affected products

Product	Status	Vendor	Package	Ecosystem
symfony	affected	Ubuntu:Pro:18.04:LTS	symfony	—
symfony	affected	Ubuntu:16.04:LTS	symfony	—

Upstream advisory

UBUNTU-CVE-2018-20540

USNEPSS <= 49%MEDIUM2018-12-28

CVEs:CVE-2018-20540

Affected products

Product	Status	Vendor	Package	Ecosystem
liblas	affected	Ubuntu:16.04:LTS	liblas	—
liblas	affected	Ubuntu:18.04:LTS	liblas	—

Upstream advisory

UBUNTU-CVE-2018-6335

USNEPSS <= 49%HIGH2018-12-31

CVEs:CVE-2018-6335

Affected products

Product	Status	Vendor	Package	Ecosystem
hhvm	affected	Ubuntu:18.04:LTS	hhvm	—
hhvm	affected	Ubuntu:16.04:LTS	hhvm	—

Upstream advisory

UBUNTU-CVE-2018-4437

USNEPSS <= 49%HIGH2018-12-06

CVEs:CVE-2018-4437

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:16.04:LTS	webkit2gtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—

Upstream advisory

UBUNTU-CVE-2018-4464

USNEPSS <= 49%HIGH2018-12-06

CVEs:CVE-2018-4464

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
webkit2gtk	affected	Ubuntu:16.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—

Upstream advisory

UBUNTU-CVE-2018-16884

USNEPSS <= 49%HIGH2018-12-18

CVEs:CVE-2018-16884

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:18.04:LTS	linux	—
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:14.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure-6.11	affected	Ubuntu:24.04:LTS	linux-azure-6.11	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp-6.11	affected	Ubuntu:24.04:LTS	linux-gcp-6.11	—
linux-gcp-edge	affected	Ubuntu:18.04:LTS	linux-gcp-edge	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe-6.11	affected	Ubuntu:24.04:LTS	linux-hwe-6.11	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lowlatency-hwe-6.11	affected	Ubuntu:24.04:LTS	linux-lowlatency-hwe-6.11	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2018-6340

USNEPSS <= 49%HIGH2018-12-31

CVEs:CVE-2018-6340

Affected products

Product	Status	Vendor	Package	Ecosystem
hhvm	affected	Ubuntu:18.04:LTS	hhvm	—
hhvm	affected	Ubuntu:16.04:LTS	hhvm	—

Upstream advisory

UBUNTU-CVE-2018-20536

USNEPSS <= 49%MEDIUM2018-12-28

CVEs:CVE-2018-20536

Affected products

Product	Status	Vendor	Package	Ecosystem
liblas	affected	Ubuntu:16.04:LTS	liblas	—
liblas	affected	Ubuntu:18.04:LTS	liblas	—

Upstream advisory

UBUNTU-CVE-2018-20539

USNEPSS <= 49%MEDIUM2018-12-28

CVEs:CVE-2018-20539

Affected products

Product	Status	Vendor	Package	Ecosystem
liblas	affected	Ubuntu:16.04:LTS	liblas	—
liblas	affected	Ubuntu:18.04:LTS	liblas	—

Upstream advisory

UBUNTU-CVE-2018-19882

USNEPSS <= 49%MEDIUM2018-12-06

CVEs:CVE-2018-19882

Affected products

Product	Status	Vendor	Package	Ecosystem
mupdf	affected	Ubuntu:Pro:18.04:LTS	mupdf	—
mupdf	affected	Ubuntu:Pro:16.04:LTS	mupdf	—

Upstream advisory

UBUNTU-CVE-2018-18497

USNEPSS <= 49%MEDIUM2018-12-11

CVEs:CVE-2018-18497

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:14.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—

Upstream advisory

UBUNTU-CVE-2018-20217

USNEPSS <= 49%MEDIUM2018-12-26

CVEs:CVE-2018-20217

Affected products

Product	Status	Vendor	Package	Ecosystem
krb5	affected	Ubuntu:18.04:LTS	krb5	—
krb5	affected	Ubuntu:Pro:14.04:LTS	krb5	—
krb5	affected	Ubuntu:Pro:16.04:LTS	krb5	—

Upstream advisory

UBUNTU-CVE-2018-19975

USNEPSS <= 49%MEDIUM2018-12-17

CVEs:CVE-2018-19975

Affected products

Product	Status	Vendor	Package	Ecosystem
yara	affected	Ubuntu:16.04:LTS	yara	—
yara	affected	Ubuntu:25.10	yara	—
yara	affected	Ubuntu:18.04:LTS	yara	—

Upstream advisory

UBUNTU-CVE-2018-20427

USNEPSS <= 49%HIGH2018-12-24

CVEs:CVE-2018-20427

Affected products

Product	Status	Vendor	Package	Ecosystem
ming	affected	Ubuntu:16.04:LTS	ming	—

Upstream advisory

UBUNTU-CVE-2018-20197

USNEPSS <= 49%HIGH2018-12-18

CVEs:CVE-2018-20197

Affected products

Product	Status	Vendor	Package	Ecosystem
faad2	affected	Ubuntu:Pro:14.04:LTS	faad2	—
faad2	affected	Ubuntu:Pro:18.04:LTS	faad2	—
faad2	affected	Ubuntu:Pro:16.04:LTS	faad2	—

Upstream advisory

UBUNTU-CVE-2018-20593

USNEPSS <= 49%MEDIUM2018-12-30

CVEs:CVE-2018-20593

Affected products

Product	Status	Vendor	Package	Ecosystem
mxml	affected	Ubuntu:16.04:LTS	mxml	—
mxml	affected	Ubuntu:20.04:LTS	mxml	—
mxml	affected	Ubuntu:25.10	mxml	—
mxml	affected	Ubuntu:22.04:LTS	mxml	—
mxml	affected	Ubuntu:24.04:LTS	mxml	—
mxml	affected	Ubuntu:18.04:LTS	mxml	—

Upstream advisory

UBUNTU-CVE-2018-1000872

USNEPSS <= 49%MEDIUM2018-12-20

CVEs:CVE-2018-1000872

Affected products

Product	Status	Vendor	Package	Ecosystem
python-pykmip	affected	Ubuntu:22.04:LTS	python-pykmip	—
python-pykmip	affected	Ubuntu:18.04:LTS	python-pykmip	—
python-pykmip	affected	Ubuntu:20.04:LTS	python-pykmip	—
python-pykmip	affected	Ubuntu:24.04:LTS	python-pykmip	—
python-pykmip	affected	Ubuntu:16.04:LTS	python-pykmip	—
python-pykmip	affected	Ubuntu:25.10	python-pykmip	—

Upstream advisory

UBUNTU-CVE-2018-20196

USNEPSS <= 49%HIGH2018-12-18

CVEs:CVE-2018-20196

Affected products

Product	Status	Vendor	Package	Ecosystem
faad2	affected	Ubuntu:Pro:14.04:LTS	faad2	—
faad2	affected	Ubuntu:Pro:18.04:LTS	faad2	—
faad2	affected	Ubuntu:Pro:16.04:LTS	faad2	—

Upstream advisory

UBUNTU-CVE-2018-19974

USNEPSS <= 49%MEDIUM2018-12-17

CVEs:CVE-2018-19974

Affected products

Product	Status	Vendor	Package	Ecosystem
yara	affected	Ubuntu:16.04:LTS	yara	—
yara	affected	Ubuntu:18.04:LTS	yara	—

Upstream advisory

UBUNTU-CVE-2018-19976

USNEPSS <= 49%MEDIUM2018-12-17

CVEs:CVE-2018-19976

Affected products

Product	Status	Vendor	Package	Ecosystem
yara	affected	Ubuntu:16.04:LTS	yara	—
yara	affected	Ubuntu:18.04:LTS	yara	—

Upstream advisory

UBUNTU-CVE-2018-20552

USNEPSS <= 49%HIGH2018-12-28

CVEs:CVE-2018-20552

Affected products

Product	Status	Vendor	Package	Ecosystem
tcpreplay	affected	Ubuntu:Pro:16.04:LTS	tcpreplay	—
tcpreplay	affected	Ubuntu:Pro:20.04:LTS	tcpreplay	—
tcpreplay	affected	Ubuntu:Pro:18.04:LTS	tcpreplay	—

Upstream advisory

UBUNTU-CVE-2018-20553

USNEPSS <= 49%HIGH2018-12-28

CVEs:CVE-2018-20553

Affected products

Product	Status	Vendor	Package	Ecosystem
tcpreplay	affected	Ubuntu:Pro:18.04:LTS	tcpreplay	—
tcpreplay	affected	Ubuntu:Pro:16.04:LTS	tcpreplay	—
tcpreplay	affected	Ubuntu:Pro:20.04:LTS	tcpreplay	—

Upstream advisory

UBUNTU-CVE-2018-19653

USNEPSS <= 49%MEDIUM2018-12-09

CVEs:CVE-2018-19653

Affected products

Product	Status	Vendor	Package	Ecosystem
consul	affected	Ubuntu:18.04:LTS	consul	—

Upstream advisory

UBUNTU-CVE-2018-20361

USNEPSS <= 49%MEDIUM2018-12-22

CVEs:CVE-2018-20361

Affected products

Product	Status	Vendor	Package	Ecosystem
faad2	affected	Ubuntu:Pro:14.04:LTS	faad2	—
faad2	affected	Ubuntu:Pro:18.04:LTS	faad2	—
faad2	affected	Ubuntu:Pro:16.04:LTS	faad2	—

Upstream advisory

UBUNTU-CVE-2018-20198

USNEPSS <= 49%MEDIUM2018-12-18

CVEs:CVE-2018-20198

Affected products

Product	Status	Vendor	Package	Ecosystem
faad2	affected	Ubuntu:Pro:14.04:LTS	faad2	—
faad2	affected	Ubuntu:Pro:18.04:LTS	faad2	—
faad2	affected	Ubuntu:Pro:16.04:LTS	faad2	—

Upstream advisory

UBUNTU-CVE-2018-20186

USNEPSS <= 49%MEDIUM2018-12-17

CVEs:CVE-2018-20186

Affected products

Product	Status	Vendor	Package	Ecosystem
kodi-inputstream-adaptive	affected	Ubuntu:22.04:LTS	kodi-inputstream-adaptive	—
kodi-inputstream-adaptive	affected	Ubuntu:25.10	kodi-inputstream-adaptive	—
kodi-inputstream-adaptive	affected	Ubuntu:24.04:LTS	kodi-inputstream-adaptive	—

Upstream advisory

UBUNTU-CVE-2018-18646

USNEPSS <= 49%HIGH2018-12-04

CVEs:CVE-2018-18646

Affected products

Product	Status	Vendor	Package	Ecosystem
gitlab	affected	Ubuntu:16.04:LTS	gitlab	—

Upstream advisory

UBUNTU-CVE-2018-20357

USNEPSS <= 49%MEDIUM2018-12-22

CVEs:CVE-2018-20357

Affected products

Product	Status	Vendor	Package	Ecosystem
faad2	affected	Ubuntu:Pro:14.04:LTS	faad2	—
faad2	affected	Ubuntu:Pro:18.04:LTS	faad2	—
faad2	affected	Ubuntu:Pro:16.04:LTS	faad2	—

Upstream advisory

UBUNTU-CVE-2018-20359

USNEPSS <= 49%MEDIUM2018-12-22

CVEs:CVE-2018-20359

Affected products

Product	Status	Vendor	Package	Ecosystem
faad2	affected	Ubuntu:Pro:14.04:LTS	faad2	—
faad2	affected	Ubuntu:Pro:18.04:LTS	faad2	—
faad2	affected	Ubuntu:Pro:16.04:LTS	faad2	—

Upstream advisory

UBUNTU-CVE-2018-20407

USNEPSS <= 49%MEDIUM2018-12-23

CVEs:CVE-2018-20407

Affected products

Product	Status	Vendor	Package	Ecosystem
kodi-inputstream-adaptive	affected	Ubuntu:22.04:LTS	kodi-inputstream-adaptive	—
kodi-inputstream-adaptive	affected	Ubuntu:25.10	kodi-inputstream-adaptive	—
kodi-inputstream-adaptive	affected	Ubuntu:24.04:LTS	kodi-inputstream-adaptive	—

Upstream advisory

UBUNTU-CVE-2018-20408

USNEPSS <= 49%MEDIUM2018-12-23

CVEs:CVE-2018-20408

Affected products

Product	Status	Vendor	Package	Ecosystem
kodi-inputstream-adaptive	affected	Ubuntu:22.04:LTS	kodi-inputstream-adaptive	—
kodi-inputstream-adaptive	affected	Ubuntu:25.10	kodi-inputstream-adaptive	—
kodi-inputstream-adaptive	affected	Ubuntu:24.04:LTS	kodi-inputstream-adaptive	—

Upstream advisory

UBUNTU-CVE-2018-20095

USNEPSS <= 49%MEDIUM2018-12-12

CVEs:CVE-2018-20095

Affected products

Product	Status	Vendor	Package	Ecosystem
kodi-inputstream-adaptive	affected	Ubuntu:22.04:LTS	kodi-inputstream-adaptive	—
kodi-inputstream-adaptive	affected	Ubuntu:25.10	kodi-inputstream-adaptive	—
kodi-inputstream-adaptive	affected	Ubuntu:24.04:LTS	kodi-inputstream-adaptive	—

Upstream advisory

UBUNTU-CVE-2018-18640

USNEPSS <= 49%MEDIUM2018-12-04

CVEs:CVE-2018-18640

Affected products

Product	Status	Vendor	Package	Ecosystem
gitlab	affected	Ubuntu:16.04:LTS	gitlab	—

Upstream advisory

UBUNTU-CVE-2018-20358

USNEPSS <= 49%MEDIUM2018-12-22

CVEs:CVE-2018-20358

Affected products

Product	Status	Vendor	Package	Ecosystem
faad2	affected	Ubuntu:Pro:14.04:LTS	faad2	—
faad2	affected	Ubuntu:Pro:18.04:LTS	faad2	—
faad2	affected	Ubuntu:Pro:16.04:LTS	faad2	—

Upstream advisory

UBUNTU-CVE-2018-20591

USNEPSS <= 49%MEDIUM2018-12-30

CVEs:CVE-2018-20591

Affected products

Product	Status	Vendor	Package	Ecosystem
ming	affected	Ubuntu:16.04:LTS	ming	—

Upstream advisory

UBUNTU-CVE-2018-20409

USNEPSS <= 49%MEDIUM2018-12-23

CVEs:CVE-2018-20409

Affected products

Product	Status	Vendor	Package	Ecosystem
kodi-inputstream-adaptive	affected	Ubuntu:22.04:LTS	kodi-inputstream-adaptive	—
kodi-inputstream-adaptive	affected	Ubuntu:25.10	kodi-inputstream-adaptive	—
kodi-inputstream-adaptive	affected	Ubuntu:24.04:LTS	kodi-inputstream-adaptive	—

Upstream advisory

UBUNTU-CVE-2018-20360

USNEPSS <= 49%MEDIUM2018-12-22

CVEs:CVE-2018-20360

Affected products

Product	Status	Vendor	Package	Ecosystem
faad2	affected	Ubuntu:Pro:14.04:LTS	faad2	—
faad2	affected	Ubuntu:Pro:18.04:LTS	faad2	—
faad2	affected	Ubuntu:Pro:16.04:LTS	faad2	—

Upstream advisory

UBUNTU-CVE-2018-20199

USNEPSS <= 49%MEDIUM2018-12-18

CVEs:CVE-2018-20199

Affected products

Product	Status	Vendor	Package	Ecosystem
faad2	affected	Ubuntu:Pro:14.04:LTS	faad2	—
faad2	affected	Ubuntu:Pro:18.04:LTS	faad2	—
faad2	affected	Ubuntu:Pro:16.04:LTS	faad2	—

Upstream advisory

UBUNTU-CVE-2018-12406

USNEPSS <= 49%HIGH2018-12-11

CVEs:CVE-2018-12406

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:14.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—

Upstream advisory

UBUNTU-CVE-2018-20170

USNEPSS <= 49%MEDIUM2018-12-17

CVEs:CVE-2018-20170

Affected products

Product	Status	Vendor	Package	Ecosystem
keystone	affected	Ubuntu:18.04:LTS	keystone	—
keystone	affected	Ubuntu:16.04:LTS	keystone	—

Upstream advisory

UBUNTU-CVE-2018-20005

USNEPSS <= 49%MEDIUM2018-12-10

CVEs:CVE-2018-20005

Affected products

Product	Status	Vendor	Package	Ecosystem
mxml	affected	Ubuntu:20.04:LTS	mxml	—
mxml	affected	Ubuntu:16.04:LTS	mxml	—
mxml	affected	Ubuntu:25.10	mxml	—
mxml	affected	Ubuntu:22.04:LTS	mxml	—
mxml	affected	Ubuntu:24.04:LTS	mxml	—
mxml	affected	Ubuntu:18.04:LTS	mxml	—

Upstream advisory

UBUNTU-CVE-2018-20537

USNEPSS <= 49%MEDIUM2018-12-28

CVEs:CVE-2018-20537

Affected products

Product	Status	Vendor	Package	Ecosystem
liblas	affected	Ubuntu:16.04:LTS	liblas	—
liblas	affected	Ubuntu:18.04:LTS	liblas	—

Upstream advisory

UBUNTU-CVE-2018-6332

USNEPSS <= 49%MEDIUM2018-12-03

CVEs:CVE-2018-6332

Affected products

Product	Status	Vendor	Package	Ecosystem
hhvm	affected	Ubuntu:18.04:LTS	hhvm	—
hhvm	affected	Ubuntu:16.04:LTS	hhvm	—

Upstream advisory

UBUNTU-CVE-2018-16872

USNEPSS <= 49%MEDIUM2018-12-13

CVEs:CVE-2018-16872

Affected products

Product	Status	Vendor	Package	Ecosystem
qemu	affected	Ubuntu:18.04:LTS	qemu	—

Upstream advisory

UBUNTU-CVE-2018-20450

USNEPSS <= 49%MEDIUM2018-12-25

CVEs:CVE-2018-20450

Affected products

Product	Status	Vendor	Package	Ecosystem
r-cran-readxl	affected	Ubuntu:24.04:LTS	r-cran-readxl	—
r-cran-readxl	affected	Ubuntu:22.04:LTS	r-cran-readxl	—
r-cran-readxl	affected	Ubuntu:18.04:LTS	r-cran-readxl	—
r-cran-readxl	affected	Ubuntu:20.04:LTS	r-cran-readxl	—
r-cran-readxl	affected	Ubuntu:16.04:LTS	r-cran-readxl	—
r-cran-readxl	affected	Ubuntu:25.10	r-cran-readxl	—

Upstream advisory

UBUNTU-CVE-2018-20460

USNEPSS <= 49%MEDIUM2018-12-25

CVEs:CVE-2018-20460

Affected products

Product	Status	Vendor	Package	Ecosystem
radare2	affected	Ubuntu:Pro:18.04:LTS	radare2	—
radare2	affected	Ubuntu:16.04:LTS	radare2	—

Upstream advisory

UBUNTU-CVE-2018-20455

USNEPSS <= 49%MEDIUM2018-12-25

CVEs:CVE-2018-20455

Affected products

Product	Status	Vendor	Package	Ecosystem
radare2	affected	Ubuntu:Pro:18.04:LTS	radare2	—
radare2	affected	Ubuntu:16.04:LTS	radare2	—

Upstream advisory

UBUNTU-CVE-2018-20502

USNEPSS <= 49%MEDIUM2018-12-26

CVEs:CVE-2018-20502

Affected products

Product	Status	Vendor	Package	Ecosystem
kodi-inputstream-adaptive	affected	Ubuntu:22.04:LTS	kodi-inputstream-adaptive	—
kodi-inputstream-adaptive	affected	Ubuntu:25.10	kodi-inputstream-adaptive	—
kodi-inputstream-adaptive	affected	Ubuntu:24.04:LTS	kodi-inputstream-adaptive	—

Upstream advisory

UBUNTU-CVE-2018-18645

USNEPSS <= 49%MEDIUM2018-12-04

CVEs:CVE-2018-18645

Affected products

Product	Status	Vendor	Package	Ecosystem
gitlab	affected	Ubuntu:16.04:LTS	gitlab	—

Upstream advisory

UBUNTU-CVE-2018-1000858

USNEPSS <= 49%HIGH2018-12-20

CVEs:CVE-2018-1000858

Affected products

Product	Status	Vendor	Package	Ecosystem
gnupg2	affected	Ubuntu:18.04:LTS	gnupg2	—

Upstream advisory

UBUNTU-CVE-2018-20001

USNEPSS <= 49%MEDIUM2018-12-10

CVEs:CVE-2018-20001

Affected products

Product	Status	Vendor	Package	Ecosystem
libav	affected	Ubuntu:Pro:14.04:LTS	libav	—

Upstream advisory

UBUNTU-CVE-2018-20461

USNEPSS <= 49%MEDIUM2018-12-25

CVEs:CVE-2018-20461

Affected products

Product	Status	Vendor	Package	Ecosystem
radare2	affected	Ubuntu:Pro:18.04:LTS	radare2	—

Upstream advisory

UBUNTU-CVE-2018-20456

USNEPSS <= 49%MEDIUM2018-12-25

CVEs:CVE-2018-20456

Affected products

Product	Status	Vendor	Package	Ecosystem
radare2	affected	Ubuntu:Pro:18.04:LTS	radare2	—
radare2	affected	Ubuntu:16.04:LTS	radare2	—

Upstream advisory

UBUNTU-CVE-2018-19886

USNEPSS <= 49%MEDIUM2018-12-06

CVEs:CVE-2018-19886

Affected products

Product	Status	Vendor	Package	Ecosystem
faac	affected	Ubuntu:16.04:LTS	faac	—
faac	affected	Ubuntu:18.04:LTS	faac	—

Upstream advisory

UBUNTU-CVE-2018-18250

USNEPSS <= 49%HIGH2018-12-17

CVEs:CVE-2018-18250

Affected products

Product	Status	Vendor	Package	Ecosystem
icingaweb2	affected	Ubuntu:16.04:LTS	icingaweb2	—
icingaweb2	affected	Ubuntu:22.04:LTS	icingaweb2	—
icingaweb2	affected	Ubuntu:20.04:LTS	icingaweb2	—
icingaweb2	affected	Ubuntu:25.10	icingaweb2	—
icingaweb2	affected	Ubuntu:18.04:LTS	icingaweb2	—
icingaweb2	affected	Ubuntu:24.04:LTS	icingaweb2	—

Upstream advisory

UBUNTU-CVE-2018-19842

USNEPSS <= 49%MEDIUM2018-12-04

CVEs:CVE-2018-19842

Affected products

Product	Status	Vendor	Package	Ecosystem
radare2	affected	Ubuntu:Pro:20.04:LTS	radare2	—
radare2	affected	Ubuntu:Pro:18.04:LTS	radare2	—

Upstream advisory

UBUNTU-CVE-2018-19843

USNEPSS <= 49%MEDIUM2018-12-04

CVEs:CVE-2018-19843

Affected products

Product	Status	Vendor	Package	Ecosystem
radare2	affected	Ubuntu:Pro:20.04:LTS	radare2	—
radare2	affected	Ubuntu:Pro:18.04:LTS	radare2	—
radare2	affected	Ubuntu:16.04:LTS	radare2	—

Upstream advisory

UBUNTU-CVE-2018-20453

USNEPSS <= 49%MEDIUM2018-12-25

CVEs:CVE-2018-20453

Affected products

Product	Status	Vendor	Package	Ecosystem
catdoc	affected	Ubuntu:25.10	catdoc	—
catdoc	affected	Ubuntu:18.04:LTS	catdoc	—
catdoc	affected	Ubuntu:22.04:LTS	catdoc	—
catdoc	affected	Ubuntu:16.04:LTS	catdoc	—
catdoc	affected	Ubuntu:24.04:LTS	catdoc	—
catdoc	affected	Ubuntu:20.04:LTS	catdoc	—

Upstream advisory

UBUNTU-CVE-2018-20458

USNEPSS <= 49%MEDIUM2018-12-25

CVEs:CVE-2018-20458

Affected products

Product	Status	Vendor	Package	Ecosystem
radare2	affected	Ubuntu:Pro:18.04:LTS	radare2	—
radare2	affected	Ubuntu:16.04:LTS	radare2	—

Upstream advisory

UBUNTU-CVE-2018-20451

USNEPSS <= 49%MEDIUM2018-12-25

CVEs:CVE-2018-20451

Affected products

Product	Status	Vendor	Package	Ecosystem
catdoc	affected	Ubuntu:25.10	catdoc	—
catdoc	affected	Ubuntu:18.04:LTS	catdoc	—
catdoc	affected	Ubuntu:22.04:LTS	catdoc	—
catdoc	affected	Ubuntu:16.04:LTS	catdoc	—
catdoc	affected	Ubuntu:24.04:LTS	catdoc	—
catdoc	affected	Ubuntu:20.04:LTS	catdoc	—

Upstream advisory

UBUNTU-CVE-2018-20459

USNEPSS <= 49%MEDIUM2018-12-25

CVEs:CVE-2018-20459

Affected products

Product	Status	Vendor	Package	Ecosystem
radare2	affected	Ubuntu:25.10	radare2	—
radare2	affected	Ubuntu:Pro:18.04:LTS	radare2	—
radare2	affected	Ubuntu:Pro:24.04:LTS	radare2	—
radare2	affected	Ubuntu:16.04:LTS	radare2	—

Upstream advisory

UBUNTU-CVE-2018-19665

USNEPSS <= 49%MEDIUM2018-12-06

CVEs:CVE-2018-19665

Affected products

Product	Status	Vendor	Package	Ecosystem
qemu	affected	Ubuntu:Pro:16.04:LTS	qemu	—
qemu	affected	Ubuntu:Pro:18.04:LTS	qemu	—
qemu	affected	Ubuntu:Pro:14.04:LTS	qemu	—

Upstream advisory

UBUNTU-CVE-2018-19887

USNEPSS <= 49%MEDIUM2018-12-06

CVEs:CVE-2018-19887

Affected products

Product	Status	Vendor	Package	Ecosystem
faac	affected	Ubuntu:16.04:LTS	faac	—
faac	affected	Ubuntu:18.04:LTS	faac	—

Upstream advisory

UBUNTU-CVE-2018-19889

USNEPSS <= 49%MEDIUM2018-12-06

CVEs:CVE-2018-19889

Affected products

Product	Status	Vendor	Package	Ecosystem
faac	affected	Ubuntu:16.04:LTS	faac	—
faac	affected	Ubuntu:18.04:LTS	faac	—

Upstream advisory

UBUNTU-CVE-2018-19888

USNEPSS <= 49%MEDIUM2018-12-06

CVEs:CVE-2018-19888

Affected products

Product	Status	Vendor	Package	Ecosystem
faac	affected	Ubuntu:16.04:LTS	faac	—
faac	affected	Ubuntu:18.04:LTS	faac	—

Upstream advisory

UBUNTU-CVE-2018-19890

USNEPSS <= 49%MEDIUM2018-12-06

CVEs:CVE-2018-19890

Affected products

Product	Status	Vendor	Package	Ecosystem
faac	affected	Ubuntu:16.04:LTS	faac	—
faac	affected	Ubuntu:18.04:LTS	faac	—

Upstream advisory

UBUNTU-CVE-2018-19891

USNEPSS <= 49%MEDIUM2018-12-06

CVEs:CVE-2018-19891

Affected products

Product	Status	Vendor	Package	Ecosystem
faac	affected	Ubuntu:16.04:LTS	faac	—
faac	affected	Ubuntu:18.04:LTS	faac	—

Upstream advisory

UBUNTU-CVE-2018-20457

USNEPSS <= 49%MEDIUM2018-12-25

CVEs:CVE-2018-20457

Affected products

Product	Status	Vendor	Package	Ecosystem
radare2	affected	Ubuntu:25.10	radare2	—
radare2	affected	Ubuntu:Pro:18.04:LTS	radare2	—
radare2	affected	Ubuntu:Pro:24.04:LTS	radare2	—
radare2	affected	Ubuntu:16.04:LTS	radare2	—

Upstream advisory

UBUNTU-CVE-2018-20230

USNEPSS <= 49%HIGH2018-12-19

CVEs:CVE-2018-20230

Affected products

Product	Status	Vendor	Package	Ecosystem
pspp	affected	Ubuntu:18.04:LTS	pspp	—
pspp	affected	Ubuntu:16.04:LTS	pspp	—

Upstream advisory

UBUNTU-CVE-2018-20535

USNEPSS <= 49%MEDIUM2018-12-28

CVEs:CVE-2018-20535

Affected products

Product	Status	Vendor	Package	Ecosystem
nasm	affected	Ubuntu:18.04:LTS	nasm	—
nasm	affected	Ubuntu:16.04:LTS	nasm	—
nasm	affected	Ubuntu:20.04:LTS	nasm	—

Upstream advisory

UBUNTU-CVE-2018-20538

USNEPSS <= 49%MEDIUM2018-12-28

CVEs:CVE-2018-20538

Affected products

Product	Status	Vendor	Package	Ecosystem
nasm	affected	Ubuntu:22.04:LTS	nasm	—
nasm	affected	Ubuntu:25.10	nasm	—
nasm	affected	Ubuntu:18.04:LTS	nasm	—
nasm	affected	Ubuntu:16.04:LTS	nasm	—
nasm	affected	Ubuntu:24.04:LTS	nasm	—
nasm	affected	Ubuntu:20.04:LTS	nasm	—

Upstream advisory

UBUNTU-CVE-2018-1000886

USNEPSS <= 49%MEDIUM2018-12-20

CVEs:CVE-2018-1000886

Affected products

Product	Status	Vendor	Package	Ecosystem
nasm	affected	Ubuntu:22.04:LTS	nasm	—
nasm	affected	Ubuntu:25.10	nasm	—
nasm	affected	Ubuntu:18.04:LTS	nasm	—
nasm	affected	Ubuntu:16.04:LTS	nasm	—
nasm	affected	Ubuntu:24.04:LTS	nasm	—
nasm	affected	Ubuntu:20.04:LTS	nasm	—

Upstream advisory

UBUNTU-CVE-2018-20374

USNEPSS <= 49%MEDIUM2018-12-23

CVEs:CVE-2018-20374

Affected products

Product	Status	Vendor	Package	Ecosystem
tcc	affected	Ubuntu:24.04:LTS	tcc	—
tcc	affected	Ubuntu:25.10	tcc	—
tcc	affected	Ubuntu:20.04:LTS	tcc	—
tcc	affected	Ubuntu:18.04:LTS	tcc	—
tcc	affected	Ubuntu:16.04:LTS	tcc	—
tcc	affected	Ubuntu:22.04:LTS	tcc	—

Upstream advisory

UBUNTU-CVE-2018-20375

USNEPSS <= 49%MEDIUM2018-12-23

CVEs:CVE-2018-20375

Affected products

Product	Status	Vendor	Package	Ecosystem
tcc	affected	Ubuntu:16.04:LTS	tcc	—
tcc	affected	Ubuntu:24.04:LTS	tcc	—
tcc	affected	Ubuntu:25.10	tcc	—
tcc	affected	Ubuntu:20.04:LTS	tcc	—
tcc	affected	Ubuntu:18.04:LTS	tcc	—
tcc	affected	Ubuntu:22.04:LTS	tcc	—

Upstream advisory

UBUNTU-CVE-2018-20376

USNEPSS <= 49%MEDIUM2018-12-23

CVEs:CVE-2018-20376

Affected products

Product	Status	Vendor	Package	Ecosystem
tcc	affected	Ubuntu:18.04:LTS	tcc	—
tcc	affected	Ubuntu:16.04:LTS	tcc	—
tcc	affected	Ubuntu:24.04:LTS	tcc	—
tcc	affected	Ubuntu:25.10	tcc	—
tcc	affected	Ubuntu:20.04:LTS	tcc	—
tcc	affected	Ubuntu:22.04:LTS	tcc	—

Upstream advisory

UBUNTU-CVE-2018-1000816

USNEPSS <= 49%MEDIUM2018-12-20

CVEs:CVE-2018-1000816

Affected products

Product	Status	Vendor	Package	Ecosystem
grafana	affected	Ubuntu:16.04:LTS	grafana	—

Upstream advisory

UBUNTU-CVE-2018-18248

USNEPSS <= 49%MEDIUM2018-12-17

CVEs:CVE-2018-18248

Affected products

Product	Status	Vendor	Package	Ecosystem
icingaweb2	affected	Ubuntu:16.04:LTS	icingaweb2	—
icingaweb2	affected	Ubuntu:22.04:LTS	icingaweb2	—
icingaweb2	affected	Ubuntu:20.04:LTS	icingaweb2	—
icingaweb2	affected	Ubuntu:25.10	icingaweb2	—
icingaweb2	affected	Ubuntu:18.04:LTS	icingaweb2	—
icingaweb2	affected	Ubuntu:24.04:LTS	icingaweb2	—

Upstream advisory

UBUNTU-CVE-2018-18247

USNEPSS <= 49%MEDIUM2018-12-17

CVEs:CVE-2018-18247

Affected products

Product	Status	Vendor	Package	Ecosystem
icingaweb2	affected	Ubuntu:16.04:LTS	icingaweb2	—
icingaweb2	affected	Ubuntu:22.04:LTS	icingaweb2	—
icingaweb2	affected	Ubuntu:20.04:LTS	icingaweb2	—
icingaweb2	affected	Ubuntu:25.10	icingaweb2	—
icingaweb2	affected	Ubuntu:18.04:LTS	icingaweb2	—
icingaweb2	affected	Ubuntu:24.04:LTS	icingaweb2	—

Upstream advisory

UBUNTU-CVE-2018-16868

USNEPSS <= 49%MEDIUM2018-12-03

CVEs:CVE-2018-16868

Affected products

Product	Status	Vendor	Package	Ecosystem
gnutls26	affected	Ubuntu:14.04:LTS	gnutls26	—
gnutls28	affected	Ubuntu:Pro:16.04:LTS	gnutls28	—
gnutls28	affected	Ubuntu:Pro:18.04:LTS	gnutls28	—

Upstream advisory

UBUNTU-CVE-2018-19824

USNEPSS <= 49%HIGH2018-12-03

CVEs:CVE-2018-19824

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:14.04:LTS	linux	—
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:18.04:LTS	linux	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:14.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp-edge	affected	Ubuntu:18.04:LTS	linux-gcp-edge	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2018-19295

USNEPSS <= 49%HIGH2018-12-17

CVEs:CVE-2018-19295

Affected products

Product	Status	Vendor	Package	Ecosystem
singularity-container	affected	Ubuntu:Pro:18.04:LTS	singularity-container	—

Upstream advisory

UBUNTU-CVE-2018-18246

USNEPSS <= 49%MEDIUM2018-12-17

CVEs:CVE-2018-18246

Affected products

Product	Status	Vendor	Package	Ecosystem
icingaweb2	affected	Ubuntu:16.04:LTS	icingaweb2	—
icingaweb2	affected	Ubuntu:22.04:LTS	icingaweb2	—
icingaweb2	affected	Ubuntu:20.04:LTS	icingaweb2	—
icingaweb2	affected	Ubuntu:25.10	icingaweb2	—
icingaweb2	affected	Ubuntu:18.04:LTS	icingaweb2	—
icingaweb2	affected	Ubuntu:24.04:LTS	icingaweb2	—

Upstream advisory

UBUNTU-CVE-2018-19967

USNEPSS <= 49%MEDIUM2018-12-08

CVEs:CVE-2018-19967

Affected products

Product	Status	Vendor	Package	Ecosystem
xen	affected	Ubuntu:16.04:LTS	xen	—
xen	affected	Ubuntu:18.04:LTS	xen	—

Upstream advisory

UBUNTU-CVE-2018-20511

USNEPSS <= 49%MEDIUM2018-12-27

CVEs:CVE-2018-20511

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:18.04:LTS	linux	—
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-aws-fips	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-azure-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-gcp-fips	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2018-3613

USNEPSS <= 49%HIGH2018-12-17

CVEs:CVE-2018-3613

Affected products

Product	Status	Vendor	Package	Ecosystem
edk2	affected	Ubuntu:Pro:16.04:LTS	edk2	—
edk2	affected	Ubuntu:Pro:18.04:LTS	edk2	—

Upstream advisory

UBUNTU-CVE-2018-19966

USNEPSS <= 49%HIGH2018-12-08

CVEs:CVE-2018-19966

Affected products

Product	Status	Vendor	Package	Ecosystem
xen	affected	Ubuntu:16.04:LTS	xen	—
xen	affected	Ubuntu:18.04:LTS	xen	—

Upstream advisory

UBUNTU-CVE-2018-19854

USNEPSS <= 49%MEDIUM2018-12-04

CVEs:CVE-2018-19854

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:18.04:LTS	linux	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:14.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp-edge	affected	Ubuntu:18.04:LTS	linux-gcp-edge	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—

Upstream advisory

UBUNTU-CVE-2018-20348

USNEPSS <= 49%MEDIUM2018-12-22

CVEs:CVE-2018-20348

Affected products

Product	Status	Vendor	Package	Ecosystem
libpff	affected	Ubuntu:18.04:LTS	libpff	—
libpff	affected	Ubuntu:16.04:LTS	libpff	—

Upstream advisory

UBUNTU-CVE-2018-19961

USNEPSS <= 49%HIGH2018-12-08

CVEs:CVE-2018-19961

Affected products

Product	Status	Vendor	Package	Ecosystem
xen	affected	Ubuntu:18.04:LTS	xen	—

Upstream advisory

UBUNTU-CVE-2018-19962

USNEPSS <= 49%HIGH2018-12-08

CVEs:CVE-2018-19962

Affected products

Product	Status	Vendor	Package	Ecosystem
xen	affected	Ubuntu:18.04:LTS	xen	—

Upstream advisory

UBUNTU-CVE-2018-19965

USNEPSS <= 49%MEDIUM2018-12-08

CVEs:CVE-2018-19965

Affected products

Product	Status	Vendor	Package	Ecosystem
xen	affected	Ubuntu:16.04:LTS	xen	—
xen	affected	Ubuntu:18.04:LTS	xen	—

Upstream advisory

UBUNTU-CVE-2017-5731

USNEPSS <= 49%HIGH2018-12-17

CVEs:CVE-2017-5731

Affected products

Product	Status	Vendor	Package	Ecosystem
edk2	affected	Ubuntu:Pro:16.04:LTS	edk2	—
edk2	affected	Ubuntu:Pro:18.04:LTS	edk2	—

Upstream advisory

UBUNTU-CVE-2018-16883

USNEPSS <= 49%MEDIUM2018-12-19

CVEs:CVE-2018-16883

Affected products

Product	Status	Vendor	Package	Ecosystem
sssd	affected	Ubuntu:16.04:LTS	sssd	—
sssd	affected	Ubuntu:18.04:LTS	sssd	—

Upstream advisory

UBUNTU-CVE-2018-19960

USNEPSS <= 49%HIGH2018-12-07

CVEs:CVE-2018-19960

Affected products

Product	Status	Vendor	Package	Ecosystem
onionshare	affected	Ubuntu:Pro:16.04:LTS	onionshare	—
onionshare	affected	Ubuntu:Pro:18.04:LTS	onionshare	—

Upstream advisory

UBUNTU-CVE-2018-19608

USNEPSS <= 49%MEDIUM2018-12-05

CVEs:CVE-2018-19608

Affected products

Product	Status	Vendor	Package	Ecosystem
mbedtls	affected	Ubuntu:16.04:LTS	mbedtls	—
mbedtls	affected	Ubuntu:18.04:LTS	mbedtls	—

Upstream advisory

UBUNTU-CVE-2018-1000845

USNEPSS <= 49%MEDIUM2018-12-20

CVEs:CVE-2018-1000845

Affected products

Product	Status	Vendor	Package	Ecosystem
avahi	affected	Ubuntu:18.04:LTS	avahi	—
avahi	affected	Ubuntu:14.04:LTS	avahi	—
avahi	affected	Ubuntu:16.04:LTS	avahi	—

Upstream advisory

UBUNTU-CVE-2018-1002161

USNAll remainingMEDIUM2018-12-31

CVEs:CVE-2018-1002161

Affected products

Product	Status	Vendor	Package	Ecosystem
koji	affected	Ubuntu:16.04:LTS	koji	—
koji	affected	Ubuntu:18.04:LTS	koji	—

Upstream advisory

USN-3848-2

USNAll remaining2018-12-20

linux-lts-xenial, linux-aws vulnerabilities

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—

Upstream advisory

USN-3847-3

USNAll remaining2018-12-20

linux-azure vulnerabilities

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-azure	affected	Ubuntu:14.04:LTS	linux-azure	—

Upstream advisory

USN-3847-2

USNAll remaining2018-12-20

linux-hwe, linux-aws-hwe, linux-azure, linux-gcp vulnerabilities

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—

Upstream advisory

USN-3841-1

USNAll remaining2018-12-10

lxml vulnerability

Affected products

Product	Status	Vendor	Package	Ecosystem
lxml	affected	Ubuntu:14.04:LTS	lxml	—
lxml	affected	Ubuntu:16.04:LTS	lxml	—
lxml	affected	Ubuntu:18.04:LTS	lxml	—

Upstream advisory

USN-3831-2

USNAll remainingHIGH2018-12-06

ghostscript regression

Affected products

Product	Status	Vendor	Package	Ecosystem
ghostscript	affected	Ubuntu:16.04:LTS	ghostscript	—
ghostscript	affected	Ubuntu:14.04:LTS	ghostscript	—
ghostscript	affected	Ubuntu:18.04:LTS	ghostscript	—

Upstream advisory

USN-3836-2

USNAll remaining2018-12-04

linux-hwe, linux-gcp vulnerabilities

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—

Upstream advisory

What would you fix first?

Advisories

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products