Canonical Security Advisories: May 2019 — Canonical Security Advisories

USN-3991-1

USNExploitedVulnCheck KEV listedHIGH2019-05-21

firefox vulnerabilities

CVEs:CVE-2019-7317 CVE-2019-9800 CVE-2019-9814 CVE-2019-9816 CVE-2019-9817 CVE-2019-9819 CVE-2019-9820 CVE-2019-9821 CVE-2019-11691 CVE-2019-11692 CVE-2019-11693 CVE-2019-11695 CVE-2019-11696 CVE-2019-11697 CVE-2019-11698 CVE-2019-11699 CVE-2019-11701

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—

Upstream advisory

UBUNTU-CVE-2019-11695

USNExploitedVulnCheck KEV listedMEDIUM2019-05-21

CVEs:CVE-2019-11695

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—

Upstream advisory

UBUNTU-CVE-2019-0227

USNWeaponized exploitHIGH2019-05-01

CVEs:CVE-2019-0227

Affected products

Product	Status	Vendor	Package	Ecosystem
axis	affected	Ubuntu:20.04:LTS	axis	—
axis	affected	Ubuntu:25.10	axis	—
axis	affected	Ubuntu:22.04:LTS	axis	—
axis	affected	Ubuntu:Pro:18.04:LTS	axis	—
axis	affected	Ubuntu:24.04:LTS	axis	—
axis	affected	Ubuntu:Pro:16.04:LTS	axis	—

Upstream advisory

UBUNTU-CVE-2019-11631

USNWeaponized exploitMEDIUM2019-05-01

CVEs:CVE-2019-11631

Affected products

Product	Status	Vendor	Package	Ecosystem
moodle	affected	Ubuntu:Pro:18.04:LTS	moodle	—
moodle	affected	Ubuntu:Pro:16.04:LTS	moodle	—

Upstream advisory

UBUNTU-CVE-2019-0221

USNWeaponized exploitMEDIUM2019-05-19

CVEs:CVE-2019-0221

Affected products

Product	Status	Vendor	Package	Ecosystem
tomcat7	affected	Ubuntu:Pro:18.04:LTS	tomcat7	—
tomcat7	affected	Ubuntu:Pro:14.04:LTS	tomcat7	—
tomcat7	affected	Ubuntu:Pro:16.04:LTS	tomcat7	—
tomcat8	affected	Ubuntu:16.04:LTS	tomcat8	—
tomcat8	affected	Ubuntu:18.04:LTS	tomcat8	—
tomcat9	affected	Ubuntu:18.04:LTS	tomcat9	—

Upstream advisory

UBUNTU-CVE-2019-8937

USNWeaponized exploitMEDIUM2019-05-17

CVEs:CVE-2019-8937

Affected products

Product	Status	Vendor	Package	Ecosystem
hoteldruid	affected	Ubuntu:20.04:LTS	hoteldruid	—
hoteldruid	affected	Ubuntu:16.04:LTS	hoteldruid	—
hoteldruid	affected	Ubuntu:18.04:LTS	hoteldruid	—

Upstream advisory

USN-3997-1

USNWeaponized exploitHIGH2019-05-28

thunderbird vulnerabilities

CVEs:CVE-2018-18511 CVE-2019-5798 CVE-2019-7317 CVE-2019-9797 CVE-2019-9800 CVE-2019-9816 CVE-2019-9817 CVE-2019-9819 CVE-2019-9820 CVE-2019-11691 CVE-2019-11692 CVE-2019-11693 CVE-2019-11698

Affected products

Product	Status	Vendor	Package	Ecosystem
thunderbird	affected	Ubuntu:16.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2019-8622

USNWeaponized exploitHIGH2019-05-14

CVEs:CVE-2019-8622

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:16.04:LTS	webkit2gtk	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—

Upstream advisory

UBUNTU-CVE-2019-8623

USNWeaponized exploitHIGH2019-05-14

CVEs:CVE-2019-8623

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
webkit2gtk	affected	Ubuntu:16.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—

Upstream advisory

UBUNTU-CVE-2019-8611

USNWeaponized exploitHIGH2019-05-14

CVEs:CVE-2019-8611

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
webkit2gtk	affected	Ubuntu:16.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—

Upstream advisory

UBUNTU-CVE-2019-9816

USNWeaponized exploitMEDIUM2019-05-21

CVEs:CVE-2019-9816

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:18.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:16.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2019-9826

USNWeaponized exploitHIGH2019-05-02

CVEs:CVE-2019-9826

Affected products

Product	Status	Vendor	Package	Ecosystem
phpbb3	affected	Ubuntu:Pro:14.04:LTS	phpbb3	—
phpbb3	affected	Ubuntu:16.04:LTS	phpbb3	—

Upstream advisory

UBUNTU-CVE-2019-10143

USNWeaponized exploitHIGH2019-05-24

CVEs:CVE-2019-10143

Affected products

Product	Status	Vendor	Package	Ecosystem
freeradius	affected	Ubuntu:22.04:LTS	freeradius	—
freeradius	affected	Ubuntu:20.04:LTS	freeradius	—
freeradius	affected	Ubuntu:18.04:LTS	freeradius	—
freeradius	affected	Ubuntu:25.10	freeradius	—
freeradius	affected	Ubuntu:24.04:LTS	freeradius	—
freeradius	affected	Ubuntu:Pro:16.04:LTS	freeradius	—

Upstream advisory

UBUNTU-CVE-2019-9858

USNActive exploitation (sightings)HIGH2019-05-29

CVEs:CVE-2019-9858

Affected products

Product	Status	Vendor	Package	Ecosystem
php-horde-form	affected	Ubuntu:18.04:LTS	php-horde-form	—
php-horde-form	affected	Ubuntu:16.04:LTS	php-horde-form	—

Upstream advisory

UBUNTU-CVE-2019-12107

USNActive exploitation (sightings)HIGH2019-05-15

CVEs:CVE-2019-12107

Affected products

Product	Status	Vendor	Package	Ecosystem
miniupnpd	affected	Ubuntu:16.04:LTS	miniupnpd	—
miniupnpd	affected	Ubuntu:18.04:LTS	miniupnpd	—

Upstream advisory

UBUNTU-CVE-2016-10245

USNActive exploitation (sightings)MEDIUM2019-05-24

CVEs:CVE-2016-10245

Affected products

Product	Status	Vendor	Package	Ecosystem
doxygen	affected	Ubuntu:16.04:LTS	doxygen	—
quantlib-refman-html	affected	Ubuntu:16.04:LTS	quantlib-refman-html	—
quantlib-refman-html	affected	Ubuntu:20.04:LTS	quantlib-refman-html	—
quantlib-refman-html	affected	Ubuntu:18.04:LTS	quantlib-refman-html	—
quantlib-refman-html	affected	Ubuntu:22.04:LTS	quantlib-refman-html	—
quantlib-refman-html	affected	Ubuntu:25.10	quantlib-refman-html	—
quantlib-refman-html	affected	Ubuntu:24.04:LTS	quantlib-refman-html	—

Upstream advisory

USN-3970-1

USNActive exploitation (sightings)HIGH2019-05-08

ghostscript vulnerability

CVEs:CVE-2019-3839

Affected products

Product	Status	Vendor	Package	Ecosystem
ghostscript	affected	Ubuntu:16.04:LTS	ghostscript	—
ghostscript	affected	Ubuntu:18.04:LTS	ghostscript	—

Upstream advisory

UBUNTU-CVE-2019-3839

USNActive exploitation (sightings)HIGH2019-05-06

CVEs:CVE-2019-3839

Affected products

Product	Status	Vendor	Package	Ecosystem
ghostscript	affected	Ubuntu:16.04:LTS	ghostscript	—
ghostscript	affected	Ubuntu:18.04:LTS	ghostscript	—

Upstream advisory

USN-3993-2

USNPoC exploitCRITICAL2019-05-22

curl vulnerability

CVEs:CVE-2019-5436

Affected products

Product	Status	Vendor	Package	Ecosystem
curl	affected	Ubuntu:Pro:14.04:LTS	curl	—

Upstream advisory

USN-3993-1

USNPoC exploitCRITICAL2019-05-22

curl vulnerabilities

CVEs:CVE-2019-5435 CVE-2019-5436

Affected products

Product	Status	Vendor	Package	Ecosystem
curl	affected	Ubuntu:16.04:LTS	curl	—
curl	affected	Ubuntu:18.04:LTS	curl	—
curl	affected	Ubuntu	—	—

Upstream advisory

UBUNTU-CVE-2019-5436

USNPoC exploitHIGH2019-05-22

CVEs:CVE-2019-5436

Affected products

Product	Status	Vendor	Package	Ecosystem
curl	affected	Ubuntu:Pro:14.04:LTS	curl	—
curl	affected	Ubuntu:18.04:LTS	curl	—
curl	affected	Ubuntu:16.04:LTS	curl	—

Upstream advisory

UBUNTU-CVE-2019-8457

USNPoC exploitCRITICAL2019-05-30

CVEs:CVE-2019-8457

Affected products

Product	Status	Vendor	Package	Ecosystem
db5.3	affected	Ubuntu:16.04:LTS	db5.3	—
db5.3	affected	Ubuntu:20.04:LTS	db5.3	—
db5.3	affected	Ubuntu:18.04:LTS	db5.3	—
db5.3	affected	Ubuntu:Pro:14.04:LTS	db5.3	—
qtwebengine-opensource-src	affected	Ubuntu:20.04:LTS	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:24.04:LTS	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:18.04:LTS	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:22.04:LTS	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:25.10	qtwebengine-opensource-src	—
sqlcipher	affected	Ubuntu:16.04:LTS	sqlcipher	—
sqlcipher	affected	Ubuntu:22.04:LTS	sqlcipher	—
sqlcipher	affected	Ubuntu:24.04:LTS	sqlcipher	—
sqlcipher	affected	Ubuntu:18.04:LTS	sqlcipher	—
sqlcipher	affected	Ubuntu:25.10	sqlcipher	—
sqlcipher	affected	Ubuntu:20.04:LTS	sqlcipher	—
sqlite3	affected	Ubuntu:16.04:LTS	sqlite3	—
sqlite3	affected	Ubuntu:Pro:14.04:LTS	sqlite3	—
sqlite3	affected	Ubuntu:18.04:LTS	sqlite3	—

Upstream advisory

UBUNTU-CVE-2019-12086

USNPoC exploitHIGH2019-05-17

CVEs:CVE-2019-12086

Affected products

Product	Status	Vendor	Package	Ecosystem
connect	affected	AWS	—	—
jackson-databind	affected	Ubuntu:Pro:14.04:LTS	jackson-databind	—
jackson-databind	affected	Ubuntu:18.04:LTS	jackson-databind	—
jackson-databind	affected	Ubuntu:Pro:16.04:LTS	jackson-databind	—

Upstream advisory

UBUNTU-CVE-2019-0201

USNPoC exploitMEDIUM2019-05-23

CVEs:CVE-2019-0201

Affected products

Product	Status	Vendor	Package	Ecosystem
zookeeper	affected	Ubuntu:Pro:14.04:LTS	zookeeper	—
zookeeper	affected	Ubuntu:Pro:16.04:LTS	zookeeper	—

Upstream advisory

USN-3964-1

USNPoC exploitNONE2019-05-02

python-gnupg vulnerabilities

CVEs:CVE-2018-12020 CVE-2019-6690

Affected products

Product	Status	Vendor	Package	Ecosystem
python-gnupg	affected	Ubuntu:18.04:LTS	python-gnupg	—

Upstream advisory

USN-3566-2

USNPoC exploitCRITICAL2019-05-22

php5 vulnerabilities

CVEs:CVE-2016-10712 CVE-2017-11362 CVE-2017-12933 CVE-2018-20783 CVE-2019-11036

Affected products

Product	Status	Vendor	Package	Ecosystem
php5	affected	Ubuntu:Pro:14.04:LTS	php5	—

Upstream advisory

UBUNTU-CVE-2019-11036

USNPoC exploitCRITICAL2019-05-03

CVEs:CVE-2019-11036

Affected products

Product	Status	Vendor	Package	Ecosystem
php5	affected	Ubuntu:Pro:14.04:LTS	php5	—
php7.0	affected	Ubuntu:16.04:LTS	php7.0	—
php7.2	affected	Ubuntu:18.04:LTS	php7.2	—

Upstream advisory

UBUNTU-CVE-2019-10742

USNPoC exploitHIGH2019-05-07

CVEs:CVE-2019-10742

Affected products

Product	Status	Vendor	Package	Ecosystem
node-axios	affected	Ubuntu:20.04:LTS	node-axios	—

Upstream advisory

UBUNTU-CVE-2019-11810

USNPoC exploitHIGH2019-05-07

CVEs:CVE-2019-11810

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux	affected	Ubuntu:18.04:LTS	linux	—
linux	affected	Ubuntu:16.04:LTS	linux	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-aws-fips	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-azure-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-gcp-fips	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2019-12155

USNPoC exploitHIGH2019-05-22

CVEs:CVE-2019-12155

Affected products

Product	Status	Vendor	Package	Ecosystem
qemu	affected	Ubuntu:Pro:14.04:LTS	qemu	—
qemu	affected	Ubuntu:20.04:LTS	qemu	—
qemu	affected	Ubuntu:16.04:LTS	qemu	—
qemu	affected	Ubuntu:18.04:LTS	qemu	—

Upstream advisory

UBUNTU-CVE-2018-20836

USNPoC exploitHIGH2019-05-07

CVEs:CVE-2018-20836

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:18.04:LTS	linux	—
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:14.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp-edge	affected	Ubuntu:18.04:LTS	linux-gcp-edge	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2018-8035

USNPoC exploitMEDIUM2019-05-01

CVEs:CVE-2018-8035

Affected products

Product	Status	Vendor	Package	Ecosystem
uimaj	affected	Ubuntu:18.04:LTS	uimaj	—
uimaj	affected	Ubuntu:25.10	uimaj	—
uimaj	affected	Ubuntu:24.04:LTS	uimaj	—
uimaj	affected	Ubuntu:16.04:LTS	uimaj	—
uimaj	affected	Ubuntu:20.04:LTS	uimaj	—
uimaj	affected	Ubuntu:22.04:LTS	uimaj	—

Upstream advisory

USN-3990-1

USNPoC exploitNONE2019-05-21

python-urllib3 vulnerabilities

CVEs:CVE-2018-20060 CVE-2019-11236 CVE-2019-11324

Affected products

Product	Status	Vendor	Package	Ecosystem
python-urllib3	affected	Ubuntu:18.04:LTS	python-urllib3	—
python-urllib3	affected	Ubuntu:16.04:LTS	python-urllib3	—

Upstream advisory

USN-3978-1

USNPoC exploitHIGH2019-05-14

qemu update

CVEs:CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2018-20815 CVE-2019-5008 CVE-2019-9824 CVE-2019-11091

Affected products

Product	Status	Vendor	Package	Ecosystem
qemu	affected	Ubuntu:18.04:LTS	qemu	—
qemu	affected	Ubuntu:16.04:LTS	qemu	—
qemu	affected	Ubuntu:14.04:LTS	qemu	—

Upstream advisory

UBUNTU-CVE-2019-11038

USNPoC exploitMEDIUM2019-05-31

CVEs:CVE-2019-11038

Affected products

Product	Status	Vendor	Package	Ecosystem
libgd2	affected	Ubuntu:18.04:LTS	libgd2	—
libgd2	affected	Ubuntu:16.04:LTS	libgd2	—
libgd2	affected	Ubuntu:Pro:14.04:LTS	libgd2	—

Upstream advisory

UBUNTU-CVE-2019-11040

USNPoC exploitCRITICAL2019-05-31

CVEs:CVE-2019-11040

Affected products

Product	Status	Vendor	Package	Ecosystem
php5	affected	Ubuntu:Pro:14.04:LTS	php5	—
php7.0	affected	Ubuntu:16.04:LTS	php7.0	—
php7.2	affected	Ubuntu:18.04:LTS	php7.2	—

Upstream advisory

UBUNTU-CVE-2019-8601

USNPoC exploitHIGH2019-05-14

CVEs:CVE-2019-8601

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:16.04:LTS	webkit2gtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—

Upstream advisory

USN-3981-2

USNPoC exploitHIGH2019-05-15

linux-hwe, linux-azure, linux-gcp, linux-oracle vulnerabilities

CVEs:CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2018-16884 CVE-2019-3874 CVE-2019-3882 CVE-2019-9500 CVE-2019-9503 CVE-2019-11091

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-azure	affected	Ubuntu:14.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—

Upstream advisory

USN-3980-2

USNPoC exploitHIGH2019-05-14

linux-hwe, linux-azure vulnerabilities

CVEs:CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2018-16884 CVE-2019-3874 CVE-2019-3882 CVE-2019-3887 CVE-2019-9500 CVE-2019-9503 CVE-2019-11091

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—

Upstream advisory

USN-3981-1

USNPoC exploitHIGH2019-05-14

linux, linux-aws, linux-gcp, linux-kvm, linux-oem, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities

CVEs:CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2018-16884 CVE-2019-3874 CVE-2019-3882 CVE-2019-9500 CVE-2019-9503 CVE-2019-11091

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:18.04:LTS	linux	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2018-15664

USNPoC exploitHIGH2019-05-23

CVEs:CVE-2018-15664

Affected products

Product	Status	Vendor	Package	Ecosystem
docker.io	affected	Ubuntu:18.04:LTS	docker.io	—
docker.io	affected	Ubuntu:16.04:LTS	docker.io	—

Upstream advisory

USN-4000-1

USNPoC exploitCRITICAL2019-05-30

corosync vulnerability

CVEs:CVE-2018-1084

Affected products

Product	Status	Vendor	Package	Ecosystem
corosync	affected	Ubuntu:18.04:LTS	corosync	—
corosync	affected	Ubuntu:16.04:LTS	corosync	—

Upstream advisory

UBUNTU-CVE-2019-11039

USNPoC exploitCRITICAL2019-05-31

CVEs:CVE-2019-11039

Affected products

Product	Status	Vendor	Package	Ecosystem
php5	affected	Ubuntu:Pro:14.04:LTS	php5	—
php7.0	affected	Ubuntu:16.04:LTS	php7.0	—
php7.2	affected	Ubuntu:18.04:LTS	php7.2	—

Upstream advisory

UBUNTU-CVE-2019-12450

USNPoC exploitCRITICAL2019-05-29

CVEs:CVE-2019-12450

Affected products

Product	Status	Vendor	Package	Ecosystem
glib2.0	affected	Ubuntu:Pro:14.04:LTS	glib2.0	—
glib2.0	affected	Ubuntu:16.04:LTS	glib2.0	—
glib2.0	affected	Ubuntu:18.04:LTS	glib2.0	—

Upstream advisory

USN-3998-1

USNPoC exploit2019-05-30

evolution-data-server vulnerability

CVEs:CVE-2018-15587

Affected products

Product	Status	Vendor	Package	Ecosystem
evolution-data-server	affected	Ubuntu:18.04:LTS	evolution-data-server	—
evolution-data-server	affected	Ubuntu:16.04:LTS	evolution-data-server	—

Upstream advisory

UBUNTU-CVE-2019-13173

USNPoC exploitHIGH2019-05-30

CVEs:CVE-2019-13173

Affected products

Product	Status	Vendor	Package	Ecosystem
node-fstream	affected	Ubuntu:Pro:14.04:LTS	node-fstream	—
node-fstream	affected	Ubuntu:Pro:16.04:LTS	node-fstream	—
node-fstream	affected	Ubuntu:18.04:LTS	node-fstream	—

Upstream advisory

UBUNTU-CVE-2018-12886

USNPoC exploitHIGH2019-05-22

CVEs:CVE-2018-12886

Affected products

Product	Status	Vendor	Package	Ecosystem
gcc-4.8	affected	Ubuntu:14.04:LTS	gcc-4.8	—
gcc-4.8	affected	Ubuntu:16.04:LTS	gcc-4.8	—
gcc-4.8	affected	Ubuntu:18.04:LTS	gcc-4.8	—
gcc-4.9	affected	Ubuntu:16.04:LTS	gcc-4.9	—
gcc-6	affected	Ubuntu:18.04:LTS	gcc-6	—
gcc-7	affected	Ubuntu:20.04:LTS	gcc-7	—
gcc-7	affected	Ubuntu:18.04:LTS	gcc-7	—
gcc-8	affected	Ubuntu:20.04:LTS	gcc-8	—
gcc-8	affected	Ubuntu:18.04:LTS	gcc-8	—
gcc-arm-none-eabi	affected	Ubuntu:16.04:LTS	gcc-arm-none-eabi	—
gcc-arm-none-eabi	affected	Ubuntu:24.04:LTS	gcc-arm-none-eabi	—
gcc-arm-none-eabi	affected	Ubuntu:22.04:LTS	gcc-arm-none-eabi	—
gcc-arm-none-eabi	affected	Ubuntu:20.04:LTS	gcc-arm-none-eabi	—
gcc-arm-none-eabi	affected	Ubuntu:25.10	gcc-arm-none-eabi	—
gcc-arm-none-eabi	affected	Ubuntu:18.04:LTS	gcc-arm-none-eabi	—
gcc-snapshot	affected	Ubuntu:22.04:LTS	gcc-snapshot	—
gcc-snapshot	affected	Ubuntu:24.04:LTS	gcc-snapshot	—
gcc-snapshot	affected	Ubuntu:18.04:LTS	gcc-snapshot	—
gcc-snapshot	affected	Ubuntu:25.10	gcc-snapshot	—
gcc-snapshot	affected	Ubuntu:16.04:LTS	gcc-snapshot	—

Upstream advisory

USN-3982-2

USNPoC exploitHIGH2019-05-14

linux-lts-xenial vulnerabilities

CVEs:CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-3874 CVE-2019-3882 CVE-2019-11091

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—

Upstream advisory

USN-3982-1

USNPoC exploitHIGH2019-05-14

linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities

CVEs:CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-3874 CVE-2019-3882 CVE-2019-11091

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

USN-3972-1

USNPoC exploitHIGH2019-05-13

postgresql-10, postgresql-11, postgresql-9.5 vulnerabilities

CVEs:CVE-2019-10129 CVE-2019-10130

Affected products

Product	Status	Vendor	Package	Ecosystem
postgresql-10	affected	Ubuntu:18.04:LTS	postgresql-10	—
postgresql-9.5	affected	Ubuntu:16.04:LTS	postgresql-9.5	—

Upstream advisory

UBUNTU-CVE-2019-5432

USNPoC exploitHIGH2019-05-06

CVEs:CVE-2019-5432

Affected products

Product	Status	Vendor	Package	Ecosystem
node-mqtt-packet	affected	Ubuntu:18.04:LTS	node-mqtt-packet	—

Upstream advisory

USN-3977-2

USNPoC exploitMEDIUM2019-05-22

intel-microcode update

CVEs:CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091

Affected products

Product	Status	Vendor	Package	Ecosystem
intel-microcode	affected	Ubuntu:16.04:LTS	intel-microcode	—
intel-microcode	affected	Ubuntu:18.04:LTS	intel-microcode	—
intel-microcode	affected	Ubuntu:Pro:14.04:LTS	intel-microcode	—

Upstream advisory

USN-3985-2

USNPoC exploitMEDIUM2019-05-16

libvirt update

CVEs:CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091

Affected products

Product	Status	Vendor	Package	Ecosystem
libvirt	affected	Ubuntu:14.04:LTS	libvirt	—

Upstream advisory

USN-3985-1

USNPoC exploitMEDIUM2019-05-15

libvirt update

CVEs:CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091

Affected products

Product	Status	Vendor	Package	Ecosystem
libvirt	affected	Ubuntu:16.04:LTS	libvirt	—
libvirt	affected	Ubuntu:18.04:LTS	libvirt	—

Upstream advisory

USN-3983-1

USNPoC exploitMEDIUM2019-05-14

linux vulnerabilities

CVEs:CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:14.04:LTS	linux	—

Upstream advisory

USN-3977-1

USNPoC exploitMEDIUM2019-05-14

intel-microcode update

CVEs:CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091

Affected products

Product	Status	Vendor	Package	Ecosystem
intel-microcode	affected	Ubuntu:18.04:LTS	intel-microcode	—
intel-microcode	affected	Ubuntu:14.04:LTS	intel-microcode	—
intel-microcode	affected	Ubuntu:16.04:LTS	intel-microcode	—

Upstream advisory

UBUNTU-CVE-2018-12130

USNPoC exploitMEDIUM2019-05-07

CVEs:CVE-2018-12130

Affected products

Product	Status	Vendor	Package	Ecosystem
intel-microcode	affected	Ubuntu:16.04:LTS	intel-microcode	—
intel-microcode	affected	Ubuntu:14.04:LTS	intel-microcode	—
intel-microcode	affected	Ubuntu:18.04:LTS	intel-microcode	—
libvirt	affected	Ubuntu:16.04:LTS	libvirt	—
libvirt	affected	Ubuntu:14.04:LTS	libvirt	—
libvirt	affected	Ubuntu:18.04:LTS	libvirt	—
linux	affected	Ubuntu:18.04:LTS	linux	—
linux	affected	Ubuntu:14.04:LTS	linux	—
linux	affected	Ubuntu:16.04:LTS	linux	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:14.04:LTS	linux-azure	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—
qemu	affected	Ubuntu:18.04:LTS	qemu	—
qemu	affected	Ubuntu:16.04:LTS	qemu	—
qemu	affected	Ubuntu:14.04:LTS	qemu	—

Upstream advisory

UBUNTU-CVE-2018-12126

USNPoC exploitMEDIUM2019-05-07

CVEs:CVE-2018-12126

Affected products

Product	Status	Vendor	Package	Ecosystem
intel-microcode	affected	Ubuntu:16.04:LTS	intel-microcode	—
intel-microcode	affected	Ubuntu:14.04:LTS	intel-microcode	—
intel-microcode	affected	Ubuntu:18.04:LTS	intel-microcode	—
libvirt	affected	Ubuntu:16.04:LTS	libvirt	—
libvirt	affected	Ubuntu:14.04:LTS	libvirt	—
libvirt	affected	Ubuntu:18.04:LTS	libvirt	—
linux	affected	Ubuntu:18.04:LTS	linux	—
linux	affected	Ubuntu:14.04:LTS	linux	—
linux	affected	Ubuntu:16.04:LTS	linux	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:14.04:LTS	linux-azure	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—
qemu	affected	Ubuntu:18.04:LTS	qemu	—
qemu	affected	Ubuntu:16.04:LTS	qemu	—
qemu	affected	Ubuntu:14.04:LTS	qemu	—

Upstream advisory

UBUNTU-CVE-2018-12127

USNPoC exploitMEDIUM2019-05-07

CVEs:CVE-2018-12127

Affected products

Product	Status	Vendor	Package	Ecosystem
intel-microcode	affected	Ubuntu:16.04:LTS	intel-microcode	—
intel-microcode	affected	Ubuntu:14.04:LTS	intel-microcode	—
intel-microcode	affected	Ubuntu:18.04:LTS	intel-microcode	—
libvirt	affected	Ubuntu:16.04:LTS	libvirt	—
libvirt	affected	Ubuntu:14.04:LTS	libvirt	—
libvirt	affected	Ubuntu:18.04:LTS	libvirt	—
linux	affected	Ubuntu:18.04:LTS	linux	—
linux	affected	Ubuntu:14.04:LTS	linux	—
linux	affected	Ubuntu:16.04:LTS	linux	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:14.04:LTS	linux-azure	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—
qemu	affected	Ubuntu:18.04:LTS	qemu	—
qemu	affected	Ubuntu:16.04:LTS	qemu	—
qemu	affected	Ubuntu:14.04:LTS	qemu	—

Upstream advisory

UBUNTU-CVE-2019-10132

USNPoC exploitHIGH2019-05-21

CVEs:CVE-2019-10132

Affected products

Product	Status	Vendor	Package	Ecosystem
libvirt	affected	Ubuntu:18.04:LTS	libvirt	—
libvirt	affected	Ubuntu:16.04:LTS	libvirt	—

Upstream advisory

UBUNTU-CVE-2019-10130

USNPoC exploitMEDIUM2019-05-09

CVEs:CVE-2019-10130

Affected products

Product	Status	Vendor	Package	Ecosystem
postgresql-10	affected	Ubuntu:18.04:LTS	postgresql-10	—
postgresql-9.5	affected	Ubuntu:16.04:LTS	postgresql-9.5	—

Upstream advisory

UBUNTU-CVE-2018-7191

USNPoC exploitMEDIUM2019-05-17

CVEs:CVE-2018-7191

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:Pro:20.04:LTS	linux	—
linux	affected	Ubuntu:Pro:18.04:LTS	linux	—
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux	affected	Ubuntu:Pro:16.04:LTS	linux	—
linux-aws	affected	Ubuntu:Pro:18.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:Pro:20.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:Pro:16.04:LTS	linux-aws	—
linux-aws-5.4	affected	Ubuntu:Pro:18.04:LTS	linux-aws-5.4	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-aws-fips	—
linux-aws-hwe	affected	Ubuntu:Pro:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:Pro:16.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:Pro:20.04:LTS	linux-azure	—
linux-azure-4.15	affected	Ubuntu:Pro:18.04:LTS	linux-azure-4.15	—
linux-azure-5.4	affected	Ubuntu:Pro:18.04:LTS	linux-azure-5.4	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-azure-fips	—
linux-bluefield	affected	Ubuntu:Pro:20.04:LTS	linux-bluefield	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:Pro:20.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:Pro:16.04:LTS	linux-gcp	—
linux-gcp-4.15	affected	Ubuntu:Pro:18.04:LTS	linux-gcp-4.15	—
linux-gcp-5.4	affected	Ubuntu:Pro:18.04:LTS	linux-gcp-5.4	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-gcp-fips	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-gcp-fips	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-gcp-fips	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-gcp-fips	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gkeop-5.15	affected	Ubuntu:20.04:LTS	linux-gkeop-5.15	—
linux-hwe	affected	Ubuntu:Pro:16.04:LTS	linux-hwe	—
linux-hwe-5.4	affected	Ubuntu:Pro:18.04:LTS	linux-hwe-5.4	—
linux-ibm	affected	Ubuntu:Pro:20.04:LTS	linux-ibm	—
linux-ibm-5.4	affected	Ubuntu:Pro:18.04:LTS	linux-ibm-5.4	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-iot	affected	Ubuntu:Pro:20.04:LTS	linux-iot	—
linux-kvm	affected	Ubuntu:Pro:18.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:Pro:16.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:Pro:20.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—
linux-oracle	affected	Ubuntu:Pro:20.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:Pro:18.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:Pro:16.04:LTS	linux-oracle	—
linux-oracle-5.4	affected	Ubuntu:Pro:18.04:LTS	linux-oracle-5.4	—
linux-raspi	affected	Ubuntu:Pro:20.04:LTS	linux-raspi	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi-5.4	affected	Ubuntu:Pro:18.04:LTS	linux-raspi-5.4	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—
linux-xilinx-zynqmp	affected	Ubuntu:Pro:20.04:LTS	linux-xilinx-zynqmp	—

Upstream advisory

UBUNTU-CVE-2019-12779

USNPoC exploitHIGH2019-05-16

CVEs:CVE-2019-12779

Affected products

Product	Status	Vendor	Package	Ecosystem
libqb	affected	Ubuntu:18.04:LTS	libqb	—
libqb	affected	Ubuntu:14.04:LTS	libqb	—
libqb	affected	Ubuntu:16.04:LTS	libqb	—

Upstream advisory

UBUNTU-CVE-2019-11091

USNPoC exploitMEDIUM2019-05-07

CVEs:CVE-2019-11091

Affected products

Product	Status	Vendor	Package	Ecosystem
intel-microcode	affected	Ubuntu:14.04:LTS	intel-microcode	—
intel-microcode	affected	Ubuntu:18.04:LTS	intel-microcode	—
intel-microcode	affected	Ubuntu:16.04:LTS	intel-microcode	—
libvirt	affected	Ubuntu:14.04:LTS	libvirt	—
libvirt	affected	Ubuntu:16.04:LTS	libvirt	—
libvirt	affected	Ubuntu:18.04:LTS	libvirt	—
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:18.04:LTS	linux	—
linux	affected	Ubuntu:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:14.04:LTS	linux-azure	—
linux-azure-6.11	affected	Ubuntu:24.04:LTS	linux-azure-6.11	—
linux-azure-fde-5.15	affected	Ubuntu:Pro:20.04:LTS	linux-azure-fde-5.15	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp-6.11	affected	Ubuntu:24.04:LTS	linux-gcp-6.11	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe-6.11	affected	Ubuntu:24.04:LTS	linux-hwe-6.11	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lowlatency-hwe-6.11	affected	Ubuntu:24.04:LTS	linux-lowlatency-hwe-6.11	—
linux-lts-xenial	affected	Ubuntu:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—
qemu	affected	Ubuntu:18.04:LTS	qemu	—
qemu	affected	Ubuntu:14.04:LTS	qemu	—
qemu	affected	Ubuntu:16.04:LTS	qemu	—

Upstream advisory

UBUNTU-CVE-2019-11884

USNPoC exploitLOW2019-05-10

CVEs:CVE-2019-11884

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:18.04:LTS	linux	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-aws-fips	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fde-5.15	affected	Ubuntu:Pro:20.04:LTS	linux-azure-fde-5.15	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-azure-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-gcp-fips	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oem-osp1	affected	Ubuntu:18.04:LTS	linux-oem-osp1	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2019-12382

USNPoC exploitMEDIUM2019-05-28

CVEs:CVE-2019-12382

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—

Upstream advisory

UBUNTU-CVE-2019-11811

USNPoC exploitCRITICAL2019-05-07

CVEs:CVE-2019-11811

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—

Upstream advisory

USN-3999-1

USNEPSS 49-79%CRITICAL2019-05-30

gnutls28 vulnerabilities

CVEs:CVE-2018-10844 CVE-2018-10845 CVE-2018-10846 CVE-2019-3829 CVE-2019-3836

Affected products

Product	Status	Vendor	Package	Ecosystem
gnutls28	affected	Ubuntu:16.04:LTS	gnutls28	—
gnutls28	affected	Ubuntu:18.04:LTS	gnutls28	—

Upstream advisory

UBUNTU-CVE-2019-7837

USNEPSS <= 49%HIGH2019-05-15

CVEs:CVE-2019-7837

Affected products

Product	Status	Vendor	Package	Ecosystem
flashplugin-nonfree	affected	Ubuntu:18.04:LTS	flashplugin-nonfree	—
flashplugin-nonfree	affected	Ubuntu:16.04:LTS	flashplugin-nonfree	—

Upstream advisory

USN-3973-1

USNEPSS <= 49%HIGH2019-05-13

isc-dhcp vulnerability

CVEs:CVE-2019-6470

Affected products

Product	Status	Vendor	Package	Ecosystem
isc-dhcp	affected	Ubuntu:18.04:LTS	isc-dhcp	—

Upstream advisory

UBUNTU-CVE-2019-6470

USNEPSS <= 49%HIGH2019-05-03

CVEs:CVE-2019-6470

Affected products

Product	Status	Vendor	Package	Ecosystem
isc-dhcp	affected	Ubuntu:18.04:LTS	isc-dhcp	—

Upstream advisory

UBUNTU-CVE-2019-11873

USNEPSS <= 49%CRITICAL2019-05-23

CVEs:CVE-2019-11873

Affected products

Product	Status	Vendor	Package	Ecosystem
wolfssl	affected	Ubuntu:18.04:LTS	wolfssl	—
wolfssl	affected	Ubuntu:16.04:LTS	wolfssl	—

Upstream advisory

USN-3845-2

USNEPSS <= 49%CRITICAL2019-05-28

freerdp vulnerabilities

CVEs:CVE-2018-8786 CVE-2018-8787 CVE-2018-8788 CVE-2018-8789

Affected products

Product	Status	Vendor	Package	Ecosystem
freerdp	affected	Ubuntu:18.04:LTS	freerdp	—

Upstream advisory

UBUNTU-CVE-2019-11683

USNEPSS <= 49%CRITICAL2019-05-02

CVEs:CVE-2019-11683

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—

Upstream advisory

USN-3956-2

USNEPSS <= 49%CRITICAL2019-05-09

bind9 vulnerability

CVEs:CVE-2018-5743

Affected products

Product	Status	Vendor	Package	Ecosystem
bind9	affected	Ubuntu:Pro:14.04:LTS	bind9	—

Upstream advisory

USN-3986-1

USNEPSS <= 49%MEDIUM2019-05-16

Wireshark vulnerabilities

CVEs:CVE-2019-9208 CVE-2019-9209 CVE-2019-9214 CVE-2019-10894 CVE-2019-10895 CVE-2019-10896 CVE-2019-10899 CVE-2019-10901 CVE-2019-10903

Affected products

Product	Status	Vendor	Package	Ecosystem
wireshark	affected	Ubuntu:16.04:LTS	wireshark	—
wireshark	affected	Ubuntu:18.04:LTS	wireshark	—

Upstream advisory

UBUNTU-CVE-2019-11831

USNEPSS <= 49%CRITICAL2019-05-08

CVEs:CVE-2019-11831

Affected products

Product	Status	Vendor	Package	Ecosystem
drupal7	affected	Ubuntu:Pro:14.04:LTS	drupal7	—
drupal7	affected	Ubuntu:Pro:16.04:LTS	drupal7	—

Upstream advisory

UBUNTU-CVE-2019-11815

USNEPSS <= 49%HIGH2019-05-07

CVEs:CVE-2019-11815

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:18.04:LTS	linux	—
linux	affected	Ubuntu:16.04:LTS	linux	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-aws-fips	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-azure-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-gcp-fips	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—

Upstream advisory

USN-3953-2

USNEPSS <= 49%CRITICAL2019-05-01

php5 vulnerabilities

CVEs:CVE-2019-11034 CVE-2019-11035

Affected products

Product	Status	Vendor	Package	Ecosystem
php5	affected	Ubuntu:Pro:14.04:LTS	php5	—

Upstream advisory

UBUNTU-CVE-2019-12211

USNEPSS <= 49%HIGH2019-05-20

CVEs:CVE-2019-12211

Affected products

Product	Status	Vendor	Package	Ecosystem
freeimage	affected	Ubuntu:20.04:LTS	freeimage	—
freeimage	affected	Ubuntu:Pro:14.04:LTS	freeimage	—
freeimage	affected	Ubuntu:Pro:16.04:LTS	freeimage	—
freeimage	affected	Ubuntu:18.04:LTS	freeimage	—

Upstream advisory

UBUNTU-CVE-2019-12295

USNEPSS <= 49%HIGH2019-05-23

CVEs:CVE-2019-12295

Affected products

Product	Status	Vendor	Package	Ecosystem
wireshark	affected	Ubuntu:Pro:14.04:LTS	wireshark	—
wireshark	affected	Ubuntu:18.04:LTS	wireshark	—
wireshark	affected	Ubuntu:16.04:LTS	wireshark	—

Upstream advisory

UBUNTU-CVE-2019-11840

USNEPSS <= 49%MEDIUM2019-05-09

CVEs:CVE-2019-11840

Affected products

Product	Status	Vendor	Package	Ecosystem
golang-go.crypto	affected	Ubuntu:Pro:16.04:LTS	golang-go.crypto	—
golang-go.crypto	affected	Ubuntu:Pro:18.04:LTS	golang-go.crypto	—
snapd	affected	Ubuntu:25.10	snapd	—
snapd	affected	Ubuntu:22.04:LTS	snapd	—
snapd	affected	Ubuntu:20.04:LTS	snapd	—
snapd	affected	Ubuntu:24.04:LTS	snapd	—
snapd	affected	Ubuntu:Pro:18.04:LTS	snapd	—
snapd	affected	Ubuntu:Pro:16.04:LTS	snapd	—
stream	affected	Cloudflare	—	—

Upstream advisory

UBUNTU-CVE-2019-10069

USNEPSS <= 49%CRITICAL2019-05-31

CVEs:CVE-2019-10069

Affected products

Product	Status	Vendor	Package	Ecosystem
godot	affected	Ubuntu:24.04:LTS	godot	—
godot	affected	Ubuntu:22.04:LTS	godot	—
godot	affected	Ubuntu:25.04	godot	—

Upstream advisory

UBUNTU-CVE-2019-12111

USNEPSS <= 49%HIGH2019-05-15

CVEs:CVE-2019-12111

Affected products

Product	Status	Vendor	Package	Ecosystem
miniupnpd	affected	Ubuntu:16.04:LTS	miniupnpd	—
miniupnpd	affected	Ubuntu:18.04:LTS	miniupnpd	—

Upstream advisory

USN-3967-1

USNEPSS <= 49%MEDIUM2019-05-06

FFmpeg vulnerabilities

CVEs:CVE-2018-15822 CVE-2019-9718 CVE-2019-9721 CVE-2019-11338 CVE-2019-11339

Affected products

Product	Status	Vendor	Package	Ecosystem
ffmpeg	affected	Ubuntu:18.04:LTS	ffmpeg	—

Upstream advisory

USN-4001-2

USNEPSS <= 49%2019-05-30

libseccomp vulnerability

CVEs:CVE-2019-9893

Affected products

Product	Status	Vendor	Package	Ecosystem
libseccomp	affected	Ubuntu:Pro:14.04:LTS	libseccomp	—

Upstream advisory

USN-4001-1

USNEPSS <= 49%2019-05-30

libseccomp vulnerability

CVEs:CVE-2019-9893

Affected products

Product	Status	Vendor	Package	Ecosystem
libseccomp	affected	Ubuntu:16.04:LTS	libseccomp	—
libseccomp	affected	Ubuntu:18.04:LTS	libseccomp	—

Upstream advisory

UBUNTU-CVE-2017-6514

USNEPSS <= 49%MEDIUM2019-05-22

CVEs:CVE-2017-6514

Affected products

Product	Status	Vendor	Package	Ecosystem
wordpress	affected	Ubuntu:20.04:LTS	wordpress	—
wordpress	affected	Ubuntu:16.04:LTS	wordpress	—
wordpress	affected	Ubuntu:18.04:LTS	wordpress	—
wordpress	affected	Ubuntu:25.10	wordpress	—
wordpress	affected	Ubuntu:24.04:LTS	wordpress	—
wordpress	affected	Ubuntu:22.04:LTS	wordpress	—

Upstream advisory

UBUNTU-CVE-2019-12247

USNEPSS <= 49%HIGH2019-05-22

CVEs:CVE-2019-12247

Affected products

Product	Status	Vendor	Package	Ecosystem
qemu	affected	Ubuntu:Pro:14.04:LTS	qemu	—
qemu	affected	Ubuntu:Pro:16.04:LTS	qemu	—
qemu	affected	Ubuntu:Pro:18.04:LTS	qemu	—

Upstream advisory

USN-3957-2

USNEPSS <= 49%HIGH2019-05-23

mariadb-5.5 vulnerabilities

CVEs:CVE-2019-2614 CVE-2019-2627

Affected products

Product	Status	Vendor	Package	Ecosystem
mariadb-5.5	affected	Ubuntu:14.04:LTS	mariadb-5.5	—

Upstream advisory

UBUNTU-CVE-2017-12805

USNEPSS <= 49%HIGH2019-05-09

CVEs:CVE-2017-12805

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:16.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:Pro:14.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2017-12806

USNEPSS <= 49%HIGH2019-05-09

CVEs:CVE-2017-12806

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:16.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:Pro:14.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2017-12839

USNEPSS <= 49%HIGH2019-05-09

CVEs:CVE-2017-12839

Affected products

Product	Status	Vendor	Package	Ecosystem
mpg123	affected	Ubuntu:Pro:14.04:LTS	mpg123	—
mpg123	affected	Ubuntu:Pro:16.04:LTS	mpg123	—

Upstream advisory

USN-3989-1

USNEPSS <= 49%HIGH2019-05-21

libraw vulnerabilities

CVEs:CVE-2018-5817 CVE-2018-5818 CVE-2018-5819 CVE-2018-20337 CVE-2018-20363 CVE-2018-20364 CVE-2018-20365

Affected products

Product	Status	Vendor	Package	Ecosystem
libraw	affected	Ubuntu:16.04:LTS	libraw	—
libraw	affected	Ubuntu:18.04:LTS	libraw	—

Upstream advisory

UBUNTU-CVE-2019-12106

USNEPSS <= 49%HIGH2019-05-15

CVEs:CVE-2019-12106

Affected products

Product	Status	Vendor	Package	Ecosystem
minissdpd	affected	Ubuntu:16.04:LTS	minissdpd	—
minissdpd	affected	Ubuntu:18.04:LTS	minissdpd	—

Upstream advisory

UBUNTU-CVE-2019-3565

USNEPSS <= 49%HIGH2019-05-06

CVEs:CVE-2019-3565

Affected products

Product	Status	Vendor	Package	Ecosystem
hhvm	affected	Ubuntu:18.04:LTS	hhvm	—
hhvm	affected	Ubuntu:16.04:LTS	hhvm	—
reminders-app	affected	Ubuntu:16.04:LTS	reminders-app	—

Upstream advisory

UBUNTU-CVE-2019-12046

USNEPSS <= 49%CRITICAL2019-05-15

CVEs:CVE-2019-12046

Affected products

Product	Status	Vendor	Package	Ecosystem
lemonldap-ng	affected	Ubuntu:20.04:LTS	lemonldap-ng	—
lemonldap-ng	affected	Ubuntu:18.04:LTS	lemonldap-ng	—
lemonldap-ng	affected	Ubuntu:22.04:LTS	lemonldap-ng	—
lemonldap-ng	affected	Ubuntu:16.04:LTS	lemonldap-ng	—

Upstream advisory

UBUNTU-CVE-2019-12109

USNEPSS <= 49%HIGH2019-05-15

CVEs:CVE-2019-12109

Affected products

Product	Status	Vendor	Package	Ecosystem
miniupnpd	affected	Ubuntu:18.04:LTS	miniupnpd	—
miniupnpd	affected	Ubuntu:16.04:LTS	miniupnpd	—

Upstream advisory

UBUNTU-CVE-2019-12108

USNEPSS <= 49%HIGH2019-05-15

CVEs:CVE-2019-12108

Affected products

Product	Status	Vendor	Package	Ecosystem
miniupnpd	affected	Ubuntu:16.04:LTS	miniupnpd	—
miniupnpd	affected	Ubuntu:18.04:LTS	miniupnpd	—

Upstream advisory

UBUNTU-CVE-2019-12110

USNEPSS <= 49%HIGH2019-05-15

CVEs:CVE-2019-12110

Affected products

Product	Status	Vendor	Package	Ecosystem
miniupnpd	affected	Ubuntu:16.04:LTS	miniupnpd	—
miniupnpd	affected	Ubuntu:18.04:LTS	miniupnpd	—

Upstream advisory

USN-3988-1

USNEPSS <= 49%MEDIUM2019-05-16

libmediainfo vulnerabilities

CVEs:CVE-2019-11372 CVE-2019-11373

Affected products

Product	Status	Vendor	Package	Ecosystem
libmediainfo	affected	Ubuntu:18.04:LTS	libmediainfo	—

Upstream advisory

USN-3976-2

USNEPSS <= 49%CRITICAL2019-05-14

samba vulnerability

CVEs:CVE-2018-16860

Affected products

Product	Status	Vendor	Package	Ecosystem
samba	affected	Ubuntu:Pro:14.04:LTS	samba	—

Upstream advisory

USN-3976-1

USNEPSS <= 49%CRITICAL2019-05-14

samba vulnerability

CVEs:CVE-2018-16860

Affected products

Product	Status	Vendor	Package	Ecosystem
samba	affected	Ubuntu:16.04:LTS	samba	—
samba	affected	Ubuntu:18.04:LTS	samba	—

Upstream advisory

UBUNTU-CVE-2018-16860

USNEPSS <= 49%HIGH2019-05-14

CVEs:CVE-2018-16860

Affected products

Product	Status	Vendor	Package	Ecosystem
heimdal	affected	Ubuntu:Pro:16.04:LTS	heimdal	—
heimdal	affected	Ubuntu:18.04:LTS	heimdal	—
heimdal	affected	Ubuntu:Pro:14.04:LTS	heimdal	—
samba	affected	Ubuntu:18.04:LTS	samba	—
samba	affected	Ubuntu:16.04:LTS	samba	—
samba	affected	Ubuntu:Pro:14.04:LTS	samba	—

Upstream advisory

UBUNTU-CVE-2019-11693

USNEPSS <= 49%CRITICAL2019-05-21

CVEs:CVE-2019-11693

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:18.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:16.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2019-10912

USNEPSS <= 49%HIGH2019-05-16

CVEs:CVE-2019-10912

Affected products

Product	Status	Vendor	Package	Ecosystem
symfony	affected	Ubuntu:Pro:18.04:LTS	symfony	—

Upstream advisory

UBUNTU-CVE-2019-12217

USNEPSS <= 49%MEDIUM2019-05-20

CVEs:CVE-2019-12217

Affected products

Product	Status	Vendor	Package	Ecosystem
libsdl2-image	affected	Ubuntu:Pro:14.04:LTS	libsdl2-image	—
libsdl2-image	affected	Ubuntu:18.04:LTS	libsdl2-image	—
libsdl2-image	affected	Ubuntu:16.04:LTS	libsdl2-image	—
sdl-image1.2	affected	Ubuntu:Pro:14.04:LTS	sdl-image1.2	—
sdl-image1.2	affected	Ubuntu:16.04:LTS	sdl-image1.2	—
sdl-image1.2	affected	Ubuntu:18.04:LTS	sdl-image1.2	—

Upstream advisory

UBUNTU-CVE-2019-10640

USNEPSS <= 49%HIGH2019-05-15

CVEs:CVE-2019-10640

Affected products

Product	Status	Vendor	Package	Ecosystem
gitlab	affected	Ubuntu:16.04:LTS	gitlab	—

Upstream advisory

UBUNTU-CVE-2019-12216

USNEPSS <= 49%MEDIUM2019-05-20

CVEs:CVE-2019-12216

Affected products

Product	Status	Vendor	Package	Ecosystem
libsdl2-image	affected	Ubuntu:18.04:LTS	libsdl2-image	—
libsdl2-image	affected	Ubuntu:16.04:LTS	libsdl2-image	—
libsdl2-image	affected	Ubuntu:Pro:14.04:LTS	libsdl2-image	—
sdl-image1.2	affected	Ubuntu:Pro:14.04:LTS	sdl-image1.2	—
sdl-image1.2	affected	Ubuntu:16.04:LTS	sdl-image1.2	—
sdl-image1.2	affected	Ubuntu:18.04:LTS	sdl-image1.2	—

Upstream advisory

UBUNTU-CVE-2019-12213

USNEPSS <= 49%MEDIUM2019-05-20

CVEs:CVE-2019-12213

Affected products

Product	Status	Vendor	Package	Ecosystem
freeimage	affected	Ubuntu:Pro:16.04:LTS	freeimage	—
freeimage	affected	Ubuntu:20.04:LTS	freeimage	—
freeimage	affected	Ubuntu:18.04:LTS	freeimage	—
freeimage	affected	Ubuntu:Pro:14.04:LTS	freeimage	—

Upstream advisory

UBUNTU-CVE-2019-11766

USNEPSS <= 49%CRITICAL2019-05-05

CVEs:CVE-2019-11766

Affected products

Product	Status	Vendor	Package	Ecosystem
dhcpcd5	affected	Ubuntu:18.04:LTS	dhcpcd5	—
dhcpcd5	affected	Ubuntu:Pro:14.04:LTS	dhcpcd5	—
dhcpcd5	affected	Ubuntu:16.04:LTS	dhcpcd5	—

Upstream advisory

UBUNTU-CVE-2019-12293

USNEPSS <= 49%HIGH2019-05-23

CVEs:CVE-2019-12293

Affected products

Product	Status	Vendor	Package	Ecosystem
poppler	affected	Ubuntu:16.04:LTS	poppler	—
poppler	affected	Ubuntu:18.04:LTS	poppler	—

Upstream advisory

UBUNTU-CVE-2016-7550

USNEPSS <= 49%HIGH2019-05-23

CVEs:CVE-2016-7550

Affected products

Product	Status	Vendor	Package	Ecosystem
asterisk	affected	Ubuntu:Pro:16.04:LTS	asterisk	—

Upstream advisory

UBUNTU-CVE-2019-12499

USNEPSS <= 49%HIGH2019-05-31

CVEs:CVE-2019-12499

Affected products

Product	Status	Vendor	Package	Ecosystem
firejail	affected	Ubuntu:16.04:LTS	firejail	—
firejail	affected	Ubuntu:18.04:LTS	firejail	—

Upstream advisory

UBUNTU-CVE-2019-3558

USNEPSS <= 49%HIGH2019-05-06

CVEs:CVE-2019-3558

Affected products

Product	Status	Vendor	Package	Ecosystem
hhvm	affected	Ubuntu:18.04:LTS	hhvm	—
hhvm	affected	Ubuntu:16.04:LTS	hhvm	—

Upstream advisory

UBUNTU-CVE-2019-11841

USNEPSS <= 49%MEDIUM2019-05-22

CVEs:CVE-2019-11841

Affected products

Product	Status	Vendor	Package	Ecosystem
golang-go.crypto	affected	Ubuntu:Pro:18.04:LTS	golang-go.crypto	—
golang-go.crypto	affected	Ubuntu:Pro:16.04:LTS	golang-go.crypto	—

Upstream advisory

UBUNTU-CVE-2019-12219

USNEPSS <= 49%HIGH2019-05-20

CVEs:CVE-2019-12219

Affected products

Product	Status	Vendor	Package	Ecosystem
libsdl2-image	affected	Ubuntu:Pro:14.04:LTS	libsdl2-image	—
libsdl2-image	affected	Ubuntu:18.04:LTS	libsdl2-image	—
libsdl2-image	affected	Ubuntu:16.04:LTS	libsdl2-image	—
sdl-image1.2	affected	Ubuntu:16.04:LTS	sdl-image1.2	—
sdl-image1.2	affected	Ubuntu:18.04:LTS	sdl-image1.2	—
sdl-image1.2	affected	Ubuntu:Pro:14.04:LTS	sdl-image1.2	—

Upstream advisory

UBUNTU-CVE-2019-3559

USNEPSS <= 49%HIGH2019-05-06

CVEs:CVE-2019-3559

Affected products

Product	Status	Vendor	Package	Ecosystem
hhvm	affected	Ubuntu:18.04:LTS	hhvm	—
hhvm	affected	Ubuntu:16.04:LTS	hhvm	—
libthrift-java	affected	Ubuntu:16.04:LTS	libthrift-java	—
libthrift-java	affected	Ubuntu:18.04:LTS	libthrift-java	—

Upstream advisory

UBUNTU-CVE-2019-3564

USNEPSS <= 49%HIGH2019-05-06

CVEs:CVE-2019-3564

Affected products

Product	Status	Vendor	Package	Ecosystem
golang-github-uber-go-tally	affected	Ubuntu:24.04:LTS	golang-github-uber-go-tally	—
golang-github-uber-go-tally	affected	Ubuntu:22.04:LTS	golang-github-uber-go-tally	—
golang-github-uber-go-tally	affected	Ubuntu:25.10	golang-github-uber-go-tally	—

Upstream advisory

UBUNTU-CVE-2019-3552

USNEPSS <= 49%HIGH2019-05-06

CVEs:CVE-2019-3552

Affected products

Product	Status	Vendor	Package	Ecosystem
hhvm	affected	Ubuntu:18.04:LTS	hhvm	—
hhvm	affected	Ubuntu:16.04:LTS	hhvm	—

Upstream advisory

UBUNTU-CVE-2019-12098

USNEPSS <= 49%HIGH2019-05-15

CVEs:CVE-2019-12098

Affected products

Product	Status	Vendor	Package	Ecosystem
heimdal	affected	Ubuntu:Pro:16.04:LTS	heimdal	—
heimdal	affected	Ubuntu:18.04:LTS	heimdal	—
heimdal	affected	Ubuntu:Pro:14.04:LTS	heimdal	—

Upstream advisory

UBUNTU-CVE-2019-5827

USNEPSS <= 49%HIGH2019-05-27

CVEs:CVE-2019-5827

Affected products

Product	Status	Vendor	Package	Ecosystem
sqlite	affected	Ubuntu:16.04:LTS	sqlite	—
sqlite	affected	Ubuntu:20.04:LTS	sqlite	—
sqlite	affected	Ubuntu:22.04:LTS	sqlite	—
sqlite	affected	Ubuntu:14.04:LTS	sqlite	—
sqlite	affected	Ubuntu:18.04:LTS	sqlite	—
sqlite3	affected	Ubuntu:18.04:LTS	sqlite3	—
sqlite3	affected	Ubuntu:16.04:LTS	sqlite3	—

Upstream advisory

UBUNTU-CVE-2019-11037

USNEPSS <= 49%CRITICAL2019-05-03

CVEs:CVE-2019-11037

Affected products

Product	Status	Vendor	Package	Ecosystem
php-imagick	affected	Ubuntu:Pro:16.04:LTS	php-imagick	—
php-imagick	affected	Ubuntu:20.04:LTS	php-imagick	—
php-imagick	affected	Ubuntu:18.04:LTS	php-imagick	—
php-imagick	affected	Ubuntu:22.04:LTS	php-imagick	—

Upstream advisory

UBUNTU-CVE-2019-12221

USNEPSS <= 49%MEDIUM2019-05-20

CVEs:CVE-2019-12221

Affected products

Product	Status	Vendor	Package	Ecosystem
libsdl2-image	affected	Ubuntu:Pro:14.04:LTS	libsdl2-image	—
libsdl2-image	affected	Ubuntu:18.04:LTS	libsdl2-image	—
libsdl2-image	affected	Ubuntu:16.04:LTS	libsdl2-image	—
sdl-image1.2	affected	Ubuntu:16.04:LTS	sdl-image1.2	—
sdl-image1.2	affected	Ubuntu:Pro:14.04:LTS	sdl-image1.2	—
sdl-image1.2	affected	Ubuntu:18.04:LTS	sdl-image1.2	—

Upstream advisory

UBUNTU-CVE-2019-10109

USNEPSS <= 49%MEDIUM2019-05-15

CVEs:CVE-2019-10109

Affected products

Product	Status	Vendor	Package	Ecosystem
gitlab	affected	Ubuntu:16.04:LTS	gitlab	—

Upstream advisory

UBUNTU-CVE-2019-12218

USNEPSS <= 49%MEDIUM2019-05-20

CVEs:CVE-2019-12218

Affected products

Product	Status	Vendor	Package	Ecosystem
libsdl2-image	affected	Ubuntu:18.04:LTS	libsdl2-image	—
libsdl2-image	affected	Ubuntu:16.04:LTS	libsdl2-image	—
libsdl2-image	affected	Ubuntu:Pro:14.04:LTS	libsdl2-image	—
sdl-image1.2	affected	Ubuntu:Pro:14.04:LTS	sdl-image1.2	—
sdl-image1.2	affected	Ubuntu:16.04:LTS	sdl-image1.2	—
sdl-image1.2	affected	Ubuntu:18.04:LTS	sdl-image1.2	—

Upstream advisory

USN-3994-1

USNEPSS <= 49%HIGH2019-05-27

gnome-desktop3 vulnerability

CVEs:CVE-2019-11460

Affected products

Product	Status	Vendor	Package	Ecosystem
gnome-desktop3	affected	Ubuntu:18.04:LTS	gnome-desktop3	—

Upstream advisory

UBUNTU-CVE-2019-12222

USNEPSS <= 49%MEDIUM2019-05-20

CVEs:CVE-2019-12222

Affected products

Product	Status	Vendor	Package	Ecosystem
libsdl2-image	affected	Ubuntu:18.04:LTS	libsdl2-image	—
libsdl2-image	affected	Ubuntu:16.04:LTS	libsdl2-image	—
libsdl2-image	affected	Ubuntu:Pro:14.04:LTS	libsdl2-image	—
sdl-image1.2	affected	Ubuntu:Pro:14.04:LTS	sdl-image1.2	—
sdl-image1.2	affected	Ubuntu:16.04:LTS	sdl-image1.2	—
sdl-image1.2	affected	Ubuntu:18.04:LTS	sdl-image1.2	—

Upstream advisory

UBUNTU-CVE-2019-11059

USNEPSS <= 49%CRITICAL2019-05-10

CVEs:CVE-2019-11059

Affected products

Product	Status	Vendor	Package	Ecosystem
u-boot	affected	Ubuntu:16.04:LTS	u-boot	—

Upstream advisory

UBUNTU-CVE-2019-12212

USNEPSS <= 49%HIGH2019-05-20

CVEs:CVE-2019-12212

Affected products

Product	Status	Vendor	Package	Ecosystem
freeimage	affected	Ubuntu:Pro:18.04:LTS	freeimage	—
freeimage	affected	Ubuntu:24.04:LTS	freeimage	—
freeimage	affected	Ubuntu:20.04:LTS	freeimage	—
freeimage	affected	Ubuntu:Pro:16.04:LTS	freeimage	—
freeimage	affected	Ubuntu:22.04:LTS	freeimage	—

Upstream advisory

UBUNTU-CVE-2019-11640

USNEPSS <= 49%HIGH2019-05-01

CVEs:CVE-2019-11640

Affected products

Product	Status	Vendor	Package	Ecosystem
recutils	affected	Ubuntu:Pro:20.04:LTS	recutils	—
recutils	affected	Ubuntu:Pro:16.04:LTS	recutils	—
recutils	affected	Ubuntu:Pro:18.04:LTS	recutils	—
recutils	affected	Ubuntu:Pro:22.04:LTS	recutils	—

Upstream advisory

UBUNTU-CVE-2019-11639

USNEPSS <= 49%HIGH2019-05-01

CVEs:CVE-2019-11639

Affected products

Product	Status	Vendor	Package	Ecosystem
recutils	affected	Ubuntu:Pro:22.04:LTS	recutils	—
recutils	affected	Ubuntu:Pro:20.04:LTS	recutils	—
recutils	affected	Ubuntu:Pro:16.04:LTS	recutils	—
recutils	affected	Ubuntu:Pro:18.04:LTS	recutils	—

Upstream advisory

USN-3992-1

USNEPSS <= 49%HIGH2019-05-22

webkit2gtk vulnerabilities

CVEs:CVE-2019-8595 CVE-2019-8607 CVE-2019-8615

Affected products

Product	Status	Vendor	Package	Ecosystem
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—

Upstream advisory

UBUNTU-CVE-2019-8597

USNEPSS <= 49%MEDIUM2019-05-14

CVEs:CVE-2019-8597

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
webkit2gtk	affected	Ubuntu:16.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—

Upstream advisory

UBUNTU-CVE-2019-8615

USNEPSS <= 49%MEDIUM2019-05-14

CVEs:CVE-2019-8615

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:16.04:LTS	webkit2gtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—

Upstream advisory

UBUNTU-CVE-2019-12220

USNEPSS <= 49%MEDIUM2019-05-20

CVEs:CVE-2019-12220

Affected products

Product	Status	Vendor	Package	Ecosystem
libsdl2-image	affected	Ubuntu:16.04:LTS	libsdl2-image	—
libsdl2-image	affected	Ubuntu:18.04:LTS	libsdl2-image	—
libsdl2-image	affected	Ubuntu:Pro:14.04:LTS	libsdl2-image	—
sdl-image1.2	affected	Ubuntu:18.04:LTS	sdl-image1.2	—
sdl-image1.2	affected	Ubuntu:Pro:14.04:LTS	sdl-image1.2	—
sdl-image1.2	affected	Ubuntu:16.04:LTS	sdl-image1.2	—

Upstream advisory

UBUNTU-CVE-2019-10913

USNEPSS <= 49%CRITICAL2019-05-16

CVEs:CVE-2019-10913

Affected products

Product	Status	Vendor	Package	Ecosystem
symfony	affected	Ubuntu:Pro:18.04:LTS	symfony	—
symfony	affected	Ubuntu:16.04:LTS	symfony	—

Upstream advisory

UBUNTU-CVE-2017-11365

USNEPSS <= 49%CRITICAL2019-05-23

CVEs:CVE-2017-11365

Affected products

Product	Status	Vendor	Package	Ecosystem
symfony	affected	Ubuntu:18.04:LTS	symfony	—

Upstream advisory

UBUNTU-CVE-2019-12300

USNEPSS <= 49%CRITICAL2019-05-23

CVEs:CVE-2019-12300

Affected products

Product	Status	Vendor	Package	Ecosystem
buildbot	affected	Ubuntu:20.04:LTS	buildbot	—
buildbot	affected	Ubuntu:18.04:LTS	buildbot	—

Upstream advisory

UBUNTU-CVE-2019-8583

USNEPSS <= 49%HIGH2019-05-14

CVEs:CVE-2019-8583

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:16.04:LTS	webkit2gtk	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—

Upstream advisory

UBUNTU-CVE-2019-12449

USNEPSS <= 49%MEDIUM2019-05-29

CVEs:CVE-2019-12449

Affected products

Product	Status	Vendor	Package	Ecosystem
gvfs	affected	Ubuntu:18.04:LTS	gvfs	—

Upstream advisory

UBUNTU-CVE-2019-9815

USNEPSS <= 49%HIGH2019-05-22

CVEs:CVE-2019-9815

Affected products

Product	Status	Vendor	Package	Ecosystem
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—

Upstream advisory

UBUNTU-CVE-2019-8596

USNEPSS <= 49%HIGH2019-05-14

CVEs:CVE-2019-8596

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:16.04:LTS	webkit2gtk	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—

Upstream advisory

UBUNTU-CVE-2019-8609

USNEPSS <= 49%HIGH2019-05-14

CVEs:CVE-2019-8609

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:16.04:LTS	webkit2gtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—

Upstream advisory

UBUNTU-CVE-2019-8610

USNEPSS <= 49%HIGH2019-05-14

CVEs:CVE-2019-8610

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:16.04:LTS	webkit2gtk	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—

Upstream advisory

UBUNTU-CVE-2019-12447

USNEPSS <= 49%HIGH2019-05-29

CVEs:CVE-2019-12447

Affected products

Product	Status	Vendor	Package	Ecosystem
gvfs	affected	Ubuntu:18.04:LTS	gvfs	—

Upstream advisory

UBUNTU-CVE-2019-8571

USNEPSS <= 49%HIGH2019-05-14

CVEs:CVE-2019-8571

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
webkit2gtk	affected	Ubuntu:16.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—

Upstream advisory

UBUNTU-CVE-2019-8584

USNEPSS <= 49%HIGH2019-05-14

CVEs:CVE-2019-8584

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
webkit2gtk	affected	Ubuntu:16.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—

Upstream advisory

UBUNTU-CVE-2019-8586

USNEPSS <= 49%HIGH2019-05-14

CVEs:CVE-2019-8586

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:16.04:LTS	webkit2gtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—

Upstream advisory

UBUNTU-CVE-2019-8587

USNEPSS <= 49%HIGH2019-05-14

CVEs:CVE-2019-8587

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:16.04:LTS	webkit2gtk	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—

Upstream advisory

UBUNTU-CVE-2019-8594

USNEPSS <= 49%HIGH2019-05-14

CVEs:CVE-2019-8594

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
webkit2gtk	affected	Ubuntu:16.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—

Upstream advisory

UBUNTU-CVE-2019-8595

USNEPSS <= 49%HIGH2019-05-14

CVEs:CVE-2019-8595

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:16.04:LTS	webkit2gtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—

Upstream advisory

UBUNTU-CVE-2019-8619

USNEPSS <= 49%HIGH2019-05-14

CVEs:CVE-2019-8619

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:16.04:LTS	webkit2gtk	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—

Upstream advisory

UBUNTU-CVE-2019-11842

USNEPSS <= 49%HIGH2019-05-09

CVEs:CVE-2019-11842

Affected products

Product	Status	Vendor	Package	Ecosystem
matrix-synapse	affected	Ubuntu:Pro:18.04:LTS	matrix-synapse	—

Upstream advisory

UBUNTU-CVE-2019-9800

USNEPSS <= 49%CRITICAL2019-05-21

CVEs:CVE-2019-9800

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:18.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
thunderbird	affected	Ubuntu:16.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2018-12556

USNEPSS <= 49%MEDIUM2019-05-16

CVEs:CVE-2018-12556

Affected products

Product	Status	Vendor	Package	Ecosystem
node-yarnpkg	affected	Ubuntu:22.04:LTS	node-yarnpkg	—
node-yarnpkg	affected	Ubuntu:25.10	node-yarnpkg	—
node-yarnpkg	affected	Ubuntu:24.04:LTS	node-yarnpkg	—
node-yarnpkg	affected	Ubuntu:20.04:LTS	node-yarnpkg	—

Upstream advisory

UBUNTU-CVE-2019-12448

USNEPSS <= 49%HIGH2019-05-29

CVEs:CVE-2019-12448

Affected products

Product	Status	Vendor	Package	Ecosystem
gvfs	affected	Ubuntu:18.04:LTS	gvfs	—

Upstream advisory

UBUNTU-CVE-2019-10053

USNEPSS <= 49%CRITICAL2019-05-13

CVEs:CVE-2019-10053

Affected products

Product	Status	Vendor	Package	Ecosystem
suricata	affected	Ubuntu:16.04:LTS	suricata	—
suricata	affected	Ubuntu:18.04:LTS	suricata	—

Upstream advisory

UBUNTU-CVE-2019-9819

USNEPSS <= 49%CRITICAL2019-05-21

CVEs:CVE-2019-9819

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:18.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
thunderbird	affected	Ubuntu:16.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2019-12482

USNEPSS <= 49%HIGH2019-05-30

CVEs:CVE-2019-12482

Affected products

Product	Status	Vendor	Package	Ecosystem
gpac	affected	Ubuntu:Pro:20.04:LTS	gpac	—
gpac	affected	Ubuntu:Pro:16.04:LTS	gpac	—
gpac	affected	Ubuntu:Pro:18.04:LTS	gpac	—
gpac	affected	Ubuntu:Pro:14.04:LTS	gpac	—

Upstream advisory

UBUNTU-CVE-2017-18375

USNEPSS <= 49%HIGH2019-05-24

CVEs:CVE-2017-18375

Affected products

Product	Status	Vendor	Package	Ecosystem
ampache	affected	Ubuntu:16.04:LTS	ampache	—

Upstream advisory

UBUNTU-CVE-2019-9218

USNEPSS <= 49%CRITICAL2019-05-29

CVEs:CVE-2019-9218

Affected products

Product	Status	Vendor	Package	Ecosystem
gitlab	affected	Ubuntu:16.04:LTS	gitlab	—

Upstream advisory

UBUNTU-CVE-2019-9820

USNEPSS <= 49%CRITICAL2019-05-21

CVEs:CVE-2019-9820

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:18.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:16.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2019-11691

USNEPSS <= 49%CRITICAL2019-05-21

CVEs:CVE-2019-11691

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:18.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
thunderbird	affected	Ubuntu:16.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2019-11692

USNEPSS <= 49%CRITICAL2019-05-21

CVEs:CVE-2019-11692

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:18.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:16.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2019-11694

USNEPSS <= 49%HIGH2019-05-22

CVEs:CVE-2019-11694

Affected products

Product	Status	Vendor	Package	Ecosystem
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—

Upstream advisory

UBUNTU-CVE-2019-5883

USNEPSS <= 49%CRITICAL2019-05-17

CVEs:CVE-2019-5883

Affected products

Product	Status	Vendor	Package	Ecosystem
gitlab	affected	Ubuntu:16.04:LTS	gitlab	—

Upstream advisory

UBUNTU-CVE-2019-12214

USNEPSS <= 49%HIGH2019-05-20

CVEs:CVE-2019-12214

Affected products

Product	Status	Vendor	Package	Ecosystem
freeimage	affected	Ubuntu:Pro:14.04:LTS	freeimage	—
freeimage	affected	Ubuntu:Pro:16.04:LTS	freeimage	—
freeimage	affected	Ubuntu:25.10	freeimage	—
freeimage	affected	Ubuntu:22.04:LTS	freeimage	—
freeimage	affected	Ubuntu:Pro:18.04:LTS	freeimage	—
freeimage	affected	Ubuntu:24.04:LTS	freeimage	—
freeimage	affected	Ubuntu:20.04:LTS	freeimage	—

Upstream advisory

UBUNTU-CVE-2019-8608

USNEPSS <= 49%MEDIUM2019-05-14

CVEs:CVE-2019-8608

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
webkit2gtk	affected	Ubuntu:16.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—

Upstream advisory

UBUNTU-CVE-2019-10050

USNEPSS <= 49%HIGH2019-05-13

CVEs:CVE-2019-10050

Affected products

Product	Status	Vendor	Package	Ecosystem
suricata	affected	Ubuntu:18.04:LTS	suricata	—
suricata	affected	Ubuntu:16.04:LTS	suricata	—

Upstream advisory

UBUNTU-CVE-2019-8607

USNEPSS <= 49%MEDIUM2019-05-14

CVEs:CVE-2019-8607

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:16.04:LTS	webkit2gtk	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—

Upstream advisory

UBUNTU-CVE-2016-9969

USNEPSS <= 49%HIGH2019-05-23

CVEs:CVE-2016-9969

Affected products

Product	Status	Vendor	Package	Ecosystem
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—

Upstream advisory

UBUNTU-CVE-2019-11638

USNEPSS <= 49%MEDIUM2019-05-01

CVEs:CVE-2019-11638

Affected products

Product	Status	Vendor	Package	Ecosystem
recutils	affected	Ubuntu:Pro:20.04:LTS	recutils	—
recutils	affected	Ubuntu:Pro:16.04:LTS	recutils	—
recutils	affected	Ubuntu:Pro:18.04:LTS	recutils	—
recutils	affected	Ubuntu:Pro:22.04:LTS	recutils	—

Upstream advisory

UBUNTU-CVE-2019-11637

USNEPSS <= 49%MEDIUM2019-05-01

CVEs:CVE-2019-11637

Affected products

Product	Status	Vendor	Package	Ecosystem
recutils	affected	Ubuntu:Pro:16.04:LTS	recutils	—
recutils	affected	Ubuntu:Pro:20.04:LTS	recutils	—
recutils	affected	Ubuntu:Pro:18.04:LTS	recutils	—
recutils	affected	Ubuntu:Pro:22.04:LTS	recutils	—

Upstream advisory

UBUNTU-CVE-2019-11698

USNEPSS <= 49%MEDIUM2019-05-21

CVEs:CVE-2019-11698

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:18.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—
thunderbird	affected	Ubuntu:16.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2019-11700

USNEPSS <= 49%MEDIUM2019-05-22

CVEs:CVE-2019-11700

Affected products

Product	Status	Vendor	Package	Ecosystem
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—

Upstream advisory

UBUNTU-CVE-2019-5824

USNEPSS <= 49%HIGH2019-05-02

CVEs:CVE-2019-5824

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2019-9814

USNEPSS <= 49%CRITICAL2019-05-21

CVEs:CVE-2019-9814

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—

Upstream advisory

UBUNTU-CVE-2017-15652

USNEPSS <= 49%MEDIUM2019-05-23

CVEs:CVE-2017-15652

Affected products

Product	Status	Vendor	Package	Ecosystem
ghostscript	affected	Ubuntu:18.04:LTS	ghostscript	—

Upstream advisory

UBUNTU-CVE-2019-12493

USNEPSS <= 49%HIGH2019-05-31

CVEs:CVE-2019-12493

Affected products

Product	Status	Vendor	Package	Ecosystem
emscripten	affected	Ubuntu:22.04:LTS	emscripten	—
emscripten	affected	Ubuntu:25.10	emscripten	—
emscripten	affected	Ubuntu:18.04:LTS	emscripten	—
emscripten	affected	Ubuntu:16.04:LTS	emscripten	—
emscripten	affected	Ubuntu:24.04:LTS	emscripten	—
texlive-bin	affected	Ubuntu:25.10	texlive-bin	—
texlive-bin	affected	Ubuntu:Pro:18.04:LTS	texlive-bin	—
texlive-bin	affected	Ubuntu:22.04:LTS	texlive-bin	—
texlive-bin	affected	Ubuntu:Pro:20.04:LTS	texlive-bin	—
texlive-bin	affected	Ubuntu:24.04:LTS	texlive-bin	—
texlive-bin	affected	Ubuntu:Pro:16.04:LTS	texlive-bin	—

Upstream advisory

UBUNTU-CVE-2019-12495

USNEPSS <= 49%MEDIUM2019-05-31

CVEs:CVE-2019-12495

Affected products

Product	Status	Vendor	Package	Ecosystem
tcc	affected	Ubuntu:16.04:LTS	tcc	—
tcc	affected	Ubuntu:20.04:LTS	tcc	—
tcc	affected	Ubuntu:18.04:LTS	tcc	—

Upstream advisory

UBUNTU-CVE-2019-11690

USNEPSS <= 49%MEDIUM2019-05-03

CVEs:CVE-2019-11690

Affected products

Product	Status	Vendor	Package	Ecosystem
u-boot	affected	Ubuntu:16.04:LTS	u-boot	—

Upstream advisory

UBUNTU-CVE-2019-6781

USNEPSS <= 49%HIGH2019-05-17

CVEs:CVE-2019-6781

Affected products

Product	Status	Vendor	Package	Ecosystem
gitlab	affected	Ubuntu:16.04:LTS	gitlab	—

Upstream advisory

UBUNTU-CVE-2019-12483

USNEPSS <= 49%HIGH2019-05-30

CVEs:CVE-2019-12483

Affected products

Product	Status	Vendor	Package	Ecosystem
gpac	affected	Ubuntu:Pro:20.04:LTS	gpac	—
gpac	affected	Ubuntu:Pro:16.04:LTS	gpac	—
gpac	affected	Ubuntu:Pro:18.04:LTS	gpac	—
gpac	affected	Ubuntu:Pro:14.04:LTS	gpac	—

Upstream advisory

UBUNTU-CVE-2019-12269

USNEPSS <= 49%HIGH2019-05-21

CVEs:CVE-2019-12269

Affected products

Product	Status	Vendor	Package	Ecosystem
enigmail	affected	Ubuntu:18.04:LTS	enigmail	—
enigmail	affected	Ubuntu:16.04:LTS	enigmail	—

Upstream advisory

UBUNTU-CVE-2019-11767

USNEPSS <= 49%MEDIUM2019-05-05

CVEs:CVE-2019-11767

Affected products

Product	Status	Vendor	Package	Ecosystem
phpbb3	affected	Ubuntu:Pro:14.04:LTS	phpbb3	—
phpbb3	affected	Ubuntu:16.04:LTS	phpbb3	—

Upstream advisory

UBUNTU-CVE-2019-10067

USNEPSS <= 49%MEDIUM2019-05-21

CVEs:CVE-2019-10067

Affected products

Product	Status	Vendor	Package	Ecosystem
otrs2	affected	Ubuntu:16.04:LTS	otrs2	—
otrs2	affected	Ubuntu:18.04:LTS	otrs2	—

Upstream advisory

UBUNTU-CVE-2017-5984

USNEPSS <= 49%MEDIUM2019-05-22

CVEs:CVE-2017-5984

Affected products

Product	Status	Vendor	Package	Ecosystem
libav	affected	Ubuntu:Pro:14.04:LTS	libav	—

Upstream advisory

UBUNTU-CVE-2019-12360

USNEPSS <= 49%HIGH2019-05-27

CVEs:CVE-2019-12360

Affected products

Product	Status	Vendor	Package	Ecosystem
emscripten	affected	Ubuntu:24.04:LTS	emscripten	—
emscripten	affected	Ubuntu:22.04:LTS	emscripten	—
emscripten	affected	Ubuntu:25.10	emscripten	—
emscripten	affected	Ubuntu:18.04:LTS	emscripten	—
emscripten	affected	Ubuntu:16.04:LTS	emscripten	—
texlive-bin	affected	Ubuntu:24.04:LTS	texlive-bin	—
texlive-bin	affected	Ubuntu:22.04:LTS	texlive-bin	—
texlive-bin	affected	Ubuntu:Pro:16.04:LTS	texlive-bin	—
texlive-bin	affected	Ubuntu:25.10	texlive-bin	—
texlive-bin	affected	Ubuntu:Pro:18.04:LTS	texlive-bin	—
texlive-bin	affected	Ubuntu:Pro:20.04:LTS	texlive-bin	—

Upstream advisory

UBUNTU-CVE-2019-9892

USNEPSS <= 49%MEDIUM2019-05-21

CVEs:CVE-2019-9892

Affected products

Product	Status	Vendor	Package	Ecosystem
otrs2	affected	Ubuntu:18.04:LTS	otrs2	—
otrs2	affected	Ubuntu:16.04:LTS	otrs2	—

Upstream advisory

UBUNTU-CVE-2019-10134

USNEPSS <= 49%MEDIUM2019-05-21

CVEs:CVE-2019-10134

Affected products

Product	Status	Vendor	Package	Ecosystem
moodle	affected	Ubuntu:18.04:LTS	moodle	—
moodle	affected	Ubuntu:16.04:LTS	moodle	—

Upstream advisory

UBUNTU-CVE-2016-7151

USNEPSS <= 49%MEDIUM2019-05-15

CVEs:CVE-2016-7151

Affected products

Product	Status	Vendor	Package	Ecosystem
capstone	affected	Ubuntu:22.04:LTS	capstone	—
capstone	affected	Ubuntu:20.04:LTS	capstone	—
capstone	affected	Ubuntu:18.04:LTS	capstone	—
capstone	affected	Ubuntu:16.04:LTS	capstone	—
capstone	affected	Ubuntu:25.10	capstone	—
capstone	affected	Ubuntu:24.04:LTS	capstone	—

Upstream advisory

UBUNTU-CVE-2019-9818

USNEPSS <= 49%HIGH2019-05-22

CVEs:CVE-2019-9818

Affected products

Product	Status	Vendor	Package	Ecosystem
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—

Upstream advisory

UBUNTU-CVE-2019-12481

USNEPSS <= 49%MEDIUM2019-05-30

CVEs:CVE-2019-12481

Affected products

Product	Status	Vendor	Package	Ecosystem
gpac	affected	Ubuntu:Pro:14.04:LTS	gpac	—
gpac	affected	Ubuntu:Pro:18.04:LTS	gpac	—
gpac	affected	Ubuntu:Pro:20.04:LTS	gpac	—
gpac	affected	Ubuntu:Pro:16.04:LTS	gpac	—

Upstream advisory

UBUNTU-CVE-2019-10133

USNEPSS <= 49%MEDIUM2019-05-21

CVEs:CVE-2019-10133

Affected products

Product	Status	Vendor	Package	Ecosystem
moodle	affected	Ubuntu:18.04:LTS	moodle	—
moodle	affected	Ubuntu:16.04:LTS	moodle	—

Upstream advisory

UBUNTU-CVE-2019-9821

USNEPSS <= 49%HIGH2019-05-21

CVEs:CVE-2019-9821

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:18.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—

Upstream advisory

UBUNTU-CVE-2019-11697

USNEPSS <= 49%MEDIUM2019-05-21

CVEs:CVE-2019-11697

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—

Upstream advisory

UBUNTU-CVE-2019-11699

USNEPSS <= 49%MEDIUM2019-05-21

CVEs:CVE-2019-11699

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—

Upstream advisory

UBUNTU-CVE-2019-11696

USNEPSS <= 49%HIGH2019-05-21

CVEs:CVE-2019-11696

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:18.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—

Upstream advisory

UBUNTU-CVE-2019-9817

USNEPSS <= 49%MEDIUM2019-05-21

CVEs:CVE-2019-9817

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:18.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:16.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2019-10066

USNEPSS <= 49%MEDIUM2019-05-21

CVEs:CVE-2019-10066

Affected products

Product	Status	Vendor	Package	Ecosystem
otrs2	affected	Ubuntu:18.04:LTS	otrs2	—

Upstream advisory

UBUNTU-CVE-2019-2054

USNEPSS <= 49%HIGH2019-05-07

CVEs:CVE-2019-2054

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fde-5.15	affected	Ubuntu:Pro:20.04:LTS	linux-azure-fde-5.15	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2019-11701

USNEPSS <= 49%MEDIUM2019-05-21

CVEs:CVE-2019-11701

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—

Upstream advisory

UBUNTU-CVE-2019-11833

USNEPSS <= 49%MEDIUM2019-05-15

CVEs:CVE-2019-11833

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:18.04:LTS	linux	—
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-aws-fips	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-azure-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-gcp-fips	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oem-osp1	affected	Ubuntu:18.04:LTS	linux-oem-osp1	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2019-12439

USNEPSS <= 49%HIGH2019-05-29

CVEs:CVE-2019-12439

Affected products

Product	Status	Vendor	Package	Ecosystem
bubblewrap	affected	Ubuntu:18.04:LTS	bubblewrap	—

Upstream advisory

UBUNTU-CVE-2019-11085

USNEPSS <= 49%HIGH2019-05-14

CVEs:CVE-2019-11085

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:18.04:LTS	linux	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-aws-fips	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-azure-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-gcp-fips	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2019-12380

USNEPSS <= 49%MEDIUM2019-05-28

CVEs:CVE-2019-12380

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:18.04:LTS	linux	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws-5.0	affected	Ubuntu:18.04:LTS	linux-aws-5.0	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-aws-fips	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure-4.15	affected	Ubuntu:18.04:LTS	linux-azure-4.15	—
linux-azure-edge	affected	Ubuntu:18.04:LTS	linux-azure-edge	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-azure-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp-4.15	affected	Ubuntu:18.04:LTS	linux-gcp-4.15	—
linux-gcp-edge	affected	Ubuntu:18.04:LTS	linux-gcp-edge	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-gcp-fips	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-hwe-edge	affected	Ubuntu:16.04:LTS	linux-hwe-edge	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oem-osp1	affected	Ubuntu:18.04:LTS	linux-oem-osp1	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-oracle-5.0	affected	Ubuntu:18.04:LTS	linux-oracle-5.0	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2019-9221

USNEPSS <= 49%MEDIUM2019-05-29

CVEs:CVE-2019-9221

Affected products

Product	Status	Vendor	Package	Ecosystem
gitlab	affected	Ubuntu:16.04:LTS	gitlab	—

Upstream advisory

UBUNTU-CVE-2019-12378

USNEPSS <= 49%MEDIUM2019-05-28

CVEs:CVE-2019-12378

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—

Upstream advisory

UBUNTU-CVE-2019-12379

USNEPSS <= 49%MEDIUM2019-05-28

CVEs:CVE-2019-12379

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—

Upstream advisory

UBUNTU-CVE-2019-12381

USNEPSS <= 49%MEDIUM2019-05-28

CVEs:CVE-2019-12381

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—

Upstream advisory

UBUNTU-CVE-2019-12454

USNEPSS <= 49%HIGH2019-05-30

CVEs:CVE-2019-12454

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—

Upstream advisory

UBUNTU-CVE-2019-12455

USNEPSS <= 49%MEDIUM2019-05-30

CVEs:CVE-2019-12455

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—

Upstream advisory

UBUNTU-CVE-2019-12456

USNEPSS <= 49%HIGH2019-05-30

CVEs:CVE-2019-12456

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—

Upstream advisory

UBUNTU-CVE-2019-10142

USNEPSS <= 49%HIGH2019-05-23

CVEs:CVE-2019-10142

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux	affected	Ubuntu:16.04:LTS	linux	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-aws-fips	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-azure-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-gcp-fips	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—

Upstream advisory

UBUNTU-CVE-2019-11098

USNEPSS <= 49%MEDIUM2019-05-12

CVEs:CVE-2019-11098

Affected products

Product	Status	Vendor	Package	Ecosystem
edk2	affected	Ubuntu:Pro:18.04:LTS	edk2	—
edk2	affected	Ubuntu:20.04:LTS	edk2	—
edk2	affected	Ubuntu:Pro:16.04:LTS	edk2	—

Upstream advisory

UBUNTU-CVE-2019-9177

USNEPSS <= 49%MEDIUM2019-05-29

CVEs:CVE-2019-9177

Affected products

Product	Status	Vendor	Package	Ecosystem
gitlab	affected	Ubuntu:Pro:16.04:LTS	gitlab	—

Upstream advisory

UBUNTU-CVE-2019-11675

USNEPSS <= 49%HIGH2019-05-02

CVEs:CVE-2019-11675

Affected products

Product	Status	Vendor	Package	Ecosystem
groonga	affected	Ubuntu:16.04:LTS	groonga	—
groonga	affected	Ubuntu:18.04:LTS	groonga	—

Upstream advisory

UBUNTU-CVE-2019-2053

USNEPSS <= 49%MEDIUM2019-05-07

CVEs:CVE-2019-2053

Affected products

Product	Status	Vendor	Package	Ecosystem
wpa	affected	Ubuntu:16.04:LTS	wpa	—
wpa	affected	Ubuntu:18.04:LTS	wpa	—
wpa	affected	Ubuntu:Pro:14.04:LTS	wpa	—

Upstream advisory

USN-3968-2

USNAll remaining2019-05-29

sudo vulnerability

Affected products

Product	Status	Vendor	Package	Ecosystem
sudo	affected	Ubuntu:Pro:14.04:LTS	sudo	—

Upstream advisory

USN-3996-1

USNAll remaining2019-05-29

GNU Screen vulnerability

Affected products

Product	Status	Vendor	Package	Ecosystem
screen	affected	Ubuntu:Pro:14.04:LTS	screen	—

Upstream advisory

USN-3995-2

USNAll remaining2019-05-28

keepalived vulnerability

Affected products

Product	Status	Vendor	Package	Ecosystem
keepalived	affected	Ubuntu:Pro:14.04:LTS	keepalived	—

Upstream advisory

USN-3995-1

USNAll remaining2019-05-28

keepalived vulnerability

Affected products

Product	Status	Vendor	Package	Ecosystem
keepalived	affected	Ubuntu:16.04:LTS	keepalived	—
keepalived	affected	Ubuntu:18.04:LTS	keepalived	—

Upstream advisory

USN-3976-4

USNAll remainingCRITICAL2019-05-27

samba vulnerability

Affected products

Product	Status	Vendor	Package	Ecosystem
samba	affected	Ubuntu:Pro:14.04:LTS	samba	—

Upstream advisory

USN-3976-3

USNAll remainingCRITICAL2019-05-27

samba regression

Affected products

Product	Status	Vendor	Package	Ecosystem
samba	affected	Ubuntu:18.04:LTS	samba	—
samba	affected	Ubuntu:16.04:LTS	samba	—

Upstream advisory

USN-3975-1

USNAll remaining2019-05-13

openjdk-8, openjdk-lts vulnerabilities

Affected products

Product	Status	Vendor	Package	Ecosystem
openjdk-8	affected	Ubuntu:16.04:LTS	openjdk-8	—
openjdk-lts	affected	Ubuntu:18.04:LTS	openjdk-lts	—

Upstream advisory

USN-3974-1

USNAll remaining2019-05-13

VCFtools vulnerabilities

Affected products

Product	Status	Vendor	Package	Ecosystem
vcftools	affected	Ubuntu:16.04:LTS	vcftools	—

Upstream advisory

UBUNTU-CVE-2017-12778

USNAll remainingHIGH2019-05-09

Affected products

Product	Status	Vendor	Package	Ecosystem
qbittorrent	affected	Ubuntu:24.04:LTS	qbittorrent	—
qbittorrent	affected	Ubuntu:20.04:LTS	qbittorrent	—
qbittorrent	affected	Ubuntu:Pro:18.04:LTS	qbittorrent	—
qbittorrent	affected	Ubuntu:Pro:16.04:LTS	qbittorrent	—
qbittorrent	affected	Ubuntu:22.04:LTS	qbittorrent	—

Upstream advisory

USN-3969-2

USNAll remaining2019-05-09

wpa vulnerability

Affected products

Product	Status	Vendor	Package	Ecosystem
wpa	affected	Ubuntu:Pro:14.04:LTS	wpa	—

Upstream advisory

USN-3969-1

USNAll remaining2019-05-07

wpa vulnerability

Affected products

Product	Status	Vendor	Package	Ecosystem
wpa	affected	Ubuntu:16.04:LTS	wpa	—
wpa	affected	Ubuntu:18.04:LTS	wpa	—

Upstream advisory

USN-3968-1

USNAll remaining2019-05-06

sudo vulnerabilities

Affected products

Product	Status	Vendor	Package	Ecosystem
sudo	affected	Ubuntu:16.04:LTS	sudo	—

Upstream advisory

USN-3966-1

USNAll remaining2019-05-06

gnome-shell vulnerability

Affected products

Product	Status	Vendor	Package	Ecosystem
gnome-shell	affected	Ubuntu:18.04:LTS	gnome-shell	—

Upstream advisory

USN-3963-1

USNAll remaining2019-05-01

memcached vulnerability

Affected products

Product	Status	Vendor	Package	Ecosystem
memcached	affected	Ubuntu:18.04:LTS	memcached	—

Upstream advisory

What would you fix first?

Advisories

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products