Canonical Security Advisories: February 2020 — Canonical Security Advisories

UBUNTU-CVE-2020-1938

USNExploitedCISA KEV listedCRITICAL2020-02-20

CVEs:CVE-2020-1938

Affected products

Product	Status	Vendor	Package	Ecosystem
tomcat7	affected	Ubuntu:Pro:14.04:LTS	tomcat7	—
tomcat7	affected	Ubuntu:Pro:18.04:LTS	tomcat7	—
tomcat7	affected	Ubuntu:Pro:16.04:LTS	tomcat7	—
tomcat8	affected	Ubuntu:Pro:16.04:LTS	tomcat8	—
tomcat8	affected	Ubuntu:Pro:18.04:LTS	tomcat8	—
tomcat9	affected	Ubuntu:Pro:18.04:LTS	tomcat9	—

Upstream advisory

UBUNTU-CVE-2020-6418

USNExploitedCISA KEV listedHIGH2020-02-25

CVEs:CVE-2020-6418

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-8813

USNExploitedVulnCheck KEV listedHIGH2020-02-22

CVEs:CVE-2020-8813

Affected products

Product	Status	Vendor	Package	Ecosystem
cacti	affected	Ubuntu:Pro:14.04:LTS	cacti	—
cacti	affected	Ubuntu:Pro:18.04:LTS	cacti	—

Upstream advisory

UBUNTU-CVE-2020-8794

USNWeaponized exploitCRITICAL2020-02-25

CVEs:CVE-2020-8794

Affected products

Product	Status	Vendor	Package	Ecosystem
opensmtpd	affected	Ubuntu:18.04:LTS	opensmtpd	—
opensmtpd	affected	Ubuntu:Pro:16.04:LTS	opensmtpd	—
opensmtpd	affected	Ubuntu:Pro:14.04:LTS	opensmtpd	—
opensmtpd	affected	Ubuntu:20.04:LTS	opensmtpd	—

Upstream advisory

UBUNTU-CVE-2020-8518

USNWeaponized exploitCRITICAL2020-02-17

CVEs:CVE-2020-8518

Affected products

Product	Status	Vendor	Package	Ecosystem
php-horde-data	affected	Ubuntu:18.04:LTS	php-horde-data	—
php-horde-data	affected	Ubuntu:16.04:LTS	php-horde-data	—

Upstream advisory

UBUNTU-CVE-2020-9283

USNWeaponized exploitHIGH2020-02-20

CVEs:CVE-2020-9283

Affected products

Product	Status	Vendor	Package	Ecosystem
golang-go.crypto	affected	Ubuntu:Pro:16.04:LTS	golang-go.crypto	—
golang-go.crypto	affected	Ubuntu:Pro:18.04:LTS	golang-go.crypto	—
mongo-tools	affected	Ubuntu:18.04:LTS	mongo-tools	—
mongo-tools	affected	Ubuntu:20.04:LTS	mongo-tools	—

Upstream advisory

USN-4288-1

USNWeaponized exploitCRITICAL2020-02-20

ppp vulnerability

CVEs:CVE-2020-8597

Affected products

Product	Status	Vendor	Package	Ecosystem
ppp	affected	Ubuntu:16.04:LTS	ppp	—
ppp	affected	Ubuntu:18.04:LTS	ppp	—

Upstream advisory

UBUNTU-CVE-2020-8597

USNWeaponized exploitCRITICAL2020-02-03

CVEs:CVE-2020-8597

Affected products

Product	Status	Vendor	Package	Ecosystem
lwip	affected	Ubuntu:20.04:LTS	lwip	—
ppp	affected	Ubuntu:20.04:LTS	ppp	—
ppp	affected	Ubuntu:18.04:LTS	ppp	—
ppp	affected	Ubuntu:16.04:LTS	ppp	—
ppp	affected	Ubuntu:Pro:14.04:LTS	ppp	—

Upstream advisory

UBUNTU-CVE-2020-9365

USNWeaponized exploitHIGH2020-02-24

CVEs:CVE-2020-9365

Affected products

Product	Status	Vendor	Package	Ecosystem
pure-ftpd	affected	Ubuntu:16.04:LTS	pure-ftpd	—
pure-ftpd	affected	Ubuntu:18.04:LTS	pure-ftpd	—

Upstream advisory

USN-4284-1

USNWeaponized exploitHIGH2020-02-19

linux, linux-aws, linux-azure, linux-azure-5.3, linux-gcp, linux-gcp-5.3, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-raspi2-5.3 vulnerabilities

CVEs:CVE-2019-14615 CVE-2019-15099 CVE-2019-15291 CVE-2019-16229 CVE-2019-16232 CVE-2019-18683 CVE-2019-18786 CVE-2019-18811 CVE-2019-19050 CVE-2019-19057 CVE-2019-19062 CVE-2019-19063 CVE-2019-19071 CVE-2019-19077 CVE-2019-19078 CVE-2019-19082 CVE-2019-19241 CVE-2019-19252 CVE-2019-19332 CVE-2019-19602 CVE-2019-19767 CVE-2019-19947 CVE-2019-19965

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-azure-5.3	affected	Ubuntu:18.04:LTS	linux-azure-5.3	—
linux-gcp-5.3	affected	Ubuntu:18.04:LTS	linux-gcp-5.3	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-raspi2-5.3	affected	Ubuntu:18.04:LTS	linux-raspi2-5.3	—

Upstream advisory

UBUNTU-CVE-2020-9274

USNWeaponized exploitHIGH2020-02-26

CVEs:CVE-2020-9274

Affected products

Product	Status	Vendor	Package	Ecosystem
pure-ftpd	affected	Ubuntu:16.04:LTS	pure-ftpd	—
pure-ftpd	affected	Ubuntu:18.04:LTS	pure-ftpd	—

Upstream advisory

UBUNTU-CVE-2016-9928

USNWeaponized exploitHIGH2020-02-06

CVEs:CVE-2016-9928

Affected products

Product	Status	Vendor	Package	Ecosystem
mcabber	affected	Ubuntu:16.04:LTS	mcabber	—

Upstream advisory

UBUNTU-CVE-2015-0258

USNWeaponized exploitHIGH2020-02-17

CVEs:CVE-2015-0258

Affected products

Product	Status	Vendor	Package	Ecosystem
collabtive	affected	Ubuntu:16.04:LTS	collabtive	—

Upstream advisory

UBUNTU-CVE-2020-6404

USNWeaponized exploitHIGH2020-02-05

CVEs:CVE-2020-6404

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2019-10785

USNWeaponized exploitMEDIUM2020-02-13

CVEs:CVE-2019-10785

Affected products

Product	Status	Vendor	Package	Ecosystem
dojo	affected	Ubuntu:Pro:20.04:LTS	dojo	—
dojo	affected	Ubuntu:Pro:16.04:LTS	dojo	—
dojo	affected	Ubuntu:18.04:LTS	dojo	—

Upstream advisory

USN-4269-1

USNWeaponized exploitHIGH2020-02-05

systemd vulnerabilities

CVEs:CVE-2018-16888 CVE-2019-3843 CVE-2019-3844 CVE-2019-20386 CVE-2020-1712

Affected products

Product	Status	Vendor	Package	Ecosystem
systemd	affected	Ubuntu:18.04:LTS	systemd	—
systemd	affected	Ubuntu:16.04:LTS	systemd	—

Upstream advisory

UBUNTU-CVE-2020-8793

USNWeaponized exploitMEDIUM2020-02-25

CVEs:CVE-2020-8793

Affected products

Product	Status	Vendor	Package	Ecosystem
opensmtpd	affected	Ubuntu:Pro:16.04:LTS	opensmtpd	—
opensmtpd	affected	Ubuntu:Pro:14.04:LTS	opensmtpd	—
opensmtpd	affected	Ubuntu:18.04:LTS	opensmtpd	—
opensmtpd	affected	Ubuntu:20.04:LTS	opensmtpd	—

Upstream advisory

USN-4276-1

USNWeaponized exploitCRITICAL2020-02-11

Yubico PIV Tool vulnerabilities

CVEs:CVE-2018-14779 CVE-2018-14780

Affected products

Product	Status	Vendor	Package	Ecosystem
yubico-piv-tool	affected	Ubuntu:18.04:LTS	yubico-piv-tool	—

Upstream advisory

USN-4279-1

USNActive exploitation (sightings)CRITICAL2020-02-17

php5, php7.0, php7.2, php7.3 vulnerabilities

CVEs:CVE-2015-9253 CVE-2020-7059 CVE-2020-7060

Affected products

Product	Status	Vendor	Package	Ecosystem
php5	affected	Ubuntu:Pro:14.04:LTS	php5	—
php7.0	affected	Ubuntu:16.04:LTS	php7.0	—
php7.2	affected	Ubuntu:18.04:LTS	php7.2	—

Upstream advisory

UBUNTU-CVE-2020-8945

USNActive exploitation (sightings)HIGH2020-02-12

CVEs:CVE-2020-8945

Affected products

Product	Status	Vendor	Package	Ecosystem
golang-github-proglottis-gpgme	affected	Ubuntu:20.04:LTS	golang-github-proglottis-gpgme	—
singularity-container	affected	Ubuntu:25.10	singularity-container	—
singularity-container	affected	Ubuntu:Pro:24.04:LTS	singularity-container	—
singularity-container	affected	Ubuntu:Pro:18.04:LTS	singularity-container	—

Upstream advisory

USN-4283-1

USNActive exploitation (sightings)CRITICAL2020-02-18

qemu vulnerabilities

CVEs:CVE-2020-1711 CVE-2020-7039 CVE-2020-8608

Affected products

Product	Status	Vendor	Package	Ecosystem
qemu	affected	Ubuntu:16.04:LTS	qemu	—
qemu	affected	Ubuntu:18.04:LTS	qemu	—

Upstream advisory

UBUNTU-CVE-2020-7062

USNActive exploitation (sightings)HIGH2020-02-21

CVEs:CVE-2020-7062

Affected products

Product	Status	Vendor	Package	Ecosystem
php5	affected	Ubuntu:Pro:14.04:LTS	php5	—
php7.0	affected	Ubuntu:16.04:LTS	php7.0	—
php7.2	affected	Ubuntu:18.04:LTS	php7.2	—

Upstream advisory

USN-4281-1

USNActive exploitation (sightings)HIGH2020-02-18

webkit2gtk vulnerabilities

CVEs:CVE-2020-3862 CVE-2020-3864 CVE-2020-3865 CVE-2020-3867 CVE-2020-3868

Affected products

Product	Status	Vendor	Package	Ecosystem
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—

Upstream advisory

UBUNTU-CVE-2020-8608

USNActive exploitation (sightings)MEDIUM2020-02-06

CVEs:CVE-2020-8608

Affected products

Product	Status	Vendor	Package	Ecosystem
libslirp	affected	Ubuntu:20.04:LTS	libslirp	—
qemu	affected	Ubuntu:Pro:14.04:LTS	qemu	—
qemu	affected	Ubuntu:16.04:LTS	qemu	—
qemu	affected	Ubuntu:18.04:LTS	qemu	—
slirp	affected	Ubuntu:22.04:LTS	slirp	—
slirp	affected	Ubuntu:20.04:LTS	slirp	—
slirp	affected	Ubuntu:18.04:LTS	slirp	—
slirp	affected	Ubuntu:Pro:14.04:LTS	slirp	—
slirp	affected	Ubuntu:25.10	slirp	—
slirp	affected	Ubuntu:24.04:LTS	slirp	—
slirp	affected	Ubuntu:16.04:LTS	slirp	—
slirp4netns	affected	Ubuntu:20.04:LTS	slirp4netns	—

Upstream advisory

UBUNTU-CVE-2020-7063

USNActive exploitation (sightings)MEDIUM2020-02-21

CVEs:CVE-2020-7063

Affected products

Product	Status	Vendor	Package	Ecosystem
php5	affected	Ubuntu:Pro:14.04:LTS	php5	—
php7.0	affected	Ubuntu:16.04:LTS	php7.0	—
php7.2	affected	Ubuntu:18.04:LTS	php7.2	—

Upstream advisory

UBUNTU-CVE-2013-2120

USNActive exploitation (sightings)HIGH2020-02-11

CVEs:CVE-2013-2120

Affected products

Product	Status	Vendor	Package	Ecosystem
kdeplasma-addons	affected	Ubuntu:14.04:LTS	kdeplasma-addons	—
kdeplasma-addons	affected	Ubuntu:16.04:LTS	kdeplasma-addons	—

Upstream advisory

UBUNTU-CVE-2020-3864

USNActive exploitation (sightings)HIGH2020-02-14

CVEs:CVE-2020-3864

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
webkit2gtk	affected	Ubuntu:16.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:20.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—

Upstream advisory

UBUNTU-CVE-2020-7471

USNPoC exploitCRITICAL2020-02-03

CVEs:CVE-2020-7471

Affected products

Product	Status	Vendor	Package	Ecosystem
python-django	affected	Ubuntu:18.04:LTS	python-django	—

Upstream advisory

UBUNTU-CVE-2019-15605

USNPoC exploitCRITICAL2020-02-07

CVEs:CVE-2019-15605

Affected products

Product	Status	Vendor	Package	Ecosystem
nodejs	affected	Ubuntu:Pro:14.04:LTS	nodejs	—
nodejs	affected	Ubuntu:Pro:18.04:LTS	nodejs	—
nodejs	affected	Ubuntu:Pro:16.04:LTS	nodejs	—

Upstream advisory

UBUNTU-CVE-2020-8840

USNPoC exploitCRITICAL2020-02-10

CVEs:CVE-2020-8840

Affected products

Product	Status	Vendor	Package	Ecosystem
jackson-databind	affected	Ubuntu:20.04:LTS	jackson-databind	—
jackson-databind	affected	Ubuntu:Pro:16.04:LTS	jackson-databind	—
jackson-databind	affected	Ubuntu:Pro:14.04:LTS	jackson-databind	—
jackson-databind	affected	Ubuntu:18.04:LTS	jackson-databind	—

Upstream advisory

UBUNTU-CVE-2019-15604

USNPoC exploitHIGH2020-02-07

CVEs:CVE-2019-15604

Affected products

Product	Status	Vendor	Package	Ecosystem
nodejs	affected	Ubuntu:Pro:16.04:LTS	nodejs	—
nodejs	affected	Ubuntu:Pro:18.04:LTS	nodejs	—

Upstream advisory

UBUNTU-CVE-2019-15606

USNPoC exploitCRITICAL2020-02-07

CVEs:CVE-2019-15606

Affected products

Product	Status	Vendor	Package	Ecosystem
nodejs	affected	Ubuntu:Pro:14.04:LTS	nodejs	—
nodejs	affected	Ubuntu:Pro:18.04:LTS	nodejs	—
nodejs	affected	Ubuntu:Pro:16.04:LTS	nodejs	—

Upstream advisory

UBUNTU-CVE-2020-9273

USNPoC exploitHIGH2020-02-20

CVEs:CVE-2020-9273

Affected products

Product	Status	Vendor	Package	Ecosystem
proftpd-dfsg	affected	Ubuntu:18.04:LTS	proftpd-dfsg	—
proftpd-dfsg	affected	Ubuntu:16.04:LTS	proftpd-dfsg	—

Upstream advisory

UBUNTU-CVE-2019-12528

USNPoC exploitHIGH2020-02-03

CVEs:CVE-2019-12528

Affected products

Product	Status	Vendor	Package	Ecosystem
squid	affected	Ubuntu:20.04:LTS	squid	—
squid3	affected	Ubuntu:18.04:LTS	squid3	—
squid3	affected	Ubuntu:16.04:LTS	squid3	—

Upstream advisory

USN-4287-2

USNPoC exploitHIGH2020-02-18

linux-azure vulnerabilities

CVEs:CVE-2019-5108 CVE-2019-14615 CVE-2019-15099 CVE-2019-15291 CVE-2019-16229 CVE-2019-16232 CVE-2019-18683 CVE-2019-18786 CVE-2019-18809 CVE-2019-18885 CVE-2019-19057 CVE-2019-19062 CVE-2019-19063 CVE-2019-19071 CVE-2019-19078 CVE-2019-19082 CVE-2019-19227 CVE-2019-19332 CVE-2019-19767 CVE-2019-19965 CVE-2019-20096 CVE-2020-7053

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—

Upstream advisory

USN-4286-2

USNPoC exploitMEDIUM2020-02-18

linux-lts-xenial, linux-aws vulnerabilities

CVEs:CVE-2019-5108 CVE-2019-14615 CVE-2019-15217 CVE-2019-15220 CVE-2019-15221 CVE-2019-17351 CVE-2019-19051 CVE-2019-19056 CVE-2019-19066 CVE-2019-19068 CVE-2019-19965 CVE-2019-20096

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu	—	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—

Upstream advisory

USN-4286-1

USNPoC exploitMEDIUM2020-02-18

linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities

CVEs:CVE-2019-5108 CVE-2019-14615 CVE-2019-15217 CVE-2019-15220 CVE-2019-15221 CVE-2019-17351 CVE-2019-19051 CVE-2019-19056 CVE-2019-19066 CVE-2019-19068 CVE-2019-19965 CVE-2019-20096

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu	—	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

USN-4287-1

USNPoC exploitHIGH2020-02-18

linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-gke-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities

CVEs:CVE-2019-5108 CVE-2019-14615 CVE-2019-15099 CVE-2019-15291 CVE-2019-16229 CVE-2019-16232 CVE-2019-18683 CVE-2019-18786 CVE-2019-18809 CVE-2019-18885 CVE-2019-19057 CVE-2019-19062 CVE-2019-19063 CVE-2019-19071 CVE-2019-19078 CVE-2019-19082 CVE-2019-19227 CVE-2019-19332 CVE-2019-19767 CVE-2019-19965 CVE-2019-20096 CVE-2020-7053

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:18.04:LTS	linux	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—

Upstream advisory

USN-4285-1

USNPoC exploitHIGH2020-02-18

linux-aws-5.0, linux-azure, linux-gcp, linux-gke-5.0, linux-oracle-5.0 vulnerabilities

CVEs:CVE-2019-5108 CVE-2019-14615 CVE-2019-16229 CVE-2019-16232 CVE-2019-18786 CVE-2019-18809 CVE-2019-19057 CVE-2019-19063 CVE-2019-19947 CVE-2019-19965 CVE-2019-20096 CVE-2020-7053

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-aws-5.0	affected	Ubuntu:18.04:LTS	linux-aws-5.0	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gke-5.0	affected	Ubuntu:18.04:LTS	linux-gke-5.0	—
linux-oracle-5.0	affected	Ubuntu:18.04:LTS	linux-oracle-5.0	—

Upstream advisory

UBUNTU-CVE-2020-1935

USNPoC exploitMEDIUM2020-02-24

CVEs:CVE-2020-1935

Affected products

Product	Status	Vendor	Package	Ecosystem
tomcat7	affected	Ubuntu:Pro:14.04:LTS	tomcat7	—
tomcat7	affected	Ubuntu:Pro:16.04:LTS	tomcat7	—
tomcat7	affected	Ubuntu:Pro:18.04:LTS	tomcat7	—
tomcat8	affected	Ubuntu:16.04:LTS	tomcat8	—
tomcat8	affected	Ubuntu:Pro:18.04:LTS	tomcat8	—
tomcat9	affected	Ubuntu:Pro:18.04:LTS	tomcat9	—

Upstream advisory

UBUNTU-CVE-2020-8449

USNPoC exploitHIGH2020-02-03

CVEs:CVE-2020-8449

Affected products

Product	Status	Vendor	Package	Ecosystem
squid	affected	Ubuntu:20.04:LTS	squid	—
squid3	affected	Ubuntu:18.04:LTS	squid3	—
squid3	affected	Ubuntu:16.04:LTS	squid3	—

Upstream advisory

USN-4274-1

USNPoC exploitHIGH2020-02-10

libxml2 vulnerabilities

CVEs:CVE-2019-19956 CVE-2020-7595

Affected products

Product	Status	Vendor	Package	Ecosystem
libxml2	affected	Ubuntu:16.04:LTS	libxml2	—
libxml2	affected	Ubuntu:Pro:14.04:LTS	libxml2	—
libxml2	affected	Ubuntu:18.04:LTS	libxml2	—

Upstream advisory

USN-4292-1

USNPoC exploitCRITICAL2020-02-25

rsync vulnerabilities

CVEs:CVE-2016-9840 CVE-2016-9841 CVE-2016-9842 CVE-2016-9843

Affected products

Product	Status	Vendor	Package	Ecosystem
rsync	affected	Ubuntu:16.04:LTS	rsync	—
rsync	affected	Ubuntu:18.04:LTS	rsync	—

Upstream advisory

UBUNTU-CVE-2020-8517

USNPoC exploitHIGH2020-02-03

CVEs:CVE-2020-8517

Affected products

Product	Status	Vendor	Package	Ecosystem
squid	affected	Ubuntu:20.04:LTS	squid	—
squid3	affected	Ubuntu:18.04:LTS	squid3	—
squid3	affected	Ubuntu:16.04:LTS	squid3	—

Upstream advisory

UBUNTU-CVE-2020-6062

USNPoC exploitHIGH2020-02-19

CVEs:CVE-2020-6062

Affected products

Product	Status	Vendor	Package	Ecosystem
coturn	affected	Ubuntu:18.04:LTS	coturn	—
coturn	affected	Ubuntu:20.04:LTS	coturn	—
coturn	affected	Ubuntu:16.04:LTS	coturn	—

Upstream advisory

UBUNTU-CVE-2019-9674

USNPoC exploitHIGH2020-02-04

CVEs:CVE-2019-9674

Affected products

Product	Status	Vendor	Package	Ecosystem
python2.7	affected	Ubuntu:20.04:LTS	python2.7	—
python2.7	affected	Ubuntu:16.04:LTS	python2.7	—
python2.7	affected	Ubuntu:Pro:14.04:LTS	python2.7	—
python2.7	affected	Ubuntu:Pro:22.04:LTS	python2.7	—
python2.7	affected	Ubuntu:18.04:LTS	python2.7	—
python3.4	affected	Ubuntu:Pro:14.04:LTS	python3.4	—
python3.5	affected	Ubuntu:Pro:14.04:LTS	python3.5	—
python3.5	affected	Ubuntu:16.04:LTS	python3.5	—
python3.6	affected	Ubuntu:18.04:LTS	python3.6	—
python3.7	affected	Ubuntu:Pro:18.04:LTS	python3.7	—

Upstream advisory

UBUNTU-CVE-2020-8131

USNPoC exploitHIGH2020-02-24

CVEs:CVE-2020-8131

Affected products

Product	Status	Vendor	Package	Ecosystem
node-yarnpkg	affected	Ubuntu:20.04:LTS	node-yarnpkg	—

Upstream advisory

UBUNTU-CVE-2019-20477

USNPoC exploitCRITICAL2020-02-19

CVEs:CVE-2019-20477

Affected products

Product	Status	Vendor	Package	Ecosystem
pyyaml	affected	Ubuntu:20.04:LTS	pyyaml	—

Upstream advisory

UBUNTU-CVE-2020-6061

USNPoC exploitCRITICAL2020-02-19

CVEs:CVE-2020-6061

Affected products

Product	Status	Vendor	Package	Ecosystem
coturn	affected	Ubuntu:18.04:LTS	coturn	—
coturn	affected	Ubuntu:20.04:LTS	coturn	—
coturn	affected	Ubuntu:16.04:LTS	coturn	—

Upstream advisory

UBUNTU-CVE-2016-2338

USNPoC exploitCRITICAL2020-02-14

CVEs:CVE-2016-2338

Affected products

Product	Status	Vendor	Package	Ecosystem
ruby2.3	affected	Ubuntu:16.04:LTS	ruby2.3	—
ruby2.5	affected	Ubuntu:18.04:LTS	ruby2.5	—
ruby-psych	affected	Ubuntu:18.04:LTS	ruby-psych	—

Upstream advisory

USN-4272-1

USNPoC exploitCRITICAL2020-02-06

pillow vulnerabilities

CVEs:CVE-2019-16865 CVE-2019-19911 CVE-2020-5310 CVE-2020-5311 CVE-2020-5312 CVE-2020-5313

Affected products

Product	Status	Vendor	Package	Ecosystem
pillow	affected	Ubuntu:18.04:LTS	pillow	—
pillow	affected	Ubuntu:Pro:14.04:LTS	pillow	—
pillow	affected	Ubuntu:16.04:LTS	pillow	—

Upstream advisory

USN-4277-1

USNPoC exploitCRITICAL2020-02-11

libexif vulnerabilities

CVEs:CVE-2016-6328 CVE-2017-7544 CVE-2019-9278

Affected products

Product	Status	Vendor	Package	Ecosystem
libexif	affected	Ubuntu:Pro:14.04:LTS	libexif	—
libexif	affected	Ubuntu:18.04:LTS	libexif	—
libexif	affected	Ubuntu:16.04:LTS	libexif	—

Upstream advisory

UBUNTU-CVE-2020-9327

USNPoC exploitHIGH2020-02-21

CVEs:CVE-2020-9327

Affected products

Product	Status	Vendor	Package	Ecosystem
sqlite3	affected	Ubuntu:18.04:LTS	sqlite3	—

Upstream advisory

UBUNTU-CVE-2020-5208

USNPoC exploitHIGH2020-02-05

CVEs:CVE-2020-5208

Affected products

Product	Status	Vendor	Package	Ecosystem
ipmitool	affected	Ubuntu:18.04:LTS	ipmitool	—
ipmitool	affected	Ubuntu:20.04:LTS	ipmitool	—
ipmitool	affected	Ubuntu:Pro:16.04:LTS	ipmitool	—
ipmitool	affected	Ubuntu:25.10	ipmitool	—
ipmitool	affected	Ubuntu:24.04:LTS	ipmitool	—

Upstream advisory

UBUNTU-CVE-2020-8116

USNPoC exploitHIGH2020-02-04

CVEs:CVE-2020-8116

Affected products

Product	Status	Vendor	Package	Ecosystem
node-dot-prop	affected	Ubuntu:18.04:LTS	node-dot-prop	—

Upstream advisory

UBUNTU-CVE-2020-6402

USNPoC exploitHIGH2020-02-05

CVEs:CVE-2020-6402

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2019-11251

USNPoC exploitMEDIUM2020-02-03

CVEs:CVE-2019-11251

Affected products

Product	Status	Vendor	Package	Ecosystem
kubernetes	affected	Ubuntu:24.04:LTS	kubernetes	—
kubernetes	affected	Ubuntu:Pro:20.04:LTS	kubernetes	—
kubernetes	affected	Ubuntu:22.04:LTS	kubernetes	—

Upstream advisory

UBUNTU-CVE-2020-5247

USNPoC exploitHIGH2020-02-28

CVEs:CVE-2020-5247

Affected products

Product	Status	Vendor	Package	Ecosystem
puma	affected	Ubuntu:20.04:LTS	puma	—

Upstream advisory

UBUNTU-CVE-2020-5243

USNPoC exploitHIGH2020-02-20

CVEs:CVE-2020-5243

Affected products

Product	Status	Vendor	Package	Ecosystem
uap-core	affected	Ubuntu:20.04:LTS	uap-core	—
uap-core	affected	Ubuntu:25.10	uap-core	—
uap-core	affected	Ubuntu:22.04:LTS	uap-core	—
uap-core	affected	Ubuntu:24.04:LTS	uap-core	—

Upstream advisory

UBUNTU-CVE-2020-8124

USNPoC exploitMEDIUM2020-02-04

CVEs:CVE-2020-8124

Affected products

Product	Status	Vendor	Package	Ecosystem
node-url-parse	affected	Ubuntu:18.04:LTS	node-url-parse	—
node-url-parse	affected	Ubuntu:Pro:16.04:LTS	node-url-parse	—

Upstream advisory

UBUNTU-CVE-2016-3182

USNPoC exploitMEDIUM2020-02-20

CVEs:CVE-2016-3182

Affected products

Product	Status	Vendor	Package	Ecosystem
openjpeg	affected	Ubuntu:Pro:16.04:LTS	openjpeg	—

Upstream advisory

UBUNTU-CVE-2020-8130

USNPoC exploitMEDIUM2020-02-24

CVEs:CVE-2020-8130

Affected products

Product	Status	Vendor	Package	Ecosystem
rake	affected	Ubuntu:16.04:LTS	rake	—
rake	affected	Ubuntu:18.04:LTS	rake	—

Upstream advisory

UBUNTU-CVE-2020-2732

USNPoC exploitMEDIUM2020-02-24

CVEs:CVE-2020-2732

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:18.04:LTS	linux	—
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux	affected	Ubuntu:16.04:LTS	linux	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws-5.0	affected	Ubuntu:18.04:LTS	linux-aws-5.0	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-aws-fips	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-5.3	affected	Ubuntu:18.04:LTS	linux-azure-5.3	—
linux-azure-edge	affected	Ubuntu:18.04:LTS	linux-azure-edge	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-azure-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp-5.3	affected	Ubuntu:18.04:LTS	linux-gcp-5.3	—
linux-gcp-edge	affected	Ubuntu:18.04:LTS	linux-gcp-edge	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-gcp-fips	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-gke-5.0	affected	Ubuntu:18.04:LTS	linux-gke-5.0	—
linux-gke-5.3	affected	Ubuntu:18.04:LTS	linux-gke-5.3	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-hwe-edge	affected	Ubuntu:16.04:LTS	linux-hwe-edge	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oem-osp1	affected	Ubuntu:18.04:LTS	linux-oem-osp1	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-oracle-5.0	affected	Ubuntu:18.04:LTS	linux-oracle-5.0	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—

Upstream advisory

UBUNTU-CVE-2020-9383

USNPoC exploitHIGH2020-02-25

CVEs:CVE-2020-9383

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:18.04:LTS	linux	—
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux	affected	Ubuntu:16.04:LTS	linux	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-aws-5.0	affected	Ubuntu:18.04:LTS	linux-aws-5.0	—
linux-aws-5.3	affected	Ubuntu:18.04:LTS	linux-aws-5.3	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-aws-fips	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure-5.3	affected	Ubuntu:18.04:LTS	linux-azure-5.3	—
linux-azure-edge	affected	Ubuntu:18.04:LTS	linux-azure-edge	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fde-5.15	affected	Ubuntu:Pro:20.04:LTS	linux-azure-fde-5.15	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-azure-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp-5.3	affected	Ubuntu:18.04:LTS	linux-gcp-5.3	—
linux-gcp-edge	affected	Ubuntu:18.04:LTS	linux-gcp-edge	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-gcp-fips	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-gke-5.0	affected	Ubuntu:18.04:LTS	linux-gke-5.0	—
linux-gke-5.3	affected	Ubuntu:18.04:LTS	linux-gke-5.3	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-hwe-edge	affected	Ubuntu:16.04:LTS	linux-hwe-edge	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oem-osp1	affected	Ubuntu:18.04:LTS	linux-oem-osp1	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-oracle-5.0	affected	Ubuntu:18.04:LTS	linux-oracle-5.0	—
linux-oracle-5.3	affected	Ubuntu:18.04:LTS	linux-oracle-5.3	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2-5.3	affected	Ubuntu:18.04:LTS	linux-raspi2-5.3	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2020-8648

USNPoC exploitHIGH2020-02-05

CVEs:CVE-2020-8648

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:18.04:LTS	linux	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-aws-5.0	affected	Ubuntu:18.04:LTS	linux-aws-5.0	—
linux-aws-5.3	affected	Ubuntu:18.04:LTS	linux-aws-5.3	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-aws-fips	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure-5.3	affected	Ubuntu:18.04:LTS	linux-azure-5.3	—
linux-azure-edge	affected	Ubuntu:18.04:LTS	linux-azure-edge	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-azure-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp-5.3	affected	Ubuntu:18.04:LTS	linux-gcp-5.3	—
linux-gcp-edge	affected	Ubuntu:18.04:LTS	linux-gcp-edge	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-gcp-fips	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-gke-5.0	affected	Ubuntu:18.04:LTS	linux-gke-5.0	—
linux-gke-5.3	affected	Ubuntu:18.04:LTS	linux-gke-5.3	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe-edge	affected	Ubuntu:16.04:LTS	linux-hwe-edge	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oem-osp1	affected	Ubuntu:18.04:LTS	linux-oem-osp1	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-oracle-5.0	affected	Ubuntu:18.04:LTS	linux-oracle-5.0	—
linux-oracle-5.3	affected	Ubuntu:18.04:LTS	linux-oracle-5.3	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2-5.3	affected	Ubuntu:18.04:LTS	linux-raspi2-5.3	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2020-8649

USNPoC exploitMEDIUM2020-02-06

CVEs:CVE-2020-8649

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:18.04:LTS	linux	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-aws-5.0	affected	Ubuntu:18.04:LTS	linux-aws-5.0	—
linux-aws-5.3	affected	Ubuntu:18.04:LTS	linux-aws-5.3	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-aws-fips	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure-5.3	affected	Ubuntu:18.04:LTS	linux-azure-5.3	—
linux-azure-edge	affected	Ubuntu:18.04:LTS	linux-azure-edge	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-azure-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp-5.3	affected	Ubuntu:18.04:LTS	linux-gcp-5.3	—
linux-gcp-edge	affected	Ubuntu:18.04:LTS	linux-gcp-edge	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-gcp-fips	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-gke-5.0	affected	Ubuntu:18.04:LTS	linux-gke-5.0	—
linux-gke-5.3	affected	Ubuntu:18.04:LTS	linux-gke-5.3	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe-edge	affected	Ubuntu:16.04:LTS	linux-hwe-edge	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oem-osp1	affected	Ubuntu:18.04:LTS	linux-oem-osp1	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-oracle-5.0	affected	Ubuntu:18.04:LTS	linux-oracle-5.0	—
linux-oracle-5.3	affected	Ubuntu:18.04:LTS	linux-oracle-5.3	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2-5.3	affected	Ubuntu:18.04:LTS	linux-raspi2-5.3	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2020-1712

USNPoC exploitHIGH2020-02-03

CVEs:CVE-2020-1712

Affected products

Product	Status	Vendor	Package	Ecosystem
systemd	affected	Ubuntu:20.04:LTS	systemd	—
systemd	affected	Ubuntu:18.04:LTS	systemd	—
systemd	affected	Ubuntu:16.04:LTS	systemd	—
systemd	affected	Ubuntu:Pro:14.04:LTS	systemd	—

Upstream advisory

UBUNTU-CVE-2019-14898

USNPoC exploitHIGH2020-02-04

CVEs:CVE-2019-14898

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—

Upstream advisory

UBUNTU-CVE-2020-8647

USNPoC exploitMEDIUM2020-02-06

CVEs:CVE-2020-8647

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:18.04:LTS	linux	—
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-aws-5.0	affected	Ubuntu:18.04:LTS	linux-aws-5.0	—
linux-aws-5.3	affected	Ubuntu:18.04:LTS	linux-aws-5.3	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-aws-fips	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure-5.3	affected	Ubuntu:18.04:LTS	linux-azure-5.3	—
linux-azure-edge	affected	Ubuntu:18.04:LTS	linux-azure-edge	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-azure-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp-5.3	affected	Ubuntu:18.04:LTS	linux-gcp-5.3	—
linux-gcp-edge	affected	Ubuntu:18.04:LTS	linux-gcp-edge	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-gcp-fips	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-gke-5.0	affected	Ubuntu:18.04:LTS	linux-gke-5.0	—
linux-gke-5.3	affected	Ubuntu:18.04:LTS	linux-gke-5.3	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-hwe-edge	affected	Ubuntu:16.04:LTS	linux-hwe-edge	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oem-osp1	affected	Ubuntu:18.04:LTS	linux-oem-osp1	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-oracle-5.0	affected	Ubuntu:18.04:LTS	linux-oracle-5.0	—
linux-oracle-5.3	affected	Ubuntu:18.04:LTS	linux-oracle-5.3	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2-5.3	affected	Ubuntu:18.04:LTS	linux-raspi2-5.3	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2020-6383

USNCoalition ESS 30-63%HIGH2020-02-27

CVEs:CVE-2020-6383

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-6398

USNCoalition ESS 30-63%HIGH2020-02-05

CVEs:CVE-2020-6398

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-8450

USNEPSS 49-79%HIGH2020-02-03

CVEs:CVE-2020-8450

Affected products

Product	Status	Vendor	Package	Ecosystem
squid	affected	Ubuntu:20.04:LTS	squid	—
squid3	affected	Ubuntu:18.04:LTS	squid3	—
squid3	affected	Ubuntu:16.04:LTS	squid3	—

Upstream advisory

UBUNTU-CVE-2020-5529

USNCoalition ESS < 30%HIGH2020-02-11

CVEs:CVE-2020-5529

Affected products

Product	Status	Vendor	Package	Ecosystem
htmlunit	affected	Ubuntu:16.04:LTS	htmlunit	—
htmlunit	affected	Ubuntu:18.04:LTS	htmlunit	—

Upstream advisory

UBUNTU-CVE-2020-8955

USNCoalition ESS < 30%CRITICAL2020-02-12

CVEs:CVE-2020-8955

Affected products

Product	Status	Vendor	Package	Ecosystem
weechat	affected	Ubuntu:Pro:18.04:LTS	weechat	—
weechat	affected	Ubuntu:Pro:16.04:LTS	weechat	—

Upstream advisory

USN-4250-2

USNCoalition ESS < 30%HIGH2020-02-06

mariadb-10.1, mariadb-10.3 vulnerability

CVEs:CVE-2020-2574

Affected products

Product	Status	Vendor	Package	Ecosystem
mariadb-10.1	affected	Ubuntu:18.04:LTS	mariadb-10.1	—

Upstream advisory

UBUNTU-CVE-2020-9428

USNCoalition ESS < 30%HIGH2020-02-27

CVEs:CVE-2020-9428

Affected products

Product	Status	Vendor	Package	Ecosystem
wireshark	affected	Ubuntu:Pro:14.04:LTS	wireshark	—
wireshark	affected	Ubuntu:Pro:16.04:LTS	wireshark	—
wireshark	affected	Ubuntu:Pro:18.04:LTS	wireshark	—

Upstream advisory

UBUNTU-CVE-2020-6390

USNCoalition ESS < 30%HIGH2020-02-05

CVEs:CVE-2020-6390

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-9369

USNCoalition ESS < 30%HIGH2020-02-24

CVEs:CVE-2020-9369

Affected products

Product	Status	Vendor	Package	Ecosystem
sympa	affected	Ubuntu:20.04:LTS	sympa	—

Upstream advisory

UBUNTU-CVE-2020-9430

USNCoalition ESS < 30%HIGH2020-02-27

CVEs:CVE-2020-9430

Affected products

Product	Status	Vendor	Package	Ecosystem
wireshark	affected	Ubuntu:Pro:16.04:LTS	wireshark	—
wireshark	affected	Ubuntu:Pro:18.04:LTS	wireshark	—
wireshark	affected	Ubuntu:Pro:14.04:LTS	wireshark	—

Upstream advisory

UBUNTU-CVE-2020-7043

USNCoalition ESS < 30%CRITICAL2020-02-27

CVEs:CVE-2020-7043

Affected products

Product	Status	Vendor	Package	Ecosystem
openfortivpn	affected	Ubuntu:18.04:LTS	openfortivpn	—

Upstream advisory

UBUNTU-CVE-2020-9431

USNCoalition ESS < 30%HIGH2020-02-27

CVEs:CVE-2020-9431

Affected products

Product	Status	Vendor	Package	Ecosystem
wireshark	affected	Ubuntu:Pro:16.04:LTS	wireshark	—
wireshark	affected	Ubuntu:Pro:18.04:LTS	wireshark	—
wireshark	affected	Ubuntu:Pro:14.04:LTS	wireshark	—

Upstream advisory

UBUNTU-CVE-2020-6405

USNCoalition ESS < 30%MEDIUM2020-02-05

CVEs:CVE-2020-6405

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

USN-4280-2

USNCoalition ESS < 30%HIGH2020-02-18

clamav vulnerability

CVEs:CVE-2020-3123

Affected products

Product	Status	Vendor	Package	Ecosystem
clamav	affected	Ubuntu:Pro:14.04:LTS	clamav	—

Upstream advisory

USN-4280-1

USNCoalition ESS < 30%HIGH2020-02-18

clamav vulnerability

CVEs:CVE-2020-3123

Affected products

Product	Status	Vendor	Package	Ecosystem
clamav	affected	Ubuntu:16.04:LTS	clamav	—
clamav	affected	Ubuntu:18.04:LTS	clamav	—

Upstream advisory

UBUNTU-CVE-2020-3123

USNCoalition ESS < 30%HIGH2020-02-05

CVEs:CVE-2020-3123

Affected products

Product	Status	Vendor	Package	Ecosystem
clamav	affected	Ubuntu:Pro:14.04:LTS	clamav	—
clamav	affected	Ubuntu:16.04:LTS	clamav	—
clamav	affected	Ubuntu:18.04:LTS	clamav	—

Upstream advisory

USN-4278-2

USNCoalition ESS < 30%HIGH2020-02-26

firefox vulnerabilities

CVEs:CVE-2020-6796 CVE-2020-6798 CVE-2020-6800 CVE-2020-6801

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:16.04:LTS	firefox	—

Upstream advisory

USN-4278-1

USNCoalition ESS < 30%HIGH2020-02-13

firefox vulnerabilities

CVEs:CVE-2020-6796 CVE-2020-6798 CVE-2020-6800 CVE-2020-6801

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:18.04:LTS	firefox	—

Upstream advisory

UBUNTU-CVE-2020-6800

USNCoalition ESS < 30%HIGH2020-02-11

CVEs:CVE-2020-6800

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:18.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:20.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:20.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:16.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2020-6385

USNCoalition ESS < 30%HIGH2020-02-05

CVEs:CVE-2020-6385

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-6382

USNCoalition ESS < 30%HIGH2020-02-05

CVEs:CVE-2020-6382

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-6381

USNCoalition ESS < 30%HIGH2020-02-05

CVEs:CVE-2020-6381

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-9355

USNCoalition ESS < 30%CRITICAL2020-02-23

CVEs:CVE-2020-9355

Affected products

Product	Status	Vendor	Package	Ecosystem
network-manager-ssh	affected	Ubuntu:18.04:LTS	network-manager-ssh	—
network-manager-ssh	affected	Ubuntu:16.04:LTS	network-manager-ssh	—

Upstream advisory

UBUNTU-CVE-2020-6798

USNCoalition ESS < 30%MEDIUM2020-02-11

CVEs:CVE-2020-6798

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:20.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—
thunderbird	affected	Ubuntu:16.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:20.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2020-6388

USNCoalition ESS < 30%HIGH2020-02-05

CVEs:CVE-2020-6388

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-6400

USNCoalition ESS < 30%MEDIUM2020-02-05

CVEs:CVE-2020-6400

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-6415

USNCoalition ESS < 30%HIGH2020-02-05

CVEs:CVE-2020-6415

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-6416

USNCoalition ESS < 30%HIGH2020-02-05

CVEs:CVE-2020-6416

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-6399

USNCoalition ESS < 30%MEDIUM2020-02-05

CVEs:CVE-2020-6399

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-6395

USNCoalition ESS < 30%MEDIUM2020-02-05

CVEs:CVE-2020-6395

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-6401

USNCoalition ESS < 30%MEDIUM2020-02-05

CVEs:CVE-2020-6401

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-6397

USNCoalition ESS < 30%MEDIUM2020-02-05

CVEs:CVE-2020-6397

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-6413

USNCoalition ESS < 30%HIGH2020-02-05

CVEs:CVE-2020-6413

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-6414

USNCoalition ESS < 30%HIGH2020-02-05

CVEs:CVE-2020-6414

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-6393

USNCoalition ESS < 30%MEDIUM2020-02-05

CVEs:CVE-2020-6393

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-6406

USNCoalition ESS < 30%HIGH2020-02-05

CVEs:CVE-2020-6406

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-6387

USNCoalition ESS < 30%HIGH2020-02-05

CVEs:CVE-2020-6387

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-6407

USNCoalition ESS < 30%HIGH2020-02-25

CVEs:CVE-2020-6407

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-7041

USNCoalition ESS < 30%MEDIUM2020-02-27

CVEs:CVE-2020-7041

Affected products

Product	Status	Vendor	Package	Ecosystem
openfortivpn	affected	Ubuntu:18.04:LTS	openfortivpn	—

Upstream advisory

UBUNTU-CVE-2020-6389

USNCoalition ESS < 30%HIGH2020-02-05

CVEs:CVE-2020-6389

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-6409

USNCoalition ESS < 30%HIGH2020-02-05

CVEs:CVE-2020-6409

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-6396

USNCoalition ESS < 30%MEDIUM2020-02-05

CVEs:CVE-2020-6396

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-6802

USNCoalition ESS < 30%MEDIUM2020-02-24

CVEs:CVE-2020-6802

Affected products

Product	Status	Vendor	Package	Ecosystem
python-bleach	affected	Ubuntu:18.04:LTS	python-bleach	—
python-bleach	affected	Ubuntu:16.04:LTS	python-bleach	—

Upstream advisory

UBUNTU-CVE-2020-6386

USNCoalition ESS < 30%HIGH2020-02-27

CVEs:CVE-2020-6386

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-6410

USNCoalition ESS < 30%HIGH2020-02-05

CVEs:CVE-2020-6410

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-6384

USNCoalition ESS < 30%HIGH2020-02-27

CVEs:CVE-2020-6384

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-6394

USNCoalition ESS < 30%MEDIUM2020-02-05

CVEs:CVE-2020-6394

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-6408

USNCoalition ESS < 30%MEDIUM2020-02-05

CVEs:CVE-2020-6408

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-6403

USNCoalition ESS < 30%MEDIUM2020-02-05

CVEs:CVE-2020-6403

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-6796

USNCoalition ESS < 30%HIGH2020-02-11

CVEs:CVE-2020-6796

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:20.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—

Upstream advisory

UBUNTU-CVE-2020-7042

USNCoalition ESS < 30%MEDIUM2020-02-27

CVEs:CVE-2020-7042

Affected products

Product	Status	Vendor	Package	Ecosystem
openfortivpn	affected	Ubuntu:18.04:LTS	openfortivpn	—

Upstream advisory

UBUNTU-CVE-2020-6793

USNCoalition ESS < 30%MEDIUM2020-02-11

CVEs:CVE-2020-6793

Affected products

Product	Status	Vendor	Package	Ecosystem
thunderbird	affected	Ubuntu:16.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2020-6412

USNCoalition ESS < 30%MEDIUM2020-02-05

CVEs:CVE-2020-6412

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-6392

USNCoalition ESS < 30%MEDIUM2020-02-05

CVEs:CVE-2020-6392

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-6801

USNCoalition ESS < 30%HIGH2020-02-11

CVEs:CVE-2020-6801

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—

Upstream advisory

UBUNTU-CVE-2020-6411

USNCoalition ESS < 30%MEDIUM2020-02-05

CVEs:CVE-2020-6411

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-6792

USNCoalition ESS < 30%MEDIUM2020-02-11

CVEs:CVE-2020-6792

Affected products

Product	Status	Vendor	Package	Ecosystem
thunderbird	affected	Ubuntu:16.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2020-6391

USNCoalition ESS < 30%MEDIUM2020-02-05

CVEs:CVE-2020-6391

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-6795

USNCoalition ESS < 30%MEDIUM2020-02-11

CVEs:CVE-2020-6795

Affected products

Product	Status	Vendor	Package	Ecosystem
thunderbird	affected	Ubuntu:16.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—

Upstream advisory

USN-4282-1

USNCoalition ESS < 30%NONE2020-02-18

postgresql-10, postgresql-11 vulnerability

CVEs:CVE-2020-1720

Affected products

Product	Status	Vendor	Package	Ecosystem
postgresql-10	affected	Ubuntu:18.04:LTS	postgresql-10	—

Upstream advisory

UBUNTU-CVE-2020-1720

USNCoalition ESS < 30%MEDIUM2020-02-13

CVEs:CVE-2020-1720

Affected products

Product	Status	Vendor	Package	Ecosystem
postgresql-10	affected	Ubuntu:18.04:LTS	postgresql-10	—

Upstream advisory

UBUNTU-CVE-2020-6794

USNCoalition ESS < 30%MEDIUM2020-02-11

CVEs:CVE-2020-6794

Affected products

Product	Status	Vendor	Package	Ecosystem
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:16.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2020-9016

USNCoalition ESS < 30%MEDIUM2020-02-16

CVEs:CVE-2020-9016

Affected products

Product	Status	Vendor	Package	Ecosystem
dolibarr	affected	Ubuntu:16.04:LTS	dolibarr	—

Upstream advisory

UBUNTU-CVE-2020-1768

USNCoalition ESS < 30%MEDIUM2020-02-07

CVEs:CVE-2020-1768

Affected products

Product	Status	Vendor	Package	Ecosystem
otrs2	affected	Ubuntu:20.04:LTS	otrs2	—
otrs2	affected	Ubuntu:18.04:LTS	otrs2	—
otrs2	affected	Ubuntu:16.04:LTS	otrs2	—
otrs2	affected	Ubuntu:22.04:LTS	otrs2	—

Upstream advisory

UBUNTU-CVE-2020-7993

USNCoalition ESS < 30%MEDIUM2020-02-03

CVEs:CVE-2020-7993

Affected products

Product	Status	Vendor	Package	Ecosystem
prototypejs	affected	Ubuntu:24.04:LTS	prototypejs	—
prototypejs	affected	Ubuntu:22.04:LTS	prototypejs	—
prototypejs	affected	Ubuntu:25.10	prototypejs	—
prototypejs	affected	Ubuntu:20.04:LTS	prototypejs	—
prototypejs	affected	Ubuntu:18.04:LTS	prototypejs	—
prototypejs	affected	Ubuntu:16.04:LTS	prototypejs	—

Upstream advisory

UBUNTU-CVE-2020-7221

USNCoalition ESS < 30%HIGH2020-02-04

CVEs:CVE-2020-7221

Affected products

Product	Status	Vendor	Package	Ecosystem
mariadb-10.0	affected	Ubuntu:16.04:LTS	mariadb-10.0	—
mysql-5.5	affected	Ubuntu:14.04:LTS	mysql-5.5	—

Upstream advisory

UBUNTU-CVE-2020-1692

USNCoalition ESS < 30%HIGH2020-02-17

CVEs:CVE-2020-1692

Affected products

Product	Status	Vendor	Package	Ecosystem
moodle	affected	Ubuntu:18.04:LTS	moodle	—
moodle	affected	Ubuntu:16.04:LTS	moodle	—

Upstream advisory

UBUNTU-CVE-2020-9391

USNCoalition ESS < 30%MEDIUM2020-02-25

CVEs:CVE-2020-9391

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-azure-edge	affected	Ubuntu:18.04:LTS	linux-azure-edge	—
linux-gcp-edge	affected	Ubuntu:18.04:LTS	linux-gcp-edge	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-hwe-edge	affected	Ubuntu:16.04:LTS	linux-hwe-edge	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—

Upstream advisory

UBUNTU-CVE-2020-8631

USNCoalition ESS < 30%MEDIUM2020-02-05

CVEs:CVE-2020-8631

Affected products

Product	Status	Vendor	Package	Ecosystem
cloud-init	affected	Ubuntu:Pro:16.04:LTS	cloud-init	—
cloud-init	affected	Ubuntu:18.04:LTS	cloud-init	—

Upstream advisory

UBUNTU-CVE-2020-8992

USNCoalition ESS < 30%MEDIUM2020-02-14

CVEs:CVE-2020-8992

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:18.04:LTS	linux	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-aws-5.0	affected	Ubuntu:18.04:LTS	linux-aws-5.0	—
linux-aws-5.3	affected	Ubuntu:18.04:LTS	linux-aws-5.3	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-5.3	affected	Ubuntu:18.04:LTS	linux-azure-5.3	—
linux-azure-edge	affected	Ubuntu:18.04:LTS	linux-azure-edge	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp-5.3	affected	Ubuntu:18.04:LTS	linux-gcp-5.3	—
linux-gcp-edge	affected	Ubuntu:18.04:LTS	linux-gcp-edge	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-gke-5.0	affected	Ubuntu:18.04:LTS	linux-gke-5.0	—
linux-gke-5.3	affected	Ubuntu:18.04:LTS	linux-gke-5.3	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe-edge	affected	Ubuntu:16.04:LTS	linux-hwe-edge	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oem-osp1	affected	Ubuntu:18.04:LTS	linux-oem-osp1	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-oracle-5.0	affected	Ubuntu:18.04:LTS	linux-oracle-5.0	—
linux-oracle-5.3	affected	Ubuntu:18.04:LTS	linux-oracle-5.3	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2-5.3	affected	Ubuntu:18.04:LTS	linux-raspi2-5.3	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2020-15708

USNCoalition ESS < 30%CRITICAL2020-02-11

CVEs:CVE-2020-15708

Affected products

Product	Status	Vendor	Package	Ecosystem
libvirt	affected	Ubuntu:20.04:LTS	libvirt	—

Upstream advisory

UBUNTU-CVE-2020-8632

USNCoalition ESS < 30%MEDIUM2020-02-05

CVEs:CVE-2020-8632

Affected products

Product	Status	Vendor	Package	Ecosystem
cloud-init	affected	Ubuntu:Pro:16.04:LTS	cloud-init	—
cloud-init	affected	Ubuntu:18.04:LTS	cloud-init	—
cloud-init	affected	Ubuntu:20.04:LTS	cloud-init	—
cloud-init	affected	Ubuntu:22.04:LTS	cloud-init	—

Upstream advisory

UBUNTU-CVE-2020-15709

USNCoalition ESS < 30%MEDIUM2020-02-11

CVEs:CVE-2020-15709

Affected products

Product	Status	Vendor	Package	Ecosystem
software-properties	affected	Ubuntu:Pro:14.04:LTS	software-properties	—
software-properties	affected	Ubuntu:20.04:LTS	software-properties	—
software-properties	affected	Ubuntu:16.04:LTS	software-properties	—
software-properties	affected	Ubuntu:18.04:LTS	software-properties	—

Upstream advisory

UBUNTU-CVE-2020-6417

USNCoalition ESS < 30%HIGH2020-02-05

CVEs:CVE-2020-6417

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2014-6262

USNEPSS <= 49%HIGH2020-02-12

CVEs:CVE-2014-6262

Affected products

Product	Status	Vendor	Package	Ecosystem
rrdtool	affected	Ubuntu:14.04:LTS	rrdtool	—

Upstream advisory

UBUNTU-CVE-2019-20478

USNEPSS <= 49%CRITICAL2020-02-19

CVEs:CVE-2019-20478

Affected products

Product	Status	Vendor	Package	Ecosystem
ruamel.yaml	affected	Ubuntu:22.04:LTS	ruamel.yaml	—
ruamel.yaml	affected	Ubuntu:18.04:LTS	ruamel.yaml	—
ruamel.yaml	affected	Ubuntu:24.04:LTS	ruamel.yaml	—
ruamel.yaml	affected	Ubuntu:20.04:LTS	ruamel.yaml	—
ruamel.yaml	affected	Ubuntu:16.04:LTS	ruamel.yaml	—
ruamel.yaml	affected	Ubuntu:25.10	ruamel.yaml	—

Upstream advisory

UBUNTU-CVE-2014-4678

USNEPSS <= 49%CRITICAL2020-02-20

CVEs:CVE-2014-4678

Affected products

Product	Status	Vendor	Package	Ecosystem
ansible	affected	Ubuntu:Pro:14.04:LTS	ansible	—

Upstream advisory

USN-4267-1

USNEPSS <= 49%HIGH2020-02-05

mbedtls vulnerabilities

CVEs:CVE-2017-18187 CVE-2018-0487 CVE-2018-0488 CVE-2018-0497 CVE-2018-0498

Affected products

Product	Status	Vendor	Package	Ecosystem
mbedtls	affected	Ubuntu:16.04:LTS	mbedtls	—

Upstream advisory

USN-4270-1

USNEPSS <= 49%HIGH2020-02-05

exiv2 vulnerability

CVEs:CVE-2019-20421

Affected products

Product	Status	Vendor	Package	Ecosystem
exiv2	affected	Ubuntu:18.04:LTS	exiv2	—
exiv2	affected	Ubuntu:16.04:LTS	exiv2	—

Upstream advisory

UBUNTU-CVE-2012-4381

USNEPSS <= 49%HIGH2020-02-08

CVEs:CVE-2012-4381

Affected products

Product	Status	Vendor	Package	Ecosystem
mediawiki	affected	Ubuntu:14.04:LTS	mediawiki	—

Upstream advisory

UBUNTU-CVE-2019-10064

USNEPSS <= 49%HIGH2020-02-28

CVEs:CVE-2019-10064

Affected products

Product	Status	Vendor	Package	Ecosystem
wpa	affected	Ubuntu:16.04:LTS	wpa	—
wpa	affected	Ubuntu:Pro:14.04:LTS	wpa	—

Upstream advisory

UBUNTU-CVE-2019-10784

USNEPSS <= 49%CRITICAL2020-02-04

CVEs:CVE-2019-10784

Affected products

Product	Status	Vendor	Package	Ecosystem
phppgadmin	affected	Ubuntu:25.10	phppgadmin	—
phppgadmin	affected	Ubuntu:18.04:LTS	phppgadmin	—
phppgadmin	affected	Ubuntu:16.04:LTS	phppgadmin	—
phppgadmin	affected	Ubuntu:22.04:LTS	phppgadmin	—
phppgadmin	affected	Ubuntu:20.04:LTS	phppgadmin	—
phppgadmin	affected	Ubuntu:24.04:LTS	phppgadmin	—

Upstream advisory

USN-4266-1

USNEPSS <= 49%HIGH2020-02-04

graphicsmagick vulnerabilities

CVEs:CVE-2017-17912 CVE-2017-17913 CVE-2017-17915 CVE-2017-18219 CVE-2017-18229 CVE-2017-18230 CVE-2017-18231

Affected products

Product	Status	Vendor	Package	Ecosystem
graphicsmagick	affected	Ubuntu:16.04:LTS	graphicsmagick	—

Upstream advisory

UBUNTU-CVE-2014-4967

USNEPSS <= 49%CRITICAL2020-02-18

CVEs:CVE-2014-4967

Affected products

Product	Status	Vendor	Package	Ecosystem
ansible	affected	Ubuntu:Pro:14.04:LTS	ansible	—

Upstream advisory

UBUNTU-CVE-2014-4966

USNEPSS <= 49%CRITICAL2020-02-18

CVEs:CVE-2014-4966

Affected products

Product	Status	Vendor	Package	Ecosystem
ansible	affected	Ubuntu:Pro:14.04:LTS	ansible	—

Upstream advisory

UBUNTU-CVE-2018-14553

USNEPSS <= 49%HIGH2020-02-11

CVEs:CVE-2018-14553

Affected products

Product	Status	Vendor	Package	Ecosystem
doxygen	affected	Ubuntu:24.04:LTS	doxygen	—
doxygen	affected	Ubuntu:25.10	doxygen	—
doxygen	affected	Ubuntu:22.04:LTS	doxygen	—
doxygen	affected	Ubuntu:20.04:LTS	doxygen	—
libgd2	affected	Ubuntu:18.04:LTS	libgd2	—
libgd2	affected	Ubuntu:16.04:LTS	libgd2	—
libgd2	affected	Ubuntu:Pro:14.04:LTS	libgd2	—

Upstream advisory

UBUNTU-CVE-2013-7381

USNEPSS <= 49%CRITICAL2020-02-12

CVEs:CVE-2013-7381

Affected products

Product	Status	Vendor	Package	Ecosystem
nodejs	affected	Ubuntu:Pro:14.04:LTS	nodejs	—
nodejs	affected	Ubuntu:Pro:18.04:LTS	nodejs	—
nodejs	affected	Ubuntu:Pro:16.04:LTS	nodejs	—

Upstream advisory

UBUNTU-CVE-2014-9748

USNEPSS <= 49%HIGH2020-02-11

CVEs:CVE-2014-9748

Affected products

Product	Status	Vendor	Package	Ecosystem
nodejs	affected	Ubuntu:16.04:LTS	nodejs	—

Upstream advisory

UBUNTU-CVE-2013-4088

USNEPSS <= 49%MEDIUM2020-02-21

CVEs:CVE-2013-4088

Affected products

Product	Status	Vendor	Package	Ecosystem
otrs2	affected	Ubuntu:14.04:LTS	otrs2	—

Upstream advisory

USN-4275-1

USNEPSS <= 49%HIGH2020-02-10

qtbase-opensource-src vulnerabilities

CVEs:CVE-2018-19872 CVE-2019-18281 CVE-2020-0569 CVE-2020-0570

Affected products

Product	Status	Vendor	Package	Ecosystem
qtbase-opensource-src	affected	Ubuntu:16.04:LTS	qtbase-opensource-src	—
qtbase-opensource-src	affected	Ubuntu:18.04:LTS	qtbase-opensource-src	—

Upstream advisory

UBUNTU-CVE-2018-21035

USNEPSS <= 49%HIGH2020-02-28

CVEs:CVE-2018-21035

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebsockets-opensource-src	affected	Ubuntu:20.04:LTS	qtwebsockets-opensource-src	—
qtwebsockets-opensource-src	affected	Ubuntu:16.04:LTS	qtwebsockets-opensource-src	—
qtwebsockets-opensource-src	affected	Ubuntu:18.04:LTS	qtwebsockets-opensource-src	—

Upstream advisory

UBUNTU-CVE-2014-3484

USNEPSS <= 49%CRITICAL2020-02-20

CVEs:CVE-2014-3484

Affected products

Product	Status	Vendor	Package	Ecosystem
musl	affected	Ubuntu:Pro:14.04:LTS	musl	—

Upstream advisory

UBUNTU-CVE-2013-4572

USNEPSS <= 49%HIGH2020-02-06

CVEs:CVE-2013-4572

Affected products

Product	Status	Vendor	Package	Ecosystem
mediawiki	affected	Ubuntu:14.04:LTS	mediawiki	—

Upstream advisory

UBUNTU-CVE-2019-20446

USNEPSS <= 49%MEDIUM2020-02-02

CVEs:CVE-2019-20446

Affected products

Product	Status	Vendor	Package	Ecosystem
librsvg	affected	Ubuntu:18.04:LTS	librsvg	—
librsvg	affected	Ubuntu:16.04:LTS	librsvg	—

Upstream advisory

UBUNTU-CVE-2013-2018

USNEPSS <= 49%CRITICAL2020-02-19

CVEs:CVE-2013-2018

Affected products

Product	Status	Vendor	Package	Ecosystem
boinc	affected	Ubuntu:14.04:LTS	boinc	—

Upstream advisory

UBUNTU-CVE-2013-5106

USNEPSS <= 49%HIGH2020-02-12

CVEs:CVE-2013-5106

Affected products

Product	Status	Vendor	Package	Ecosystem
python-mode	affected	Ubuntu:18.04:LTS	python-mode	—
python-mode	affected	Ubuntu:20.04:LTS	python-mode	—
python-mode	affected	Ubuntu:16.04:LTS	python-mode	—

Upstream advisory

UBUNTU-CVE-2013-3551

USNEPSS <= 49%MEDIUM2020-02-21

CVEs:CVE-2013-3551

Affected products

Product	Status	Vendor	Package	Ecosystem
otrs2	affected	Ubuntu:14.04:LTS	otrs2	—

Upstream advisory

UBUNTU-CVE-2019-20454

USNEPSS <= 49%HIGH2020-02-14

CVEs:CVE-2019-20454

Affected products

Product	Status	Vendor	Package	Ecosystem
pcre2	affected	Ubuntu:Pro:18.04:LTS	pcre2	—

Upstream advisory

UBUNTU-CVE-2015-4715

USNEPSS <= 49%MEDIUM2020-02-17

CVEs:CVE-2015-4715

Affected products

Product	Status	Vendor	Package	Ecosystem
php-dropbox	affected	Ubuntu:16.04:LTS	php-dropbox	—

Upstream advisory

UBUNTU-CVE-2013-7324

USNEPSS <= 49%MEDIUM2020-02-17

CVEs:CVE-2013-7324

Affected products

Product	Status	Vendor	Package	Ecosystem
webkitgtk	affected	Ubuntu:14.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—

Upstream advisory

USN-4291-1

USNEPSS <= 49%2020-02-24

libapache2-mod-auth-mellon vulnerability

CVEs:CVE-2019-13038

Affected products

Product	Status	Vendor	Package	Ecosystem
libapache2-mod-auth-mellon	affected	Ubuntu:18.04:LTS	libapache2-mod-auth-mellon	—

Upstream advisory

UBUNTU-CVE-2017-6363

USNEPSS <= 49%HIGH2020-02-27

CVEs:CVE-2017-6363

Affected products

Product	Status	Vendor	Package	Ecosystem
libgd2	affected	Ubuntu:20.04:LTS	libgd2	—
libgd2	affected	Ubuntu:18.04:LTS	libgd2	—
libgd2	affected	Ubuntu:Pro:14.04:LTS	libgd2	—
libgd2	affected	Ubuntu:Pro:16.04:LTS	libgd2	—

Upstream advisory

UBUNTU-CVE-2016-1000005

USNEPSS <= 49%CRITICAL2020-02-19

CVEs:CVE-2016-1000005

Affected products

Product	Status	Vendor	Package	Ecosystem
hhvm	affected	Ubuntu:16.04:LTS	hhvm	—

Upstream advisory

UBUNTU-CVE-2019-14868

USNEPSS <= 49%HIGH2020-02-05

CVEs:CVE-2019-14868

Affected products

Product	Status	Vendor	Package	Ecosystem
ksh	affected	Ubuntu:16.04:LTS	ksh	—
ksh	affected	Ubuntu:18.04:LTS	ksh	—
ksh	affected	Ubuntu:Pro:14.04:LTS	ksh	—

Upstream advisory

UBUNTU-CVE-2017-18641

USNEPSS <= 49%HIGH2020-02-10

CVEs:CVE-2017-18641

Affected products

Product	Status	Vendor	Package	Ecosystem
lxc	affected	Ubuntu:Pro:16.04:LTS	lxc	—
lxc	affected	Ubuntu:14.04:LTS	lxc	—
lxc-templates	affected	Ubuntu:20.04:LTS	lxc-templates	—
lxc-templates	affected	Ubuntu:18.04:LTS	lxc-templates	—
lxc-templates	affected	Ubuntu:22.04:LTS	lxc-templates	—
lxc-templates	affected	Ubuntu:24.04:LTS	lxc-templates	—
lxc-templates	affected	Ubuntu:25.10	lxc-templates	—

Upstream advisory

UBUNTU-CVE-2013-3564

USNEPSS <= 49%MEDIUM2020-02-06

CVEs:CVE-2013-3564

Affected products

Product	Status	Vendor	Package	Ecosystem
vlc	affected	Ubuntu:18.04:LTS	vlc	—

Upstream advisory

UBUNTU-CVE-2019-15592

USNEPSS <= 49%MEDIUM2020-02-14

CVEs:CVE-2019-15592

Affected products

Product	Status	Vendor	Package	Ecosystem
gitlab	affected	Ubuntu:16.04:LTS	gitlab	—

Upstream advisory

UBUNTU-CVE-2016-1544

USNEPSS <= 49%LOW2020-02-06

CVEs:CVE-2016-1544

Affected products

Product	Status	Vendor	Package	Ecosystem
nghttp2	affected	Ubuntu:16.04:LTS	nghttp2	—

Upstream advisory

UBUNTU-CVE-2019-18210

USNEPSS <= 49%MEDIUM2020-02-11

CVEs:CVE-2019-18210

Affected products

Product	Status	Vendor	Package	Ecosystem
moodle	affected	Ubuntu:18.04:LTS	moodle	—
moodle	affected	Ubuntu:16.04:LTS	moodle	—

Upstream advisory

UBUNTU-CVE-2016-1000004

USNEPSS <= 49%CRITICAL2020-02-19

CVEs:CVE-2016-1000004

Affected products

Product	Status	Vendor	Package	Ecosystem
hhvm	affected	Ubuntu:16.04:LTS	hhvm	—

Upstream advisory

UBUNTU-CVE-2012-1093

USNEPSS <= 49%HIGH2020-02-21

CVEs:CVE-2012-1093

Affected products

Product	Status	Vendor	Package	Ecosystem
xorg	affected	Ubuntu:18.04:LTS	xorg	—
xorg	affected	Ubuntu:16.04:LTS	xorg	—

Upstream advisory

UBUNTU-CVE-2020-0569

USNEPSS <= 49%MEDIUM2020-02-03

CVEs:CVE-2020-0569

Affected products

Product	Status	Vendor	Package	Ecosystem
qtbase-opensource-src	affected	Ubuntu:16.04:LTS	qtbase-opensource-src	—
qtbase-opensource-src	affected	Ubuntu:18.04:LTS	qtbase-opensource-src	—

Upstream advisory

UBUNTU-CVE-2011-4915

USNEPSS <= 49%MEDIUM2020-02-20

CVEs:CVE-2011-4915

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—

Upstream advisory

UBUNTU-CVE-2019-20044

USNEPSS <= 49%HIGH2020-02-24

CVEs:CVE-2019-20044

Affected products

Product	Status	Vendor	Package	Ecosystem
zsh	affected	Ubuntu:Pro:16.04:LTS	zsh	—
zsh	affected	Ubuntu:18.04:LTS	zsh	—
zsh	affected	Ubuntu:22.04:LTS	zsh	—

Upstream advisory

USN-4271-1

USNEPSS <= 49%MEDIUM2020-02-06

mesa vulnerability

CVEs:CVE-2019-5068

Affected products

Product	Status	Vendor	Package	Ecosystem
mesa	affected	Ubuntu:18.04:LTS	mesa	—

Upstream advisory

UBUNTU-CVE-2019-19921

USNEPSS <= 49%HIGH2020-02-07

CVEs:CVE-2019-19921

Affected products

Product	Status	Vendor	Package	Ecosystem
runc	affected	Ubuntu:Pro:16.04:LTS	runc	—
runc	affected	Ubuntu:20.04:LTS	runc	—
runc	affected	Ubuntu:18.04:LTS	runc	—

Upstream advisory

UBUNTU-CVE-2014-4658

USNEPSS <= 49%MEDIUM2020-02-20

CVEs:CVE-2014-4658

Affected products

Product	Status	Vendor	Package	Ecosystem
ansible	affected	Ubuntu:Pro:14.04:LTS	ansible	—

Upstream advisory

UBUNTU-CVE-2015-9543

USNEPSS <= 49%LOW2020-02-19

CVEs:CVE-2015-9543

Affected products

Product	Status	Vendor	Package	Ecosystem
nova	affected	Ubuntu:20.04:LTS	nova	—
nova	affected	Ubuntu:Pro:16.04:LTS	nova	—
nova	affected	Ubuntu:18.04:LTS	nova	—

Upstream advisory

UBUNTU-CVE-2014-4660

USNEPSS <= 49%MEDIUM2020-02-20

CVEs:CVE-2014-4660

Affected products

Product	Status	Vendor	Package	Ecosystem
ansible	affected	Ubuntu:Pro:14.04:LTS	ansible	—

Upstream advisory

UBUNTU-CVE-2013-2213

USNEPSS <= 49%MEDIUM2020-02-11

CVEs:CVE-2013-2213

Affected products

Product	Status	Vendor	Package	Ecosystem
kdeplasma-addons	affected	Ubuntu:14.04:LTS	kdeplasma-addons	—
kdeplasma-addons	affected	Ubuntu:16.04:LTS	kdeplasma-addons	—

Upstream advisory

UBUNTU-CVE-2013-6499

USNEPSS <= 49%2020-02-11

CVEs:CVE-2013-6499

Affected products

Product	Status	Vendor	Package	Ecosystem
libmp3-info-perl	affected	Ubuntu:18.04:LTS	libmp3-info-perl	—
libmp3-info-perl	affected	Ubuntu:16.04:LTS	libmp3-info-perl	—

Upstream advisory

UBUNTU-CVE-2020-0030

USNEPSS <= 49%HIGH2020-02-04

CVEs:CVE-2020-0030

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure-edge	affected	Ubuntu:18.04:LTS	linux-azure-edge	—
linux-gcp-edge	affected	Ubuntu:18.04:LTS	linux-gcp-edge	—
linux-hwe-edge	affected	Ubuntu:16.04:LTS	linux-hwe-edge	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—

Upstream advisory

USN-4278-3

USNAll remainingHIGH2020-02-26

firefox regressions

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:18.04:LTS	firefox	—

Upstream advisory

USN-4290-1

USNAll remaining2020-02-24

libpam-radius-auth vulnerability

Affected products

Product	Status	Vendor	Package	Ecosystem
libpam-radius-auth	affected	Ubuntu:16.04:LTS	libpam-radius-auth	—
libpam-radius-auth	affected	Ubuntu:18.04:LTS	libpam-radius-auth	—

Upstream advisory

USN-4289-1

USNAll remaining2020-02-20

squid, squid3 vulnerabilities

Affected products

Product	Status	Vendor	Package	Ecosystem
squid3	affected	Ubuntu:18.04:LTS	squid3	—
squid3	affected	Ubuntu:16.04:LTS	squid3	—

Upstream advisory

USN-4279-2

USNAll remainingCRITICAL2020-02-19

php7.0 regression

Affected products

Product	Status	Vendor	Package	Ecosystem
php7.0	affected	Ubuntu:16.04:LTS	php7.0	—

Upstream advisory

USN-4273-1

USNAll remaining2020-02-06

python-reportlab vulnerability

Affected products

Product	Status	Vendor	Package	Ecosystem
python-reportlab	affected	Ubuntu:16.04:LTS	python-reportlab	—
python-reportlab	affected	Ubuntu:18.04:LTS	python-reportlab	—

Upstream advisory

USN-4268-1

USNAll remaining2020-02-05

OpenSMTPD vulnerability

Affected products

Product	Status	Vendor	Package	Ecosystem
opensmtpd	affected	Ubuntu:18.04:LTS	opensmtpd	—

Upstream advisory

USN-4263-2

USNAll remaining2020-02-05

sudo vulnerability

Affected products

Product	Status	Vendor	Package	Ecosystem
sudo	affected	Ubuntu:Pro:14.04:LTS	sudo	—

Upstream advisory

USN-4265-2

USNAll remaining2020-02-04

spamassassin vulnerabilities

Affected products

Product	Status	Vendor	Package	Ecosystem
spamassassin	affected	Ubuntu:Pro:14.04:LTS	spamassassin	—

Upstream advisory

USN-4265-1

USNAll remaining2020-02-04

spamassassin vulnerabilities

Affected products

Product	Status	Vendor	Package	Ecosystem
spamassassin	affected	Ubuntu:18.04:LTS	spamassassin	—
spamassassin	affected	Ubuntu:16.04:LTS	spamassassin	—

Upstream advisory

USN-4264-1

USNAll remaining2020-02-04

python-django vulnerability

Affected products

Product	Status	Vendor	Package	Ecosystem
python-django	affected	Ubuntu:18.04:LTS	python-django	—

Upstream advisory

USN-4263-1

USNAll remaining2020-02-03

sudo vulnerability

Affected products

Product	Status	Vendor	Package	Ecosystem
sudo	affected	Ubuntu:16.04:LTS	sudo	—
sudo	affected	Ubuntu:18.04:LTS	sudo	—

Upstream advisory

UBUNTU-CVE-2020-8516

USNAll remainingMEDIUM2020-02-02

Affected products

Product	Status	Vendor	Package	Ecosystem
tor	affected	Ubuntu:22.04:LTS	tor	—
tor	affected	Ubuntu:20.04:LTS	tor	—
tor	affected	Ubuntu:Pro:14.04:LTS	tor	—
tor	affected	Ubuntu:Pro:16.04:LTS	tor	—
tor	affected	Ubuntu:Pro:18.04:LTS	tor	—
tor	affected	Ubuntu:24.04:LTS	tor	—

Upstream advisory

What would you fix first?

Advisories

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products