Canonical Security Advisories: December 2020 — Canonical Security Advisories

Product	Status	Vendor	Package	Ecosystem
roundcube	affected	Ubuntu:Pro:18.04:LTS	roundcube	—
roundcube	affected	Ubuntu:Pro:20.04:LTS	roundcube	—
roundcube	affected	Ubuntu:Pro:16.04:LTS	roundcube	—

Product	Status	Vendor	Package	Ecosystem
unzip	affected	Ubuntu:18.04:LTS	unzip	—
unzip	affected	Ubuntu:16.04:LTS	unzip	—
unzip	affected	Ubuntu:Pro:14.04:LTS	unzip	—

Product	Status	Vendor	Package	Ecosystem
node-ua-parser-js	affected	Ubuntu:20.04:LTS	node-ua-parser-js	—
node-ua-parser-js	affected	Ubuntu:18.04:LTS	node-ua-parser-js	—

Product	Status	Vendor	Package	Ecosystem
spotweb	affected	Ubuntu:20.04:LTS	spotweb	—
spotweb	affected	Ubuntu:18.04:LTS	spotweb	—

Product	Status	Vendor	Package	Ecosystem
pure-ftpd	affected	Ubuntu:16.04:LTS	pure-ftpd	—
pure-ftpd	affected	Ubuntu:25.10	pure-ftpd	—
pure-ftpd	affected	Ubuntu:24.04:LTS	pure-ftpd	—
pure-ftpd	affected	Ubuntu:22.04:LTS	pure-ftpd	—
pure-ftpd	affected	Ubuntu:20.04:LTS	pure-ftpd	—
pure-ftpd	affected	Ubuntu:18.04:LTS	pure-ftpd	—

USN-4660-1

USNActive exploitation (sightings)HIGH2020-12-03

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-gke-4.15, linux-hwe, linux-kvm, linux-oem, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities

CVEs:CVE-2020-4788 CVE-2020-14351 CVE-2020-14390 CVE-2020-25211 CVE-2020-25284 CVE-2020-25285 CVE-2020-25641 CVE-2020-25643 CVE-2020-25645 CVE-2020-28915

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:18.04:LTS	linux	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure-4.15	affected	Ubuntu:18.04:LTS	linux-azure-4.15	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp-4.15	affected	Ubuntu:18.04:LTS	linux-gcp-4.15	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2020-35381

USNActive exploitation (sightings)HIGH2020-12-15

CVEs:CVE-2020-35381

Affected products

Product	Status	Vendor	Package	Ecosystem
golang-github-buger-jsonparser	affected	Ubuntu:18.04:LTS	golang-github-buger-jsonparser	—
golang-github-buger-jsonparser	affected	Ubuntu:20.04:LTS	golang-github-buger-jsonparser	—

Upstream advisory

UBUNTU-CVE-2020-29663

USNActive exploitation (sightings)CRITICAL2020-12-15

CVEs:CVE-2020-29663

Affected products

Product	Status	Vendor	Package	Ecosystem
icinga2	affected	Ubuntu:16.04:LTS	icinga2	—
icinga2	affected	Ubuntu:20.04:LTS	icinga2	—
icinga2	affected	Ubuntu:18.04:LTS	icinga2	—

Upstream advisory

UBUNTU-CVE-2020-27842

USNActive exploitation (sightings)MEDIUM2020-12-29

CVEs:CVE-2020-27842

Affected products

Product	Status	Vendor	Package	Ecosystem
blender	affected	Ubuntu:24.04:LTS	blender	—
blender	affected	Ubuntu:25.10	blender	—
blender	affected	Ubuntu:18.04:LTS	blender	—
blender	affected	Ubuntu:20.04:LTS	blender	—
blender	affected	Ubuntu:22.04:LTS	blender	—
blender	affected	Ubuntu:16.04:LTS	blender	—
ghostscript	affected	Ubuntu:18.04:LTS	ghostscript	—
ghostscript	affected	Ubuntu:16.04:LTS	ghostscript	—
insighttoolkit4	affected	Ubuntu:20.04:LTS	insighttoolkit4	—
insighttoolkit4	affected	Ubuntu:22.04:LTS	insighttoolkit4	—
insighttoolkit4	affected	Ubuntu:18.04:LTS	insighttoolkit4	—
insighttoolkit4	affected	Ubuntu:16.04:LTS	insighttoolkit4	—
openjpeg	affected	Ubuntu:14.04:LTS	openjpeg	—
openjpeg	affected	Ubuntu:Pro:16.04:LTS	openjpeg	—
openjpeg2	affected	Ubuntu:22.04:LTS	openjpeg2	—
openjpeg2	affected	Ubuntu:20.04:LTS	openjpeg2	—
openjpeg2	affected	Ubuntu:Pro:16.04:LTS	openjpeg2	—
openjpeg2	affected	Ubuntu:18.04:LTS	openjpeg2	—
qtwebengine-opensource-src	affected	Ubuntu:25.10	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:18.04:LTS	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:22.04:LTS	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:24.04:LTS	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:20.04:LTS	qtwebengine-opensource-src	—
texmaker	affected	Ubuntu:18.04:LTS	texmaker	—
texmaker	affected	Ubuntu:20.04:LTS	texmaker	—
texmaker	affected	Ubuntu:16.04:LTS	texmaker	—
texmaker	affected	Ubuntu:25.10	texmaker	—
texmaker	affected	Ubuntu:24.04:LTS	texmaker	—
texmaker	affected	Ubuntu:22.04:LTS	texmaker	—

Upstream advisory

UBUNTU-CVE-2020-27760

USNActive exploitation (sightings)MEDIUM2020-12-03

CVEs:CVE-2020-27760

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:Pro:16.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:20.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2020-26247

USNActive exploitation (sightings)MEDIUM2020-12-30

CVEs:CVE-2020-26247

Affected products

Product	Status	Vendor	Package	Ecosystem
access	affected	Cloudflare	—	—
ruby-nokogiri	affected	Ubuntu:Pro:20.04:LTS	ruby-nokogiri	—

Upstream advisory

UBUNTU-CVE-2020-27770

USNActive exploitation (sightings)MEDIUM2020-12-04

CVEs:CVE-2020-27770

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:Pro:16.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:20.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2020-27775

USNActive exploitation (sightings)LOW2020-12-04

CVEs:CVE-2020-27775

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:Pro:16.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:20.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2020-27765

USNActive exploitation (sightings)LOW2020-12-04

CVEs:CVE-2020-27765

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:Pro:16.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:20.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2020-27750

USNActive exploitation (sightings)MEDIUM2020-12-06

CVEs:CVE-2020-27750

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:Pro:16.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:20.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2020-16600

USNActive exploitation (sightings)HIGH2020-12-09

CVEs:CVE-2020-16600

Affected products

Product	Status	Vendor	Package	Ecosystem
mupdf	affected	Ubuntu:Pro:20.04:LTS	mupdf	—
mupdf	affected	Ubuntu:Pro:18.04:LTS	mupdf	—
mupdf	affected	Ubuntu:Pro:16.04:LTS	mupdf	—

Upstream advisory

UBUNTU-CVE-2020-27755

USNActive exploitation (sightings)LOW2020-12-06

CVEs:CVE-2020-27755

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:Pro:16.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:20.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2020-28935

USNActive exploitation (sightings)MEDIUM2020-12-07

CVEs:CVE-2020-28935

Affected products

Product	Status	Vendor	Package	Ecosystem
unbound	affected	Ubuntu:20.04:LTS	unbound	—
unbound	affected	Ubuntu:Pro:16.04:LTS	unbound	—
unbound	affected	Ubuntu:Pro:14.04:LTS	unbound	—
unbound	affected	Ubuntu:18.04:LTS	unbound	—

Upstream advisory

UBUNTU-CVE-2020-26259

USNCoalition ESS > 63%MEDIUM2020-12-16

CVEs:CVE-2020-26259

Affected products

Product	Status	Vendor	Package	Ecosystem
libxstream-java	affected	Ubuntu:Pro:14.04:LTS	libxstream-java	—
libxstream-java	affected	Ubuntu:18.04:LTS	libxstream-java	—
libxstream-java	affected	Ubuntu:Pro:16.04:LTS	libxstream-java	—
libxstream-java	affected	Ubuntu:20.04:LTS	libxstream-java	—

Upstream advisory

UBUNTU-CVE-2020-17527

USNPoC exploitHIGH2020-12-03

CVEs:CVE-2020-17527

Affected products

Product	Status	Vendor	Package	Ecosystem
tomcat8	affected	Ubuntu:Pro:18.04:LTS	tomcat8	—
tomcat9	affected	Ubuntu:20.04:LTS	tomcat9	—
tomcat9	affected	Ubuntu:18.04:LTS	tomcat9	—

Upstream advisory

UBUNTU-CVE-2020-35728

USNPoC exploitHIGH2020-12-27

CVEs:CVE-2020-35728

Affected products

Product	Status	Vendor	Package	Ecosystem
connect	affected	AWS	—	—
jackson-databind	affected	Ubuntu:25.10	jackson-databind	—
jackson-databind	affected	Ubuntu:Pro:14.04:LTS	jackson-databind	—
jackson-databind	affected	Ubuntu:24.04:LTS	jackson-databind	—
jackson-databind	affected	Ubuntu:20.04:LTS	jackson-databind	—
jackson-databind	affected	Ubuntu:22.04:LTS	jackson-databind	—
jackson-databind	affected	Ubuntu:18.04:LTS	jackson-databind	—
jackson-databind	affected	Ubuntu:Pro:16.04:LTS	jackson-databind	—

Upstream advisory

USN-4665-2

USNPoC exploitHIGH2020-12-09

curl vulnerabilities

CVEs:CVE-2020-8284 CVE-2020-8285

Affected products

Product	Status	Vendor	Package	Ecosystem
curl	affected	Ubuntu:Pro:14.04:LTS	curl	—

Upstream advisory

USN-4665-1

USNPoC exploitHIGH2020-12-09

curl vulnerabilities

CVEs:CVE-2020-8231 CVE-2020-8284 CVE-2020-8285 CVE-2020-8286

Affected products

Product	Status	Vendor	Package	Ecosystem
curl	affected	Ubuntu:16.04:LTS	curl	—
curl	affected	Ubuntu:18.04:LTS	curl	—
curl	affected	Ubuntu:20.04:LTS	curl	—

Upstream advisory

UBUNTU-CVE-2020-8285

USNPoC exploitHIGH2020-12-08

CVEs:CVE-2020-8285

Affected products

Product	Status	Vendor	Package	Ecosystem
curl	affected	Ubuntu:16.04:LTS	curl	—
curl	affected	Ubuntu:Pro:14.04:LTS	curl	—
curl	affected	Ubuntu:18.04:LTS	curl	—
curl	affected	Ubuntu:20.04:LTS	curl	—

Upstream advisory

UBUNTU-CVE-2020-35491

USNPoC exploitHIGH2020-12-17

CVEs:CVE-2020-35491

Affected products

Product	Status	Vendor	Package	Ecosystem
jackson-databind	affected	Ubuntu:24.04:LTS	jackson-databind	—
jackson-databind	affected	Ubuntu:Pro:16.04:LTS	jackson-databind	—
jackson-databind	affected	Ubuntu:25.10	jackson-databind	—
jackson-databind	affected	Ubuntu:Pro:14.04:LTS	jackson-databind	—
jackson-databind	affected	Ubuntu:20.04:LTS	jackson-databind	—
jackson-databind	affected	Ubuntu:22.04:LTS	jackson-databind	—
jackson-databind	affected	Ubuntu:18.04:LTS	jackson-databind	—

Upstream advisory

UBUNTU-CVE-2020-35490

USNPoC exploitHIGH2020-12-17

CVEs:CVE-2020-35490

Affected products

Product	Status	Vendor	Package	Ecosystem
jackson-databind	affected	Ubuntu:Pro:16.04:LTS	jackson-databind	—
jackson-databind	affected	Ubuntu:24.04:LTS	jackson-databind	—
jackson-databind	affected	Ubuntu:25.10	jackson-databind	—
jackson-databind	affected	Ubuntu:Pro:14.04:LTS	jackson-databind	—
jackson-databind	affected	Ubuntu:20.04:LTS	jackson-databind	—
jackson-databind	affected	Ubuntu:22.04:LTS	jackson-databind	—
jackson-databind	affected	Ubuntu:18.04:LTS	jackson-databind	—

Upstream advisory

UBUNTU-CVE-2020-29599

USNPoC exploitHIGH2020-12-07

CVEs:CVE-2020-29599

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:20.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2020-28052

USNPoC exploitHIGH2020-12-18

CVEs:CVE-2020-28052

Affected products

Product	Status	Vendor	Package	Ecosystem
bouncycastle	affected	Ubuntu:25.10	bouncycastle	—
bouncycastle	affected	Ubuntu:22.04:LTS	bouncycastle	—
bouncycastle	affected	Ubuntu:18.04:LTS	bouncycastle	—
bouncycastle	affected	Ubuntu:24.04:LTS	bouncycastle	—
bouncycastle	affected	Ubuntu:20.04:LTS	bouncycastle	—
bouncycastle	affected	Ubuntu:16.04:LTS	bouncycastle	—

Upstream advisory

USN-4662-1

USNPoC exploitHIGH2020-12-08

openssl, openssl1.0 vulnerability

CVEs:CVE-2020-1971

Affected products

Product	Status	Vendor	Package	Ecosystem
openssl	affected	Ubuntu:18.04:LTS	openssl	—
openssl	affected	Ubuntu:20.04:LTS	openssl	—
openssl	affected	Ubuntu:16.04:LTS	openssl	—
openssl1.0	affected	Ubuntu:18.04:LTS	openssl1.0	—

Upstream advisory

UBUNTU-CVE-2020-1971

USNPoC exploitMEDIUM2020-12-08

CVEs:CVE-2020-1971

Affected products

Product	Status	Vendor	Package	Ecosystem
openssl	affected	Ubuntu:16.04:LTS	openssl	—
openssl	affected	Ubuntu:Pro:14.04:LTS	openssl	—
openssl	affected	Ubuntu:20.04:LTS	openssl	—
openssl	affected	Ubuntu:18.04:LTS	openssl	—
openssl1.0	affected	Ubuntu:18.04:LTS	openssl1.0	—

Upstream advisory

UBUNTU-CVE-2020-8286

USNPoC exploitHIGH2020-12-08

CVEs:CVE-2020-8286

Affected products

Product	Status	Vendor	Package	Ecosystem
curl	affected	Ubuntu:16.04:LTS	curl	—
curl	affected	Ubuntu:18.04:LTS	curl	—
curl	affected	Ubuntu:20.04:LTS	curl	—

Upstream advisory

UBUNTU-CVE-2020-8284

USNPoC exploitLOW2020-12-08

CVEs:CVE-2020-8284

Affected products

Product	Status	Vendor	Package	Ecosystem
curl	affected	Ubuntu:16.04:LTS	curl	—
curl	affected	Ubuntu:Pro:14.04:LTS	curl	—
curl	affected	Ubuntu:18.04:LTS	curl	—
curl	affected	Ubuntu:20.04:LTS	curl	—

Upstream advisory

UBUNTU-CVE-2020-7788

USNPoC exploitCRITICAL2020-12-11

CVEs:CVE-2020-7788

Affected products

Product	Status	Vendor	Package	Ecosystem
node-ini	affected	Ubuntu:20.04:LTS	node-ini	—
node-ini	affected	Ubuntu:24.04:LTS	node-ini	—
node-ini	affected	Ubuntu:25.10	node-ini	—
node-ini	affected	Ubuntu:14.04:LTS	node-ini	—
node-ini	affected	Ubuntu:16.04:LTS	node-ini	—
node-ini	affected	Ubuntu:22.04:LTS	node-ini	—
node-ini	affected	Ubuntu:18.04:LTS	node-ini	—

Upstream advisory

UBUNTU-CVE-2020-29363

USNPoC exploitHIGH2020-12-16

CVEs:CVE-2020-29363

Affected products

Product	Status	Vendor	Package	Ecosystem
p11-kit	affected	Ubuntu:20.04:LTS	p11-kit	—
p11-kit	affected	Ubuntu:18.04:LTS	p11-kit	—

Upstream advisory

UBUNTU-CVE-2020-29361

USNPoC exploitHIGH2020-12-16

CVEs:CVE-2020-29361

Affected products

Product	Status	Vendor	Package	Ecosystem
p11-kit	affected	Ubuntu:Pro:14.04:LTS	p11-kit	—
p11-kit	affected	Ubuntu:20.04:LTS	p11-kit	—
p11-kit	affected	Ubuntu:16.04:LTS	p11-kit	—
p11-kit	affected	Ubuntu:18.04:LTS	p11-kit	—

Upstream advisory

UBUNTU-CVE-2020-29652

USNPoC exploitHIGH2020-12-17

CVEs:CVE-2020-29652

Affected products

Product	Status	Vendor	Package	Ecosystem
golang-go.crypto	affected	Ubuntu:22.04:LTS	golang-go.crypto	—
golang-go.crypto	affected	Ubuntu:Pro:20.04:LTS	golang-go.crypto	—

Upstream advisory

UBUNTU-CVE-2020-13987

USNPoC exploitHIGH2020-12-01

CVEs:CVE-2020-13987

Affected products

Product	Status	Vendor	Package	Ecosystem
open-iscsi	affected	Ubuntu:20.04:LTS	open-iscsi	—
open-iscsi	affected	Ubuntu:Pro:16.04:LTS	open-iscsi	—
open-iscsi	affected	Ubuntu:Pro:18.04:LTS	open-iscsi	—

Upstream advisory

UBUNTU-CVE-2020-29573

USNPoC exploitHIGH2020-12-06

CVEs:CVE-2020-29573

Affected products

Product	Status	Vendor	Package	Ecosystem
eglibc	affected	Ubuntu:Pro:14.04:LTS	eglibc	—

Upstream advisory

UBUNTU-CVE-2020-17437

USNPoC exploitHIGH2020-12-01

CVEs:CVE-2020-17437

Affected products

Product	Status	Vendor	Package	Ecosystem
open-iscsi	affected	Ubuntu:20.04:LTS	open-iscsi	—
open-iscsi	affected	Ubuntu:Pro:16.04:LTS	open-iscsi	—
open-iscsi	affected	Ubuntu:Pro:18.04:LTS	open-iscsi	—

Upstream advisory

UBUNTU-CVE-2021-2194

USNPoC exploitMEDIUM2020-12-15

CVEs:CVE-2021-2194

Affected products

Product	Status	Vendor	Package	Ecosystem
mariadb-10.0	affected	Ubuntu:16.04:LTS	mariadb-10.0	—
mariadb-10.1	affected	Ubuntu:18.04:LTS	mariadb-10.1	—
mariadb-10.3	affected	Ubuntu:20.04:LTS	mariadb-10.3	—
mysql-5.5	affected	Ubuntu:14.04:LTS	mysql-5.5	—
mysql-5.7	affected	Ubuntu:Pro:16.04:LTS	mysql-5.7	—
mysql-5.7	affected	Ubuntu:18.04:LTS	mysql-5.7	—
mysql-8.0	affected	Ubuntu:20.04:LTS	mysql-8.0	—
percona-server-5.6	affected	Ubuntu:16.04:LTS	percona-server-5.6	—
percona-xtradb-cluster-5.6	affected	Ubuntu:16.04:LTS	percona-xtradb-cluster-5.6	—

Upstream advisory

UBUNTU-CVE-2020-29362

USNPoC exploitMEDIUM2020-12-16

CVEs:CVE-2020-29362

Affected products

Product	Status	Vendor	Package	Ecosystem
p11-kit	affected	Ubuntu:20.04:LTS	p11-kit	—
p11-kit	affected	Ubuntu:16.04:LTS	p11-kit	—
p11-kit	affected	Ubuntu:18.04:LTS	p11-kit	—

Upstream advisory

UBUNTU-CVE-2020-29509

USNPoC exploitCRITICAL2020-12-14

CVEs:CVE-2020-29509

Affected products

Product	Status	Vendor	Package	Ecosystem
golang-1.10	affected	Ubuntu:18.04:LTS	golang-1.10	—
golang-1.10	affected	Ubuntu:14.04:LTS	golang-1.10	—
golang-1.10	affected	Ubuntu:16.04:LTS	golang-1.10	—
golang-1.13	affected	Ubuntu:Pro:18.04:LTS	golang-1.13	—
golang-1.13	affected	Ubuntu:Pro:16.04:LTS	golang-1.13	—
golang-1.13	affected	Ubuntu:Pro:22.04:LTS	golang-1.13	—
golang-1.13	affected	Ubuntu:20.04:LTS	golang-1.13	—
golang-1.14	affected	Ubuntu:20.04:LTS	golang-1.14	—
golang-1.6	affected	Ubuntu:16.04:LTS	golang-1.6	—
golang-1.8	affected	Ubuntu:18.04:LTS	golang-1.8	—
golang-1.9	affected	Ubuntu:18.04:LTS	golang-1.9	—

Upstream advisory

UBUNTU-CVE-2020-29511

USNPoC exploitCRITICAL2020-12-14

CVEs:CVE-2020-29511

Affected products

Product	Status	Vendor	Package	Ecosystem
golang-1.10	affected	Ubuntu:16.04:LTS	golang-1.10	—
golang-1.10	affected	Ubuntu:14.04:LTS	golang-1.10	—
golang-1.10	affected	Ubuntu:18.04:LTS	golang-1.10	—
golang-1.13	affected	Ubuntu:Pro:22.04:LTS	golang-1.13	—
golang-1.13	affected	Ubuntu:Pro:16.04:LTS	golang-1.13	—
golang-1.13	affected	Ubuntu:20.04:LTS	golang-1.13	—
golang-1.13	affected	Ubuntu:Pro:18.04:LTS	golang-1.13	—
golang-1.14	affected	Ubuntu:20.04:LTS	golang-1.14	—
golang-1.6	affected	Ubuntu:16.04:LTS	golang-1.6	—
golang-1.8	affected	Ubuntu:18.04:LTS	golang-1.8	—
golang-1.9	affected	Ubuntu:18.04:LTS	golang-1.9	—

Upstream advisory

UBUNTU-CVE-2020-25265

USNPoC exploitMEDIUM2020-12-02

CVEs:CVE-2020-25265

Affected products

Product	Status	Vendor	Package	Ecosystem
libappimage	affected	Ubuntu:20.04:LTS	libappimage	—
libappimage	affected	Ubuntu:24.04:LTS	libappimage	—
libappimage	affected	Ubuntu:22.04:LTS	libappimage	—
libappimage	affected	Ubuntu:25.10	libappimage	—

Upstream advisory

UBUNTU-CVE-2020-27786

USNPoC exploitHIGH2020-12-11

CVEs:CVE-2020-27786

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:18.04:LTS	linux	—
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux	affected	Ubuntu:20.04:LTS	linux	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:20.04:LTS	linux-aws	—
linux-aws-5.0	affected	Ubuntu:18.04:LTS	linux-aws-5.0	—
linux-aws-5.3	affected	Ubuntu:18.04:LTS	linux-aws-5.3	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-aws-fips	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:20.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-4.15	affected	Ubuntu:18.04:LTS	linux-azure-4.15	—
linux-azure-5.3	affected	Ubuntu:18.04:LTS	linux-azure-5.3	—
linux-azure-edge	affected	Ubuntu:18.04:LTS	linux-azure-edge	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fde-5.15	affected	Ubuntu:Pro:20.04:LTS	linux-azure-fde-5.15	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-azure-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:20.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp-4.15	affected	Ubuntu:18.04:LTS	linux-gcp-4.15	—
linux-gcp-5.3	affected	Ubuntu:18.04:LTS	linux-gcp-5.3	—
linux-gcp-edge	affected	Ubuntu:18.04:LTS	linux-gcp-edge	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-gcp-fips	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-gke-5.0	affected	Ubuntu:18.04:LTS	linux-gke-5.0	—
linux-gke-5.3	affected	Ubuntu:18.04:LTS	linux-gke-5.3	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe-5.4	affected	Ubuntu:18.04:LTS	linux-hwe-5.4	—
linux-hwe-edge	affected	Ubuntu:16.04:LTS	linux-hwe-edge	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:20.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oem-5.6	affected	Ubuntu:20.04:LTS	linux-oem-5.6	—
linux-oem-osp1	affected	Ubuntu:18.04:LTS	linux-oem-osp1	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:20.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-oracle-5.0	affected	Ubuntu:18.04:LTS	linux-oracle-5.0	—
linux-oracle-5.3	affected	Ubuntu:18.04:LTS	linux-oracle-5.3	—
linux-raspi	affected	Ubuntu:20.04:LTS	linux-raspi	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2-5.3	affected	Ubuntu:18.04:LTS	linux-raspi2-5.3	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2020-27824

USNPoC exploitMEDIUM2020-12-10

CVEs:CVE-2020-27824

Affected products

Product	Status	Vendor	Package	Ecosystem
blender	affected	Ubuntu:16.04:LTS	blender	—
blender	affected	Ubuntu:18.04:LTS	blender	—
blender	affected	Ubuntu:25.10	blender	—
blender	affected	Ubuntu:20.04:LTS	blender	—
blender	affected	Ubuntu:24.04:LTS	blender	—
blender	affected	Ubuntu:22.04:LTS	blender	—
ghostscript	affected	Ubuntu:18.04:LTS	ghostscript	—
ghostscript	affected	Ubuntu:16.04:LTS	ghostscript	—
insighttoolkit4	affected	Ubuntu:16.04:LTS	insighttoolkit4	—
insighttoolkit4	affected	Ubuntu:22.04:LTS	insighttoolkit4	—
insighttoolkit4	affected	Ubuntu:18.04:LTS	insighttoolkit4	—
insighttoolkit4	affected	Ubuntu:20.04:LTS	insighttoolkit4	—
openjpeg	affected	Ubuntu:Pro:16.04:LTS	openjpeg	—
openjpeg	affected	Ubuntu:14.04:LTS	openjpeg	—
openjpeg2	affected	Ubuntu:16.04:LTS	openjpeg2	—
openjpeg2	affected	Ubuntu:22.04:LTS	openjpeg2	—
openjpeg2	affected	Ubuntu:18.04:LTS	openjpeg2	—
openjpeg2	affected	Ubuntu:20.04:LTS	openjpeg2	—
qtwebengine-opensource-src	affected	Ubuntu:25.10	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:24.04:LTS	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:18.04:LTS	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:22.04:LTS	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:20.04:LTS	qtwebengine-opensource-src	—
texmaker	affected	Ubuntu:24.04:LTS	texmaker	—
texmaker	affected	Ubuntu:25.10	texmaker	—
texmaker	affected	Ubuntu:20.04:LTS	texmaker	—
texmaker	affected	Ubuntu:18.04:LTS	texmaker	—
texmaker	affected	Ubuntu:16.04:LTS	texmaker	—
texmaker	affected	Ubuntu:22.04:LTS	texmaker	—

Upstream advisory

UBUNTU-CVE-2020-29562

USNPoC exploitMEDIUM2020-12-04

CVEs:CVE-2020-29562

Affected products

Product	Status	Vendor	Package	Ecosystem
glibc	affected	Ubuntu:20.04:LTS	glibc	—
glibc	affected	Ubuntu:18.04:LTS	glibc	—

Upstream advisory

UBUNTU-CVE-2020-25860

USNPoC exploitMEDIUM2020-12-21

CVEs:CVE-2020-25860

Affected products

Product	Status	Vendor	Package	Ecosystem
rauc	affected	Ubuntu:20.04:LTS	rauc	—
rauc	affected	Ubuntu:22.04:LTS	rauc	—

Upstream advisory

UBUNTU-CVE-2020-27844

USNPoC exploitHIGH2020-12-29

CVEs:CVE-2020-27844

Affected products

Product	Status	Vendor	Package	Ecosystem
insighttoolkit4	affected	Ubuntu:18.04:LTS	insighttoolkit4	—
insighttoolkit4	affected	Ubuntu:16.04:LTS	insighttoolkit4	—
insighttoolkit4	affected	Ubuntu:20.04:LTS	insighttoolkit4	—
insighttoolkit4	affected	Ubuntu:22.04:LTS	insighttoolkit4	—

Upstream advisory

UBUNTU-CVE-2020-27818

USNPoC exploitLOW2020-12-06

CVEs:CVE-2020-27818

Affected products

Product	Status	Vendor	Package	Ecosystem
pngcheck	affected	Ubuntu:24.04:LTS	pngcheck	—
pngcheck	affected	Ubuntu:Pro:16.04:LTS	pngcheck	—
pngcheck	affected	Ubuntu:25.10	pngcheck	—
pngcheck	affected	Ubuntu:20.04:LTS	pngcheck	—
pngcheck	affected	Ubuntu:Pro:18.04:LTS	pngcheck	—

Upstream advisory

UBUNTU-CVE-2020-28588

USNPoC exploitMEDIUM2020-12-04

CVEs:CVE-2020-28588

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:20.04:LTS	linux	—
linux-aws	affected	Ubuntu:20.04:LTS	linux-aws	—
linux-aws-5.0	affected	Ubuntu:18.04:LTS	linux-aws-5.0	—
linux-aws-5.3	affected	Ubuntu:18.04:LTS	linux-aws-5.3	—
linux-aws-5.4	affected	Ubuntu:18.04:LTS	linux-aws-5.4	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-aws-fips	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:20.04:LTS	linux-azure	—
linux-azure-5.3	affected	Ubuntu:18.04:LTS	linux-azure-5.3	—
linux-azure-5.4	affected	Ubuntu:18.04:LTS	linux-azure-5.4	—
linux-azure-edge	affected	Ubuntu:18.04:LTS	linux-azure-edge	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-azure-fips	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:20.04:LTS	linux-gcp	—
linux-gcp-5.3	affected	Ubuntu:18.04:LTS	linux-gcp-5.3	—
linux-gcp-5.4	affected	Ubuntu:18.04:LTS	linux-gcp-5.4	—
linux-gcp-edge	affected	Ubuntu:18.04:LTS	linux-gcp-edge	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-gcp-fips	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-gcp-fips	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke-5.4	affected	Ubuntu:18.04:LTS	linux-gke-5.4	—
linux-gkeop	affected	Ubuntu:20.04:LTS	linux-gkeop	—
linux-gkeop-5.4	affected	Ubuntu:18.04:LTS	linux-gkeop-5.4	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe-5.4	affected	Ubuntu:18.04:LTS	linux-hwe-5.4	—
linux-hwe-5.8	affected	Ubuntu:20.04:LTS	linux-hwe-5.8	—
linux-hwe-edge	affected	Ubuntu:16.04:LTS	linux-hwe-edge	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:20.04:LTS	linux-kvm	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oem-5.6	affected	Ubuntu:20.04:LTS	linux-oem-5.6	—
linux-oracle	affected	Ubuntu:20.04:LTS	linux-oracle	—
linux-oracle-5.0	affected	Ubuntu:18.04:LTS	linux-oracle-5.0	—
linux-oracle-5.3	affected	Ubuntu:18.04:LTS	linux-oracle-5.3	—
linux-oracle-5.4	affected	Ubuntu:18.04:LTS	linux-oracle-5.4	—
linux-raspi	affected	Ubuntu:20.04:LTS	linux-raspi	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi-5.4	affected	Ubuntu:18.04:LTS	linux-raspi-5.4	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv-5.8	affected	Ubuntu:20.04:LTS	linux-riscv-5.8	—

Upstream advisory

UBUNTU-CVE-2020-8908

USNPoC exploitLOW2020-12-10

CVEs:CVE-2020-8908

Affected products

Product	Status	Vendor	Package	Ecosystem
access	affected	Cloudflare	—	—
config	affected	AWS	—	—
guava-libraries	affected	Ubuntu:16.04:LTS	guava-libraries	—
guava-libraries	affected	Ubuntu:18.04:LTS	guava-libraries	—
guava-libraries	affected	Ubuntu:22.04:LTS	guava-libraries	—
guava-libraries	affected	Ubuntu:14.04:LTS	guava-libraries	—
guava-libraries	affected	Ubuntu:20.04:LTS	guava-libraries	—

Upstream advisory

UBUNTU-CVE-2020-27068

USNPoC exploitCRITICAL2020-12-15

CVEs:CVE-2020-27068

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:18.04:LTS	linux	—
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux	affected	Ubuntu:16.04:LTS	linux	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws-5.0	affected	Ubuntu:18.04:LTS	linux-aws-5.0	—
linux-aws-5.3	affected	Ubuntu:18.04:LTS	linux-aws-5.3	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-aws-fips	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-5.3	affected	Ubuntu:18.04:LTS	linux-azure-5.3	—
linux-azure-edge	affected	Ubuntu:18.04:LTS	linux-azure-edge	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fde-5.15	affected	Ubuntu:Pro:20.04:LTS	linux-azure-fde-5.15	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-azure-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp-5.3	affected	Ubuntu:18.04:LTS	linux-gcp-5.3	—
linux-gcp-edge	affected	Ubuntu:18.04:LTS	linux-gcp-edge	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-gcp-fips	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-gke-5.0	affected	Ubuntu:18.04:LTS	linux-gke-5.0	—
linux-gke-5.3	affected	Ubuntu:18.04:LTS	linux-gke-5.3	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe-edge	affected	Ubuntu:16.04:LTS	linux-hwe-edge	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oem-osp1	affected	Ubuntu:18.04:LTS	linux-oem-osp1	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-oracle-5.0	affected	Ubuntu:18.04:LTS	linux-oracle-5.0	—
linux-oracle-5.3	affected	Ubuntu:18.04:LTS	linux-oracle-5.3	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2-5.3	affected	Ubuntu:18.04:LTS	linux-raspi2-5.3	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2020-27348

USNPoC exploitMEDIUM2020-12-03

CVEs:CVE-2020-27348

Affected products

Product	Status	Vendor	Package	Ecosystem
snapcraft	affected	Ubuntu:16.04:LTS	snapcraft	—
snapcraft	affected	Ubuntu:18.04:LTS	snapcraft	—

Upstream advisory

UBUNTU-CVE-2020-8566

USNPoC exploitMEDIUM2020-12-07

CVEs:CVE-2020-8566

Affected products

Product	Status	Vendor	Package	Ecosystem
kubernetes	affected	Ubuntu:24.04:LTS	kubernetes	—
kubernetes	affected	Ubuntu:Pro:20.04:LTS	kubernetes	—
kubernetes	affected	Ubuntu:22.04:LTS	kubernetes	—

Upstream advisory

UBUNTU-CVE-2020-8565

USNPoC exploitMEDIUM2020-12-07

CVEs:CVE-2020-8565

Affected products

Product	Status	Vendor	Package	Ecosystem
kubernetes	affected	Ubuntu:24.04:LTS	kubernetes	—
kubernetes	affected	Ubuntu:Pro:20.04:LTS	kubernetes	—
kubernetes	affected	Ubuntu:22.04:LTS	kubernetes	—

Upstream advisory

UBUNTU-CVE-2020-8563

USNPoC exploitMEDIUM2020-12-07

CVEs:CVE-2020-8563

Affected products

Product	Status	Vendor	Package	Ecosystem
kubernetes	affected	Ubuntu:24.04:LTS	kubernetes	—
kubernetes	affected	Ubuntu:Pro:20.04:LTS	kubernetes	—
kubernetes	affected	Ubuntu:22.04:LTS	kubernetes	—

Upstream advisory

UBUNTU-CVE-2020-27777

USNPoC exploitMEDIUM2020-12-04

CVEs:CVE-2020-27777

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:18.04:LTS	linux	—
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:20.04:LTS	linux	—
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-aws-fips	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fde-5.15	affected	Ubuntu:Pro:20.04:LTS	linux-azure-fde-5.15	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-azure-fips	—
linux-dell300x	affected	Ubuntu:18.04:LTS	linux-dell300x	—
linux-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-gcp-fips	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-gcp-fips	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-gcp-fips	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke-5.4	affected	Ubuntu:18.04:LTS	linux-gke-5.4	—
linux-gkeop-5.4	affected	Ubuntu:18.04:LTS	linux-gkeop-5.4	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe-5.4	affected	Ubuntu:18.04:LTS	linux-hwe-5.4	—
linux-hwe-5.8	affected	Ubuntu:20.04:LTS	linux-hwe-5.8	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-hwe-edge	affected	Ubuntu:16.04:LTS	linux-hwe-edge	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—

Upstream advisory

UBUNTU-CVE-2020-29660

USNPoC exploitMEDIUM2020-12-09

CVEs:CVE-2020-29660

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:18.04:LTS	linux	—
linux	affected	Ubuntu:20.04:LTS	linux	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:20.04:LTS	linux-aws	—
linux-aws-5.0	affected	Ubuntu:18.04:LTS	linux-aws-5.0	—
linux-aws-5.3	affected	Ubuntu:18.04:LTS	linux-aws-5.3	—
linux-aws-5.4	affected	Ubuntu:18.04:LTS	linux-aws-5.4	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-aws-fips	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:20.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure-4.15	affected	Ubuntu:18.04:LTS	linux-azure-4.15	—
linux-azure-5.3	affected	Ubuntu:18.04:LTS	linux-azure-5.3	—
linux-azure-5.4	affected	Ubuntu:18.04:LTS	linux-azure-5.4	—
linux-azure-edge	affected	Ubuntu:18.04:LTS	linux-azure-edge	—
linux-azure-fde-5.15	affected	Ubuntu:Pro:20.04:LTS	linux-azure-fde-5.15	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-azure-fips	—
linux-dell300x	affected	Ubuntu:18.04:LTS	linux-dell300x	—
linux-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:20.04:LTS	linux-gcp	—
linux-gcp-4.15	affected	Ubuntu:18.04:LTS	linux-gcp-4.15	—
linux-gcp-5.3	affected	Ubuntu:18.04:LTS	linux-gcp-5.3	—
linux-gcp-5.4	affected	Ubuntu:18.04:LTS	linux-gcp-5.4	—
linux-gcp-edge	affected	Ubuntu:18.04:LTS	linux-gcp-edge	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-gcp-fips	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-gcp-fips	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-gcp-fips	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-gke-5.4	affected	Ubuntu:18.04:LTS	linux-gke-5.4	—
linux-gkeop	affected	Ubuntu:20.04:LTS	linux-gkeop	—
linux-gkeop-5.4	affected	Ubuntu:18.04:LTS	linux-gkeop-5.4	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe-5.4	affected	Ubuntu:18.04:LTS	linux-hwe-5.4	—
linux-hwe-5.8	affected	Ubuntu:20.04:LTS	linux-hwe-5.8	—
linux-hwe-edge	affected	Ubuntu:16.04:LTS	linux-hwe-edge	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:20.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oem-5.6	affected	Ubuntu:20.04:LTS	linux-oem-5.6	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:20.04:LTS	linux-oracle	—
linux-oracle-5.0	affected	Ubuntu:18.04:LTS	linux-oracle-5.0	—
linux-oracle-5.3	affected	Ubuntu:18.04:LTS	linux-oracle-5.3	—
linux-oracle-5.4	affected	Ubuntu:18.04:LTS	linux-oracle-5.4	—
linux-raspi	affected	Ubuntu:20.04:LTS	linux-raspi	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi-5.4	affected	Ubuntu:18.04:LTS	linux-raspi-5.4	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv-5.8	affected	Ubuntu:20.04:LTS	linux-riscv-5.8	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2020-8564

USNPoC exploitMEDIUM2020-12-07

CVEs:CVE-2020-8564

Affected products

Product	Status	Vendor	Package	Ecosystem
kubernetes	affected	Ubuntu:24.04:LTS	kubernetes	—
kubernetes	affected	Ubuntu:Pro:20.04:LTS	kubernetes	—
kubernetes	affected	Ubuntu:22.04:LTS	kubernetes	—

Upstream advisory

UBUNTU-CVE-2020-29569

USNPoC exploitHIGH2020-12-15

CVEs:CVE-2020-29569

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:20.04:LTS	linux	—
linux	affected	Ubuntu:18.04:LTS	linux	—
linux	affected	Ubuntu:16.04:LTS	linux	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:20.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws-5.0	affected	Ubuntu:18.04:LTS	linux-aws-5.0	—
linux-aws-5.3	affected	Ubuntu:18.04:LTS	linux-aws-5.3	—
linux-aws-5.4	affected	Ubuntu:18.04:LTS	linux-aws-5.4	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-aws-fips	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:20.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure-4.15	affected	Ubuntu:18.04:LTS	linux-azure-4.15	—
linux-azure-5.3	affected	Ubuntu:18.04:LTS	linux-azure-5.3	—
linux-azure-5.4	affected	Ubuntu:18.04:LTS	linux-azure-5.4	—
linux-azure-edge	affected	Ubuntu:18.04:LTS	linux-azure-edge	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-azure-fips	—
linux-dell300x	affected	Ubuntu:18.04:LTS	linux-dell300x	—
linux-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:20.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp-4.15	affected	Ubuntu:18.04:LTS	linux-gcp-4.15	—
linux-gcp-5.3	affected	Ubuntu:18.04:LTS	linux-gcp-5.3	—
linux-gcp-5.4	affected	Ubuntu:18.04:LTS	linux-gcp-5.4	—
linux-gcp-edge	affected	Ubuntu:18.04:LTS	linux-gcp-edge	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-gcp-fips	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-gcp-fips	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-gcp-fips	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-gke-5.4	affected	Ubuntu:18.04:LTS	linux-gke-5.4	—
linux-gkeop	affected	Ubuntu:20.04:LTS	linux-gkeop	—
linux-gkeop-5.4	affected	Ubuntu:18.04:LTS	linux-gkeop-5.4	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe-5.4	affected	Ubuntu:18.04:LTS	linux-hwe-5.4	—
linux-hwe-5.8	affected	Ubuntu:20.04:LTS	linux-hwe-5.8	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-hwe-edge	affected	Ubuntu:16.04:LTS	linux-hwe-edge	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:20.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oem-5.10	affected	Ubuntu:20.04:LTS	linux-oem-5.10	—
linux-oem-5.6	affected	Ubuntu:20.04:LTS	linux-oem-5.6	—
linux-oracle	affected	Ubuntu:20.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-oracle-5.0	affected	Ubuntu:18.04:LTS	linux-oracle-5.0	—
linux-oracle-5.3	affected	Ubuntu:18.04:LTS	linux-oracle-5.3	—
linux-oracle-5.4	affected	Ubuntu:18.04:LTS	linux-oracle-5.4	—
linux-raspi	affected	Ubuntu:20.04:LTS	linux-raspi	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi-5.4	affected	Ubuntu:18.04:LTS	linux-raspi-5.4	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv-5.8	affected	Ubuntu:20.04:LTS	linux-riscv-5.8	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2020-29568

USNPoC exploitMEDIUM2020-12-15

CVEs:CVE-2020-29568

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux	affected	Ubuntu:18.04:LTS	linux	—
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:20.04:LTS	linux	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:20.04:LTS	linux-aws	—
linux-aws-5.0	affected	Ubuntu:18.04:LTS	linux-aws-5.0	—
linux-aws-5.3	affected	Ubuntu:18.04:LTS	linux-aws-5.3	—
linux-aws-5.4	affected	Ubuntu:18.04:LTS	linux-aws-5.4	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-aws-fips	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:20.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure-4.15	affected	Ubuntu:18.04:LTS	linux-azure-4.15	—
linux-azure-5.3	affected	Ubuntu:18.04:LTS	linux-azure-5.3	—
linux-azure-5.4	affected	Ubuntu:18.04:LTS	linux-azure-5.4	—
linux-azure-edge	affected	Ubuntu:18.04:LTS	linux-azure-edge	—
linux-azure-fde-5.15	affected	Ubuntu:Pro:20.04:LTS	linux-azure-fde-5.15	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-azure-fips	—
linux-dell300x	affected	Ubuntu:18.04:LTS	linux-dell300x	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:20.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp-4.15	affected	Ubuntu:18.04:LTS	linux-gcp-4.15	—
linux-gcp-5.3	affected	Ubuntu:18.04:LTS	linux-gcp-5.3	—
linux-gcp-5.4	affected	Ubuntu:18.04:LTS	linux-gcp-5.4	—
linux-gcp-edge	affected	Ubuntu:18.04:LTS	linux-gcp-edge	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-gcp-fips	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-gcp-fips	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-gcp-fips	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-gke-5.4	affected	Ubuntu:18.04:LTS	linux-gke-5.4	—
linux-gkeop	affected	Ubuntu:20.04:LTS	linux-gkeop	—
linux-gkeop-5.4	affected	Ubuntu:18.04:LTS	linux-gkeop-5.4	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe-5.4	affected	Ubuntu:18.04:LTS	linux-hwe-5.4	—
linux-hwe-5.8	affected	Ubuntu:20.04:LTS	linux-hwe-5.8	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-hwe-edge	affected	Ubuntu:16.04:LTS	linux-hwe-edge	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:20.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oem-5.10	affected	Ubuntu:20.04:LTS	linux-oem-5.10	—
linux-oem-5.6	affected	Ubuntu:20.04:LTS	linux-oem-5.6	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:20.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-oracle-5.0	affected	Ubuntu:18.04:LTS	linux-oracle-5.0	—
linux-oracle-5.3	affected	Ubuntu:18.04:LTS	linux-oracle-5.3	—
linux-oracle-5.4	affected	Ubuntu:18.04:LTS	linux-oracle-5.4	—
linux-raspi	affected	Ubuntu:20.04:LTS	linux-raspi	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi-5.4	affected	Ubuntu:18.04:LTS	linux-raspi-5.4	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv-5.8	affected	Ubuntu:20.04:LTS	linux-riscv-5.8	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2020-27830

USNPoC exploitMEDIUM2020-12-07

CVEs:CVE-2020-27830

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:18.04:LTS	linux	—
linux	affected	Ubuntu:20.04:LTS	linux	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:20.04:LTS	linux-aws	—
linux-aws-5.0	affected	Ubuntu:18.04:LTS	linux-aws-5.0	—
linux-aws-5.3	affected	Ubuntu:18.04:LTS	linux-aws-5.3	—
linux-aws-5.4	affected	Ubuntu:18.04:LTS	linux-aws-5.4	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-aws-fips	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:20.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure-4.15	affected	Ubuntu:18.04:LTS	linux-azure-4.15	—
linux-azure-5.3	affected	Ubuntu:18.04:LTS	linux-azure-5.3	—
linux-azure-5.4	affected	Ubuntu:18.04:LTS	linux-azure-5.4	—
linux-azure-edge	affected	Ubuntu:18.04:LTS	linux-azure-edge	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-azure-fips	—
linux-dell300x	affected	Ubuntu:18.04:LTS	linux-dell300x	—
linux-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:20.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp-4.15	affected	Ubuntu:18.04:LTS	linux-gcp-4.15	—
linux-gcp-5.3	affected	Ubuntu:18.04:LTS	linux-gcp-5.3	—
linux-gcp-5.4	affected	Ubuntu:18.04:LTS	linux-gcp-5.4	—
linux-gcp-edge	affected	Ubuntu:18.04:LTS	linux-gcp-edge	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-gcp-fips	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-gcp-fips	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-gcp-fips	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-gke-5.4	affected	Ubuntu:18.04:LTS	linux-gke-5.4	—
linux-gkeop	affected	Ubuntu:20.04:LTS	linux-gkeop	—
linux-gkeop-5.4	affected	Ubuntu:18.04:LTS	linux-gkeop-5.4	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe-5.4	affected	Ubuntu:18.04:LTS	linux-hwe-5.4	—
linux-hwe-5.8	affected	Ubuntu:20.04:LTS	linux-hwe-5.8	—
linux-hwe-edge	affected	Ubuntu:16.04:LTS	linux-hwe-edge	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:20.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oem-5.6	affected	Ubuntu:20.04:LTS	linux-oem-5.6	—
linux-oracle	affected	Ubuntu:20.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-oracle-5.0	affected	Ubuntu:18.04:LTS	linux-oracle-5.0	—
linux-oracle-5.3	affected	Ubuntu:18.04:LTS	linux-oracle-5.3	—
linux-oracle-5.4	affected	Ubuntu:18.04:LTS	linux-oracle-5.4	—
linux-raspi	affected	Ubuntu:20.04:LTS	linux-raspi	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi-5.4	affected	Ubuntu:18.04:LTS	linux-raspi-5.4	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv-5.8	affected	Ubuntu:20.04:LTS	linux-riscv-5.8	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2020-27825

USNPoC exploitMEDIUM2020-12-11

CVEs:CVE-2020-27825

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-aws-5.0	affected	Ubuntu:18.04:LTS	linux-aws-5.0	—
linux-aws-5.3	affected	Ubuntu:18.04:LTS	linux-aws-5.3	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure-5.3	affected	Ubuntu:18.04:LTS	linux-azure-5.3	—
linux-azure-edge	affected	Ubuntu:18.04:LTS	linux-azure-edge	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp-5.3	affected	Ubuntu:18.04:LTS	linux-gcp-5.3	—
linux-gcp-edge	affected	Ubuntu:18.04:LTS	linux-gcp-edge	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-hwe-edge	affected	Ubuntu:16.04:LTS	linux-hwe-edge	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oracle-5.0	affected	Ubuntu:18.04:LTS	linux-oracle-5.0	—
linux-oracle-5.3	affected	Ubuntu:18.04:LTS	linux-oracle-5.3	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—

Upstream advisory

UBUNTU-CVE-2020-0465

USNPoC exploitMEDIUM2020-12-08

CVEs:CVE-2020-0465

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:18.04:LTS	linux	—
linux	affected	Ubuntu:20.04:LTS	linux	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:20.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws-5.0	affected	Ubuntu:18.04:LTS	linux-aws-5.0	—
linux-aws-5.3	affected	Ubuntu:18.04:LTS	linux-aws-5.3	—
linux-aws-5.4	affected	Ubuntu:18.04:LTS	linux-aws-5.4	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-aws-fips	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:20.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure-4.15	affected	Ubuntu:18.04:LTS	linux-azure-4.15	—
linux-azure-5.3	affected	Ubuntu:18.04:LTS	linux-azure-5.3	—
linux-azure-5.4	affected	Ubuntu:18.04:LTS	linux-azure-5.4	—
linux-azure-edge	affected	Ubuntu:18.04:LTS	linux-azure-edge	—
linux-azure-fde-5.15	affected	Ubuntu:Pro:20.04:LTS	linux-azure-fde-5.15	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-azure-fips	—
linux-dell300x	affected	Ubuntu:18.04:LTS	linux-dell300x	—
linux-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:20.04:LTS	linux-gcp	—
linux-gcp-4.15	affected	Ubuntu:18.04:LTS	linux-gcp-4.15	—
linux-gcp-5.3	affected	Ubuntu:18.04:LTS	linux-gcp-5.3	—
linux-gcp-5.4	affected	Ubuntu:18.04:LTS	linux-gcp-5.4	—
linux-gcp-edge	affected	Ubuntu:18.04:LTS	linux-gcp-edge	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-gcp-fips	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-gcp-fips	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-gcp-fips	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-gke-5.4	affected	Ubuntu:18.04:LTS	linux-gke-5.4	—
linux-gkeop-5.4	affected	Ubuntu:18.04:LTS	linux-gkeop-5.4	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe-5.4	affected	Ubuntu:18.04:LTS	linux-hwe-5.4	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-hwe-edge	affected	Ubuntu:16.04:LTS	linux-hwe-edge	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:20.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oem-5.6	affected	Ubuntu:20.04:LTS	linux-oem-5.6	—
linux-oracle	affected	Ubuntu:20.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-oracle-5.0	affected	Ubuntu:18.04:LTS	linux-oracle-5.0	—
linux-oracle-5.3	affected	Ubuntu:18.04:LTS	linux-oracle-5.3	—
linux-oracle-5.4	affected	Ubuntu:18.04:LTS	linux-oracle-5.4	—
linux-raspi	affected	Ubuntu:20.04:LTS	linux-raspi	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi-5.4	affected	Ubuntu:18.04:LTS	linux-raspi-5.4	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2020-0466

USNPoC exploitHIGH2020-12-08

CVEs:CVE-2020-0466

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:18.04:LTS	linux	—
linux	affected	Ubuntu:20.04:LTS	linux	—
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:20.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws-5.0	affected	Ubuntu:18.04:LTS	linux-aws-5.0	—
linux-aws-5.3	affected	Ubuntu:18.04:LTS	linux-aws-5.3	—
linux-aws-5.4	affected	Ubuntu:18.04:LTS	linux-aws-5.4	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-aws-fips	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:20.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-4.15	affected	Ubuntu:18.04:LTS	linux-azure-4.15	—
linux-azure-5.3	affected	Ubuntu:18.04:LTS	linux-azure-5.3	—
linux-azure-5.4	affected	Ubuntu:18.04:LTS	linux-azure-5.4	—
linux-azure-edge	affected	Ubuntu:18.04:LTS	linux-azure-edge	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-azure-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:20.04:LTS	linux-gcp	—
linux-gcp-4.15	affected	Ubuntu:18.04:LTS	linux-gcp-4.15	—
linux-gcp-5.3	affected	Ubuntu:18.04:LTS	linux-gcp-5.3	—
linux-gcp-5.4	affected	Ubuntu:18.04:LTS	linux-gcp-5.4	—
linux-gcp-edge	affected	Ubuntu:18.04:LTS	linux-gcp-edge	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-gcp-fips	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-gcp-fips	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-gcp-fips	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-gke-5.4	affected	Ubuntu:18.04:LTS	linux-gke-5.4	—
linux-gkeop-5.4	affected	Ubuntu:18.04:LTS	linux-gkeop-5.4	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe-5.4	affected	Ubuntu:18.04:LTS	linux-hwe-5.4	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-hwe-edge	affected	Ubuntu:16.04:LTS	linux-hwe-edge	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:20.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oem-5.6	affected	Ubuntu:20.04:LTS	linux-oem-5.6	—
linux-oracle	affected	Ubuntu:20.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-oracle-5.0	affected	Ubuntu:18.04:LTS	linux-oracle-5.0	—
linux-oracle-5.3	affected	Ubuntu:18.04:LTS	linux-oracle-5.3	—
linux-oracle-5.4	affected	Ubuntu:18.04:LTS	linux-oracle-5.4	—
linux-raspi	affected	Ubuntu:20.04:LTS	linux-raspi	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi-5.4	affected	Ubuntu:18.04:LTS	linux-raspi-5.4	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2020-35136

USNCoalition ESS < 30%HIGH2020-12-23

CVEs:CVE-2020-35136

Affected products

Product	Status	Vendor	Package	Ecosystem
dolibarr	affected	Ubuntu:16.04:LTS	dolibarr	—

Upstream advisory

UBUNTU-CVE-2020-29651

USNCoalition ESS < 30%HIGH2020-12-09

CVEs:CVE-2020-29651

Affected products

Product	Status	Vendor	Package	Ecosystem
python-py	affected	Ubuntu:18.04:LTS	python-py	—
python-py	affected	Ubuntu:16.04:LTS	python-py	—
python-py	affected	Ubuntu:20.04:LTS	python-py	—

Upstream advisory

UBUNTU-CVE-2020-28282

USNCoalition ESS < 30%CRITICAL2020-12-29

CVEs:CVE-2020-28282

Affected products

Product	Status	Vendor	Package	Ecosystem
node-getobject	affected	Ubuntu:20.04:LTS	node-getobject	—
node-getobject	affected	Ubuntu:16.04:LTS	node-getobject	—
node-getobject	affected	Ubuntu:18.04:LTS	node-getobject	—

Upstream advisory

USN-4666-2

USNCoalition ESS < 30%CRITICAL2020-12-11

lxml vulnerability

CVEs:CVE-2020-27783

Affected products

Product	Status	Vendor	Package	Ecosystem
lxml	affected	Ubuntu:16.04:LTS	lxml	—
lxml	affected	Ubuntu:20.04:LTS	lxml	—
lxml	affected	Ubuntu:18.04:LTS	lxml	—
lxml	affected	Ubuntu:Pro:14.04:LTS	lxml	—

Upstream advisory

USN-4666-1

USNCoalition ESS < 30%CRITICAL2020-12-09

lxml vulnerability

CVEs:CVE-2020-27783

Affected products

Product	Status	Vendor	Package	Ecosystem
lxml	affected	Ubuntu:18.04:LTS	lxml	—
lxml	affected	Ubuntu:16.04:LTS	lxml	—
lxml	affected	Ubuntu:20.04:LTS	lxml	—
lxml	affected	Ubuntu:Pro:14.04:LTS	lxml	—

Upstream advisory

UBUNTU-CVE-2020-27783

USNCoalition ESS < 30%MEDIUM2020-12-03

CVEs:CVE-2020-27783

Affected products

Product	Status	Vendor	Package	Ecosystem
lxml	affected	Ubuntu:16.04:LTS	lxml	—
lxml	affected	Ubuntu:20.04:LTS	lxml	—
lxml	affected	Ubuntu:18.04:LTS	lxml	—
lxml	affected	Ubuntu:Pro:14.04:LTS	lxml	—

Upstream advisory

UBUNTU-CVE-2020-29600

USNCoalition ESS < 30%CRITICAL2020-12-07

CVEs:CVE-2020-29600

Affected products

Product	Status	Vendor	Package	Ecosystem
awstats	affected	Ubuntu:Pro:16.04:LTS	awstats	—
awstats	affected	Ubuntu:20.04:LTS	awstats	—
awstats	affected	Ubuntu:18.04:LTS	awstats	—

Upstream advisory

UBUNTU-CVE-2020-35605

USNCoalition ESS < 30%CRITICAL2020-12-21

CVEs:CVE-2020-35605

Affected products

Product	Status	Vendor	Package	Ecosystem
kitty	affected	Ubuntu:20.04:LTS	kitty	—

Upstream advisory

UBUNTU-CVE-2020-35680

USNCoalition ESS < 30%HIGH2020-12-24

CVEs:CVE-2020-35680

Affected products

Product	Status	Vendor	Package	Ecosystem
opensmtpd	affected	Ubuntu:25.10	opensmtpd	—
opensmtpd	affected	Ubuntu:Pro:14.04:LTS	opensmtpd	—
opensmtpd	affected	Ubuntu:20.04:LTS	opensmtpd	—
opensmtpd	affected	Ubuntu:24.04:LTS	opensmtpd	—
opensmtpd	affected	Ubuntu:22.04:LTS	opensmtpd	—

Upstream advisory

UBUNTU-CVE-2020-29396

USNCoalition ESS < 30%CRITICAL2020-12-22

CVEs:CVE-2020-29396

Affected products

Product	Status	Vendor	Package	Ecosystem
odoo	affected	Ubuntu:25.10	odoo	—
odoo	affected	Ubuntu:24.04:LTS	odoo	—
odoo	affected	Ubuntu:22.04:LTS	odoo	—

Upstream advisory

UBUNTU-CVE-2020-35679

USNCoalition ESS < 30%HIGH2020-12-24

CVEs:CVE-2020-35679

Affected products

Product	Status	Vendor	Package	Ecosystem
opensmtpd	affected	Ubuntu:25.10	opensmtpd	—
opensmtpd	affected	Ubuntu:Pro:14.04:LTS	opensmtpd	—
opensmtpd	affected	Ubuntu:20.04:LTS	opensmtpd	—
opensmtpd	affected	Ubuntu:24.04:LTS	opensmtpd	—
opensmtpd	affected	Ubuntu:22.04:LTS	opensmtpd	—

Upstream advisory

UBUNTU-CVE-2020-29529

USNCoalition ESS < 30%HIGH2020-12-03

CVEs:CVE-2020-29529

Affected products

Product	Status	Vendor	Package	Ecosystem
golang-github-hashicorp-go-slug	affected	Ubuntu:22.04:LTS	golang-github-hashicorp-go-slug	—

Upstream advisory

UBUNTU-CVE-2020-36328

USNCoalition ESS < 30%CRITICAL2020-12-31

CVEs:CVE-2020-36328

Affected products

Product	Status	Vendor	Package	Ecosystem
libwebp	affected	Ubuntu:18.04:LTS	libwebp	—
libwebp	affected	Ubuntu:Pro:14.04:LTS	libwebp	—
libwebp	affected	Ubuntu:Pro:16.04:LTS	libwebp	—
libwebp	affected	Ubuntu:20.04:LTS	libwebp	—

Upstream advisory

UBUNTU-CVE-2020-35573

USNCoalition ESS < 30%HIGH2020-12-20

CVEs:CVE-2020-35573

Affected products

Product	Status	Vendor	Package	Ecosystem
postsrsd	affected	Ubuntu:16.04:LTS	postsrsd	—
postsrsd	affected	Ubuntu:20.04:LTS	postsrsd	—
postsrsd	affected	Ubuntu:22.04:LTS	postsrsd	—
postsrsd	affected	Ubuntu:18.04:LTS	postsrsd	—

Upstream advisory

UBUNTU-CVE-2020-26257

USNCoalition ESS < 30%MEDIUM2020-12-09

CVEs:CVE-2020-26257

Affected products

Product	Status	Vendor	Package	Ecosystem
matrix-synapse	affected	Ubuntu:Pro:20.04:LTS	matrix-synapse	—
matrix-synapse	affected	Ubuntu:Pro:18.04:LTS	matrix-synapse	—
matrix-synapse	affected	Ubuntu:Pro:22.04:LTS	matrix-synapse	—

Upstream advisory

UBUNTU-CVE-2020-35502

USNCoalition ESS < 30%HIGH2020-12-31

CVEs:CVE-2020-35502

Affected products

Product	Status	Vendor	Package	Ecosystem
privoxy	affected	Ubuntu:20.04:LTS	privoxy	—
privoxy	affected	Ubuntu:16.04:LTS	privoxy	—
privoxy	affected	Ubuntu:18.04:LTS	privoxy	—
privoxy	affected	Ubuntu:Pro:14.04:LTS	privoxy	—

Upstream advisory

UBUNTU-CVE-2020-36329

USNCoalition ESS < 30%CRITICAL2020-12-31

CVEs:CVE-2020-36329

Affected products

Product	Status	Vendor	Package	Ecosystem
libwebp	affected	Ubuntu:18.04:LTS	libwebp	—
libwebp	affected	Ubuntu:Pro:14.04:LTS	libwebp	—
libwebp	affected	Ubuntu:Pro:16.04:LTS	libwebp	—
libwebp	affected	Ubuntu:20.04:LTS	libwebp	—

Upstream advisory

UBUNTU-CVE-2020-36331

USNCoalition ESS < 30%CRITICAL2020-12-31

CVEs:CVE-2020-36331

Affected products

Product	Status	Vendor	Package	Ecosystem
libwebp	affected	Ubuntu:18.04:LTS	libwebp	—
libwebp	affected	Ubuntu:Pro:14.04:LTS	libwebp	—
libwebp	affected	Ubuntu:Pro:16.04:LTS	libwebp	—
libwebp	affected	Ubuntu:20.04:LTS	libwebp	—

Upstream advisory

UBUNTU-CVE-2020-35269

USNCoalition ESS < 30%HIGH2020-12-23

CVEs:CVE-2020-35269

Affected products

Product	Status	Vendor	Package	Ecosystem
nagios4	affected	Ubuntu:22.04:LTS	nagios4	—
nagios4	affected	Ubuntu:24.04:LTS	nagios4	—
nagios4	affected	Ubuntu:25.10	nagios4	—
nagios4	affected	Ubuntu:20.04:LTS	nagios4	—

Upstream advisory

UBUNTU-CVE-2020-36330

USNCoalition ESS < 30%CRITICAL2020-12-31

CVEs:CVE-2020-36330

Affected products

Product	Status	Vendor	Package	Ecosystem
libwebp	affected	Ubuntu:18.04:LTS	libwebp	—
libwebp	affected	Ubuntu:Pro:14.04:LTS	libwebp	—
libwebp	affected	Ubuntu:Pro:16.04:LTS	libwebp	—
libwebp	affected	Ubuntu:20.04:LTS	libwebp	—

Upstream advisory

UBUNTU-CVE-2020-35176

USNCoalition ESS < 30%MEDIUM2020-12-12

CVEs:CVE-2020-35176

Affected products

Product	Status	Vendor	Package	Ecosystem
awstats	affected	Ubuntu:Pro:16.04:LTS	awstats	—
awstats	affected	Ubuntu:20.04:LTS	awstats	—
awstats	affected	Ubuntu:18.04:LTS	awstats	—

Upstream advisory

UBUNTU-CVE-2020-27813

USNCoalition ESS < 30%HIGH2020-12-02

CVEs:CVE-2020-27813

Affected products

Product	Status	Vendor	Package	Ecosystem
golang-websocket	affected	Ubuntu:Pro:18.04:LTS	golang-websocket	—
golang-websocket	affected	Ubuntu:20.04:LTS	golang-websocket	—
golang-websocket	affected	Ubuntu:Pro:16.04:LTS	golang-websocket	—
golang-websocket	affected	Ubuntu:22.04:LTS	golang-websocket	—

Upstream advisory

UBUNTU-CVE-2020-35376

USNCoalition ESS < 30%HIGH2020-12-26

CVEs:CVE-2020-35376

Affected products

Product	Status	Vendor	Package	Ecosystem
ipe	affected	Ubuntu:16.04:LTS	ipe	—
ipe	affected	Ubuntu:25.10	ipe	—
ipe	affected	Ubuntu:24.04:LTS	ipe	—
ipe	affected	Ubuntu:22.04:LTS	ipe	—
ipe	affected	Ubuntu:20.04:LTS	ipe	—
ipe	affected	Ubuntu:18.04:LTS	ipe	—

Upstream advisory

UBUNTU-CVE-2020-29510

USNCoalition ESS < 30%CRITICAL2020-12-14

CVEs:CVE-2020-29510

Affected products

Product	Status	Vendor	Package	Ecosystem
golang-1.10	affected	Ubuntu:14.04:LTS	golang-1.10	—
golang-1.10	affected	Ubuntu:18.04:LTS	golang-1.10	—
golang-1.10	affected	Ubuntu:16.04:LTS	golang-1.10	—
golang-1.13	affected	Ubuntu:20.04:LTS	golang-1.13	—
golang-1.13	affected	Ubuntu:Pro:22.04:LTS	golang-1.13	—
golang-1.13	affected	Ubuntu:Pro:16.04:LTS	golang-1.13	—
golang-1.13	affected	Ubuntu:Pro:18.04:LTS	golang-1.13	—
golang-1.14	affected	Ubuntu:20.04:LTS	golang-1.14	—
golang-1.6	affected	Ubuntu:16.04:LTS	golang-1.6	—
golang-1.8	affected	Ubuntu:18.04:LTS	golang-1.8	—
golang-1.9	affected	Ubuntu:18.04:LTS	golang-1.9	—

Upstream advisory

UBUNTU-CVE-2020-36323

USNCoalition ESS < 30%HIGH2020-12-23

CVEs:CVE-2020-36323

Affected products

Product	Status	Vendor	Package	Ecosystem
rustc	affected	Ubuntu:14.04:LTS	rustc	—
rustc	affected	Ubuntu:16.04:LTS	rustc	—
rustc	affected	Ubuntu:20.04:LTS	rustc	—
rustc	affected	Ubuntu:22.04:LTS	rustc	—

Upstream advisory

UBUNTU-CVE-2020-36332

USNCoalition ESS < 30%HIGH2020-12-31

CVEs:CVE-2020-36332

Affected products

Product	Status	Vendor	Package	Ecosystem
libwebp	affected	Ubuntu:18.04:LTS	libwebp	—
libwebp	affected	Ubuntu:Pro:16.04:LTS	libwebp	—
libwebp	affected	Ubuntu:20.04:LTS	libwebp	—

Upstream advisory

UBUNTU-CVE-2020-29668

USNCoalition ESS < 30%LOW2020-12-10

CVEs:CVE-2020-29668

Affected products

Product	Status	Vendor	Package	Ecosystem
sympa	affected	Ubuntu:Pro:18.04:LTS	sympa	—
sympa	affected	Ubuntu:Pro:16.04:LTS	sympa	—
sympa	affected	Ubuntu:Pro:20.04:LTS	sympa	—

Upstream advisory

UBUNTU-CVE-2020-35523

USNCoalition ESS < 30%HIGH2020-12-31

CVEs:CVE-2020-35523

Affected products

Product	Status	Vendor	Package	Ecosystem
tiff	affected	Ubuntu:18.04:LTS	tiff	—
tiff	affected	Ubuntu:16.04:LTS	tiff	—
tiff	affected	Ubuntu:20.04:LTS	tiff	—
tiff	affected	Ubuntu:Pro:14.04:LTS	tiff	—

Upstream advisory

UBUNTU-CVE-2021-2022

USNCoalition ESS < 30%MEDIUM2020-12-15

CVEs:CVE-2021-2022

Affected products

Product	Status	Vendor	Package	Ecosystem
mariadb-10.0	affected	Ubuntu:16.04:LTS	mariadb-10.0	—
mariadb-10.1	affected	Ubuntu:18.04:LTS	mariadb-10.1	—
mariadb-10.3	affected	Ubuntu:20.04:LTS	mariadb-10.3	—
mysql-5.5	affected	Ubuntu:14.04:LTS	mysql-5.5	—
mysql-5.7	affected	Ubuntu:16.04:LTS	mysql-5.7	—
mysql-5.7	affected	Ubuntu:18.04:LTS	mysql-5.7	—
mysql-8.0	affected	Ubuntu:20.04:LTS	mysql-8.0	—
percona-server-5.6	affected	Ubuntu:16.04:LTS	percona-server-5.6	—
percona-xtradb-cluster-5.6	affected	Ubuntu:16.04:LTS	percona-xtradb-cluster-5.6	—

Upstream advisory

USN-4671-1

USNCoalition ESS < 30%HIGH2020-12-15

firefox vulnerabilities

CVEs:CVE-2020-16042 CVE-2020-26971 CVE-2020-26972 CVE-2020-26973 CVE-2020-26974 CVE-2020-26976 CVE-2020-26978 CVE-2020-26979 CVE-2020-35111 CVE-2020-35113 CVE-2020-35114

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—
firefox	affected	Ubuntu:20.04:LTS	firefox	—

Upstream advisory

UBUNTU-CVE-2020-26971

USNCoalition ESS < 30%HIGH2020-12-15

CVEs:CVE-2020-26971

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:18.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:20.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—
mozjs68	affected	Ubuntu:20.04:LTS	mozjs68	—
mozjs78	affected	Ubuntu:22.04:LTS	mozjs78	—
thunderbird	affected	Ubuntu:20.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2020-35524

USNCoalition ESS < 30%HIGH2020-12-31

CVEs:CVE-2020-35524

Affected products

Product	Status	Vendor	Package	Ecosystem
tiff	affected	Ubuntu:18.04:LTS	tiff	—
tiff	affected	Ubuntu:16.04:LTS	tiff	—
tiff	affected	Ubuntu:20.04:LTS	tiff	—
tiff	affected	Ubuntu:Pro:14.04:LTS	tiff	—

Upstream advisory

UBUNTU-CVE-2020-27843

USNCoalition ESS < 30%MEDIUM2020-12-29

CVEs:CVE-2020-27843

Affected products

Product	Status	Vendor	Package	Ecosystem
blender	affected	Ubuntu:18.04:LTS	blender	—
blender	affected	Ubuntu:16.04:LTS	blender	—
blender	affected	Ubuntu:24.04:LTS	blender	—
blender	affected	Ubuntu:25.10	blender	—
blender	affected	Ubuntu:22.04:LTS	blender	—
blender	affected	Ubuntu:20.04:LTS	blender	—
ghostscript	affected	Ubuntu:18.04:LTS	ghostscript	—
ghostscript	affected	Ubuntu:16.04:LTS	ghostscript	—
insighttoolkit4	affected	Ubuntu:20.04:LTS	insighttoolkit4	—
insighttoolkit4	affected	Ubuntu:22.04:LTS	insighttoolkit4	—
insighttoolkit4	affected	Ubuntu:18.04:LTS	insighttoolkit4	—
insighttoolkit4	affected	Ubuntu:16.04:LTS	insighttoolkit4	—
openjpeg	affected	Ubuntu:Pro:16.04:LTS	openjpeg	—
openjpeg	affected	Ubuntu:14.04:LTS	openjpeg	—
openjpeg2	affected	Ubuntu:20.04:LTS	openjpeg2	—
openjpeg2	affected	Ubuntu:Pro:16.04:LTS	openjpeg2	—
openjpeg2	affected	Ubuntu:Pro:18.04:LTS	openjpeg2	—
openjpeg2	affected	Ubuntu:22.04:LTS	openjpeg2	—
qtwebengine-opensource-src	affected	Ubuntu:25.10	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:18.04:LTS	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:22.04:LTS	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:24.04:LTS	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:20.04:LTS	qtwebengine-opensource-src	—
texmaker	affected	Ubuntu:16.04:LTS	texmaker	—
texmaker	affected	Ubuntu:25.10	texmaker	—
texmaker	affected	Ubuntu:24.04:LTS	texmaker	—
texmaker	affected	Ubuntu:18.04:LTS	texmaker	—
texmaker	affected	Ubuntu:20.04:LTS	texmaker	—
texmaker	affected	Ubuntu:22.04:LTS	texmaker	—

Upstream advisory

UBUNTU-CVE-2020-36318

USNCoalition ESS < 30%CRITICAL2020-12-07

CVEs:CVE-2020-36318

Affected products

Product	Status	Vendor	Package	Ecosystem
rustc	affected	Ubuntu:14.04:LTS	rustc	—
rustc	affected	Ubuntu:16.04:LTS	rustc	—

Upstream advisory

UBUNTU-CVE-2020-35380

USNCoalition ESS < 30%HIGH2020-12-15

CVEs:CVE-2020-35380

Affected products

Product	Status	Vendor	Package	Ecosystem
golang-github-tidwall-gjson	affected	Ubuntu:20.04:LTS	golang-github-tidwall-gjson	—
golang-github-tidwall-gjson	affected	Ubuntu:22.04:LTS	golang-github-tidwall-gjson	—
golang-github-tidwall-gjson	affected	Ubuntu:25.10	golang-github-tidwall-gjson	—
golang-github-tidwall-gjson	affected	Ubuntu:24.04:LTS	golang-github-tidwall-gjson	—

Upstream advisory

UBUNTU-CVE-2020-9947

USNCoalition ESS < 30%HIGH2020-12-03

CVEs:CVE-2020-9947

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
webkit2gtk	affected	Ubuntu:20.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:16.04:LTS	webkit2gtk	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—
wpewebkit	affected	Ubuntu:20.04:LTS	wpewebkit	—
wpewebkit	affected	Ubuntu:22.04:LTS	wpewebkit	—

Upstream advisory

UBUNTU-CVE-2020-35711

USNCoalition ESS < 30%HIGH2020-12-10

CVEs:CVE-2020-35711

Affected products

Product	Status	Vendor	Package	Ecosystem
rust-arc-swap	affected	Ubuntu:20.04:LTS	rust-arc-swap	—
rust-arc-swap	affected	Ubuntu:25.10	rust-arc-swap	—
rust-arc-swap	affected	Ubuntu:24.04:LTS	rust-arc-swap	—
rust-arc-swap	affected	Ubuntu:22.04:LTS	rust-arc-swap	—

Upstream advisory

UBUNTU-CVE-2020-35475

USNCoalition ESS < 30%HIGH2020-12-18

CVEs:CVE-2020-35475

Affected products

Product	Status	Vendor	Package	Ecosystem
mediawiki	affected	Ubuntu:20.04:LTS	mediawiki	—
mediawiki	affected	Ubuntu:24.04:LTS	mediawiki	—
mediawiki	affected	Ubuntu:25.10	mediawiki	—
mediawiki	affected	Ubuntu:22.04:LTS	mediawiki	—
mediawiki	affected	Ubuntu:18.04:LTS	mediawiki	—

Upstream advisory

UBUNTU-CVE-2020-26976

USNCoalition ESS < 30%MEDIUM2020-12-15

CVEs:CVE-2020-26976

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:18.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:20.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—
mozjs68	affected	Ubuntu:20.04:LTS	mozjs68	—
mozjs78	affected	Ubuntu:22.04:LTS	mozjs78	—
thunderbird	affected	Ubuntu:20.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2020-26973

USNCoalition ESS < 30%HIGH2020-12-15

CVEs:CVE-2020-26973

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:18.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:20.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—
mozjs68	affected	Ubuntu:20.04:LTS	mozjs68	—
mozjs78	affected	Ubuntu:22.04:LTS	mozjs78	—
thunderbird	affected	Ubuntu:20.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2020-35480

USNCoalition ESS < 30%MEDIUM2020-12-18

CVEs:CVE-2020-35480

Affected products

Product	Status	Vendor	Package	Ecosystem
mediawiki	affected	Ubuntu:20.04:LTS	mediawiki	—
mediawiki	affected	Ubuntu:24.04:LTS	mediawiki	—
mediawiki	affected	Ubuntu:25.10	mediawiki	—
mediawiki	affected	Ubuntu:22.04:LTS	mediawiki	—
mediawiki	affected	Ubuntu:18.04:LTS	mediawiki	—

Upstream advisory

UBUNTU-CVE-2020-35477

USNCoalition ESS < 30%MEDIUM2020-12-18

CVEs:CVE-2020-35477

Affected products

Product	Status	Vendor	Package	Ecosystem
mediawiki	affected	Ubuntu:20.04:LTS	mediawiki	—
mediawiki	affected	Ubuntu:24.04:LTS	mediawiki	—
mediawiki	affected	Ubuntu:25.10	mediawiki	—
mediawiki	affected	Ubuntu:22.04:LTS	mediawiki	—
mediawiki	affected	Ubuntu:18.04:LTS	mediawiki	—

Upstream advisory

UBUNTU-CVE-2020-26263

USNCoalition ESS < 30%HIGH2020-12-21

CVEs:CVE-2020-26263

Affected products

Product	Status	Vendor	Package	Ecosystem
tlslite-ng	affected	Ubuntu:18.04:LTS	tlslite-ng	—
tlslite-ng	affected	Ubuntu:16.04:LTS	tlslite-ng	—

Upstream advisory

USN-4663-1

USNCoalition ESS < 30%MEDIUM2020-12-08

gdk-pixbuf vulnerability

CVEs:CVE-2020-29385

Affected products

Product	Status	Vendor	Package	Ecosystem
gdk-pixbuf	affected	Ubuntu:20.04:LTS	gdk-pixbuf	—

Upstream advisory

UBUNTU-CVE-2020-29385

USNCoalition ESS < 30%MEDIUM2020-12-08

CVEs:CVE-2020-29385

Affected products

Product	Status	Vendor	Package	Ecosystem
gdk-pixbuf	affected	Ubuntu:20.04:LTS	gdk-pixbuf	—

Upstream advisory

UBUNTU-CVE-2020-35479

USNCoalition ESS < 30%MEDIUM2020-12-18

CVEs:CVE-2020-35479

Affected products

Product	Status	Vendor	Package	Ecosystem
mediawiki	affected	Ubuntu:20.04:LTS	mediawiki	—
mediawiki	affected	Ubuntu:24.04:LTS	mediawiki	—
mediawiki	affected	Ubuntu:25.10	mediawiki	—
mediawiki	affected	Ubuntu:22.04:LTS	mediawiki	—
mediawiki	affected	Ubuntu:18.04:LTS	mediawiki	—

Upstream advisory

UBUNTU-CVE-2020-26974

USNCoalition ESS < 30%HIGH2020-12-15

CVEs:CVE-2020-26974

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:18.04:LTS	firefox	—
firefox	affected	Ubuntu:20.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
mozjs68	affected	Ubuntu:20.04:LTS	mozjs68	—
mozjs78	affected	Ubuntu:22.04:LTS	mozjs78	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:20.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2020-27845

USNCoalition ESS < 30%MEDIUM2020-12-29

CVEs:CVE-2020-27845

Affected products

Product	Status	Vendor	Package	Ecosystem
blender	affected	Ubuntu:18.04:LTS	blender	—
ghostscript	affected	Ubuntu:16.04:LTS	ghostscript	—
ghostscript	affected	Ubuntu:18.04:LTS	ghostscript	—
insighttoolkit4	affected	Ubuntu:18.04:LTS	insighttoolkit4	—
insighttoolkit4	affected	Ubuntu:22.04:LTS	insighttoolkit4	—
insighttoolkit4	affected	Ubuntu:20.04:LTS	insighttoolkit4	—
insighttoolkit4	affected	Ubuntu:16.04:LTS	insighttoolkit4	—
openjpeg	affected	Ubuntu:14.04:LTS	openjpeg	—
openjpeg	affected	Ubuntu:Pro:16.04:LTS	openjpeg	—
openjpeg2	affected	Ubuntu:16.04:LTS	openjpeg2	—
openjpeg2	affected	Ubuntu:18.04:LTS	openjpeg2	—
openjpeg2	affected	Ubuntu:20.04:LTS	openjpeg2	—
openjpeg2	affected	Ubuntu:22.04:LTS	openjpeg2	—
qtwebengine-opensource-src	affected	Ubuntu:22.04:LTS	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:24.04:LTS	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:25.10	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:18.04:LTS	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:20.04:LTS	qtwebengine-opensource-src	—
texmaker	affected	Ubuntu:25.10	texmaker	—
texmaker	affected	Ubuntu:20.04:LTS	texmaker	—
texmaker	affected	Ubuntu:18.04:LTS	texmaker	—
texmaker	affected	Ubuntu:22.04:LTS	texmaker	—
texmaker	affected	Ubuntu:24.04:LTS	texmaker	—

Upstream advisory

UBUNTU-CVE-2020-29565

USNCoalition ESS < 30%MEDIUM2020-12-04

CVEs:CVE-2020-29565

Affected products

Product	Status	Vendor	Package	Ecosystem
horizon	affected	Ubuntu:18.04:LTS	horizon	—
horizon	affected	Ubuntu:16.04:LTS	horizon	—
horizon	affected	Ubuntu:20.04:LTS	horizon	—

Upstream advisory

UBUNTU-CVE-2020-35678

USNCoalition ESS < 30%MEDIUM2020-12-27

CVEs:CVE-2020-35678

Affected products

Product	Status	Vendor	Package	Ecosystem
python-autobahn	affected	Ubuntu:16.04:LTS	python-autobahn	—
python-autobahn	affected	Ubuntu:24.04:LTS	python-autobahn	—
python-autobahn	affected	Ubuntu:18.04:LTS	python-autobahn	—
python-autobahn	affected	Ubuntu:25.10	python-autobahn	—
python-autobahn	affected	Ubuntu:22.04:LTS	python-autobahn	—
python-autobahn	affected	Ubuntu:20.04:LTS	python-autobahn	—

Upstream advisory

UBUNTU-CVE-2020-35450

USNCoalition ESS < 30%HIGH2020-12-26

CVEs:CVE-2020-35450

Affected products

Product	Status	Vendor	Package	Ecosystem
gobby	affected	Ubuntu:18.04:LTS	gobby	—
gobby	affected	Ubuntu:16.04:LTS	gobby	—
gobby	affected	Ubuntu:20.04:LTS	gobby	—

Upstream advisory

UBUNTU-CVE-2020-27841

USNCoalition ESS < 30%MEDIUM2020-12-29

CVEs:CVE-2020-27841

Affected products

Product	Status	Vendor	Package	Ecosystem
ghostscript	affected	Ubuntu:16.04:LTS	ghostscript	—
ghostscript	affected	Ubuntu:18.04:LTS	ghostscript	—
openjpeg2	affected	Ubuntu:16.04:LTS	openjpeg2	—
openjpeg2	affected	Ubuntu:18.04:LTS	openjpeg2	—
openjpeg2	affected	Ubuntu:20.04:LTS	openjpeg2	—
openjpeg2	affected	Ubuntu:22.04:LTS	openjpeg2	—
qtwebengine-opensource-src	affected	Ubuntu:20.04:LTS	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:25.10	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:18.04:LTS	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:22.04:LTS	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:24.04:LTS	qtwebengine-opensource-src	—

Upstream advisory

UBUNTU-CVE-2020-27828

USNCoalition ESS < 30%HIGH2020-12-11

CVEs:CVE-2020-27828

Affected products

Product	Status	Vendor	Package	Ecosystem
jasper	affected	Ubuntu:16.04:LTS	jasper	—

Upstream advisory

UBUNTU-CVE-2020-26275

USNCoalition ESS < 30%MEDIUM2020-12-21

CVEs:CVE-2020-26275

Affected products

Product	Status	Vendor	Package	Ecosystem
jupyter-server	affected	Ubuntu:22.04:LTS	jupyter-server	—

Upstream advisory

UBUNTU-CVE-2020-35478

USNCoalition ESS < 30%MEDIUM2020-12-18

CVEs:CVE-2020-35478

Affected products

Product	Status	Vendor	Package	Ecosystem
mediawiki	affected	Ubuntu:20.04:LTS	mediawiki	—
mediawiki	affected	Ubuntu:24.04:LTS	mediawiki	—
mediawiki	affected	Ubuntu:25.10	mediawiki	—
mediawiki	affected	Ubuntu:22.04:LTS	mediawiki	—
mediawiki	affected	Ubuntu:18.04:LTS	mediawiki	—

Upstream advisory

UBUNTU-CVE-2020-35113

USNCoalition ESS < 30%HIGH2020-12-15

CVEs:CVE-2020-35113

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:18.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:20.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—
mozjs68	affected	Ubuntu:20.04:LTS	mozjs68	—
mozjs78	affected	Ubuntu:22.04:LTS	mozjs78	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:20.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2020-26972

USNCoalition ESS < 30%CRITICAL2020-12-15

CVEs:CVE-2020-26972

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:20.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
mozjs68	affected	Ubuntu:20.04:LTS	mozjs68	—
mozjs78	affected	Ubuntu:22.04:LTS	mozjs78	—

Upstream advisory

UBUNTU-CVE-2020-26978

USNCoalition ESS < 30%MEDIUM2020-12-15

CVEs:CVE-2020-26978

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:20.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—
mozjs68	affected	Ubuntu:20.04:LTS	mozjs68	—
mozjs78	affected	Ubuntu:22.04:LTS	mozjs78	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:20.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2020-35112

USNCoalition ESS < 30%HIGH2020-12-16

CVEs:CVE-2020-35112

Affected products

Product	Status	Vendor	Package	Ecosystem
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
mozjs68	affected	Ubuntu:20.04:LTS	mozjs68	—
mozjs78	affected	Ubuntu:22.04:LTS	mozjs78	—

Upstream advisory

UBUNTU-CVE-2020-35132

USNCoalition ESS < 30%MEDIUM2020-12-11

CVEs:CVE-2020-35132

Affected products

Product	Status	Vendor	Package	Ecosystem
phpldapadmin	affected	Ubuntu:22.04:LTS	phpldapadmin	—
phpldapadmin	affected	Ubuntu:20.04:LTS	phpldapadmin	—
phpldapadmin	affected	Ubuntu:25.10	phpldapadmin	—
phpldapadmin	affected	Ubuntu:24.04:LTS	phpldapadmin	—
phpldapadmin	affected	Ubuntu:16.04:LTS	phpldapadmin	—
phpldapadmin	affected	Ubuntu:18.04:LTS	phpldapadmin	—

Upstream advisory

UBUNTU-CVE-2020-26970

USNCoalition ESS < 30%HIGH2020-12-02

CVEs:CVE-2020-26970

Affected products

Product	Status	Vendor	Package	Ecosystem
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:20.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2020-29657

USNCoalition ESS < 30%CRITICAL2020-12-09

CVEs:CVE-2020-29657

Affected products

Product	Status	Vendor	Package	Ecosystem
iotjs	affected	Ubuntu:18.04:LTS	iotjs	—
iotjs	affected	Ubuntu:22.04:LTS	iotjs	—

Upstream advisory

UBUNTU-CVE-2020-27766

USNCoalition ESS < 30%HIGH2020-12-04

CVEs:CVE-2020-27766

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:Pro:16.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:20.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2020-35738

USNCoalition ESS < 30%MEDIUM2020-12-28

CVEs:CVE-2020-35738

Affected products

Product	Status	Vendor	Package	Ecosystem
wavpack	affected	Ubuntu:20.04:LTS	wavpack	—
wavpack	affected	Ubuntu:18.04:LTS	wavpack	—

Upstream advisory

UBUNTU-CVE-2020-27771

USNCoalition ESS < 30%LOW2020-12-04

CVEs:CVE-2020-27771

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:Pro:16.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:20.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2020-35111

USNCoalition ESS < 30%MEDIUM2020-12-15

CVEs:CVE-2020-35111

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:20.04:LTS	firefox	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
mozjs68	affected	Ubuntu:20.04:LTS	mozjs68	—
mozjs78	affected	Ubuntu:22.04:LTS	mozjs78	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:20.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2020-27764

USNCoalition ESS < 30%LOW2020-12-03

CVEs:CVE-2020-27764

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:Pro:16.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:20.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2020-27759

USNCoalition ESS < 30%LOW2020-12-03

CVEs:CVE-2020-27759

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:Pro:16.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:20.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2020-27772

USNCoalition ESS < 30%LOW2020-12-04

CVEs:CVE-2020-27772

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:Pro:16.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:20.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2020-27774

USNCoalition ESS < 30%LOW2020-12-04

CVEs:CVE-2020-27774

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:Pro:16.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:20.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2020-27767

USNCoalition ESS < 30%LOW2020-12-04

CVEs:CVE-2020-27767

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:20.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:Pro:16.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2020-27754

USNCoalition ESS < 30%LOW2020-12-06

CVEs:CVE-2020-27754

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:Pro:16.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:20.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2020-27758

USNCoalition ESS < 30%LOW2020-12-06

CVEs:CVE-2020-27758

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:Pro:16.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:20.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2020-27751

USNCoalition ESS < 30%LOW2020-12-06

CVEs:CVE-2020-27751

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:Pro:16.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:20.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:Pro:14.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2020-27823

USNCoalition ESS < 30%HIGH2020-12-09

CVEs:CVE-2020-27823

Affected products

Product	Status	Vendor	Package	Ecosystem
blender	affected	Ubuntu:16.04:LTS	blender	—
blender	affected	Ubuntu:25.10	blender	—
blender	affected	Ubuntu:24.04:LTS	blender	—
blender	affected	Ubuntu:20.04:LTS	blender	—
blender	affected	Ubuntu:18.04:LTS	blender	—
blender	affected	Ubuntu:22.04:LTS	blender	—
insighttoolkit4	affected	Ubuntu:18.04:LTS	insighttoolkit4	—
insighttoolkit4	affected	Ubuntu:22.04:LTS	insighttoolkit4	—
insighttoolkit4	affected	Ubuntu:16.04:LTS	insighttoolkit4	—
insighttoolkit4	affected	Ubuntu:20.04:LTS	insighttoolkit4	—
openjpeg2	affected	Ubuntu:22.04:LTS	openjpeg2	—
openjpeg2	affected	Ubuntu:16.04:LTS	openjpeg2	—
openjpeg2	affected	Ubuntu:20.04:LTS	openjpeg2	—
openjpeg2	affected	Ubuntu:18.04:LTS	openjpeg2	—
qtwebengine-opensource-src	affected	Ubuntu:20.04:LTS	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:24.04:LTS	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:25.10	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:18.04:LTS	qtwebengine-opensource-src	—
qtwebengine-opensource-src	affected	Ubuntu:22.04:LTS	qtwebengine-opensource-src	—
texmaker	affected	Ubuntu:20.04:LTS	texmaker	—
texmaker	affected	Ubuntu:25.10	texmaker	—
texmaker	affected	Ubuntu:18.04:LTS	texmaker	—
texmaker	affected	Ubuntu:16.04:LTS	texmaker	—
texmaker	affected	Ubuntu:22.04:LTS	texmaker	—
texmaker	affected	Ubuntu:24.04:LTS	texmaker	—

Upstream advisory

UBUNTU-CVE-2020-27762

USNCoalition ESS < 30%MEDIUM2020-12-03

CVEs:CVE-2020-27762

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:Pro:16.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:20.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2020-27761

USNCoalition ESS < 30%LOW2020-12-03

CVEs:CVE-2020-27761

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:Pro:16.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:20.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2020-27752

USNCoalition ESS < 30%HIGH2020-12-06

CVEs:CVE-2020-27752

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:Pro:16.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:Pro:20.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:Pro:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:Pro:14.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2020-27757

USNCoalition ESS < 30%LOW2020-12-06

CVEs:CVE-2020-27757

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:Pro:16.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:20.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:Pro:14.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2020-35474

USNCoalition ESS < 30%MEDIUM2020-12-18

CVEs:CVE-2020-35474

Affected products

Product	Status	Vendor	Package	Ecosystem
mediawiki	affected	Ubuntu:20.04:LTS	mediawiki	—
mediawiki	affected	Ubuntu:24.04:LTS	mediawiki	—
mediawiki	affected	Ubuntu:25.10	mediawiki	—
mediawiki	affected	Ubuntu:22.04:LTS	mediawiki	—
mediawiki	affected	Ubuntu:18.04:LTS	mediawiki	—

Upstream advisory

UBUNTU-CVE-2020-35114

USNCoalition ESS < 30%HIGH2020-12-15

CVEs:CVE-2020-35114

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:18.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:20.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—
mozjs68	affected	Ubuntu:20.04:LTS	mozjs68	—
mozjs78	affected	Ubuntu:22.04:LTS	mozjs78	—

Upstream advisory

UBUNTU-CVE-2020-27773

USNCoalition ESS < 30%LOW2020-12-04

CVEs:CVE-2020-27773

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:Pro:16.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:20.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2020-27763

USNCoalition ESS < 30%LOW2020-12-03

CVEs:CVE-2020-27763

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:Pro:16.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:20.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2020-27776

USNCoalition ESS < 30%LOW2020-12-04

CVEs:CVE-2020-27776

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:Pro:16.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:20.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2020-27753

USNCoalition ESS < 30%MEDIUM2020-12-06

CVEs:CVE-2020-27753

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:Pro:16.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:20.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2020-27756

USNCoalition ESS < 30%MEDIUM2020-12-06

CVEs:CVE-2020-27756

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:20.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2020-26979

USNCoalition ESS < 30%MEDIUM2020-12-15

CVEs:CVE-2020-26979

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:18.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:20.04:LTS	firefox	—
mozjs38	affected	Ubuntu:18.04:LTS	mozjs38	—
mozjs52	affected	Ubuntu:18.04:LTS	mozjs52	—
mozjs52	affected	Ubuntu:20.04:LTS	mozjs52	—
mozjs68	affected	Ubuntu:20.04:LTS	mozjs68	—
mozjs78	affected	Ubuntu:22.04:LTS	mozjs78	—

Upstream advisory

UBUNTU-CVE-2020-28086

USNCoalition ESS < 30%HIGH2020-12-09

CVEs:CVE-2020-28086

Affected products

Product	Status	Vendor	Package	Ecosystem
password-store	affected	Ubuntu:18.04:LTS	password-store	—
password-store	affected	Ubuntu:22.04:LTS	password-store	—
password-store	affected	Ubuntu:20.04:LTS	password-store	—
password-store	affected	Ubuntu:25.10	password-store	—
password-store	affected	Ubuntu:16.04:LTS	password-store	—
password-store	affected	Ubuntu:24.04:LTS	password-store	—

Upstream advisory

UBUNTU-CVE-2020-35766

USNCoalition ESS < 30%HIGH2020-12-28

CVEs:CVE-2020-35766

Affected products

Product	Status	Vendor	Package	Ecosystem
opendkim	affected	Ubuntu:20.04:LTS	opendkim	—
opendkim	affected	Ubuntu:22.04:LTS	opendkim	—
opendkim	affected	Ubuntu:16.04:LTS	opendkim	—
opendkim	affected	Ubuntu:25.10	opendkim	—
opendkim	affected	Ubuntu:24.04:LTS	opendkim	—
opendkim	affected	Ubuntu:18.04:LTS	opendkim	—

Upstream advisory

UBUNTU-CVE-2020-29534

USNCoalition ESS < 30%HIGH2020-12-03

CVEs:CVE-2020-29534

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-aws-5.0	affected	Ubuntu:18.04:LTS	linux-aws-5.0	—
linux-aws-5.3	affected	Ubuntu:18.04:LTS	linux-aws-5.3	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure-5.3	affected	Ubuntu:18.04:LTS	linux-azure-5.3	—
linux-azure-edge	affected	Ubuntu:18.04:LTS	linux-azure-edge	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp-5.3	affected	Ubuntu:18.04:LTS	linux-gcp-5.3	—
linux-gcp-edge	affected	Ubuntu:18.04:LTS	linux-gcp-edge	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe-5.8	affected	Ubuntu:20.04:LTS	linux-hwe-5.8	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-hwe-edge	affected	Ubuntu:16.04:LTS	linux-hwe-edge	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oem-5.6	affected	Ubuntu:20.04:LTS	linux-oem-5.6	—
linux-oracle-5.0	affected	Ubuntu:18.04:LTS	linux-oracle-5.0	—
linux-oracle-5.3	affected	Ubuntu:18.04:LTS	linux-oracle-5.3	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—

Upstream advisory

UBUNTU-CVE-2020-29566

USNCoalition ESS < 30%MEDIUM2020-12-15

CVEs:CVE-2020-29566

Affected products

Product	Status	Vendor	Package	Ecosystem
xen	affected	Ubuntu:20.04:LTS	xen	—
xen	affected	Ubuntu:16.04:LTS	xen	—
xen	affected	Ubuntu:18.04:LTS	xen	—

Upstream advisory

UBUNTU-CVE-2020-29486

USNCoalition ESS < 30%MEDIUM2020-12-15

CVEs:CVE-2020-29486

Affected products

Product	Status	Vendor	Package	Ecosystem
xen	affected	Ubuntu:16.04:LTS	xen	—
xen	affected	Ubuntu:18.04:LTS	xen	—
xen	affected	Ubuntu:20.04:LTS	xen	—

Upstream advisory

UBUNTU-CVE-2020-36205

USNCoalition ESS < 30%MEDIUM2020-12-10

CVEs:CVE-2020-36205

Affected products

Product	Status	Vendor	Package	Ecosystem
rust-xcb	affected	Ubuntu:22.04:LTS	rust-xcb	—

Upstream advisory

UBUNTU-CVE-2020-29485

USNCoalition ESS < 30%MEDIUM2020-12-15

CVEs:CVE-2020-29485

Affected products

Product	Status	Vendor	Package	Ecosystem
xen	affected	Ubuntu:16.04:LTS	xen	—
xen	affected	Ubuntu:18.04:LTS	xen	—
xen	affected	Ubuntu:20.04:LTS	xen	—

Upstream advisory

UBUNTU-CVE-2020-35920

USNCoalition ESS < 30%MEDIUM2020-12-31

CVEs:CVE-2020-35920

Affected products

Product	Status	Vendor	Package	Ecosystem
rust-socket2	affected	Ubuntu:20.04:LTS	rust-socket2	—
rust-socket2	affected	Ubuntu:22.04:LTS	rust-socket2	—

Upstream advisory

USN-4668-1

USNCoalition ESS < 30%HIGH2020-12-09

python-apt vulnerability

CVEs:CVE-2020-27351

Affected products

Product	Status	Vendor	Package	Ecosystem
python-apt	affected	Ubuntu:16.04:LTS	python-apt	—
python-apt	affected	Ubuntu:20.04:LTS	python-apt	—
python-apt	affected	Ubuntu:18.04:LTS	python-apt	—

Upstream advisory

UBUNTU-CVE-2020-27351

USNCoalition ESS < 30%LOW2020-12-09

CVEs:CVE-2020-27351

Affected products

Product	Status	Vendor	Package	Ecosystem
python-apt	affected	Ubuntu:16.04:LTS	python-apt	—
python-apt	affected	Ubuntu:20.04:LTS	python-apt	—
python-apt	affected	Ubuntu:Pro:14.04:LTS	python-apt	—
python-apt	affected	Ubuntu:18.04:LTS	python-apt	—

Upstream advisory

UBUNTU-CVE-2020-35904

USNCoalition ESS < 30%MEDIUM2020-12-31

CVEs:CVE-2020-35904

Affected products

Product	Status	Vendor	Package	Ecosystem
rust-crossbeam-channel	affected	Ubuntu:20.04:LTS	rust-crossbeam-channel	—

Upstream advisory

UBUNTU-CVE-2020-29482

USNCoalition ESS < 30%MEDIUM2020-12-15

CVEs:CVE-2020-29482

Affected products

Product	Status	Vendor	Package	Ecosystem
xen	affected	Ubuntu:16.04:LTS	xen	—
xen	affected	Ubuntu:18.04:LTS	xen	—
xen	affected	Ubuntu:20.04:LTS	xen	—

Upstream advisory

UBUNTU-CVE-2020-29484

USNCoalition ESS < 30%MEDIUM2020-12-15

CVEs:CVE-2020-29484

Affected products

Product	Status	Vendor	Package	Ecosystem
xen	affected	Ubuntu:16.04:LTS	xen	—
xen	affected	Ubuntu:18.04:LTS	xen	—
xen	affected	Ubuntu:20.04:LTS	xen	—

Upstream advisory

UBUNTU-CVE-2020-29571

USNCoalition ESS < 30%MEDIUM2020-12-15

CVEs:CVE-2020-29571

Affected products

Product	Status	Vendor	Package	Ecosystem
xen	affected	Ubuntu:16.04:LTS	xen	—
xen	affected	Ubuntu:18.04:LTS	xen	—
xen	affected	Ubuntu:20.04:LTS	xen	—

Upstream advisory

USN-4667-1

USNCoalition ESS < 30%MEDIUM2020-12-09

apt vulnerability

CVEs:CVE-2020-27350

Affected products

Product	Status	Vendor	Package	Ecosystem
apt	affected	Ubuntu:18.04:LTS	apt	—
apt	affected	Ubuntu:16.04:LTS	apt	—
apt	affected	Ubuntu:20.04:LTS	apt	—

Upstream advisory

UBUNTU-CVE-2020-27350

USNCoalition ESS < 30%MEDIUM2020-12-09

CVEs:CVE-2020-27350

Affected products

Product	Status	Vendor	Package	Ecosystem
apt	affected	Ubuntu:18.04:LTS	apt	—
apt	affected	Ubuntu:16.04:LTS	apt	—
apt	affected	Ubuntu:Pro:14.04:LTS	apt	—
apt	affected	Ubuntu:20.04:LTS	apt	—

Upstream advisory

UBUNTU-CVE-2020-29570

USNCoalition ESS < 30%MEDIUM2020-12-15

CVEs:CVE-2020-29570

Affected products

Product	Status	Vendor	Package	Ecosystem
xen	affected	Ubuntu:16.04:LTS	xen	—
xen	affected	Ubuntu:18.04:LTS	xen	—
xen	affected	Ubuntu:20.04:LTS	xen	—

Upstream advisory

UBUNTU-CVE-2020-29483

USNCoalition ESS < 30%MEDIUM2020-12-15

CVEs:CVE-2020-29483

Affected products

Product	Status	Vendor	Package	Ecosystem
xen	affected	Ubuntu:16.04:LTS	xen	—
xen	affected	Ubuntu:18.04:LTS	xen	—
xen	affected	Ubuntu:20.04:LTS	xen	—

Upstream advisory

UBUNTU-CVE-2020-29623

USNCoalition ESS < 30%LOW2020-12-31

CVEs:CVE-2020-29623

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
webkit2gtk	affected	Ubuntu:20.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:16.04:LTS	webkit2gtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—
wpewebkit	affected	Ubuntu:20.04:LTS	wpewebkit	—
wpewebkit	affected	Ubuntu:22.04:LTS	wpewebkit	—

Upstream advisory

UBUNTU-CVE-2020-27821

USNCoalition ESS < 30%MEDIUM2020-12-08

CVEs:CVE-2020-27821

Affected products

Product	Status	Vendor	Package	Ecosystem
qemu	affected	Ubuntu:20.04:LTS	qemu	—

Upstream advisory

UBUNTU-CVE-2020-29481

USNCoalition ESS < 30%HIGH2020-12-15

CVEs:CVE-2020-29481

Affected products

Product	Status	Vendor	Package	Ecosystem
xen	affected	Ubuntu:16.04:LTS	xen	—
xen	affected	Ubuntu:18.04:LTS	xen	—
xen	affected	Ubuntu:20.04:LTS	xen	—

Upstream advisory

UBUNTU-CVE-2020-27781

USNCoalition ESS < 30%HIGH2020-12-18

CVEs:CVE-2020-27781

Affected products

Product	Status	Vendor	Package	Ecosystem
ceph	affected	Ubuntu:Pro:16.04:LTS	ceph	—
ceph	affected	Ubuntu:18.04:LTS	ceph	—
ceph	affected	Ubuntu:20.04:LTS	ceph	—

Upstream advisory

UBUNTU-CVE-2020-29480

USNCoalition ESS < 30%LOW2020-12-15

CVEs:CVE-2020-29480

Affected products

Product	Status	Vendor	Package	Ecosystem
xen	affected	Ubuntu:16.04:LTS	xen	—
xen	affected	Ubuntu:18.04:LTS	xen	—
xen	affected	Ubuntu:20.04:LTS	xen	—

Upstream advisory

UBUNTU-CVE-2020-29479

USNCoalition ESS < 30%HIGH2020-12-15

CVEs:CVE-2020-29479

Affected products

Product	Status	Vendor	Package	Ecosystem
xen	affected	Ubuntu:16.04:LTS	xen	—
xen	affected	Ubuntu:18.04:LTS	xen	—
xen	affected	Ubuntu:20.04:LTS	xen	—

Upstream advisory

UBUNTU-CVE-2020-27349

USNCoalition ESS < 30%MEDIUM2020-12-08

CVEs:CVE-2020-27349

Affected products

Product	Status	Vendor	Package	Ecosystem
aptdaemon	affected	Ubuntu:18.04:LTS	aptdaemon	—
aptdaemon	affected	Ubuntu:16.04:LTS	aptdaemon	—
aptdaemon	affected	Ubuntu:20.04:LTS	aptdaemon	—

Upstream advisory

UBUNTU-CVE-2020-35508

USNCoalition ESS < 30%MEDIUM2020-12-31

CVEs:CVE-2020-35508

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:20.04:LTS	linux	—
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux	affected	Ubuntu:18.04:LTS	linux	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:20.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws-5.0	affected	Ubuntu:18.04:LTS	linux-aws-5.0	—
linux-aws-5.3	affected	Ubuntu:18.04:LTS	linux-aws-5.3	—
linux-aws-5.4	affected	Ubuntu:18.04:LTS	linux-aws-5.4	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-aws-fips	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:20.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure-4.15	affected	Ubuntu:18.04:LTS	linux-azure-4.15	—
linux-azure-5.3	affected	Ubuntu:18.04:LTS	linux-azure-5.3	—
linux-azure-5.4	affected	Ubuntu:18.04:LTS	linux-azure-5.4	—
linux-azure-edge	affected	Ubuntu:18.04:LTS	linux-azure-edge	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-azure-fips	—
linux-dell300x	affected	Ubuntu:18.04:LTS	linux-dell300x	—
linux-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:20.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp-4.15	affected	Ubuntu:18.04:LTS	linux-gcp-4.15	—
linux-gcp-5.3	affected	Ubuntu:18.04:LTS	linux-gcp-5.3	—
linux-gcp-5.4	affected	Ubuntu:18.04:LTS	linux-gcp-5.4	—
linux-gcp-edge	affected	Ubuntu:18.04:LTS	linux-gcp-edge	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-gcp-fips	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-gcp-fips	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-gcp-fips	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-gke-5.4	affected	Ubuntu:18.04:LTS	linux-gke-5.4	—
linux-gkeop-5.4	affected	Ubuntu:18.04:LTS	linux-gkeop-5.4	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe-5.4	affected	Ubuntu:18.04:LTS	linux-hwe-5.4	—
linux-hwe-5.8	affected	Ubuntu:20.04:LTS	linux-hwe-5.8	—
linux-hwe-edge	affected	Ubuntu:16.04:LTS	linux-hwe-edge	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:20.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oem-5.6	affected	Ubuntu:20.04:LTS	linux-oem-5.6	—
linux-oracle	affected	Ubuntu:20.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-oracle-5.0	affected	Ubuntu:18.04:LTS	linux-oracle-5.0	—
linux-oracle-5.3	affected	Ubuntu:18.04:LTS	linux-oracle-5.3	—
linux-oracle-5.4	affected	Ubuntu:18.04:LTS	linux-oracle-5.4	—
linux-raspi	affected	Ubuntu:20.04:LTS	linux-raspi	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi-5.4	affected	Ubuntu:18.04:LTS	linux-raspi-5.4	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv-5.8	affected	Ubuntu:20.04:LTS	linux-riscv-5.8	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2020-27837

USNCoalition ESS < 30%MEDIUM2020-12-28

CVEs:CVE-2020-27837

Affected products

Product	Status	Vendor	Package	Ecosystem
gdm3	affected	Ubuntu:20.04:LTS	gdm3	—
gdm3	affected	Ubuntu:22.04:LTS	gdm3	—

Upstream advisory

UBUNTU-CVE-2020-35911

USNCoalition ESS < 30%MEDIUM2020-12-31

CVEs:CVE-2020-35911

Affected products

Product	Status	Vendor	Package	Ecosystem
rust-lock-api	affected	Ubuntu:22.04:LTS	rust-lock-api	—
rust-lock-api	affected	Ubuntu:24.04:LTS	rust-lock-api	—
rust-lock-api	affected	Ubuntu:20.04:LTS	rust-lock-api	—
rust-lock-api	affected	Ubuntu:25.10	rust-lock-api	—

Upstream advisory

UBUNTU-CVE-2020-35914

USNCoalition ESS < 30%MEDIUM2020-12-31

CVEs:CVE-2020-35914

Affected products

Product	Status	Vendor	Package	Ecosystem
rust-lock-api	affected	Ubuntu:22.04:LTS	rust-lock-api	—
rust-lock-api	affected	Ubuntu:24.04:LTS	rust-lock-api	—
rust-lock-api	affected	Ubuntu:20.04:LTS	rust-lock-api	—
rust-lock-api	affected	Ubuntu:25.10	rust-lock-api	—

Upstream advisory

UBUNTU-CVE-2020-35912

USNCoalition ESS < 30%MEDIUM2020-12-31

CVEs:CVE-2020-35912

Affected products

Product	Status	Vendor	Package	Ecosystem
rust-lock-api	affected	Ubuntu:22.04:LTS	rust-lock-api	—
rust-lock-api	affected	Ubuntu:24.04:LTS	rust-lock-api	—
rust-lock-api	affected	Ubuntu:20.04:LTS	rust-lock-api	—
rust-lock-api	affected	Ubuntu:25.10	rust-lock-api	—

Upstream advisory

UBUNTU-CVE-2020-35913

USNCoalition ESS < 30%MEDIUM2020-12-31

CVEs:CVE-2020-35913

Affected products

Product	Status	Vendor	Package	Ecosystem
rust-lock-api	affected	Ubuntu:22.04:LTS	rust-lock-api	—
rust-lock-api	affected	Ubuntu:24.04:LTS	rust-lock-api	—
rust-lock-api	affected	Ubuntu:20.04:LTS	rust-lock-api	—
rust-lock-api	affected	Ubuntu:25.10	rust-lock-api	—

Upstream advisory

UBUNTU-CVE-2020-27066

USNCoalition ESS < 30%MEDIUM2020-12-15

CVEs:CVE-2020-27066

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux	affected	Ubuntu:18.04:LTS	linux	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-aws-5.0	affected	Ubuntu:18.04:LTS	linux-aws-5.0	—
linux-aws-5.3	affected	Ubuntu:18.04:LTS	linux-aws-5.3	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-aws-fips	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure-5.3	affected	Ubuntu:18.04:LTS	linux-azure-5.3	—
linux-azure-edge	affected	Ubuntu:18.04:LTS	linux-azure-edge	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-azure-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp-5.3	affected	Ubuntu:18.04:LTS	linux-gcp-5.3	—
linux-gcp-edge	affected	Ubuntu:18.04:LTS	linux-gcp-edge	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-gcp-fips	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-gke-5.3	affected	Ubuntu:18.04:LTS	linux-gke-5.3	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe-edge	affected	Ubuntu:18.04:LTS	linux-hwe-edge	—
linux-hwe-edge	affected	Ubuntu:16.04:LTS	linux-hwe-edge	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oem-osp1	affected	Ubuntu:18.04:LTS	linux-oem-osp1	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-oracle-5.0	affected	Ubuntu:18.04:LTS	linux-oracle-5.0	—
linux-oracle-5.3	affected	Ubuntu:18.04:LTS	linux-oracle-5.3	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi2-5.3	affected	Ubuntu:18.04:LTS	linux-raspi2-5.3	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2020-27067

USNCoalition ESS < 30%MEDIUM2020-12-15

CVEs:CVE-2020-27067

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:16.04:LTS	linux	—
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-aws-5.0	affected	Ubuntu:18.04:LTS	linux-aws-5.0	—
linux-aws-5.3	affected	Ubuntu:18.04:LTS	linux-aws-5.3	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-5.3	affected	Ubuntu:18.04:LTS	linux-azure-5.3	—
linux-azure-edge	affected	Ubuntu:18.04:LTS	linux-azure-edge	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-fips	affected	Ubuntu:Pro:FIPS:16.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp-5.3	affected	Ubuntu:18.04:LTS	linux-gcp-5.3	—
linux-gcp-edge	affected	Ubuntu:18.04:LTS	linux-gcp-edge	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-hwe-edge	affected	Ubuntu:16.04:LTS	linux-hwe-edge	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oracle-5.0	affected	Ubuntu:18.04:LTS	linux-oracle-5.0	—
linux-oracle-5.3	affected	Ubuntu:18.04:LTS	linux-oracle-5.3	—
linux-raspi2	affected	Ubuntu:16.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—
linux-snapdragon	affected	Ubuntu:16.04:LTS	linux-snapdragon	—

Upstream advisory

UBUNTU-CVE-2020-1946

USNEPSS <= 49%CRITICAL2020-12-31

CVEs:CVE-2020-1946

Affected products

Product	Status	Vendor	Package	Ecosystem
spamassassin	affected	Ubuntu:16.04:LTS	spamassassin	—
spamassassin	affected	Ubuntu:20.04:LTS	spamassassin	—
spamassassin	affected	Ubuntu:18.04:LTS	spamassassin	—
spamassassin	affected	Ubuntu:Pro:14.04:LTS	spamassassin	—

Upstream advisory

UBUNTU-CVE-2020-13584

USNEPSS <= 49%HIGH2020-12-03

CVEs:CVE-2020-13584

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:20.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:16.04:LTS	webkit2gtk	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—
wpewebkit	affected	Ubuntu:22.04:LTS	wpewebkit	—
wpewebkit	affected	Ubuntu:20.04:LTS	wpewebkit	—

Upstream advisory

UBUNTU-CVE-2020-0499

USNEPSS <= 49%MEDIUM2020-12-15

CVEs:CVE-2020-0499

Affected products

Product	Status	Vendor	Package	Ecosystem
flac	affected	Ubuntu:20.04:LTS	flac	—
flac	affected	Ubuntu:Pro:16.04:LTS	flac	—
flac	affected	Ubuntu:Pro:14.04:LTS	flac	—
flac	affected	Ubuntu:18.04:LTS	flac	—

Upstream advisory

UBUNTU-CVE-2020-13988

USNEPSS <= 49%HIGH2020-12-01

CVEs:CVE-2020-13988

Affected products

Product	Status	Vendor	Package	Ecosystem
open-iscsi	affected	Ubuntu:20.04:LTS	open-iscsi	—
open-iscsi	affected	Ubuntu:Pro:16.04:LTS	open-iscsi	—
open-iscsi	affected	Ubuntu:Pro:18.04:LTS	open-iscsi	—

Upstream advisory

UBUNTU-CVE-2018-21270

USNEPSS <= 49%MEDIUM2020-12-03

CVEs:CVE-2018-21270

Affected products

Product	Status	Vendor	Package	Ecosystem
node-stringstream	affected	Ubuntu:18.04:LTS	node-stringstream	—

Upstream advisory

UBUNTU-CVE-2020-13543

USNEPSS <= 49%HIGH2020-12-03

CVEs:CVE-2020-13543

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:22.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:18.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:20.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-opensource-src	affected	Ubuntu:24.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:18.04:LTS	qtwebkit-source	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—
webkit2gtk	affected	Ubuntu:16.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:20.04:LTS	webkit2gtk	—
webkit2gtk	affected	Ubuntu:18.04:LTS	webkit2gtk	—
webkitgtk	affected	Ubuntu:18.04:LTS	webkitgtk	—
webkitgtk	affected	Ubuntu:16.04:LTS	webkitgtk	—
wpewebkit	affected	Ubuntu:22.04:LTS	wpewebkit	—
wpewebkit	affected	Ubuntu:20.04:LTS	wpewebkit	—

Upstream advisory

UBUNTU-CVE-2017-2910

USNEPSS <= 49%HIGH2020-12-02

CVEs:CVE-2017-2910

Affected products

Product	Status	Vendor	Package	Ecosystem
r-cran-readxl	affected	Ubuntu:18.04:LTS	r-cran-readxl	—
r-cran-readxl	affected	Ubuntu:24.04:LTS	r-cran-readxl	—
r-cran-readxl	affected	Ubuntu:20.04:LTS	r-cran-readxl	—
r-cran-readxl	affected	Ubuntu:16.04:LTS	r-cran-readxl	—
r-cran-readxl	affected	Ubuntu:25.10	r-cran-readxl	—
r-cran-readxl	affected	Ubuntu:22.04:LTS	r-cran-readxl	—

Upstream advisory

UBUNTU-CVE-2020-16041

USNEPSS <= 49%HIGH2020-12-07

CVEs:CVE-2020-16041

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-25693

USNEPSS <= 49%HIGH2020-12-03

CVEs:CVE-2020-25693

Affected products

Product	Status	Vendor	Package	Ecosystem
cimg	affected	Ubuntu:20.04:LTS	cimg	—

Upstream advisory

UBUNTU-CVE-2019-15523

USNEPSS <= 49%MEDIUM2020-12-30

CVEs:CVE-2019-15523

Affected products

Product	Status	Vendor	Package	Ecosystem
csync2	affected	Ubuntu:18.04:LTS	csync2	—
csync2	affected	Ubuntu:16.04:LTS	csync2	—
csync2	affected	Ubuntu:20.04:LTS	csync2	—

Upstream advisory

UBUNTU-CVE-2020-16037

USNEPSS <= 49%HIGH2020-12-07

CVEs:CVE-2020-16037

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-16038

USNEPSS <= 49%HIGH2020-12-07

CVEs:CVE-2020-16038

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-16039

USNEPSS <= 49%HIGH2020-12-07

CVEs:CVE-2020-16039

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2020-16587

USNEPSS <= 49%MEDIUM2020-12-09

CVEs:CVE-2020-16587

Affected products

Product	Status	Vendor	Package	Ecosystem
openexr	affected	Ubuntu:18.04:LTS	openexr	—
openexr	affected	Ubuntu:16.04:LTS	openexr	—
openexr	affected	Ubuntu:20.04:LTS	openexr	—

Upstream advisory

UBUNTU-CVE-2020-16588

USNEPSS <= 49%MEDIUM2020-12-09

CVEs:CVE-2020-16588

Affected products

Product	Status	Vendor	Package	Ecosystem
openexr	affected	Ubuntu:16.04:LTS	openexr	—
openexr	affected	Ubuntu:18.04:LTS	openexr	—
openexr	affected	Ubuntu:20.04:LTS	openexr	—

Upstream advisory

UBUNTU-CVE-2019-12953

USNEPSS <= 49%MEDIUM2020-12-30

CVEs:CVE-2019-12953

Affected products

Product	Status	Vendor	Package	Ecosystem
dropbear	affected	Ubuntu:Pro:18.04:LTS	dropbear	—
dropbear	affected	Ubuntu:16.04:LTS	dropbear	—

Upstream advisory

UBUNTU-CVE-2020-25676

USNEPSS <= 49%MEDIUM2020-12-08

CVEs:CVE-2020-25676

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:Pro:16.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:20.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2020-25666

USNEPSS <= 49%LOW2020-12-08

CVEs:CVE-2020-25666

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:Pro:16.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:20.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2020-16589

USNEPSS <= 49%MEDIUM2020-12-09

CVEs:CVE-2020-16589

Affected products

Product	Status	Vendor	Package	Ecosystem
openexr	affected	Ubuntu:16.04:LTS	openexr	—
openexr	affected	Ubuntu:18.04:LTS	openexr	—
openexr	affected	Ubuntu:20.04:LTS	openexr	—

Upstream advisory

UBUNTU-CVE-2020-25675

USNEPSS <= 49%LOW2020-12-08

CVEs:CVE-2020-25675

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:Pro:16.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:20.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:Pro:14.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2020-17521

USNEPSS <= 49%MEDIUM2020-12-07

CVEs:CVE-2020-17521

Affected products

Product	Status	Vendor	Package	Ecosystem
groovy	affected	Ubuntu:18.04:LTS	groovy	—
groovy	affected	Ubuntu:24.04:LTS	groovy	—
groovy	affected	Ubuntu:20.04:LTS	groovy	—
groovy	affected	Ubuntu:25.10	groovy	—
groovy	affected	Ubuntu:16.04:LTS	groovy	—
groovy	affected	Ubuntu:22.04:LTS	groovy	—
groovy2	affected	Ubuntu:Pro:16.04:LTS	groovy2	—

Upstream advisory

UBUNTU-CVE-2020-16592

USNEPSS <= 49%MEDIUM2020-12-09

CVEs:CVE-2020-16592

Affected products

Product	Status	Vendor	Package	Ecosystem
binutils	affected	Ubuntu:20.04:LTS	binutils	—
binutils	affected	Ubuntu:18.04:LTS	binutils	—

Upstream advisory

UBUNTU-CVE-2020-25674

USNEPSS <= 49%MEDIUM2020-12-08

CVEs:CVE-2020-25674

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:20.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:Pro:16.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2020-25665

USNEPSS <= 49%MEDIUM2020-12-08

CVEs:CVE-2020-25665

Affected products

Product	Status	Vendor	Package	Ecosystem
imagemagick	affected	Ubuntu:Pro:16.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:18.04:LTS	imagemagick	—
imagemagick	affected	Ubuntu:20.04:LTS	imagemagick	—

Upstream advisory

UBUNTU-CVE-2020-16042

USNEPSS <= 49%MEDIUM2020-12-07

CVEs:CVE-2020-16042

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:18.04:LTS	chromium-browser	—
chromium-browser	affected	Ubuntu:16.04:LTS	chromium-browser	—
firefox	affected	Ubuntu:18.04:LTS	firefox	—
firefox	affected	Ubuntu:16.04:LTS	firefox	—
firefox	affected	Ubuntu:20.04:LTS	firefox	—
thunderbird	affected	Ubuntu:20.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2020-15685

USNEPSS <= 49%HIGH2020-12-31

CVEs:CVE-2020-15685

Affected products

Product	Status	Vendor	Package	Ecosystem
thunderbird	affected	Ubuntu:20.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2020-11947

USNEPSS <= 49%LOW2020-12-31

CVEs:CVE-2020-11947

Affected products

Product	Status	Vendor	Package	Ecosystem
qemu	affected	Ubuntu:Pro:14.04:LTS	qemu	—
qemu	affected	Ubuntu:20.04:LTS	qemu	—
qemu	affected	Ubuntu:16.04:LTS	qemu	—
qemu	affected	Ubuntu:18.04:LTS	qemu	—

Upstream advisory

USN-4656-2

USNEPSS <= 49%HIGH2020-12-07

xorg-server vulnerabilities

CVEs:CVE-2020-14360 CVE-2020-25712

Affected products

Product	Status	Vendor	Package	Ecosystem
xorg-server	affected	Ubuntu:Pro:14.04:LTS	xorg-server	—

Upstream advisory

USN-4656-1

USNEPSS <= 49%HIGH2020-12-01

xorg-server, xorg-server-hwe-16.04, xorg-server-hwe-18.04 vulnerabilities

CVEs:CVE-2020-14360 CVE-2020-25712

Affected products

Product	Status	Vendor	Package	Ecosystem
xorg-server	affected	Ubuntu:20.04:LTS	xorg-server	—
xorg-server	affected	Ubuntu:18.04:LTS	xorg-server	—
xorg-server	affected	Ubuntu:16.04:LTS	xorg-server	—
xorg-server-hwe-16.04	affected	Ubuntu:16.04:LTS	xorg-server-hwe-16.04	—
xorg-server-hwe-18.04	affected	Ubuntu:18.04:LTS	xorg-server-hwe-18.04	—

Upstream advisory

UBUNTU-CVE-2020-14360

USNEPSS <= 49%HIGH2020-12-01

CVEs:CVE-2020-14360

Affected products

Product	Status	Vendor	Package	Ecosystem
xorg-server	affected	Ubuntu:16.04:LTS	xorg-server	—
xorg-server	affected	Ubuntu:18.04:LTS	xorg-server	—
xorg-server	affected	Ubuntu:Pro:14.04:LTS	xorg-server	—
xorg-server	affected	Ubuntu:20.04:LTS	xorg-server	—
xorg-server-hwe-16.04	affected	Ubuntu:16.04:LTS	xorg-server-hwe-16.04	—
xorg-server-hwe-18.04	affected	Ubuntu:18.04:LTS	xorg-server-hwe-18.04	—

Upstream advisory

UBUNTU-CVE-2020-25266

USNEPSS <= 49%MEDIUM2020-12-02

CVEs:CVE-2020-25266

Affected products

Product	Status	Vendor	Package	Ecosystem
libappimage	affected	Ubuntu:22.04:LTS	libappimage	—
libappimage	affected	Ubuntu:20.04:LTS	libappimage	—
libappimage	affected	Ubuntu:24.04:LTS	libappimage	—
libappimage	affected	Ubuntu:25.10	libappimage	—

Upstream advisory

UBUNTU-CVE-2020-25712

USNEPSS <= 49%HIGH2020-12-01

CVEs:CVE-2020-25712

Affected products

Product	Status	Vendor	Package	Ecosystem
xorg-server	affected	Ubuntu:18.04:LTS	xorg-server	—
xorg-server	affected	Ubuntu:16.04:LTS	xorg-server	—
xorg-server	affected	Ubuntu:Pro:14.04:LTS	xorg-server	—
xorg-server	affected	Ubuntu:20.04:LTS	xorg-server	—
xorg-server-hwe-16.04	affected	Ubuntu:16.04:LTS	xorg-server-hwe-16.04	—
xorg-server-hwe-18.04	affected	Ubuntu:18.04:LTS	xorg-server-hwe-18.04	—

Upstream advisory

UBUNTU-CVE-2020-16128

USNEPSS <= 49%LOW2020-12-08

CVEs:CVE-2020-16128

Affected products

Product	Status	Vendor	Package	Ecosystem
aptdaemon	affected	Ubuntu:18.04:LTS	aptdaemon	—
aptdaemon	affected	Ubuntu:16.04:LTS	aptdaemon	—
aptdaemon	affected	Ubuntu:20.04:LTS	aptdaemon	—

Upstream advisory

UBUNTU-CVE-2019-20808

USNEPSS <= 49%MEDIUM2020-12-30

CVEs:CVE-2019-20808

Affected products

Product	Status	Vendor	Package	Ecosystem
qemu	affected	Ubuntu:20.04:LTS	qemu	—

Upstream advisory

UBUNTU-CVE-2020-25707

USNEPSS <= 49%LOW2020-12-14

CVEs:CVE-2020-25707

Affected products

Product	Status	Vendor	Package	Ecosystem
qemu	affected	Ubuntu:Pro:20.04:LTS	qemu	—
qemu	affected	Ubuntu:Pro:18.04:LTS	qemu	—

Upstream advisory

UBUNTU-CVE-2020-12658

USNAll remainingCRITICAL2020-12-31

Affected products

Product	Status	Vendor	Package	Ecosystem
gssproxy	affected	Ubuntu:24.04:LTS	gssproxy	—
gssproxy	affected	Ubuntu:20.04:LTS	gssproxy	—
gssproxy	affected	Ubuntu:Pro:18.04:LTS	gssproxy	—
gssproxy	affected	Ubuntu:22.04:LTS	gssproxy	—

Upstream advisory

UBUNTU-CVE-2020-35850

USNAll remainingMEDIUM2020-12-30

Affected products

Product	Status	Vendor	Package	Ecosystem
cockpit	affected	Ubuntu:20.04:LTS	cockpit	—
cockpit	affected	Ubuntu:22.04:LTS	cockpit	—
cockpit	affected	Ubuntu:24.04:LTS	cockpit	—
cockpit	affected	Ubuntu:Pro:18.04:LTS	cockpit	—

Upstream advisory

UBUNTU-CVE-2020-22083

USNAll remainingCRITICAL2020-12-17

Affected products

Product	Status	Vendor	Package	Ecosystem
jsonpickle	affected	Ubuntu:Pro:18.04:LTS	jsonpickle	—
jsonpickle	affected	Ubuntu:Pro:16.04:LTS	jsonpickle	—
jsonpickle	affected	Ubuntu:24.04:LTS	jsonpickle	—
jsonpickle	affected	Ubuntu:20.04:LTS	jsonpickle	—
jsonpickle	affected	Ubuntu:22.04:LTS	jsonpickle	—

Upstream advisory

USN-4660-2

USNAll remainingHIGH2020-12-13

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-gke-4.15, linux-hwe, linux-kvm, linux-oracle, linux-snapdragon regression

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:18.04:LTS	linux	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws-hwe	affected	Ubuntu:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:16.04:LTS	linux-azure	—
linux-azure-4.15	affected	Ubuntu:18.04:LTS	linux-azure-4.15	—
linux-gcp	affected	Ubuntu:16.04:LTS	linux-gcp	—
linux-gcp-4.15	affected	Ubuntu:18.04:LTS	linux-gcp-4.15	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-hwe	affected	Ubuntu:16.04:LTS	linux-hwe	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:16.04:LTS	linux-oracle	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—

Upstream advisory

USN-4658-2

USNAll remainingHIGH2020-12-13

linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 regression

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:20.04:LTS	linux	—
linux-aws	affected	Ubuntu:20.04:LTS	linux-aws	—
linux-aws-5.4	affected	Ubuntu	—	—
linux-aws-5.4	affected	Ubuntu:18.04:LTS	linux-aws-5.4	—
linux-azure	affected	Ubuntu:20.04:LTS	linux-azure	—
linux-azure-5.4	affected	Ubuntu:18.04:LTS	linux-azure-5.4	—
linux-gcp	affected	Ubuntu:20.04:LTS	linux-gcp	—
linux-gcp-5.4	affected	Ubuntu:18.04:LTS	linux-gcp-5.4	—
linux-hwe-5.4	affected	Ubuntu:18.04:LTS	linux-hwe-5.4	—
linux-kvm	affected	Ubuntu:20.04:LTS	linux-kvm	—
linux-oracle	affected	Ubuntu:20.04:LTS	linux-oracle	—
linux-oracle-5.4	affected	Ubuntu:18.04:LTS	linux-oracle-5.4	—
linux-raspi	affected	Ubuntu:20.04:LTS	linux-raspi	—
linux-raspi-5.4	affected	Ubuntu:18.04:LTS	linux-raspi-5.4	—

Upstream advisory

USN-4669-1

USNAll remaining2020-12-10

squirrelmail vulnerability

Affected products

Product	Status	Vendor	Package	Ecosystem
squirrelmail	affected	Ubuntu:16.04:LTS	squirrelmail	—

Upstream advisory

USN-4664-1

USNAll remaining2020-12-08

aptdaemon vulnerabilities

Affected products

Product	Status	Vendor	Package	Ecosystem
aptdaemon	affected	Ubuntu:18.04:LTS	aptdaemon	—
aptdaemon	affected	Ubuntu:16.04:LTS	aptdaemon	—
aptdaemon	affected	Ubuntu:20.04:LTS	aptdaemon	—

Upstream advisory

USN-4661-1

USNAll remaining2020-12-03

snapcraft vulnerability

Affected products

Product	Status	Vendor	Package	Ecosystem
snapcraft	affected	Ubuntu:16.04:LTS	snapcraft	—
snapcraft	affected	Ubuntu:18.04:LTS	snapcraft	—

Upstream advisory

USN-4655-1

USNAll remaining2020-12-01

python-werkzeug vulnerabilities

Affected products

Product	Status	Vendor	Package	Ecosystem
python-werkzeug	affected	Ubuntu:18.04:LTS	python-werkzeug	—
python-werkzeug	affected	Ubuntu:16.04:LTS	python-werkzeug	—

Upstream advisory

USN-4654-1

USNAll remaining2020-12-01

php-pear vulnerabilities

Affected products

Product	Status	Vendor	Package	Ecosystem
php-pear	affected	Ubuntu:16.04:LTS	php-pear	—
php-pear	affected	Ubuntu:18.04:LTS	php-pear	—
php-pear	affected	Ubuntu:20.04:LTS	php-pear	—

Upstream advisory

What would you fix first?

Advisories

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products