Canonical Security Advisories: January 2022 — Canonical Security Advisories

Product	Status	Vendor	Package	Ecosystem
policykit-1	affected	Ubuntu:Pro:16.04:LTS	policykit-1	—
policykit-1	affected	Ubuntu:Pro:14.04:LTS	policykit-1	—

Product	Status	Vendor	Package	Ecosystem
policykit-1	affected	polkit	—	—
policykit-1	affected	Ubuntu:20.04:LTS	policykit-1	—
policykit-1	affected	Ubuntu:18.04:LTS	policykit-1	—

USN-5240-1

USNExploitedCISA KEV listedHIGH2022-01-19

linux, linux-aws, linux-aws-5.11, linux-aws-5.4, linux-azure, linux-azure-5.11, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.11, linux-gcp-5.4, linux-gke, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm, linux-kvm, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oracle, linux-oracle-5.11, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerability

CVEs:CVE-2022-0185

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:20.04:LTS	linux	—
linux-aws	affected	Ubuntu:20.04:LTS	linux-aws	—
linux-aws-5.11	affected	Ubuntu:20.04:LTS	linux-aws-5.11	—
linux-aws-5.4	affected	Ubuntu:18.04:LTS	linux-aws-5.4	—
linux-azure	affected	Ubuntu:20.04:LTS	linux-azure	—
linux-azure-5.11	affected	Ubuntu:20.04:LTS	linux-azure-5.11	—
linux-azure-5.4	affected	Ubuntu:18.04:LTS	linux-azure-5.4	—
linux-bluefield	affected	Ubuntu:20.04:LTS	linux-bluefield	—
linux-gcp	affected	Ubuntu:20.04:LTS	linux-gcp	—
linux-gcp-5.11	affected	Ubuntu:20.04:LTS	linux-gcp-5.11	—
linux-gcp-5.4	affected	Ubuntu:18.04:LTS	linux-gcp-5.4	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke-5.4	affected	Ubuntu:18.04:LTS	linux-gke-5.4	—
linux-gkeop	affected	Ubuntu:20.04:LTS	linux-gkeop	—
linux-gkeop-5.4	affected	Ubuntu:18.04:LTS	linux-gkeop-5.4	—
linux-hwe-5.4	affected	Ubuntu:18.04:LTS	linux-hwe-5.4	—
linux-ibm	affected	Ubuntu:20.04:LTS	linux-ibm	—
linux-kvm	affected	Ubuntu:20.04:LTS	linux-kvm	—
linux-oem-5.10	affected	Ubuntu:20.04:LTS	linux-oem-5.10	—
linux-oem-5.13	affected	Ubuntu:20.04:LTS	linux-oem-5.13	—
linux-oem-5.14	affected	Ubuntu:20.04:LTS	linux-oem-5.14	—
linux-oracle	affected	Ubuntu:20.04:LTS	linux-oracle	—
linux-oracle-5.11	affected	Ubuntu:20.04:LTS	linux-oracle-5.11	—
linux-oracle-5.4	affected	Ubuntu:18.04:LTS	linux-oracle-5.4	—
linux-raspi	affected	Ubuntu:20.04:LTS	linux-raspi	—
linux-raspi-5.4	affected	Ubuntu:18.04:LTS	linux-raspi-5.4	—

Upstream advisory

USN-5255-1

USNExploitedCISA KEV listedHIGH2022-01-27

webkit2gtk vulnerabilities

CVEs:CVE-2021-30934 CVE-2021-30936 CVE-2021-30951 CVE-2021-30952 CVE-2021-30953 CVE-2021-30954 CVE-2021-30984

Affected products

Product	Status	Vendor	Package	Ecosystem
webkit2gtk	affected	Ubuntu:20.04:LTS	webkit2gtk	—

Upstream advisory

UBUNTU-CVE-2021-22600

USNExploitedCISA KEV listedHIGH2022-01-26

CVEs:CVE-2021-22600

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:18.04:LTS	linux	—
linux	affected	Ubuntu:20.04:LTS	linux	—
linux-aws	affected	Ubuntu:20.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws-5.0	affected	Ubuntu:18.04:LTS	linux-aws-5.0	—
linux-aws-5.11	affected	Ubuntu:20.04:LTS	linux-aws-5.11	—
linux-aws-5.13	affected	Ubuntu:20.04:LTS	linux-aws-5.13	—
linux-aws-5.3	affected	Ubuntu:18.04:LTS	linux-aws-5.3	—
linux-aws-5.4	affected	Ubuntu:18.04:LTS	linux-aws-5.4	—
linux-aws-5.8	affected	Ubuntu:20.04:LTS	linux-aws-5.8	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-aws-fips	—
linux-aws-hwe	affected	Ubuntu:Pro:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:20.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:Pro:16.04:LTS	linux-azure	—
linux-azure-4.15	affected	Ubuntu:18.04:LTS	linux-azure-4.15	—
linux-azure-5.11	affected	Ubuntu:20.04:LTS	linux-azure-5.11	—
linux-azure-5.13	affected	Ubuntu:20.04:LTS	linux-azure-5.13	—
linux-azure-5.3	affected	Ubuntu:18.04:LTS	linux-azure-5.3	—
linux-azure-5.4	affected	Ubuntu:18.04:LTS	linux-azure-5.4	—
linux-azure-5.8	affected	Ubuntu:20.04:LTS	linux-azure-5.8	—
linux-azure-edge	affected	Ubuntu:18.04:LTS	linux-azure-edge	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-azure-fips	—
linux-bluefield	affected	Ubuntu:20.04:LTS	linux-bluefield	—
linux-dell300x	affected	Ubuntu:18.04:LTS	linux-dell300x	—
linux-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:Pro:16.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:20.04:LTS	linux-gcp	—
linux-gcp-4.15	affected	Ubuntu:18.04:LTS	linux-gcp-4.15	—
linux-gcp-5.11	affected	Ubuntu:20.04:LTS	linux-gcp-5.11	—
linux-gcp-5.13	affected	Ubuntu:20.04:LTS	linux-gcp-5.13	—
linux-gcp-5.3	affected	Ubuntu:18.04:LTS	linux-gcp-5.3	—
linux-gcp-5.4	affected	Ubuntu:18.04:LTS	linux-gcp-5.4	—
linux-gcp-5.8	affected	Ubuntu:20.04:LTS	linux-gcp-5.8	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-gcp-fips	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-gcp-fips	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-gcp-fips	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-gke-5.4	affected	Ubuntu:18.04:LTS	linux-gke-5.4	—
linux-gkeop	affected	Ubuntu:20.04:LTS	linux-gkeop	—
linux-gkeop-5.4	affected	Ubuntu:18.04:LTS	linux-gkeop-5.4	—
linux-hwe	affected	Ubuntu:Pro:16.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe-5.11	affected	Ubuntu:20.04:LTS	linux-hwe-5.11	—
linux-hwe-5.13	affected	Ubuntu:20.04:LTS	linux-hwe-5.13	—
linux-hwe-5.4	affected	Ubuntu:18.04:LTS	linux-hwe-5.4	—
linux-hwe-5.8	affected	Ubuntu:20.04:LTS	linux-hwe-5.8	—
linux-hwe-edge	affected	Ubuntu:16.04:LTS	linux-hwe-edge	—
linux-ibm	affected	Ubuntu:20.04:LTS	linux-ibm	—
linux-ibm-5.4	affected	Ubuntu:18.04:LTS	linux-ibm-5.4	—
linux-intel-5.13	affected	Ubuntu:20.04:LTS	linux-intel-5.13	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:20.04:LTS	linux-kvm	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oem-5.10	affected	Ubuntu:20.04:LTS	linux-oem-5.10	—
linux-oem-5.13	affected	Ubuntu:20.04:LTS	linux-oem-5.13	—
linux-oem-5.14	affected	Ubuntu:20.04:LTS	linux-oem-5.14	—
linux-oem-5.6	affected	Ubuntu:20.04:LTS	linux-oem-5.6	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:20.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:Pro:16.04:LTS	linux-oracle	—
linux-oracle-5.0	affected	Ubuntu:18.04:LTS	linux-oracle-5.0	—
linux-oracle-5.11	affected	Ubuntu:20.04:LTS	linux-oracle-5.11	—
linux-oracle-5.13	affected	Ubuntu:20.04:LTS	linux-oracle-5.13	—
linux-oracle-5.3	affected	Ubuntu:18.04:LTS	linux-oracle-5.3	—
linux-oracle-5.4	affected	Ubuntu:18.04:LTS	linux-oracle-5.4	—
linux-oracle-5.8	affected	Ubuntu:20.04:LTS	linux-oracle-5.8	—
linux-raspi	affected	Ubuntu:20.04:LTS	linux-raspi	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-raspi-5.4	affected	Ubuntu:18.04:LTS	linux-raspi-5.4	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv-5.11	affected	Ubuntu:20.04:LTS	linux-riscv-5.11	—
linux-riscv-5.8	affected	Ubuntu:20.04:LTS	linux-riscv-5.8	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—

Upstream advisory

USN-5222-1

USNWeaponized exploitCRITICAL2022-01-11

apache-log4j2 vulnerabilities

CVEs:CVE-2021-44832 CVE-2021-45105

Affected products

Product	Status	Vendor	Package	Ecosystem
apache-log4j2	affected	Ubuntu:18.04:LTS	apache-log4j2	—
apache-log4j2	affected	Ubuntu:20.04:LTS	apache-log4j2	—

Upstream advisory

USN-5212-2

USNWeaponized exploitCRITICAL2022-01-10

apache2 vulnerabilities

CVEs:CVE-2021-44224 CVE-2021-44790

Affected products

Product	Status	Vendor	Package	Ecosystem
apache2	affected	Ubuntu:Pro:16.04:LTS	apache2	—
apache2	affected	Ubuntu:Pro:14.04:LTS	apache2	—

Upstream advisory

USN-5212-1

USNWeaponized exploitCRITICAL2022-01-06

apache2 vulnerabilities

CVEs:CVE-2021-44224 CVE-2021-44790

Affected products

Product	Status	Vendor	Package	Ecosystem
apache2	affected	Ubuntu:18.04:LTS	apache2	—
apache2	affected	Ubuntu:20.04:LTS	apache2	—

Upstream advisory

UBUNTU-CVE-2021-26247

USNWeaponized exploitMEDIUM2022-01-19

CVEs:CVE-2021-26247

Affected products

Product	Status	Vendor	Package	Ecosystem
cacti	affected	Ubuntu:Pro:22.04:LTS	cacti	—
cacti	affected	Ubuntu:24.04:LTS	cacti	—
cacti	affected	Ubuntu:Pro:20.04:LTS	cacti	—
cacti	affected	Ubuntu:Pro:14.04:LTS	cacti	—
cacti	affected	Ubuntu:Pro:16.04:LTS	cacti	—
cacti	affected	Ubuntu:25.10	cacti	—
cacti	affected	Ubuntu:Pro:18.04:LTS	cacti	—

Upstream advisory

USN-5227-2

USNActive exploitation (sightings)HIGH2022-01-17

pillow vulnerabilities

CVEs:CVE-2021-23437 CVE-2021-34552 CVE-2022-22815 CVE-2022-22816 CVE-2022-22817

Affected products

Product	Status	Vendor	Package	Ecosystem
pillow	affected	Ubuntu:Pro:16.04:LTS	pillow	—
pillow	affected	Ubuntu:Pro:14.04:LTS	pillow	—

Upstream advisory

USN-5227-1

USNActive exploitation (sightings)HIGH2022-01-13

pillow vulnerabilities

CVEs:CVE-2021-23437 CVE-2021-34552 CVE-2022-22815 CVE-2022-22816 CVE-2022-22817

Affected products

Product	Status	Vendor	Package	Ecosystem
pillow	affected	Ubuntu:18.04:LTS	pillow	—
pillow	affected	Ubuntu:20.04:LTS	pillow	—

Upstream advisory

USN-5241-1

USNActive exploitation (sightings)HIGH2022-01-19

qtsvg-opensource-src vulnerabilities

CVEs:CVE-2018-19869 CVE-2021-3481 CVE-2021-45930

Affected products

Product	Status	Vendor	Package	Ecosystem
qtsvg-opensource-src	affected	Ubuntu:18.04:LTS	qtsvg-opensource-src	—

Upstream advisory

USN-5257-1

USNActive exploitation (sightings)HIGH2022-01-31

ldns vulnerabilities

CVEs:CVE-2020-19860 CVE-2020-19861

Affected products

Product	Status	Vendor	Package	Ecosystem
ldns	affected	Ubuntu:Pro:16.04:LTS	ldns	—
ldns	affected	Ubuntu:18.04:LTS	ldns	—

Upstream advisory

UBUNTU-CVE-2020-19861

USNActive exploitation (sightings)HIGH2022-01-21

CVEs:CVE-2020-19861

Affected products

Product	Status	Vendor	Package	Ecosystem
ldns	affected	Ubuntu:Pro:16.04:LTS	ldns	—
ldns	affected	Ubuntu:Pro:20.04:LTS	ldns	—
ldns	affected	Ubuntu:18.04:LTS	ldns	—
ldns	affected	Ubuntu:Pro:22.04:LTS	ldns	—

Upstream advisory

UBUNTU-CVE-2021-32842

USNActive exploitation (sightings)MEDIUM2022-01-26

CVEs:CVE-2021-32842

Affected products

Product	Status	Vendor	Package	Ecosystem
mono	affected	Ubuntu:25.10	mono	—
mono	affected	Ubuntu:22.04:LTS	mono	—
mono	affected	Ubuntu:20.04:LTS	mono	—
mono	affected	Ubuntu:14.04:LTS	mono	—
mono	affected	Ubuntu:18.04:LTS	mono	—
mono	affected	Ubuntu:24.04:LTS	mono	—
mono	affected	Ubuntu:16.04:LTS	mono	—

Upstream advisory

UBUNTU-CVE-2020-36776

USNActive exploitation (sightings)MEDIUM2022-01-28

CVEs:CVE-2020-36776

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:Pro:20.04:LTS	linux	—
linux	affected	Ubuntu:Pro:18.04:LTS	linux	—
linux-allwinner-5.19	affected	Ubuntu:22.04:LTS	linux-allwinner-5.19	—
linux-aws	affected	Ubuntu:Pro:20.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:Pro:18.04:LTS	linux-aws	—
linux-aws-5.0	affected	Ubuntu:18.04:LTS	linux-aws-5.0	—
linux-aws-5.11	affected	Ubuntu:20.04:LTS	linux-aws-5.11	—
linux-aws-5.13	affected	Ubuntu:20.04:LTS	linux-aws-5.13	—
linux-aws-5.19	affected	Ubuntu:22.04:LTS	linux-aws-5.19	—
linux-aws-5.3	affected	Ubuntu:18.04:LTS	linux-aws-5.3	—
linux-aws-5.4	affected	Ubuntu:Pro:18.04:LTS	linux-aws-5.4	—
linux-aws-5.8	affected	Ubuntu:20.04:LTS	linux-aws-5.8	—
linux-aws-6.2	affected	Ubuntu:22.04:LTS	linux-aws-6.2	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-aws-fips	—
linux-aws-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-aws-fips	—
linux-aws-hwe	affected	Ubuntu:Pro:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:Pro:16.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:18.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:Pro:20.04:LTS	linux-azure	—
linux-azure-4.15	affected	Ubuntu:Pro:18.04:LTS	linux-azure-4.15	—
linux-azure-5.11	affected	Ubuntu:20.04:LTS	linux-azure-5.11	—
linux-azure-5.13	affected	Ubuntu:20.04:LTS	linux-azure-5.13	—
linux-azure-5.19	affected	Ubuntu:22.04:LTS	linux-azure-5.19	—
linux-azure-5.3	affected	Ubuntu:18.04:LTS	linux-azure-5.3	—
linux-azure-5.4	affected	Ubuntu:Pro:18.04:LTS	linux-azure-5.4	—
linux-azure-5.8	affected	Ubuntu:20.04:LTS	linux-azure-5.8	—
linux-azure-6.2	affected	Ubuntu:22.04:LTS	linux-azure-6.2	—
linux-azure-edge	affected	Ubuntu:18.04:LTS	linux-azure-edge	—
linux-azure-fde	affected	Ubuntu:20.04:LTS	linux-azure-fde	—
linux-azure-fde-5.19	affected	Ubuntu:22.04:LTS	linux-azure-fde-5.19	—
linux-azure-fde-6.2	affected	Ubuntu:22.04:LTS	linux-azure-fde-6.2	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-azure-fips	—
linux-azure-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-azure-fips	—
linux-bluefield	affected	Ubuntu:Pro:20.04:LTS	linux-bluefield	—
linux-fips	affected	Ubuntu:Pro:FIPS:20.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS:18.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-fips	—
linux-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-fips	—
linux-gcp	affected	Ubuntu:Pro:16.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:Pro:20.04:LTS	linux-gcp	—
linux-gcp	affected	Ubuntu:18.04:LTS	linux-gcp	—
linux-gcp-4.15	affected	Ubuntu:Pro:18.04:LTS	linux-gcp-4.15	—
linux-gcp-5.11	affected	Ubuntu:20.04:LTS	linux-gcp-5.11	—
linux-gcp-5.13	affected	Ubuntu:20.04:LTS	linux-gcp-5.13	—
linux-gcp-5.19	affected	Ubuntu:22.04:LTS	linux-gcp-5.19	—
linux-gcp-5.3	affected	Ubuntu:18.04:LTS	linux-gcp-5.3	—
linux-gcp-5.4	affected	Ubuntu:Pro:18.04:LTS	linux-gcp-5.4	—
linux-gcp-5.8	affected	Ubuntu:20.04:LTS	linux-gcp-5.8	—
linux-gcp-6.2	affected	Ubuntu:22.04:LTS	linux-gcp-6.2	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS-updates:20.04:LTS	linux-gcp-fips	—
linux-gcp-fips	affected	Ubuntu:Pro:FIPS-updates:18.04:LTS	linux-gcp-fips	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke-4.15	affected	Ubuntu:18.04:LTS	linux-gke-4.15	—
linux-gke-5.15	affected	Ubuntu:20.04:LTS	linux-gke-5.15	—
linux-gke-5.4	affected	Ubuntu:18.04:LTS	linux-gke-5.4	—
linux-gkeop	affected	Ubuntu:20.04:LTS	linux-gkeop	—
linux-gkeop-5.4	affected	Ubuntu:18.04:LTS	linux-gkeop-5.4	—
linux-hwe	affected	Ubuntu:Pro:16.04:LTS	linux-hwe	—
linux-hwe	affected	Ubuntu:18.04:LTS	linux-hwe	—
linux-hwe-5.11	affected	Ubuntu:20.04:LTS	linux-hwe-5.11	—
linux-hwe-5.13	affected	Ubuntu:20.04:LTS	linux-hwe-5.13	—
linux-hwe-5.19	affected	Ubuntu:22.04:LTS	linux-hwe-5.19	—
linux-hwe-5.4	affected	Ubuntu:Pro:18.04:LTS	linux-hwe-5.4	—
linux-hwe-5.8	affected	Ubuntu:20.04:LTS	linux-hwe-5.8	—
linux-hwe-6.2	affected	Ubuntu:22.04:LTS	linux-hwe-6.2	—
linux-hwe-edge	affected	Ubuntu:16.04:LTS	linux-hwe-edge	—
linux-ibm	affected	Ubuntu:Pro:20.04:LTS	linux-ibm	—
linux-ibm-5.4	affected	Ubuntu:Pro:18.04:LTS	linux-ibm-5.4	—
linux-intel-5.13	affected	Ubuntu:20.04:LTS	linux-intel-5.13	—
linux-intel-iot-realtime	affected	Ubuntu:22.04:LTS	linux-intel-iot-realtime	—
linux-iot	affected	Ubuntu:Pro:20.04:LTS	linux-iot	—
linux-kvm	affected	Ubuntu:Pro:18.04:LTS	linux-kvm	—
linux-kvm	affected	Ubuntu:Pro:20.04:LTS	linux-kvm	—
linux-lowlatency-hwe-5.19	affected	Ubuntu:22.04:LTS	linux-lowlatency-hwe-5.19	—
linux-lowlatency-hwe-6.2	affected	Ubuntu:22.04:LTS	linux-lowlatency-hwe-6.2	—
linux-nvidia-6.2	affected	Ubuntu:22.04:LTS	linux-nvidia-6.2	—
linux-oem	affected	Ubuntu:18.04:LTS	linux-oem	—
linux-oem-5.10	affected	Ubuntu:20.04:LTS	linux-oem-5.10	—
linux-oem-5.13	affected	Ubuntu:20.04:LTS	linux-oem-5.13	—
linux-oem-5.14	affected	Ubuntu:20.04:LTS	linux-oem-5.14	—
linux-oem-5.17	affected	Ubuntu:22.04:LTS	linux-oem-5.17	—
linux-oem-5.6	affected	Ubuntu:20.04:LTS	linux-oem-5.6	—
linux-oem-6.0	affected	Ubuntu:22.04:LTS	linux-oem-6.0	—
linux-oem-6.1	affected	Ubuntu:22.04:LTS	linux-oem-6.1	—
linux-oracle	affected	Ubuntu:Pro:16.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:Pro:18.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:Pro:20.04:LTS	linux-oracle	—
linux-oracle-5.0	affected	Ubuntu:18.04:LTS	linux-oracle-5.0	—
linux-oracle-5.11	affected	Ubuntu:20.04:LTS	linux-oracle-5.11	—
linux-oracle-5.13	affected	Ubuntu:20.04:LTS	linux-oracle-5.13	—
linux-oracle-5.3	affected	Ubuntu:18.04:LTS	linux-oracle-5.3	—
linux-oracle-5.4	affected	Ubuntu:Pro:18.04:LTS	linux-oracle-5.4	—
linux-oracle-5.8	affected	Ubuntu:20.04:LTS	linux-oracle-5.8	—
linux-raspi	affected	Ubuntu:Pro:20.04:LTS	linux-raspi	—
linux-raspi2	affected	Ubuntu:20.04:LTS	linux-raspi2	—
linux-raspi-5.4	affected	Ubuntu:Pro:18.04:LTS	linux-raspi-5.4	—
linux-raspi-realtime	affected	Ubuntu:24.04:LTS	linux-raspi-realtime	—
linux-realtime	affected	Ubuntu:22.04:LTS	linux-realtime	—
linux-riscv	affected	Ubuntu:22.04:LTS	linux-riscv	—
linux-riscv	affected	Ubuntu:20.04:LTS	linux-riscv	—
linux-riscv-5.11	affected	Ubuntu:20.04:LTS	linux-riscv-5.11	—
linux-riscv-5.19	affected	Ubuntu:22.04:LTS	linux-riscv-5.19	—
linux-riscv-5.8	affected	Ubuntu:20.04:LTS	linux-riscv-5.8	—
linux-starfive-5.19	affected	Ubuntu:22.04:LTS	linux-starfive-5.19	—
linux-starfive-6.2	affected	Ubuntu:22.04:LTS	linux-starfive-6.2	—
linux-xilinx-zynqmp	affected	Ubuntu:Pro:20.04:LTS	linux-xilinx-zynqmp	—

Upstream advisory

USN-5223-1

USNCoalition ESS > 63%CRITICAL2022-01-12

apache-log4j1.2 vulnerability

CVEs:CVE-2021-4104

Affected products

Product	Status	Vendor	Package	Ecosystem
apache-log4j1.2	affected	Ubuntu:18.04:LTS	apache-log4j1.2	—
apache-log4j1.2	affected	Ubuntu:20.04:LTS	apache-log4j1.2	—

Upstream advisory

USN-5218-1

USNPoC exploitHIGH2022-01-11

linux-oem-5.13 vulnerabilities

CVEs:CVE-2021-3760 CVE-2021-4002 CVE-2021-4204 CVE-2021-20321 CVE-2021-41864 CVE-2021-43056 CVE-2021-43267 CVE-2021-43389

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-oem-5.13	affected	Ubuntu:20.04:LTS	linux-oem-5.13	—

Upstream advisory

USN-5208-1

USNPoC exploitHIGH2022-01-06

linux, linux-aws, linux-aws-5.11, linux-azure, linux-azure-5.11, linux-gcp, linux-gcp-5.11, linux-hwe-5.11, linux-kvm, linux-oracle, linux-oracle-5.11, linux-raspi vulnerabilities

CVEs:CVE-2021-3760 CVE-2021-4002 CVE-2021-20321 CVE-2021-41864 CVE-2021-43056 CVE-2021-43267 CVE-2021-43389

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-aws-5.11	affected	Ubuntu:20.04:LTS	linux-aws-5.11	—
linux-azure-5.11	affected	Ubuntu:20.04:LTS	linux-azure-5.11	—
linux-gcp-5.11	affected	Ubuntu:20.04:LTS	linux-gcp-5.11	—
linux-hwe-5.11	affected	Ubuntu:20.04:LTS	linux-hwe-5.11	—
linux-oracle-5.11	affected	Ubuntu:20.04:LTS	linux-oracle-5.11	—

Upstream advisory

USN-5207-1

USNPoC exploitHIGH2022-01-05

linux-oem-5.10 vulnerabilities

CVEs:CVE-2021-4001 CVE-2021-4002 CVE-2021-42739 CVE-2021-43267

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-oem-5.10	affected	Ubuntu:20.04:LTS	linux-oem-5.10	—

Upstream advisory

USN-5021-2

USNPoC exploitHIGH2022-01-20

curl vulnerability

CVEs:CVE-2021-22898 CVE-2021-22925

Affected products

Product	Status	Vendor	Package	Ecosystem
curl	affected	Ubuntu:Pro:16.04:LTS	curl	—

Upstream advisory

USN-5235-1

USNPoC exploitHIGH2022-01-18

ruby2.3, ruby2.5, ruby2.7 vulnerabilities

CVEs:CVE-2021-41816 CVE-2021-41817 CVE-2021-41819

Affected products

Product	Status	Vendor	Package	Ecosystem
ruby2.3	affected	Ubuntu:Pro:16.04:LTS	ruby2.3	—
ruby2.5	affected	Ubuntu:18.04:LTS	ruby2.5	—
ruby2.7	affected	Ubuntu:20.04:LTS	ruby2.7	—

Upstream advisory

USN-5064-2

USNPoC exploitCRITICAL2022-01-27

cpio vulnerability

CVEs:CVE-2021-38185

Affected products

Product	Status	Vendor	Package	Ecosystem
cpio	affected	Ubuntu:Pro:16.04:LTS	cpio	—

Upstream advisory

UBUNTU-CVE-2021-22570

USNPoC exploitMEDIUM2022-01-26

CVEs:CVE-2021-22570

Affected products

Product	Status	Vendor	Package	Ecosystem
protobuf	affected	Ubuntu:22.04:LTS	protobuf	—
protobuf	affected	Ubuntu:18.04:LTS	protobuf	—
protobuf	affected	Ubuntu:Pro:14.04:LTS	protobuf	—
protobuf	affected	Ubuntu:Pro:16.04:LTS	protobuf	—
protobuf	affected	Ubuntu:20.04:LTS	protobuf	—

Upstream advisory

USN-5204-1

USNPoC exploitCRITICAL2022-01-05

python-django vulnerabilities

CVEs:CVE-2021-45115 CVE-2021-45116 CVE-2021-45452

Affected products

Product	Status	Vendor	Package	Ecosystem
python-django	affected	Ubuntu:18.04:LTS	python-django	—
python-django	affected	Ubuntu:20.04:LTS	python-django	—

Upstream advisory

USN-5236-1

USNPoC exploitHIGH2022-01-19

A security issue was fixed in pngcrush

CVEs:CVE-2015-7700

Affected products

Product	Status	Vendor	Package	Ecosystem
pngcrush	affected	Ubuntu:Pro:16.04:LTS	pngcrush	—

Upstream advisory

USN-5213-1

USNPoC exploitHIGH2022-01-06

webkit2gtk vulnerabilities

CVEs:CVE-2021-30887 CVE-2021-30890

Affected products

Product	Status	Vendor	Package	Ecosystem
webkit2gtk	affected	Ubuntu:20.04:LTS	webkit2gtk	—

Upstream advisory

UBUNTU-CVE-2021-22569

USNPoC exploitHIGH2022-01-07

CVEs:CVE-2021-22569

Affected products

Product	Status	Vendor	Package	Ecosystem
protobuf	affected	Ubuntu:22.04:LTS	protobuf	—
protobuf	affected	Ubuntu:18.04:LTS	protobuf	—
protobuf	affected	Ubuntu:Pro:14.04:LTS	protobuf	—
protobuf	affected	Ubuntu:Pro:16.04:LTS	protobuf	—
protobuf	affected	Ubuntu:20.04:LTS	protobuf	—

Upstream advisory

USN-5226-1

USNPoC exploitMEDIUM2022-01-13

systemd vulnerability

CVEs:CVE-2021-3997

Affected products

Product	Status	Vendor	Package	Ecosystem
systemd	affected	Ubuntu:20.04:LTS	systemd	—

Upstream advisory

UBUNTU-CVE-2021-22060

USNPoC exploitMEDIUM2022-01-05

CVEs:CVE-2021-22060

Affected products

Product	Status	Vendor	Package	Ecosystem
libspring-java	affected	Ubuntu:Pro:14.04:LTS	libspring-java	—
libspring-java	affected	Ubuntu:Pro:18.04:LTS	libspring-java	—
libspring-java	affected	Ubuntu:Pro:22.04:LTS	libspring-java	—
libspring-java	affected	Ubuntu:Pro:16.04:LTS	libspring-java	—
libspring-java	affected	Ubuntu:Pro:20.04:LTS	libspring-java	—
libspring-java	affected	Ubuntu:25.10	libspring-java	—
libspring-java	affected	Ubuntu:Pro:24.04:LTS	libspring-java	—

Upstream advisory

UBUNTU-CVE-2021-25743

USNPoC exploitLOW2022-01-06

CVEs:CVE-2021-25743

Affected products

Product	Status	Vendor	Package	Ecosystem
kubernetes	affected	Ubuntu:24.04:LTS	kubernetes	—
kubernetes	affected	Ubuntu:Pro:20.04:LTS	kubernetes	—
kubernetes	affected	Ubuntu:22.04:LTS	kubernetes	—

Upstream advisory

USN-5210-1

USNPoC exploitHIGH2022-01-06

linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gke, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities

CVEs:CVE-2020-26541 CVE-2021-3760 CVE-2021-4002 CVE-2021-20321 CVE-2021-41864 CVE-2021-43056 CVE-2021-43389

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:20.04:LTS	linux	—
linux-aws	affected	Ubuntu:20.04:LTS	linux-aws	—
linux-aws-5.4	affected	Ubuntu:18.04:LTS	linux-aws-5.4	—
linux-azure	affected	Ubuntu:20.04:LTS	linux-azure	—
linux-azure-5.4	affected	Ubuntu:18.04:LTS	linux-azure-5.4	—
linux-bluefield	affected	Ubuntu:20.04:LTS	linux-bluefield	—
linux-gcp	affected	Ubuntu:20.04:LTS	linux-gcp	—
linux-gcp-5.4	affected	Ubuntu:18.04:LTS	linux-gcp-5.4	—
linux-gke	affected	Ubuntu:20.04:LTS	linux-gke	—
linux-gke-5.4	affected	Ubuntu:18.04:LTS	linux-gke-5.4	—
linux-gkeop	affected	Ubuntu:20.04:LTS	linux-gkeop	—
linux-gkeop-5.4	affected	Ubuntu:18.04:LTS	linux-gkeop-5.4	—
linux-hwe-5.4	affected	Ubuntu:18.04:LTS	linux-hwe-5.4	—
linux-ibm	affected	Ubuntu:20.04:LTS	linux-ibm	—
linux-kvm	affected	Ubuntu:20.04:LTS	linux-kvm	—
linux-oracle	affected	Ubuntu:20.04:LTS	linux-oracle	—
linux-oracle-5.4	affected	Ubuntu:18.04:LTS	linux-oracle-5.4	—
linux-raspi	affected	Ubuntu:20.04:LTS	linux-raspi	—
linux-raspi-5.4	affected	Ubuntu:18.04:LTS	linux-raspi-5.4	—

Upstream advisory

UBUNTU-CVE-2021-33912

USNCoalition ESS < 30%CRITICAL2022-01-19

CVEs:CVE-2021-33912

Affected products

Product	Status	Vendor	Package	Ecosystem
libspf2	affected	Ubuntu:Pro:16.04:LTS	libspf2	—
libspf2	affected	Ubuntu:20.04:LTS	libspf2	—
libspf2	affected	Ubuntu:Pro:18.04:LTS	libspf2	—

Upstream advisory

UBUNTU-CVE-2021-33913

USNCoalition ESS < 30%CRITICAL2022-01-19

CVEs:CVE-2021-33913

Affected products

Product	Status	Vendor	Package	Ecosystem
libspf2	affected	Ubuntu:Pro:16.04:LTS	libspf2	—
libspf2	affected	Ubuntu:20.04:LTS	libspf2	—
libspf2	affected	Ubuntu:Pro:18.04:LTS	libspf2	—

Upstream advisory

USN-5248-1

USNCoalition ESS < 30%HIGH2022-01-21

thunderbird vulnerabilities

CVEs:CVE-2021-4126 CVE-2021-4129 CVE-2021-4140 CVE-2021-29981 CVE-2021-29982 CVE-2021-29987 CVE-2021-29991 CVE-2021-38495 CVE-2021-38496 CVE-2021-38497 CVE-2021-38498 CVE-2021-38500 CVE-2021-38501 CVE-2021-38502 CVE-2021-38503 CVE-2021-38504 CVE-2021-38506 CVE-2021-38507 CVE-2021-38508 CVE-2021-38509 CVE-2021-43528 CVE-2021-43534 CVE-2021-43535 CVE-2021-43536 CVE-2021-43537 CVE-2021-43538 CVE-2021-43539 CVE-2021-43541 CVE-2021-43542 CVE-2021-43543 CVE-2021-43545 CVE-2021-43546 CVE-2021-44538 CVE-2022-22737 CVE-2022-22738 CVE-2022-22739 CVE-2022-22740 CVE-2022-22741 CVE-2022-22742 CVE-2022-22743 CVE-2022-22745 CVE-2022-22747 CVE-2022-22748 CVE-2022-22751

Affected products

Product	Status	Vendor	Package	Ecosystem
thunderbird	affected	Ubuntu:20.04:LTS	thunderbird	—
thunderbird	affected	Ubuntu:18.04:LTS	thunderbird	—

Upstream advisory

USN-5233-2

USNCoalition ESS < 30%HIGH2022-01-19

clamav vulnerability

CVEs:CVE-2022-20698

Affected products

Product	Status	Vendor	Package	Ecosystem
clamav	affected	Ubuntu:Pro:14.04:LTS	clamav	—
clamav	affected	Ubuntu:Pro:16.04:LTS	clamav	—

Upstream advisory

USN-5233-1

USNCoalition ESS < 30%HIGH2022-01-18

clamav vulnerability

CVEs:CVE-2022-20698

Affected products

Product	Status	Vendor	Package	Ecosystem
clamav	affected	Ubuntu:18.04:LTS	clamav	—
clamav	affected	Ubuntu:20.04:LTS	clamav	—

Upstream advisory

USN-5250-2

USNCoalition ESS < 30%HIGH2022-01-24

strongswan vulnerability

CVEs:CVE-2021-45079

Affected products

Product	Status	Vendor	Package	Ecosystem
strongswan	affected	Ubuntu:Pro:14.04:LTS	strongswan	—
strongswan	affected	Ubuntu:Pro:16.04:LTS	strongswan	—

Upstream advisory

USN-5250-1

USNCoalition ESS < 30%HIGH2022-01-24

strongswan vulnerability

CVEs:CVE-2021-45079

Affected products

Product	Status	Vendor	Package	Ecosystem
strongswan	affected	Ubuntu:20.04:LTS	strongswan	—
strongswan	affected	Ubuntu:18.04:LTS	strongswan	—

Upstream advisory

USN-5225-1

USNCoalition ESS < 30%CRITICAL2022-01-12

lxml vulnerability

CVEs:CVE-2021-43818

Affected products

Product	Status	Vendor	Package	Ecosystem
lxml	affected	Ubuntu:20.04:LTS	lxml	—
lxml	affected	Ubuntu:18.04:LTS	lxml	—
lxml	affected	Ubuntu:Pro:16.04:LTS	lxml	—
lxml	affected	Ubuntu:Pro:14.04:LTS	lxml	—

Upstream advisory

UBUNTU-CVE-2021-21408

USNCoalition ESS < 30%HIGH2022-01-10

CVEs:CVE-2021-21408

Affected products

Product	Status	Vendor	Package	Ecosystem
smarty3	affected	Ubuntu:22.04:LTS	smarty3	—
smarty3	affected	Ubuntu:18.04:LTS	smarty3	—
smarty3	affected	Ubuntu:Pro:16.04:LTS	smarty3	—
smarty3	affected	Ubuntu:Pro:20.04:LTS	smarty3	—

Upstream advisory

UBUNTU-CVE-2020-29050

USNCoalition ESS < 30%HIGH2022-01-10

CVEs:CVE-2020-29050

Affected products

Product	Status	Vendor	Package	Ecosystem
sphinxsearch	affected	Ubuntu:20.04:LTS	sphinxsearch	—
sphinxsearch	affected	Ubuntu:22.04:LTS	sphinxsearch	—
sphinxsearch	affected	Ubuntu:18.04:LTS	sphinxsearch	—
sphinxsearch	affected	Ubuntu:16.04:LTS	sphinxsearch	—

Upstream advisory

UBUNTU-CVE-2021-32840

USNCoalition ESS < 30%CRITICAL2022-01-26

CVEs:CVE-2021-32840

Affected products

Product	Status	Vendor	Package	Ecosystem
mono	affected	Ubuntu:25.10	mono	—
mono	affected	Ubuntu:22.04:LTS	mono	—
mono	affected	Ubuntu:24.04:LTS	mono	—

Upstream advisory

UBUNTU-CVE-2021-23518

USNCoalition ESS < 30%CRITICAL2022-01-21

CVEs:CVE-2021-23518

Affected products

Product	Status	Vendor	Package	Ecosystem
node-cached-path-relative	affected	Ubuntu:18.04:LTS	node-cached-path-relative	—
node-cached-path-relative	affected	Ubuntu:22.04:LTS	node-cached-path-relative	—
node-cached-path-relative	affected	Ubuntu:25.10	node-cached-path-relative	—
node-cached-path-relative	affected	Ubuntu:20.04:LTS	node-cached-path-relative	—
node-cached-path-relative	affected	Ubuntu:24.04:LTS	node-cached-path-relative	—

Upstream advisory

UBUNTU-CVE-2021-29454

USNCoalition ESS < 30%HIGH2022-01-10

CVEs:CVE-2021-29454

Affected products

Product	Status	Vendor	Package	Ecosystem
smarty3	affected	Ubuntu:22.04:LTS	smarty3	—
smarty3	affected	Ubuntu:18.04:LTS	smarty3	—
smarty3	affected	Ubuntu:Pro:16.04:LTS	smarty3	—
smarty3	affected	Ubuntu:Pro:20.04:LTS	smarty3	—

Upstream advisory

UBUNTU-CVE-2020-19858

USNCoalition ESS < 30%HIGH2022-01-21

CVEs:CVE-2020-19858

Affected products

Product	Status	Vendor	Package	Ecosystem
digikam	affected	Ubuntu:Pro:20.04:LTS	digikam	—
kodi	affected	Ubuntu:22.04:LTS	kodi	—
kodi	affected	Ubuntu:24.04:LTS	kodi	—
kodi	affected	Ubuntu:18.04:LTS	kodi	—
kodi	affected	Ubuntu:16.04:LTS	kodi	—
kodi	affected	Ubuntu:20.04:LTS	kodi	—
kodi	affected	Ubuntu:25.10	kodi	—

Upstream advisory

USN-5215-1

USNCoalition ESS < 30%HIGH2022-01-10

nltk vulnerability

CVEs:CVE-2021-3828

Affected products

Product	Status	Vendor	Package	Ecosystem
nltk	affected	Ubuntu:Pro:18.04:LTS	nltk	—
nltk	affected	Ubuntu:Pro:16.04:LTS	nltk	—
nltk	affected	Ubuntu:Pro:20.04:LTS	nltk	—

Upstream advisory

USN-5224-2

USNCoalition ESS < 30%HIGH2022-01-13

ghostscript vulnerabilities

CVEs:CVE-2021-45944 CVE-2021-45949

Affected products

Product	Status	Vendor	Package	Ecosystem
ghostscript	affected	Ubuntu:Pro:16.04:LTS	ghostscript	—

Upstream advisory

USN-5224-1

USNCoalition ESS < 30%HIGH2022-01-12

ghostscript vulnerabilities

CVEs:CVE-2021-45944 CVE-2021-45949

Affected products

Product	Status	Vendor	Package	Ecosystem
ghostscript	affected	Ubuntu:18.04:LTS	ghostscript	—
ghostscript	affected	Ubuntu:20.04:LTS	ghostscript	—

Upstream advisory

USN-5229-1

USNCoalition ESS < 30%HIGH2022-01-13

firefox vulnerabilities

CVEs:CVE-2021-4140 CVE-2022-22737 CVE-2022-22738 CVE-2022-22739 CVE-2022-22740 CVE-2022-22741 CVE-2022-22742 CVE-2022-22743 CVE-2022-22745 CVE-2022-22747 CVE-2022-22748 CVE-2022-22751 CVE-2022-22752

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:18.04:LTS	firefox	—
firefox	affected	Ubuntu:20.04:LTS	firefox	—

Upstream advisory

UBUNTU-CVE-2021-35452

USNCoalition ESS < 30%MEDIUM2022-01-10

CVEs:CVE-2021-35452

Affected products

Product	Status	Vendor	Package	Ecosystem
libde265	affected	Ubuntu:20.04:LTS	libde265	—
libde265	affected	Ubuntu:22.04:LTS	libde265	—
libde265	affected	Ubuntu:Pro:18.04:LTS	libde265	—
libde265	affected	Ubuntu:Pro:16.04:LTS	libde265	—

Upstream advisory

UBUNTU-CVE-2020-19860

USNCoalition ESS < 30%MEDIUM2022-01-21

CVEs:CVE-2020-19860

Affected products

Product	Status	Vendor	Package	Ecosystem
ldns	affected	Ubuntu:18.04:LTS	ldns	—
ldns	affected	Ubuntu:Pro:16.04:LTS	ldns	—
ldns	affected	Ubuntu:Pro:20.04:LTS	ldns	—
ldns	affected	Ubuntu:Pro:22.04:LTS	ldns	—

Upstream advisory

UBUNTU-CVE-2021-23520

USNCoalition ESS < 30%CRITICAL2022-01-31

CVEs:CVE-2021-23520

Affected products

Product	Status	Vendor	Package	Ecosystem
juce	affected	Ubuntu:25.10	juce	—
juce	affected	Ubuntu:24.04:LTS	juce	—
juce	affected	Ubuntu:16.04:LTS	juce	—
juce	affected	Ubuntu:18.04:LTS	juce	—
juce	affected	Ubuntu:22.04:LTS	juce	—
juce	affected	Ubuntu:20.04:LTS	juce	—

Upstream advisory

UBUNTU-CVE-2021-32841

USNCoalition ESS < 30%MEDIUM2022-01-26

CVEs:CVE-2021-32841

Affected products

Product	Status	Vendor	Package	Ecosystem
mono	affected	Ubuntu:25.10	mono	—
mono	affected	Ubuntu:22.04:LTS	mono	—
mono	affected	Ubuntu:24.04:LTS	mono	—

Upstream advisory

USN-5043-2

USNCoalition ESS < 30%HIGH2022-01-11

exiv2 regression

CVEs:CVE-2021-37620

Affected products

Product	Status	Vendor	Package	Ecosystem
exiv2	affected	Ubuntu:20.04:LTS	exiv2	—

Upstream advisory

UBUNTU-CVE-2020-23026

USNCoalition ESS < 30%HIGH2022-01-03

CVEs:CVE-2020-23026

Affected products

Product	Status	Vendor	Package	Ecosystem
gcc-3.3	affected	Ubuntu:16.04:LTS	gcc-3.3	—
gcc-3.3	affected	Ubuntu:20.04:LTS	gcc-3.3	—
gcc-3.3	affected	Ubuntu:18.04:LTS	gcc-3.3	—
gcc-3.3	affected	Ubuntu:14.04:LTS	gcc-3.3	—
gcc-3.3	affected	Ubuntu:22.04:LTS	gcc-3.3	—
gcc-4.7	affected	Ubuntu:16.04:LTS	gcc-4.7	—
gcc-4.7	affected	Ubuntu:14.04:LTS	gcc-4.7	—
gcc-4.7-armel-cross	affected	Ubuntu:16.04:LTS	gcc-4.7-armel-cross	—
gcc-4.7-armhf-cross	affected	Ubuntu:16.04:LTS	gcc-4.7-armhf-cross	—
gcc-4.8	affected	Ubuntu:14.04:LTS	gcc-4.8	—
gcc-4.8	affected	Ubuntu:16.04:LTS	gcc-4.8	—
gcc-4.8	affected	Ubuntu:18.04:LTS	gcc-4.8	—
gcc-4.8-arm64-cross	affected	Ubuntu:16.04:LTS	gcc-4.8-arm64-cross	—
gcc-4.8-armhf-cross	affected	Ubuntu:16.04:LTS	gcc-4.8-armhf-cross	—
gcc-4.8-powerpc-cross	affected	Ubuntu:16.04:LTS	gcc-4.8-powerpc-cross	—
gcc-4.8-ppc64el-cross	affected	Ubuntu:16.04:LTS	gcc-4.8-ppc64el-cross	—
gcc-4.9	affected	Ubuntu:16.04:LTS	gcc-4.9	—
gcc-5	affected	Ubuntu:Pro:16.04:LTS	gcc-5	—
gcc-5	affected	Ubuntu:18.04:LTS	gcc-5	—
gcc-5-cross	affected	Ubuntu:18.04:LTS	gcc-5-cross	—
gcc-5-cross	affected	Ubuntu:16.04:LTS	gcc-5-cross	—
gcc-6	affected	Ubuntu:18.04:LTS	gcc-6	—
gcc-6-cross	affected	Ubuntu:18.04:LTS	gcc-6-cross	—
gcc-6-cross-ports	affected	Ubuntu:18.04:LTS	gcc-6-cross-ports	—
gcc-7	affected	Ubuntu:20.04:LTS	gcc-7	—
gcc-7	affected	Ubuntu:18.04:LTS	gcc-7	—
gcc-7-cross	affected	Ubuntu:18.04:LTS	gcc-7-cross	—
gcc-7-cross-ports	affected	Ubuntu:18.04:LTS	gcc-7-cross-ports	—
gcc-8	affected	Ubuntu:18.04:LTS	gcc-8	—
gcc-8	affected	Ubuntu:20.04:LTS	gcc-8	—
gcc-8-cross	affected	Ubuntu:20.04:LTS	gcc-8-cross	—
gcc-8-cross	affected	Ubuntu:18.04:LTS	gcc-8-cross	—
gcc-8-cross-ports	affected	Ubuntu:20.04:LTS	gcc-8-cross-ports	—
gcc-8-cross-ports	affected	Ubuntu:18.04:LTS	gcc-8-cross-ports	—
gcc-9	affected	Ubuntu:20.04:LTS	gcc-9	—
gcc-9	affected	Ubuntu:22.04:LTS	gcc-9	—
gcc-9-cross	affected	Ubuntu:22.04:LTS	gcc-9-cross	—
gcc-9-cross	affected	Ubuntu:20.04:LTS	gcc-9-cross	—
gcc-9-cross-ports	affected	Ubuntu:22.04:LTS	gcc-9-cross-ports	—
gcc-9-cross-ports	affected	Ubuntu:20.04:LTS	gcc-9-cross-ports	—
gcc-arm-linux-androideabi	affected	Ubuntu:16.04:LTS	gcc-arm-linux-androideabi	—
gcc-arm-none-eabi	affected	Ubuntu:16.04:LTS	gcc-arm-none-eabi	—
gcc-arm-none-eabi	affected	Ubuntu:22.04:LTS	gcc-arm-none-eabi	—
gcc-arm-none-eabi	affected	Ubuntu:20.04:LTS	gcc-arm-none-eabi	—
gcc-arm-none-eabi	affected	Ubuntu:18.04:LTS	gcc-arm-none-eabi	—
gcc-avr	affected	Ubuntu:18.04:LTS	gcc-avr	—
gcc-avr	affected	Ubuntu:20.04:LTS	gcc-avr	—
gcc-avr	affected	Ubuntu:16.04:LTS	gcc-avr	—
gcc-avr	affected	Ubuntu:22.04:LTS	gcc-avr	—
gcc-defaults	affected	Ubuntu:18.04:LTS	gcc-defaults	—
gcc-defaults	affected	Ubuntu:14.04:LTS	gcc-defaults	—
gcc-defaults	affected	Ubuntu:16.04:LTS	gcc-defaults	—
gcc-defaults	affected	Ubuntu:22.04:LTS	gcc-defaults	—
gcc-defaults	affected	Ubuntu:20.04:LTS	gcc-defaults	—
gccgo-4.9	affected	Ubuntu:14.04:LTS	gccgo-4.9	—
gccgo-6	affected	Ubuntu:Pro:16.04:LTS	gccgo-6	—
gcc-h8300-hms	affected	Ubuntu:18.04:LTS	gcc-h8300-hms	—
gcc-h8300-hms	affected	Ubuntu:16.04:LTS	gcc-h8300-hms	—
gcc-h8300-hms	affected	Ubuntu:20.04:LTS	gcc-h8300-hms	—
gcc-h8300-hms	affected	Ubuntu:22.04:LTS	gcc-h8300-hms	—
gcc-i686-linux-android	affected	Ubuntu:16.04:LTS	gcc-i686-linux-android	—
gcc-m68hc1x	affected	Ubuntu:22.04:LTS	gcc-m68hc1x	—
gcc-m68hc1x	affected	Ubuntu:16.04:LTS	gcc-m68hc1x	—
gcc-m68hc1x	affected	Ubuntu:20.04:LTS	gcc-m68hc1x	—
gcc-m68hc1x	affected	Ubuntu:18.04:LTS	gcc-m68hc1x	—
gcc-mingw-w64	affected	Ubuntu:22.04:LTS	gcc-mingw-w64	—
gcc-mingw-w64	affected	Ubuntu:18.04:LTS	gcc-mingw-w64	—
gcc-mingw-w64	affected	Ubuntu:20.04:LTS	gcc-mingw-w64	—
gcc-mingw-w64	affected	Ubuntu:16.04:LTS	gcc-mingw-w64	—
gcc-mingw-w64	affected	Ubuntu:14.04:LTS	gcc-mingw-w64	—
gcc-msp430	affected	Ubuntu:18.04:LTS	gcc-msp430	—
gcc-msp430	affected	Ubuntu:20.04:LTS	gcc-msp430	—
gcc-msp430	affected	Ubuntu:16.04:LTS	gcc-msp430	—
gcc-msp430	affected	Ubuntu:22.04:LTS	gcc-msp430	—
gcc-opt	affected	Ubuntu:16.04:LTS	gcc-opt	—
gcc-opt	affected	Ubuntu:22.04:LTS	gcc-opt	—
gcc-opt	affected	Ubuntu:20.04:LTS	gcc-opt	—
gcc-opt	affected	Ubuntu:18.04:LTS	gcc-opt	—
gcc-snapshot	affected	Ubuntu:22.04:LTS	gcc-snapshot	—
gcc-snapshot	affected	Ubuntu:20.04:LTS	gcc-snapshot	—
gcc-snapshot	affected	Ubuntu:16.04:LTS	gcc-snapshot	—
gcc-snapshot	affected	Ubuntu:18.04:LTS	gcc-snapshot	—

Upstream advisory

UBUNTU-CVE-2021-20316

USNCoalition ESS < 30%MEDIUM2022-01-10

CVEs:CVE-2021-20316

Affected products

Product	Status	Vendor	Package	Ecosystem
samba	affected	Ubuntu:Pro:16.04:LTS	samba	—
samba	affected	Ubuntu:Pro:18.04:LTS	samba	—
samba	affected	Ubuntu:Pro:14.04:LTS	samba	—
samba	affected	Ubuntu:Pro:20.04:LTS	samba	—
samba	affected	Ubuntu:22.04:LTS	samba	—

Upstream advisory

UBUNTU-CVE-2021-33966

USNCoalition ESS < 30%MEDIUM2022-01-21

CVEs:CVE-2021-33966

Affected products

Product	Status	Vendor	Package	Ecosystem
spotweb	affected	Ubuntu:20.04:LTS	spotweb	—
spotweb	affected	Ubuntu:18.04:LTS	spotweb	—

Upstream advisory

USN-5209-1

USNCoalition ESS < 30%HIGH2022-01-06

linux, linux-aws, linux-aws-hwe, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities

CVEs:CVE-2021-3760 CVE-2021-4002 CVE-2021-20317 CVE-2021-20321 CVE-2021-41864 CVE-2021-43389

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:18.04:LTS	linux	—
linux-aws	affected	Ubuntu:18.04:LTS	linux-aws	—
linux-aws-hwe	affected	Ubuntu:Pro:16.04:LTS	linux-aws-hwe	—
linux-azure	affected	Ubuntu:Pro:16.04:LTS	linux-azure	—
linux-azure	affected	Ubuntu:Pro:14.04:LTS	linux-azure	—
linux-azure-4.15	affected	Ubuntu:18.04:LTS	linux-azure-4.15	—
linux-dell300x	affected	Ubuntu:18.04:LTS	linux-dell300x	—
linux-gcp	affected	Ubuntu:Pro:16.04:LTS	linux-gcp	—
linux-gcp-4.15	affected	Ubuntu:18.04:LTS	linux-gcp-4.15	—
linux-hwe	affected	Ubuntu:Pro:16.04:LTS	linux-hwe	—
linux-kvm	affected	Ubuntu:18.04:LTS	linux-kvm	—
linux-oracle	affected	Ubuntu:18.04:LTS	linux-oracle	—
linux-oracle	affected	Ubuntu:Pro:16.04:LTS	linux-oracle	—
linux-raspi2	affected	Ubuntu:18.04:LTS	linux-raspi2	—
linux-snapdragon	affected	Ubuntu:18.04:LTS	linux-snapdragon	—

Upstream advisory

USN-5230-1

USNCoalition ESS < 30%HIGH2022-01-24

cpanminus vulnerability

CVEs:CVE-2020-16154

Affected products

Product	Status	Vendor	Package	Ecosystem
cpanminus	affected	Ubuntu:Pro:18.04:LTS	cpanminus	—
cpanminus	affected	Ubuntu:Pro:16.04:LTS	cpanminus	—
cpanminus	affected	Ubuntu	—	—
cpanminus	affected	Ubuntu:Pro:20.04:LTS	cpanminus	—

Upstream advisory

UBUNTU-CVE-2020-25427

USNCoalition ESS < 30%MEDIUM2022-01-10

CVEs:CVE-2020-25427

Affected products

Product	Status	Vendor	Package	Ecosystem
gpac	affected	Ubuntu:Pro:20.04:LTS	gpac	—
gpac	affected	Ubuntu:Pro:16.04:LTS	gpac	—
gpac	affected	Ubuntu:Pro:22.04:LTS	gpac	—
gpac	affected	Ubuntu:Pro:24.04:LTS	gpac	—
gpac	affected	Ubuntu:Pro:18.04:LTS	gpac	—
gpac	affected	Ubuntu:Pro:14.04:LTS	gpac	—

Upstream advisory

USN-5193-2

USNCoalition ESS < 30%CRITICAL2022-01-26

xorg-server vulnerabilities

CVEs:CVE-2021-4008 CVE-2021-4009 CVE-2021-4011

Affected products

Product	Status	Vendor	Package	Ecosystem
xorg-server	affected	Ubuntu:Pro:14.04:LTS	xorg-server	—
xorg-server	affected	Ubuntu:Pro:16.04:LTS	xorg-server	—

Upstream advisory

UBUNTU-CVE-2021-23521

USNCoalition ESS < 30%HIGH2022-01-31

CVEs:CVE-2021-23521

Affected products

Product	Status	Vendor	Package	Ecosystem
juce	affected	Ubuntu:16.04:LTS	juce	—
juce	affected	Ubuntu:24.04:LTS	juce	—
juce	affected	Ubuntu:18.04:LTS	juce	—
juce	affected	Ubuntu:20.04:LTS	juce	—
juce	affected	Ubuntu:22.04:LTS	juce	—
juce	affected	Ubuntu:25.10	juce	—

Upstream advisory

UBUNTU-CVE-2021-23225

USNCoalition ESS < 30%MEDIUM2022-01-19

CVEs:CVE-2021-23225

Affected products

Product	Status	Vendor	Package	Ecosystem
cacti	affected	Ubuntu:24.04:LTS	cacti	—
cacti	affected	Ubuntu:Pro:20.04:LTS	cacti	—
cacti	affected	Ubuntu:Pro:14.04:LTS	cacti	—
cacti	affected	Ubuntu:Pro:16.04:LTS	cacti	—
cacti	affected	Ubuntu:25.10	cacti	—
cacti	affected	Ubuntu:Pro:22.04:LTS	cacti	—
cacti	affected	Ubuntu:Pro:18.04:LTS	cacti	—

Upstream advisory

USN-5211-1

USNCoalition ESS < 30%NONE2022-01-06

linux, linux-aws, linux-kvm, linux-lts-xenial vulnerability

CVEs:CVE-2021-4002

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:Pro:16.04:LTS	linux	—
linux	affected	Ubuntu	—	—
linux	affected	Ubuntu:Pro:14.04:LTS	linux	—
linux-aws	affected	Ubuntu:Pro:16.04:LTS	linux-aws	—
linux-aws	affected	Ubuntu:Pro:14.04:LTS	linux-aws	—
linux-kvm	affected	Ubuntu:Pro:16.04:LTS	linux-kvm	—
linux-lts-xenial	affected	Ubuntu:Pro:14.04:LTS	linux-lts-xenial	—

Upstream advisory

USN-5206-1

USNCoalition ESS < 30%NONE2022-01-05

linux-oem-5.14 vulnerability

CVEs:CVE-2021-4002

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-oem-5.14	affected	Ubuntu:20.04:LTS	linux-oem-5.14	—

Upstream advisory

USN-5243-2

USNCoalition ESS < 30%HIGH2022-01-20

aide vulnerability

CVEs:CVE-2021-45417

Affected products

Product	Status	Vendor	Package	Ecosystem
aide	affected	Ubuntu:Pro:16.04:LTS	aide	—
aide	affected	Ubuntu:Pro:14.04:LTS	aide	—

Upstream advisory

UBUNTU-CVE-2021-23566

USNCoalition ESS < 30%MEDIUM2022-01-14

CVEs:CVE-2021-23566

Affected products

Product	Status	Vendor	Package	Ecosystem
node-mocha	affected	Ubuntu:18.04:LTS	node-mocha	—
node-mocha	affected	Ubuntu:25.10	node-mocha	—
node-mocha	affected	Ubuntu:22.04:LTS	node-mocha	—
node-mocha	affected	Ubuntu:16.04:LTS	node-mocha	—
node-mocha	affected	Ubuntu:20.04:LTS	node-mocha	—
node-mocha	affected	Ubuntu:24.04:LTS	node-mocha	—
node-postcss	affected	Ubuntu:24.04:LTS	node-postcss	—
node-postcss	affected	Ubuntu:20.04:LTS	node-postcss	—
node-postcss	affected	Ubuntu:22.04:LTS	node-postcss	—
node-postcss	affected	Ubuntu:25.10	node-postcss	—

Upstream advisory

USN-5244-1

USNCoalition ESS < 30%CRITICAL2022-01-20

dbus vulnerability

CVEs:CVE-2020-35512

Affected products

Product	Status	Vendor	Package	Ecosystem
dbus	affected	Ubuntu:Pro:16.04:LTS	dbus	—

Upstream advisory

UBUNTU-CVE-2021-3521

USNCoalition ESS < 30%MEDIUM2022-01-24

CVEs:CVE-2021-3521

Affected products

Product	Status	Vendor	Package	Ecosystem
rpm	affected	Ubuntu:24.04:LTS	rpm	—
rpm	affected	Ubuntu:Pro:18.04:LTS	rpm	—
rpm	affected	Ubuntu:Pro:16.04:LTS	rpm	—
rpm	affected	Ubuntu:Pro:20.04:LTS	rpm	—
rpm	affected	Ubuntu:25.10	rpm	—
rpm	affected	Ubuntu:Pro:14.04:LTS	rpm	—
rpm	affected	Ubuntu:22.04:LTS	rpm	—

Upstream advisory

USN-5254-1

USNEPSS <= 49%HIGH2022-01-27

shadow vulnerabilities

CVEs:CVE-2017-12424 CVE-2018-7169

Affected products

Product	Status	Vendor	Package	Ecosystem
shadow	affected	Ubuntu:Pro:14.04:LTS	shadow	—
shadow	affected	Ubuntu:18.04:LTS	shadow	—
shadow	affected	Ubuntu:Pro:16.04:LTS	shadow	—

Upstream advisory

USN-4586-2

USNEPSS <= 49%HIGH2022-01-24

php-imagick vulnerability

CVEs:CVE-2019-11037

Affected products

Product	Status	Vendor	Package	Ecosystem
php-imagick	affected	Ubuntu:Pro:16.04:LTS	php-imagick	—

Upstream advisory

USN-5234-1

USNEPSS <= 49%HIGH2022-01-18

byobu vulnerability

CVEs:CVE-2019-7306

Affected products

Product	Status	Vendor	Package	Ecosystem
byobu	affected	Ubuntu:Pro:16.04:LTS	byobu	—

Upstream advisory

USN-5247-1

USNAll remaining2022-01-27

vim vulnerabilities

Affected products

Product	Status	Vendor	Package	Ecosystem
vim	affected	Ubuntu:18.04:LTS	vim	—
vim	affected	Ubuntu:20.04:LTS	vim	—

Upstream advisory

USN-5249-1

USNAll remaining2022-01-21

usbview vulnerability

Affected products

Product	Status	Vendor	Package	Ecosystem
usbview	affected	Ubuntu:20.04:LTS	usbview	—
usbview	affected	Ubuntu:18.04:LTS	usbview	—

Upstream advisory

USN-5243-1

USNAll remaining2022-01-20

aide vulnerability

Affected products

Product	Status	Vendor	Package	Ecosystem
aide	affected	Ubuntu:18.04:LTS	aide	—
aide	affected	Ubuntu:20.04:LTS	aide	—

Upstream advisory

USN-5210-2

USNAll remainingHIGH2022-01-12

linux, linux-gcp, linux-gcp-5.4, linux-hwe-5.4 regression

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:20.04:LTS	linux	—
linux-gcp	affected	Ubuntu:20.04:LTS	linux-gcp	—
linux-gcp-5.4	affected	Ubuntu:18.04:LTS	linux-gcp-5.4	—
linux-hwe-5.4	affected	Ubuntu:18.04:LTS	linux-hwe-5.4	—

Upstream advisory

USN-5219-1

USNAll remaining2022-01-11

linux, linux-aws, linux-aws-5.11, linux-azure, linux-azure-5.11, linux-gcp, linux-gcp-5.11, linux-hwe-5.11, linux-kvm, linux-oem-5.10, linux-oracle, linux-oracle-5.11, linux-raspi vulnerability

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-aws-5.11	affected	Ubuntu:20.04:LTS	linux-aws-5.11	—
linux-azure-5.11	affected	Ubuntu:20.04:LTS	linux-azure-5.11	—
linux-gcp-5.11	affected	Ubuntu:20.04:LTS	linux-gcp-5.11	—
linux-hwe-5.11	affected	Ubuntu:20.04:LTS	linux-hwe-5.11	—
linux-oem-5.10	affected	Ubuntu:20.04:LTS	linux-oem-5.10	—
linux-oracle-5.11	affected	Ubuntu:20.04:LTS	linux-oracle-5.11	—

Upstream advisory

USN-5217-1

USNAll remaining2022-01-11

linux-oem-5.14 vulnerabilities

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-oem-5.14	affected	Ubuntu:20.04:LTS	linux-oem-5.14	—

Upstream advisory

What would you fix first?

Advisories

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products