Canonical Security Advisories · November 2023 — Canonical Security Advisories
83 advisories 175 CVEs 2 EXPLOITED

Ubuntu Security Notices (USN-NNNN-N) for 2023-11. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 2 are already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

USN-6505-1

USNExploitedCISA KEV listedCRITICAL2023-11-22

nghttp2 vulnerability

CVEs:CVE-2023-44487

Affected products

ProductStatusVendorPackageEcosystem
nghttp2 affected Ubuntu:22.04:LTS nghttp2 —
nghttp2 affected Ubuntu:20.04:LTS nghttp2 —
Upstream advisory

USN-6502-4

USNWeaponized exploitHIGH2023-11-30

linux-azure, linux-azure-6.2, linux-azure-fde-6.2, linux-gcp, linux-gcp-6.2 vulnerabilities

CVEs:CVE-2023-5090CVE-2023-5345CVE-2023-25775CVE-2023-31085CVE-2023-45871

Affected products

ProductStatusVendorPackageEcosystem
linux-azure-6.2 affected Ubuntu:22.04:LTS linux-azure-6.2 —
linux-azure-fde-6.2 affected Ubuntu:22.04:LTS linux-azure-fde-6.2 —
linux-gcp-6.2 affected Ubuntu:22.04:LTS linux-gcp-6.2 —
Upstream advisory

USN-6502-1

USNWeaponized exploitHIGH2023-11-21

linux, linux-aws, linux-aws-6.2, linux-hwe-6.2, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-6.2, linux-raspi, linux-starfive vulnerabilities

CVEs:CVE-2023-5090CVE-2023-5345CVE-2023-25775CVE-2023-31085CVE-2023-45871

Affected products

ProductStatusVendorPackageEcosystem
linux-aws-6.2 affected Ubuntu:22.04:LTS linux-aws-6.2 —
linux-hwe-6.2 affected Ubuntu:22.04:LTS linux-hwe-6.2 —
linux-lowlatency-hwe-6.2 affected Ubuntu:22.04:LTS linux-lowlatency-hwe-6.2 —
Upstream advisory

LSN-0099-1

USNWeaponized exploit2023-11-28

Kernel Live Patch Security Notice

CVEs:CVE-2022-3643CVE-2023-3567CVE-2023-3609CVE-2023-3776CVE-2023-3777CVE-2023-3995CVE-2023-4004CVE-2023-4622CVE-2023-4623CVE-2023-4881CVE-2023-5197CVE-2023-31436CVE-2023-34319CVE-2023-40283CVE-2023-42752CVE-2023-42753

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:Pro:18.04:LTS linux —
linux affected Ubuntu:Pro:20.04:LTS linux —
linux affected Ubuntu:Pro:16.04:LTS linux —
linux affected Ubuntu:Pro:22.04:LTS linux —
linux-aws affected Ubuntu:Pro:20.04:LTS linux-aws —
linux-aws affected Ubuntu:Pro:22.04:LTS linux-aws —
linux-aws affected Ubuntu:Pro:18.04:LTS linux-aws —
linux-aws affected Ubuntu:Pro:16.04:LTS linux-aws —
linux-aws-5.15 affected Ubuntu:Pro:20.04:LTS linux-aws-5.15 —
linux-aws-5.4 affected Ubuntu:Pro:18.04:LTS linux-aws-5.4 —
linux-aws-6.2 affected Ubuntu:Pro:22.04:LTS linux-aws-6.2 —
linux-aws-hwe affected Ubuntu:Pro:16.04:LTS linux-aws-hwe —
linux-azure affected Ubuntu:Pro:16.04:LTS linux-azure —
linux-azure affected Ubuntu:Pro:20.04:LTS linux-azure —
linux-azure affected Ubuntu:Pro:22.04:LTS linux-azure —
linux-azure-4.15 affected Ubuntu:Pro:18.04:LTS linux-azure-4.15 —
linux-azure-5.4 affected Ubuntu:Pro:18.04:LTS linux-azure-5.4 —
linux-azure-6.2 affected Ubuntu:Pro:22.04:LTS linux-azure-6.2 —
linux-gcp affected Ubuntu:Pro:22.04:LTS linux-gcp —
linux-gcp affected Ubuntu:Pro:20.04:LTS linux-gcp —
linux-gcp affected Ubuntu:Pro:16.04:LTS linux-gcp —
linux-gcp-4.15 affected Ubuntu:Pro:18.04:LTS linux-gcp-4.15 —
linux-gcp-5.15 affected Ubuntu:Pro:20.04:LTS linux-gcp-5.15 —
linux-gcp-5.4 affected Ubuntu:Pro:18.04:LTS linux-gcp-5.4 —
linux-gcp-6.2 affected Ubuntu:Pro:22.04:LTS linux-gcp-6.2 —
linux-gke affected Ubuntu:Pro:22.04:LTS linux-gke —
linux-gke affected Ubuntu:Pro:20.04:LTS linux-gke —
linux-gke-5.15 affected Ubuntu:Pro:20.04:LTS linux-gke-5.15 —
linux-gkeop affected Ubuntu:Pro:20.04:LTS linux-gkeop —
linux-hwe affected Ubuntu:Pro:16.04:LTS linux-hwe —
linux-hwe-5.15 affected Ubuntu:Pro:20.04:LTS linux-hwe-5.15 —
linux-hwe-5.4 affected Ubuntu:Pro:18.04:LTS linux-hwe-5.4 —
linux-hwe-6.2 affected Ubuntu:Pro:22.04:LTS linux-hwe-6.2 —
linux-ibm affected Ubuntu:Pro:20.04:LTS linux-ibm —
linux-ibm affected Ubuntu:Pro:22.04:LTS linux-ibm —
linux-ibm-5.15 affected Ubuntu:Pro:20.04:LTS linux-ibm-5.15 —
linux-ibm-5.4 affected Ubuntu:Pro:18.04:LTS linux-ibm-5.4 —
linux-lowlatency-hwe-5.15 affected Ubuntu:Pro:20.04:LTS linux-lowlatency-hwe-5.15 —
linux-lts-xenial affected Ubuntu:Pro:14.04:LTS linux-lts-xenial —
Upstream advisory

USN-6478-1

USNWeaponized exploitCRITICAL2023-11-14

traceroute vulnerability

CVEs:CVE-2023-46316

Affected products

ProductStatusVendorPackageEcosystem
traceroute affected Ubuntu:Pro:16.04:LTS traceroute —
traceroute affected Ubuntu:Pro:18.04:LTS traceroute —
traceroute affected Ubuntu:Pro:14.04:LTS traceroute —
traceroute affected Ubuntu:Pro:20.04:LTS traceroute —
traceroute affected Ubuntu:Pro:22.04:LTS traceroute —
Upstream advisory

USN-6510-1

USNActive exploitation (sightings)HIGH2023-11-23

apache2 vulnerability

CVEs:CVE-2023-31122

Affected products

ProductStatusVendorPackageEcosystem
apache2 affected Ubuntu:Pro:16.04:LTS apache2 —
apache2 affected Ubuntu:Pro:18.04:LTS apache2 —
apache2 affected Ubuntu:Pro:14.04:LTS apache2 —
Upstream advisory

USN-6511-1

USNActive exploitation (sightings)2023-11-23

zfs-linux vulnerability

CVEs:CVE-2013-20001

Affected products

ProductStatusVendorPackageEcosystem
zfs-linux affected Ubuntu:22.04:LTS zfs-linux —
zfs-linux affected Ubuntu:20.04:LTS zfs-linux —
Upstream advisory

USN-6402-2

USNActive exploitation (sightings)2023-11-27

libtommath vulnerability

CVEs:CVE-2023-36328

Affected products

ProductStatusVendorPackageEcosystem
libtommath affected Ubuntu:23.10 libtommath —
Upstream advisory

USN-6474-1

USNActive exploitation (sightings)CRITICAL2023-11-08

xrdp vulnerabilities

CVEs:CVE-2022-23468CVE-2022-23477CVE-2022-23478CVE-2022-23479CVE-2022-23480CVE-2022-23481CVE-2022-23482CVE-2022-23483CVE-2022-23484CVE-2022-23493CVE-2022-23613CVE-2023-40184CVE-2023-42822

Affected products

ProductStatusVendorPackageEcosystem
xrdp affected Ubuntu:Pro:22.04:LTS xrdp —
xrdp affected Ubuntu:Pro:18.04:LTS xrdp —
xrdp affected Ubuntu:Pro:16.04:LTS xrdp —
xrdp affected Ubuntu:Pro:20.04:LTS xrdp —
xrdp affected Ubuntu:Pro:14.04:LTS xrdp —
Upstream advisory

USN-6514-1

USNActive exploitation (sightings)NONE2023-11-26

openvswitch vulnerability

CVEs:CVE-2023-5366

Affected products

ProductStatusVendorPackageEcosystem
openvswitch affected Ubuntu:20.04:LTS openvswitch —
openvswitch affected Ubuntu:Pro:18.04:LTS openvswitch —
Upstream advisory

USN-6486-1

USNActive exploitation (sightings)HIGH2023-11-20

iniparser vulnerability

CVEs:CVE-2023-33461

Affected products

ProductStatusVendorPackageEcosystem
iniparser affected Ubuntu:22.04:LTS iniparser —
Upstream advisory

USN-6525-1

USNPoC exploitCRITICAL2023-11-29

pysha3 vulnerability

CVEs:CVE-2022-37454

Affected products

ProductStatusVendorPackageEcosystem
pysha3 affected Ubuntu:22.04:LTS pysha3 —
pysha3 affected Ubuntu:20.04:LTS pysha3 —
Upstream advisory

USN-6524-1

USNPoC exploitCRITICAL2023-11-29

pypy3 vulnerability

CVEs:CVE-2022-37454

Affected products

ProductStatusVendorPackageEcosystem
pypy3 affected Ubuntu:22.04:LTS pypy3 —
pypy3 affected Ubuntu:20.04:LTS pypy3 —
Upstream advisory

USN-6485-1

USNPoC exploitMEDIUM2023-11-17

intel-microcode vulnerability

CVEs:CVE-2023-23583

Affected products

ProductStatusVendorPackageEcosystem
intel-microcode affected Ubuntu:22.04:LTS intel-microcode —
intel-microcode affected Ubuntu:20.04:LTS intel-microcode —
intel-microcode affected Ubuntu:Pro:16.04:LTS intel-microcode —
intel-microcode affected Ubuntu:Pro:18.04:LTS intel-microcode —
Upstream advisory

USN-6513-1

USNPoC exploitHIGH2023-11-23

python2.7, python3.5, python3.6 vulnerabilities

CVEs:CVE-2022-48564CVE-2023-40217

Affected products

ProductStatusVendorPackageEcosystem
python2.7 affected Ubuntu:Pro:18.04:LTS python2.7 —
python2.7 affected Ubuntu:Pro:16.04:LTS python2.7 —
python2.7 affected Ubuntu:Pro:14.04:LTS python2.7 —
python3.5 affected Ubuntu:Pro:16.04:LTS python3.5 —
python3.6 affected Ubuntu:Pro:18.04:LTS python3.6 —
Upstream advisory

USN-6527-1

USNPoC exploitCRITICAL2023-11-29

openjdk-17, openjdk-21, openjdk-lts vulnerabilities

CVEs:CVE-2023-22025CVE-2023-22081

Affected products

ProductStatusVendorPackageEcosystem
openjdk-17 affected Ubuntu:20.04:LTS openjdk-17 —
openjdk-17 affected Ubuntu:22.04:LTS openjdk-17 —
openjdk-17 affected Ubuntu:Pro:18.04:LTS openjdk-17 —
openjdk-lts affected Ubuntu:Pro:18.04:LTS openjdk-lts —
openjdk-lts affected Ubuntu:22.04:LTS openjdk-lts —
openjdk-lts affected Ubuntu:20.04:LTS openjdk-lts —
Upstream advisory

USN-6473-2

USNPoC exploitHIGH2023-11-15

python-pip vulnerabilities

CVEs:CVE-2018-25091CVE-2023-43804CVE-2023-45803

Affected products

ProductStatusVendorPackageEcosystem
python-pip affected Ubuntu:Pro:18.04:LTS python-pip —
python-pip affected Ubuntu:20.04:LTS python-pip —
python-pip affected Ubuntu:Pro:16.04:LTS python-pip —
python-pip affected Ubuntu:22.04:LTS python-pip —
Upstream advisory

USN-6473-1

USNPoC exploitHIGH2023-11-07

python-urllib3 vulnerabilities

CVEs:CVE-2018-25091CVE-2023-43804CVE-2023-45803

Affected products

ProductStatusVendorPackageEcosystem
python-urllib3 affected Ubuntu:20.04:LTS python-urllib3 —
python-urllib3 affected Ubuntu:Pro:16.04:LTS python-urllib3 —
python-urllib3 affected Ubuntu:Pro:18.04:LTS python-urllib3 —
python-urllib3 affected Ubuntu:22.04:LTS python-urllib3 —
Upstream advisory

USN-6499-1

USNPoC exploitHIGH2023-11-21

gnutls28 vulnerability

CVEs:CVE-2023-5981

Affected products

ProductStatusVendorPackageEcosystem
gnutls28 affected Ubuntu:22.04:LTS gnutls28 —
gnutls28 affected Ubuntu:20.04:LTS gnutls28 —
Upstream advisory

USN-6501-1

USNPoC exploitHIGH2023-11-21

rabbitmq-server vulnerability

CVEs:CVE-2023-46118

Affected products

ProductStatusVendorPackageEcosystem
rabbitmq-server affected Ubuntu:22.04:LTS rabbitmq-server —
rabbitmq-server affected Ubuntu:20.04:LTS rabbitmq-server —
Upstream advisory

USN-6496-2

USNPoC exploitHIGH2023-11-30

linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-gkeop-5.15 vulnerabilities

CVEs:CVE-2023-25775CVE-2023-31085CVE-2023-45871

Affected products

ProductStatusVendorPackageEcosystem
linux-azure affected Ubuntu:22.04:LTS linux-azure —
linux-azure-5.15 affected Ubuntu:20.04:LTS linux-azure-5.15 —
linux-azure-fde affected Ubuntu:22.04:LTS linux-azure-fde —
linux-azure-fde-5.15 affected Ubuntu:20.04:LTS linux-azure-fde-5.15 —
linux-gcp affected Ubuntu:22.04:LTS linux-gcp —
linux-gcp-5.15 affected Ubuntu:20.04:LTS linux-gcp-5.15 —
linux-gke affected Ubuntu:22.04:LTS linux-gke —
linux-gkeop affected Ubuntu:22.04:LTS linux-gkeop —
linux-gkeop-5.15 affected Ubuntu:20.04:LTS linux-gkeop-5.15 —
Upstream advisory

USN-6496-1

USNPoC exploitHIGH2023-11-21

linux, linux-aws, linux-aws-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15, linux-raspi vulnerabilities

CVEs:CVE-2023-25775CVE-2023-31085CVE-2023-45871

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:22.04:LTS linux —
linux-aws affected Ubuntu:22.04:LTS linux-aws —
linux-aws-5.15 affected Ubuntu:20.04:LTS linux-aws-5.15 —
linux-hwe-5.15 affected Ubuntu:20.04:LTS linux-hwe-5.15 —
linux-ibm affected Ubuntu:22.04:LTS linux-ibm —
linux-ibm-5.15 affected Ubuntu:20.04:LTS linux-ibm-5.15 —
linux-kvm affected Ubuntu:22.04:LTS linux-kvm —
linux-lowlatency affected Ubuntu:22.04:LTS linux-lowlatency —
linux-lowlatency-hwe-5.15 affected Ubuntu:20.04:LTS linux-lowlatency-hwe-5.15 —
linux-nvidia affected Ubuntu:22.04:LTS linux-nvidia —
linux-oracle affected Ubuntu:22.04:LTS linux-oracle —
linux-oracle-5.15 affected Ubuntu:20.04:LTS linux-oracle-5.15 —
linux-raspi affected Ubuntu:22.04:LTS linux-raspi —
Upstream advisory

USN-6494-2

USNPoC exploitHIGH2023-11-30

linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15 vulnerabilities

CVEs:CVE-2023-5717CVE-2023-31085CVE-2023-39189CVE-2023-39192CVE-2023-39193CVE-2023-39194CVE-2023-42754CVE-2023-45862CVE-2023-45871

Affected products

ProductStatusVendorPackageEcosystem
linux-azure affected Ubuntu:Pro:16.04:LTS linux-azure —
linux-azure affected Ubuntu:Pro:14.04:LTS linux-azure —
linux-azure-4.15 affected Ubuntu:Pro:18.04:LTS linux-azure-4.15 —
linux-gcp affected Ubuntu:Pro:16.04:LTS linux-gcp —
linux-gcp-4.15 affected Ubuntu:Pro:18.04:LTS linux-gcp-4.15 —
Upstream advisory

USN-6494-1

USNPoC exploitHIGH2023-11-21

linux, linux-aws, linux-aws-hwe, linux-hwe, linux-kvm, linux-oracle vulnerabilities

CVEs:CVE-2023-5717CVE-2023-31085CVE-2023-39189CVE-2023-39192CVE-2023-39193CVE-2023-39194CVE-2023-42754CVE-2023-45862CVE-2023-45871

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:Pro:18.04:LTS linux —
linux-aws affected Ubuntu:Pro:18.04:LTS linux-aws —
linux-aws-hwe affected Ubuntu:Pro:16.04:LTS linux-aws-hwe —
linux-hwe affected Ubuntu:Pro:16.04:LTS linux-hwe —
linux-kvm affected Ubuntu:Pro:18.04:LTS linux-kvm —
linux-oracle affected Ubuntu:Pro:18.04:LTS linux-oracle —
linux-oracle affected Ubuntu:Pro:16.04:LTS linux-oracle —
Upstream advisory

USN-6513-2

USNPoC exploitHIGH2023-11-27

python3.8, python3.10, python3.11 vulnerability

CVEs:CVE-2023-40217

Affected products

ProductStatusVendorPackageEcosystem
python3.10 affected Ubuntu:22.04:LTS python3.10 —
python3.8 affected Ubuntu:20.04:LTS python3.8 —
Upstream advisory

USN-6495-2

USNPoC exploitHIGH2023-11-30

linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gkeop vulnerabilities

CVEs:CVE-2023-31085CVE-2023-45871

Affected products

ProductStatusVendorPackageEcosystem
linux-azure affected Ubuntu:20.04:LTS linux-azure —
linux-azure-5.4 affected Ubuntu:Pro:18.04:LTS linux-azure-5.4 —
linux-gcp affected Ubuntu:20.04:LTS linux-gcp —
linux-gcp-5.4 affected Ubuntu:Pro:18.04:LTS linux-gcp-5.4 —
linux-gkeop affected Ubuntu:20.04:LTS linux-gkeop —
Upstream advisory

USN-6495-1

USNPoC exploitHIGH2023-11-21

linux, linux-aws, linux-aws-5.4, linux-bluefield, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4, linux-xilinx-zynqmp vulnerabilities

CVEs:CVE-2023-31085CVE-2023-45871

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:20.04:LTS linux —
linux-aws affected Ubuntu:20.04:LTS linux-aws —
linux-aws-5.4 affected Ubuntu:Pro:18.04:LTS linux-aws-5.4 —
linux-bluefield affected Ubuntu:20.04:LTS linux-bluefield —
linux-hwe-5.4 affected Ubuntu:Pro:18.04:LTS linux-hwe-5.4 —
linux-ibm affected Ubuntu:20.04:LTS linux-ibm —
linux-ibm-5.4 affected Ubuntu:Pro:18.04:LTS linux-ibm-5.4 —
linux-iot affected Ubuntu:20.04:LTS linux-iot —
linux-kvm affected Ubuntu:20.04:LTS linux-kvm —
linux-oracle affected Ubuntu:20.04:LTS linux-oracle —
linux-oracle-5.4 affected Ubuntu:Pro:18.04:LTS linux-oracle-5.4 —
linux-raspi affected Ubuntu:20.04:LTS linux-raspi —
linux-raspi-5.4 affected Ubuntu:Pro:18.04:LTS linux-raspi-5.4 —
linux-xilinx-zynqmp affected Ubuntu:20.04:LTS linux-xilinx-zynqmp —
Upstream advisory

USN-6477-1

USNPoC exploitHIGH2023-11-14

procps vulnerability

CVEs:CVE-2023-4016

Affected products

ProductStatusVendorPackageEcosystem
procps affected Ubuntu:22.04:LTS procps —
procps affected Ubuntu:20.04:LTS procps —
procps affected Ubuntu:Pro:16.04:LTS procps —
procps affected Ubuntu:Pro:18.04:LTS procps —
Upstream advisory

USN-6470-1

USNCoalition ESS < 30%HIGH2023-11-02

axis vulnerability

CVEs:CVE-2023-40743

Affected products

ProductStatusVendorPackageEcosystem
axis affected Ubuntu:22.04:LTS axis —
axis affected Ubuntu:20.04:LTS axis —
axis affected Ubuntu:Pro:18.04:LTS axis —
axis affected Ubuntu:Pro:16.04:LTS axis —
Upstream advisory

USN-6467-2

USNCoalition ESS < 30%MEDIUM2023-11-06

krb5 vulnerability

CVEs:CVE-2023-36054

Affected products

ProductStatusVendorPackageEcosystem
krb5 affected Ubuntu:20.04:LTS krb5 —
krb5 affected Ubuntu:22.04:LTS krb5 —
Upstream advisory

USN-6467-1

USNCoalition ESS < 30%MEDIUM2023-11-01

krb5 vulnerability

CVEs:CVE-2023-36054

Affected products

ProductStatusVendorPackageEcosystem
krb5 affected Ubuntu:Pro:18.04:LTS krb5 —
krb5 affected Ubuntu:Pro:16.04:LTS krb5 —
krb5 affected Ubuntu:Pro:14.04:LTS krb5 —
Upstream advisory

USN-6469-1

USNCoalition ESS < 30%CRITICAL2023-11-02

xrdp vulnerability

CVEs:CVE-2020-4044

Affected products

ProductStatusVendorPackageEcosystem
xrdp affected Ubuntu:Pro:18.04:LTS xrdp —
xrdp affected Ubuntu:Pro:16.04:LTS xrdp —
xrdp affected Ubuntu:Pro:14.04:LTS xrdp —
xrdp affected Ubuntu:20.04:LTS xrdp —
Upstream advisory

USN-6518-1

USNCoalition ESS < 30%MEDIUM2023-11-28

afflib vulnerability

CVEs:CVE-2018-8050

Affected products

ProductStatusVendorPackageEcosystem
afflib affected Ubuntu:Pro:16.04:LTS afflib —
afflib affected Ubuntu:Pro:18.04:LTS afflib —
Upstream advisory

USN-6483-1

USNCoalition ESS < 30%HIGH2023-11-15

tidy-html5 vulnerability

CVEs:CVE-2021-33391

Affected products

ProductStatusVendorPackageEcosystem
tidy-html5 affected Ubuntu:22.04:LTS tidy-html5 —
tidy-html5 affected Ubuntu:20.04:LTS tidy-html5 —
Upstream advisory

USN-6472-1

USNCoalition ESS < 30%HIGH2023-11-07

gsl vulnerability

CVEs:CVE-2020-35357

Affected products

ProductStatusVendorPackageEcosystem
gsl affected Ubuntu:Pro:16.04:LTS gsl —
gsl affected Ubuntu:20.04:LTS gsl —
gsl affected Ubuntu:Pro:18.04:LTS gsl —
gsl affected Ubuntu:Pro:22.04:LTS gsl —
Upstream advisory

USN-6512-1

USNCoalition ESS < 30%MEDIUM2023-11-23

tiff vulnerabilities

CVEs:CVE-2022-40090CVE-2023-3576

Affected products

ProductStatusVendorPackageEcosystem
tiff affected Ubuntu:22.04:LTS tiff —
tiff affected Ubuntu:20.04:LTS tiff —
tiff affected Ubuntu:Pro:18.04:LTS tiff —
tiff affected Ubuntu:Pro:14.04:LTS tiff —
tiff affected Ubuntu:Pro:16.04:LTS tiff —
Upstream advisory

USN-6507-1

USNCoalition ESS < 30%HIGH2023-11-22

glusterfs vulnerability

CVEs:CVE-2022-48340

Affected products

ProductStatusVendorPackageEcosystem
glusterfs affected Ubuntu:22.04:LTS glusterfs —
Upstream advisory

USN-6471-1

USNCoalition ESS < 30%MEDIUM2023-11-02

libsndfile vulnerability

CVEs:CVE-2022-33065

Affected products

ProductStatusVendorPackageEcosystem
libsndfile affected Ubuntu:Pro:14.04:LTS libsndfile —
libsndfile affected Ubuntu:Pro:18.04:LTS libsndfile —
libsndfile affected Ubuntu:20.04:LTS libsndfile —
libsndfile affected Ubuntu:Pro:16.04:LTS libsndfile —
libsndfile affected Ubuntu:22.04:LTS libsndfile —
Upstream advisory

USN-6519-2

USNAll remaining2023-11-29

ec2-hibinit-agent update

Affected products

ProductStatusVendorPackageEcosystem
ec2-hibinit-agent affected Ubuntu:Pro:16.04:LTS ec2-hibinit-agent —
Upstream advisory

USN-6519-1

USNAll remaining2023-11-28

ec2-hibinit-agent update

Affected products

ProductStatusVendorPackageEcosystem
ec2-hibinit-agent affected Ubuntu:Pro:18.04:LTS ec2-hibinit-agent —
Upstream advisory

USN-6508-2

USNAll remainingMEDIUM2023-11-28

poppler regression

Affected products

ProductStatusVendorPackageEcosystem
poppler affected Ubuntu:Pro:18.04:LTS poppler —
Upstream advisory

USN-6504-1

USNAll remaining2023-11-22

tracker-miners vulnerability

Affected products

ProductStatusVendorPackageEcosystem
tracker-miners affected Ubuntu:22.04:LTS tracker-miners —
Upstream advisory

USN-6498-1

USNAll remaining2023-11-21

frr vulnerabilities

Affected products

ProductStatusVendorPackageEcosystem
frr affected Ubuntu:22.04:LTS frr —
Upstream advisory

USN-6493-2

USNAll remaining2023-11-21

hibagent update

Affected products

ProductStatusVendorPackageEcosystem
hibagent affected Ubuntu:Pro:16.04:LTS hibagent —
hibagent affected Ubuntu:Pro:18.04:LTS hibagent —
Upstream advisory

USN-6493-1

USNAll remaining2023-11-21

hibagent update

Affected products

ProductStatusVendorPackageEcosystem
hibagent affected Ubuntu:22.04:LTS hibagent —
hibagent affected Ubuntu:20.04:LTS hibagent —
Upstream advisory

USN-6489-1

USNAll remaining2023-11-20

tang vulnerability

Affected products

ProductStatusVendorPackageEcosystem
tang affected Ubuntu:20.04:LTS tang —
tang affected Ubuntu:22.04:LTS tang —
tang affected Ubuntu:Pro:18.04:LTS tang —
Upstream advisory

USN-6488-1

USNAll remaining2023-11-20

strongswan vulnerability

Affected products

ProductStatusVendorPackageEcosystem
strongswan affected Ubuntu:20.04:LTS strongswan —
strongswan affected Ubuntu:22.04:LTS strongswan —
Upstream advisory

USN-6480-1

USNAll remaining2023-11-15

dotnet6, dotnet7, dotnet8 vulnerabilities

Affected products

ProductStatusVendorPackageEcosystem
dotnet6 affected Ubuntu:22.04:LTS dotnet6 —
dotnet7 affected Ubuntu:22.04:LTS dotnet7 —
Upstream advisory

USN-6449-2

USNAll remainingHIGH2023-11-15

ffmpeg regression

Affected products

ProductStatusVendorPackageEcosystem
ffmpeg affected Ubuntu:Pro:22.04:LTS ffmpeg —
ffmpeg affected Ubuntu:Pro:20.04:LTS ffmpeg —
ffmpeg affected Ubuntu:Pro:18.04:LTS ffmpeg —
Upstream advisory

USN-6456-2

USNAll remainingHIGH2023-11-14

firefox regressions

Affected products

ProductStatusVendorPackageEcosystem
firefox affected Ubuntu:20.04:LTS firefox —
Upstream advisory

USN-6476-1

USNAll remaining2023-11-13

memcached vulnerabilities

Affected products

ProductStatusVendorPackageEcosystem
memcached affected Ubuntu:22.04:LTS memcached —
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.