--- title: "Security notices\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/notices?format=md keywords: index, follow --- # Ubuntu Security Notices Developers issue an Ubuntu Security Notice when a security issue is fixed in an [official Ubuntu package](https://packages.ubuntu.com). You can find additional guidance for high-profile vulnerabilities in the [Ubuntu Vulnerability Knowledge Base](https://ubuntu.com/security/vulnerabilities) section. To report a security vulnerability in an Ubuntu package, please [contact the Security Team](https://wiki.ubuntu.com/SecurityTeam/FAQ#Contact). The Security Team also produces [OVAL](https://ubuntu.com/security/oval) files for each Ubuntu release. These are an industry-standard machine-readable format dataset that contain details of all known security vulnerabilities and fixes relevant to the Ubuntu release, and can be used to determine whether a particular patch is appropriate. OVAL files can also be used to audit a system to check whether the latest security fixes have been applied. Subscribe for updates [Mailing list](https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce) [Atom](https://ubuntu.com/security/notices/atom.xml) [RSS](https://ubuntu.com/security/notices/rss.xml) ## Search USNs USN ID, name, description or CVE ID contains *Close* *Search* --- [Filter by Ubuntu release](https://ubuntu.com/security/notices?format=md#drawer) 1 - 10 of 11314 results ### [USN-8820-1: curl vulnerabilities](https://ubuntu.com/security/notices/USN-8820-1) 24 September 2026 Several security issues were fixed in curl. * Ubuntu 26.04 LTS, * 24.04 LTS, * 22.04 LTS, * 20.04 LTS, * 18.04 LTS, * 16.04 LTS CVE ID [CVE-2026-80229](https://ubuntu.com/security/CVE-2026-80229), [CVE-2026-82209](https://ubuntu.com/security/CVE-2026-82209), [CVE-2026-8927](https://ubuntu.com/security/CVE-2026-8927) + 5 others --- ### [USN-8821-1: OpenStack Swift vulnerability](https://ubuntu.com/security/notices/USN-8821-1) 24 September 2026 OpenStack Swift could be made to crash if it received specially crafted network traffic from an authenticated user. * Ubuntu 26.04 LTS CVE ID [CVE-2026-49017](https://ubuntu.com/security/CVE-2026-49017) --- ### [USN-8818-1: Linux kernel vulnerabilities](https://ubuntu.com/security/notices/USN-8818-1) 24 September 2026 Several security issues were fixed in the Linux kernel. * Ubuntu 22.04 LTS, * 20.04 LTS CVE ID [CVE-2026-63912](https://ubuntu.com/security/CVE-2026-63912), [CVE-2026-63984](https://ubuntu.com/security/CVE-2026-63984), [CVE-2026-63924](https://ubuntu.com/security/CVE-2026-63924) + 17 others --- ### [USN-8817-1: Linux kernel vulnerabilities](https://ubuntu.com/security/notices/USN-8817-1) 24 September 2026 Several security issues were fixed in the Linux kernel. * Ubuntu 24.04 LTS, * 22.04 LTS CVE ID [CVE-2026-63886](https://ubuntu.com/security/CVE-2026-63886), [CVE-2026-53354](https://ubuntu.com/security/CVE-2026-53354), [CVE-2026-63994](https://ubuntu.com/security/CVE-2026-63994) + 17 others --- ### [USN-8816-1: Linux kernel vulnerabilities](https://ubuntu.com/security/notices/USN-8816-1) 24 September 2026 Several security issues were fixed in the Linux kernel. * Ubuntu 26.04 LTS, * 24.04 LTS CVE ID [CVE-2026-72064](https://ubuntu.com/security/CVE-2026-72064), [CVE-2026-72355](https://ubuntu.com/security/CVE-2026-72355), [CVE-2026-72222](https://ubuntu.com/security/CVE-2026-72222) + 98 others --- ### [USN-8815-1: libass vulnerabilities](https://ubuntu.com/security/notices/USN-8815-1) 24 September 2026 Several security issues were fixed in libass. * Ubuntu 26.04 LTS, * 24.04 LTS, * 20.04 LTS, * 18.04 LTS, * 14.04 LTS CVE ID [CVE-2020-26682](https://ubuntu.com/security/CVE-2020-26682), [CVE-2026-61627](https://ubuntu.com/security/CVE-2026-61627), [CVE-2026-61626](https://ubuntu.com/security/CVE-2026-61626) + 1 other --- ### [USN-8813-1: Expat vulnerabilities](https://ubuntu.com/security/notices/USN-8813-1) 24 September 2026 Expat could be made to crash or run programs if it received specially crafted input. * Ubuntu 26.04 LTS, * 24.04 LTS, * 22.04 LTS, * 20.04 LTS, * 18.04 LTS, * 16.04 LTS, * 14.04 LTS CVE ID [CVE-2026-56410](https://ubuntu.com/security/CVE-2026-56410), [CVE-2026-66046](https://ubuntu.com/security/CVE-2026-66046), [CVE-2026-56406](https://ubuntu.com/security/CVE-2026-56406) + 8 others --- ### [USN-8814-1: Octavia vulnerabilities](https://ubuntu.com/security/notices/USN-8814-1) 24 September 2026 Several security issues were fixed in Octavia. * Ubuntu 26.04 LTS, * 24.04 LTS, * 22.04 LTS CVE ID [CVE-2026-94571](https://ubuntu.com/security/CVE-2026-94571), [CVE-2026-94572](https://ubuntu.com/security/CVE-2026-94572), [CVE-2026-74248](https://ubuntu.com/security/CVE-2026-74248) --- ### [USN-8812-1: GDAL vulnerabilities](https://ubuntu.com/security/notices/USN-8812-1) 24 September 2026 Several security issues were fixed in GDAL. * Ubuntu 26.04 LTS, * 24.04 LTS, * 22.04 LTS, * 20.04 LTS, * 18.04 LTS, * 16.04 LTS, * 14.04 LTS CVE ID [CVE-2026-8088](https://ubuntu.com/security/CVE-2026-8088), [CVE-2026-8084](https://ubuntu.com/security/CVE-2026-8084), [CVE-2026-8086](https://ubuntu.com/security/CVE-2026-8086) + 4 others --- ### [USN-8811-1: urllib3 vulnerability](https://ubuntu.com/security/notices/USN-8811-1) 24 September 2026 urllib3 could be made to expose sensitive information over the network. * Ubuntu 20.04 LTS, * 18.04 LTS, * 16.04 LTS CVE ID [CVE-2026-44431](https://ubuntu.com/security/CVE-2026-44431) --- 1. *Previous page* 2. [1](https://ubuntu.com/security/notices?format=md&offset=0) 3. [2](https://ubuntu.com/security/notices?format=md&offset=10) 4. [3](https://ubuntu.com/security/notices?format=md&offset=20) 5. [4](https://ubuntu.com/security/notices?format=md&offset=30) 6. [5](https://ubuntu.com/security/notices?format=md&offset=40) 7. [*Next page*](https://ubuntu.com/security/notices?format=md&offset=10) --- ## Resources ### Join the discussion * [Ubuntu security updates mailing list](https://lists.ubuntu.com/mailman/listinfo/ubuntu-hardened) * [Security announcements mailing list](https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce) --- ### Further reading * *Loading...* --- ## Get up to 15 years of security maintenance for your new or established systems Get up to 15 years of security maintenance for your entire Ubuntu Archive. Keep your systems stable with security backporting and avoid forced upgrades. [Find out more about Ubuntu Pro ›](https://ubuntu.com/pro) [Learn more about ESM and our legacy add-on ›](https://ubuntu.com/security/esm)