--- title: Security notices description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/notices --- # Ubuntu Security Notices Developers issue an Ubuntu Security Notice when a security issue is fixed in an [official Ubuntu package](https://packages.ubuntu.com). You can find additional guidance for high-profile vulnerabilities in the [Ubuntu Vulnerability Knowledge Base](https://ubuntu.com/security/vulnerabilities) section. To report a security vulnerability in an Ubuntu package, please [contact the Security Team](https://wiki.ubuntu.com/SecurityTeam/FAQ#Contact). The Security Team also produces [OVAL](https://ubuntu.com/security/oval) files for each Ubuntu release. These are an industry-standard machine-readable format dataset that contain details of all known security vulnerabilities and fixes relevant to the Ubuntu release, and can be used to determine whether a particular patch is appropriate. OVAL files can also be used to audit a system to check whether the latest security fixes have been applied. Subscribe for updates [Mailing list](https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce) [Atom](https://ubuntu.com/security/notices/atom.xml) [RSS](https://ubuntu.com/security/notices/rss.xml) ## Search USNs USN ID, name, description or CVE ID contains *Close* *Search* --- [Filter by Ubuntu release](https://ubuntu.com/security/notices#drawer) 21 - 30 of 349 results ### [USN-1771-1: OpenStack Nova vulnerabilities](https://ubuntu.com/security/notices/USN-1771-1) 20 March 2013 Two security issues were fixed in Nova. * Ubuntu 12.10 , * 12.04 , * 11.10 CVE ID [CVE-2013-0335](https://ubuntu.com/security/CVE-2013-0335), [CVE-2013-1838](https://ubuntu.com/security/CVE-2013-1838) --- ### [USN-1770-1: Perl vulnerability](https://ubuntu.com/security/notices/USN-1770-1) 19 March 2013 Perl could be made to stop responding if it received specially crafted input. * Ubuntu 12.10 , * 12.04 , * 11.10 , * 10.04 , * 8.04 CVE ID [CVE-2013-1667](https://ubuntu.com/security/CVE-2013-1667) --- ### [USN-1765-1: Apache HTTP Server vulnerabilities](https://ubuntu.com/security/notices/USN-1765-1) 18 March 2013 Several security issues were fixed in the Apache HTTP Server. * Ubuntu 12.10 , * 12.04 , * 11.10 , * 10.04 , * 8.04 CVE ID [CVE-2012-3499](https://ubuntu.com/security/CVE-2012-3499), [CVE-2012-4557](https://ubuntu.com/security/CVE-2012-4557), [CVE-2012-4558](https://ubuntu.com/security/CVE-2012-4558) + 1 other --- ### [USN-1763-2: NSPR update](https://ubuntu.com/security/notices/USN-1763-2) 14 March 2013 NSPR update to work with the new NSS. * Ubuntu 12.10 , * 12.04 , * 11.10 , * 10.04 --- ### [USN-1763-1: NSS vulnerability](https://ubuntu.com/security/notices/USN-1763-1) 14 March 2013 NSS could be made to expose sensitive information over the network. * Ubuntu 12.10 , * 12.04 , * 11.10 , * 10.04 CVE ID [CVE-2013-1620](https://ubuntu.com/security/CVE-2013-1620) --- ### [USN-1762-1: APT vulnerability](https://ubuntu.com/security/notices/USN-1762-1) 14 March 2013 An attacker could trick APT into installing altered packages. * Ubuntu 12.10 , * 12.04 , * 11.10 CVE ID [CVE-2013-1051](https://ubuntu.com/security/CVE-2013-1051) --- ### [USN-1761-1: PHP vulnerability](https://ubuntu.com/security/notices/USN-1761-1) 13 March 2013 PHP could be made to expose sensitive information over the network. * Ubuntu 12.10 , * 12.04 , * 11.10 , * 10.04 , * 8.04 CVE ID [CVE-2013-1643](https://ubuntu.com/security/CVE-2013-1643) --- ### [USN-1758-2: Thunderbird vulnerability](https://ubuntu.com/security/notices/USN-1758-2) 13 March 2013 Thunderbird could be made to crash or run programs as your login. * Ubuntu 12.10 , * 12.04 , * 11.10 , * 10.04 CVE ID [CVE-2013-0787](https://ubuntu.com/security/CVE-2013-0787) --- ### [USN-1759-1: Puppet vulnerabilities](https://ubuntu.com/security/notices/USN-1759-1) 12 March 2013 Several security issues were fixed in Puppet. * Ubuntu 12.10 , * 12.04 , * 11.10 CVE ID [CVE-2013-1640](https://ubuntu.com/security/CVE-2013-1640), [CVE-2013-1652](https://ubuntu.com/security/CVE-2013-1652), [CVE-2013-1653](https://ubuntu.com/security/CVE-2013-1653) + 3 others --- ### [USN-1758-1: Firefox vulnerability](https://ubuntu.com/security/notices/USN-1758-1) 8 March 2013 Firefox could be made to crash or run programs as your login if it opened a malicious website. * Ubuntu 12.10 , * 12.04 , * 11.10 , * 10.04 CVE ID [CVE-2013-0787](https://ubuntu.com/security/CVE-2013-0787) --- 1. [*Previous page*](https://ubuntu.com/security/notices?format=md&offset=10&release=jammy) 2. [1](https://ubuntu.com/security/notices?format=md&offset=0&release=jammy) 3. [2](https://ubuntu.com/security/notices?format=md&offset=10&release=jammy) 4. [3](https://ubuntu.com/security/notices?format=md&offset=2&release=jammy) 5. [4](https://ubuntu.com/security/notices?format=md&offset=30&release=jammy) 6. [5](https://ubuntu.com/security/notices?format=md&offset=40&release=jammy) 7. [*Next page*](https://ubuntu.com/security/notices?format=md&offset=30&release=jammy) --- ## Resources ### Join the discussion * [Ubuntu security updates mailing list](https://lists.ubuntu.com/mailman/listinfo/ubuntu-hardened) * [Security announcements mailing list](https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce) --- ### Further reading * *Loading...* --- ## Get up to 15 years of security maintenance for your new or established systems Get up to 15 years of security maintenance for your entire Ubuntu Archive. Keep your systems stable with security backporting and avoid forced upgrades. [Find out more about Ubuntu Pro ›](https://ubuntu.com/pro) [Learn more about ESM and our legacy add-on ›](https://ubuntu.com/security/esm)