---
title: "Security notices\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/notices?format=md
keywords: index, follow
---

# Ubuntu Security Notices

Developers issue an Ubuntu Security Notice when a security issue is fixed in an [official Ubuntu package](https://packages.ubuntu.com). You can find additional guidance for high-profile vulnerabilities in the [Ubuntu Vulnerability Knowledge Base](https://ubuntu.com/security/vulnerabilities) section.

To report a security vulnerability in an Ubuntu package, please [contact the Security Team](https://wiki.ubuntu.com/SecurityTeam/FAQ#Contact).

The Security Team also produces [OVAL](https://ubuntu.com/security/oval) files for each Ubuntu release. These are an industry-standard machine-readable format dataset that contain details of all known security vulnerabilities and fixes relevant to the Ubuntu release, and can be used to determine whether a particular patch is appropriate. OVAL files can also be used to audit a system to check whether the latest security fixes have been applied.

Subscribe for updates

[Mailing list](https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce)
[Atom](https://ubuntu.com/security/notices/atom.xml)
[RSS](https://ubuntu.com/security/notices/rss.xml)

## Search USNs

USN ID, name, description or CVE ID contains

*Close*
*Search*

---

[Filter by Ubuntu release](https://ubuntu.com/security/notices?format=md#drawer)

1 - 10 of 11180 results

### [USN-8720-1: GnuPG vulnerability](https://ubuntu.com/security/notices/USN-8720-1)

3 September 2026

GnuPG could allow encrypted messages to be forged under certain
circumstances.

* Ubuntu 26.04 LTS,
* 24.04 LTS

CVE ID

[CVE-2026-57062](https://ubuntu.com/security/CVE-2026-57062)

---

### [USN-8723-1: SPICE vdagent vulnerabilities](https://ubuntu.com/security/notices/USN-8723-1)

3 September 2026

Several security issues were fixed in SPICE vdagent.

* Ubuntu 26.04 LTS,
* 24.04 LTS,
* 22.04 LTS

CVE ID

[CVE-2026-57965](https://ubuntu.com/security/CVE-2026-57965),
[CVE-2026-57966](https://ubuntu.com/security/CVE-2026-57966)

---

### [USN-8722-1: libssh2 vulnerabilities](https://ubuntu.com/security/notices/USN-8722-1)

3 September 2026

Several security issues were fixed in libssh2.

* Ubuntu 26.04 LTS,
* 24.04 LTS

CVE ID

[CVE-2026-66033](https://ubuntu.com/security/CVE-2026-66033),
[CVE-2026-66035](https://ubuntu.com/security/CVE-2026-66035),
[CVE-2026-66032](https://ubuntu.com/security/CVE-2026-66032)

---

### [USN-8719-1: APR-util vulnerabilities](https://ubuntu.com/security/notices/USN-8719-1)

3 September 2026

Several security issues were fixed in APR-util.

* Ubuntu 26.04 LTS,
* 24.04 LTS,
* 22.04 LTS,
* 20.04 LTS,
* 18.04 LTS,
* 16.04 LTS,
* 14.04 LTS

CVE ID

[CVE-2025-49506](https://ubuntu.com/security/CVE-2025-49506),
[CVE-2026-34501](https://ubuntu.com/security/CVE-2026-34501),
[CVE-2026-34502](https://ubuntu.com/security/CVE-2026-34502)

+ 1 other

---

### [USN-8721-1: OpenSSH vulnerabilities](https://ubuntu.com/security/notices/USN-8721-1)

3 September 2026

Several security issues were fixed in OpenSSH.

* Ubuntu 26.04 LTS,
* 24.04 LTS,
* 22.04 LTS

CVE ID

[CVE-2026-73281](https://ubuntu.com/security/CVE-2026-73281),
[CVE-2026-73283](https://ubuntu.com/security/CVE-2026-73283),
[CVE-2026-73282](https://ubuntu.com/security/CVE-2026-73282)

---

### [USN-8718-1: SSSD vulnerability](https://ubuntu.com/security/notices/USN-8718-1)

3 September 2026

SSSD could be made to crash if it received specially crafted input.

* Ubuntu 26.04 LTS,
* 24.04 LTS,
* 22.04 LTS,
* 20.04 LTS,
* 18.04 LTS,
* 16.04 LTS

CVE ID

[CVE-2026-68743](https://ubuntu.com/security/CVE-2026-68743)

---

### [USN-8716-1: FFmpeg vulnerabilities](https://ubuntu.com/security/notices/USN-8716-1)

3 September 2026

FFmpeg could be made to crash or run programs as your login if it
opened a specially crafted file.

* Ubuntu 24.04 LTS,
* 22.04 LTS,
* 20.04 LTS,
* 18.04 LTS,
* 16.04 LTS

CVE ID

[CVE-2026-65703](https://ubuntu.com/security/CVE-2026-65703),
[CVE-2026-64834](https://ubuntu.com/security/CVE-2026-64834),
[CVE-2026-75143](https://ubuntu.com/security/CVE-2026-75143)

+ 11 others

---

### [USN-8717-1: Apache Tika vulnerability](https://ubuntu.com/security/notices/USN-8717-1)

3 September 2026

Apache Tika could be made to expose sensitive information over the
network.

* Ubuntu 22.04 LTS,
* 20.04 LTS

CVE ID

[CVE-2026-66755](https://ubuntu.com/security/CVE-2026-66755)

---

### [USN-8661-4: Linux kernel vulnerabilities](https://ubuntu.com/security/notices/USN-8661-4)

2 September 2026

Several security issues were fixed in the Linux kernel.

* Ubuntu 20.04 LTS

CVE ID

[CVE-2026-53224](https://ubuntu.com/security/CVE-2026-53224),
[CVE-2026-31705](https://ubuntu.com/security/CVE-2026-31705),
[CVE-2026-52924](https://ubuntu.com/security/CVE-2026-52924)

+ 18 others

---

### [USN-8715-1: Linux kernel (Oracle) vulnerabilities](https://ubuntu.com/security/notices/USN-8715-1)

2 September 2026

Several security issues were fixed in the Linux kernel.

* Ubuntu 18.04 LTS

CVE ID

[CVE-2026-53212](https://ubuntu.com/security/CVE-2026-53212),
[CVE-2026-52955](https://ubuntu.com/security/CVE-2026-52955),
[CVE-2026-31657](https://ubuntu.com/security/CVE-2026-31657)

+ 34 others

---

1. *Previous page*
2. [1](https://ubuntu.com/security/notices?format=md&offset=0)
3. [2](https://ubuntu.com/security/notices?format=md&offset=10)
4. [3](https://ubuntu.com/security/notices?format=md&offset=20)
5. [4](https://ubuntu.com/security/notices?format=md&offset=30)
6. [5](https://ubuntu.com/security/notices?format=md&offset=40)
7. [*Next page*](https://ubuntu.com/security/notices?format=md&offset=10)

---

## Resources

### Join the discussion

* [Ubuntu security updates mailing list](https://lists.ubuntu.com/mailman/listinfo/ubuntu-hardened)
* [Security announcements mailing list](https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce)

---

### Further reading

* *Loading...*

---

## Get up to 15 years of security maintenance for your new or established systems

Get up to 15 years of security maintenance for your entire Ubuntu Archive. Keep your systems stable with security backporting and avoid forced upgrades.

[Find out more about Ubuntu Pro ›](https://ubuntu.com/pro)

[Learn more about ESM and our legacy add-on ›](https://ubuntu.com/security/esm)
