Ubuntu 16.04

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6408-2 Related CVEs: CVE-2023-43786 CVE-2023-43787 CVE-2023-43788 CVE-2023-43789 CVE-2022-44617 CVE-2022-46285 CVE-2022-4883 CVE-2016-10164 Upstream summary: USN-6408-1 fixed several vulnerabilities in libXpm. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8018-3 Related CVEs: CVE-2026-0672 CVE-2025-15282 CVE-2025-12084 CVE-2026-0865 CVE-2023-27043 https://launchpad.net/bugs/2125702 CVE-2025-8194 CVE-2025-0938  +12 more Upstream summary: USN-8018-1 fixed CVE-2025-12084, CVE-2025-15282, CVE-2026-0672, CVE-2026-0865 for python3. This update provides the corresponding updates for […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6117-1 Related CVEs: CVE-2019-17566 CVE-2020-11987 CVE-2022-38398 CVE-2022-38648 CVE-2022-40146 CVE-2022-41704 CVE-2022-42890 Upstream summary: It was discovered that Apache Batik incorrectly handled certain inputs. An attacker could possibly use this to perform […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8076-1 Related CVEs: CVE-2024-39936 CVE-2023-51714 CVE-2022-25255 CVE-2020-13962 CVE-2020-17507 CVE-2023-24607 CVE-2023-32762 CVE-2023-33285  +8 more Upstream summary: It was discovered that Qt did not correctly handle OpenSSL's error queue. An attacker could […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8010-1 Related CVEs: CVE-2025-66418 CVE-2026-21441 CVE-2025-47273 CVE-2024-37891 CVE-2018-25091 CVE-2023-43804 CVE-2023-45803 https://launchpad.net/bugs/2009130  +2 more Upstream summary: Several security issues were discovered in the libraries bundled in pip. An attacker could possibly […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7658-1 Related CVEs: CVE-2020-11023 CVE-2020-11022 CVE-2020-13671 CVE-2020-28948 CVE-2020-28949 CVE-2015-2559 CVE-2015-2749 CVE-2015-2750  +2 more Upstream summary: It was discovered that Drupal incorrectly parsed untrusted HTML. A remote attacker could possibly use […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7282-1 Related CVEs: CVE-2017-12616 CVE-2017-12617 CVE-2019-0221 CVE-2020-9484 CVE-2021-25329 CVE-2016-5388 CVE-2018-1336 CVE-2015-5174  +7 more Upstream summary: It was discovered that Tomcat incorrectly handled being configured with HTTP PUTs enabled. A remote […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6969-1 Related CVEs: CVE-2024-25641 CVE-2024-29894 CVE-2024-31443 CVE-2024-31444 CVE-2024-31445 CVE-2024-31458 CVE-2024-31459 CVE-2024-31460  +6 more Upstream summary: It was discovered that Cacti did not properly apply checks to the "Package Import" feature. […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6474-1 Related CVEs: CVE-2022-23468 CVE-2022-23477 CVE-2022-23478 CVE-2022-23479 CVE-2022-23480 CVE-2022-23481 CVE-2022-23482 CVE-2022-23483  +8 more Upstream summary: It was discovered that xrdp incorrectly handled validation of client-supplied data, which could lead to […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5553-1 Related CVEs: CVE-2018-11813 CVE-2018-14498 CVE-2020-14152 CVE-2020-17541 CVE-2020-13790 CVE-2018-19664 CVE-2018-20330 CVE-2019-2201  +7 more Upstream summary: It was discovered that libjpeg-turbo was not properly handling EOF characters, which could lead to […]