Ubuntu 16.04

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7368-1 Related CVEs: CVE-2017-18640 CVE-2022-25857 CVE-2022-38749 CVE-2022-38750 CVE-2022-38751 Upstream summary: It was discovered that SnakeYAML incorrectly handled recursive entity references. An attacker could possibly use this issue to cause SnakeYAML […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7343-1 Related CVEs: CVE-2024-56201 CVE-2024-56326 CVE-2025-27516 CVE-2024-34064 CVE-2020-28493 CVE-2024-22195 CVE-2016-10745 CVE-2019-10906 Upstream summary: Rafal Krupinski discovered that Jinja2 did not properly restrict the execution of code in situations where templates […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6799-1 Related CVEs: CVE-2024-34069 CVE-2023-23934 CVE-2023-25577 CVE-2019-14806 CVE-2020-28724 CVE-2016-10516 Upstream summary: It was discovered that the debugger in Werkzeug was not restricted to trusted hosts. A remote attacker could possibly […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6640-1 Related CVEs: CVE-2023-4641 https://launchpad.net/bugs/1998169 CVE-2013-4235 CVE-2017-12424 CVE-2018-7169 https://launchpad.net/bugs/1690820 CVE-2016-6252 CVE-2017-2616 Upstream summary: It was discovered that shadow was not properly sanitizing memory when running the password utility. An attacker […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8178-1 Related CVEs: CVE-2024-7547 CVE-2024-7546 CVE-2024-7541 CVE-2024-7545 CVE-2024-7539 CVE-2024-7544 CVE-2024-7540 CVE-2024-7542  +7 more Upstream summary: It was discovered that oFono incorrectly handled crafted responses from AT commands. An attacker could […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6190-2 Related CVEs: CVE-2023-3297 CVE-2018-14036 CVE-2020-16126 CVE-2020-16127 Upstream summary: USN-6190-1 fixed a vulnerability in AccountsService. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6145-1 Related CVEs: CVE-2022-39377 CVE-2023-33204 CVE-2019-16167 CVE-2019-19725 Upstream summary: It was discovered that Sysstat incorrectly handled certain arithmetic multiplications. An attacker could use this issue to cause Sysstat to crash, […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7974-1 Related CVEs: CVE-2026-0992 CVE-2026-0990 CVE-2025-8732 CVE-2026-0989 CVE-2025-7425 CVE-2025-9714 CVE-2025-6021 CVE-2025-49794  +12 more Upstream summary: It was discovered that libxml2 incorrectly handled maliciously crafted SGML catalog files. An attacker could […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7599-1 Related CVEs: CVE-2025-50182 CVE-2025-50181 CVE-2024-37891 CVE-2018-25091 CVE-2023-43804 CVE-2023-45803 CVE-2020-26137 CVE-2018-20060  +2 more Upstream summary: Jacob Sandum discovered that urllib3 handled redirects even when they were explicitly disabled while using […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7243-1 Related CVEs: CVE-2024-46461 CVE-2023-47359 CVE-2023-47360 CVE-2019-19721 CVE-2020-13428 CVE-2021-25801 CVE-2021-25802 CVE-2021-25803  +4 more Upstream summary: It was discovered that VLC incorrectly handled memory when reading an MMS stream. An attacker […]