Ubuntu 16.04

🟠 High   ⏱ 15–60 min  Last verified: 31 March 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7974-1 Related CVEs: CVE-2026-0992 CVE-2026-0990 CVE-2025-8732 CVE-2026-0989 CVE-2025-7425 CVE-2025-9714 CVE-2025-6021 CVE-2025-49794  +12 more Upstream summary: It was discovered that libxml2 incorrectly handled maliciously crafted SGML catalog files. An attacker could […]

🟠 High   ⏱ 15–60 min  Last verified: 28 March 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8018-2 Related CVEs: CVE-2025-15367 CVE-2025-15366 CVE-2026-0865 https://bugs.launchpad.net/bugs/2143706 CVE-2025-15282 CVE-2026-0672 CVE-2025-13837 CVE-2025-11468  +12 more Upstream summary: USN-8018-1 fixed vulnerabilities in python3. That update introduced regressions. The patches for CVE-2025-15366 and CVE-2025-15367 […]

🟠 High   ⏱ 15–60 min  Last verified: 23 March 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8169-1 Related CVEs: CVE-2025-49844 CVE-2022-24834 CVE-2024-31449 CVE-2024-31228 CVE-2024-46981 CVE-2024-51741 CVE-2022-35977 CVE-2022-36021  +12 more Upstream summary: It was discovered that Redis incorrectly handled certain specially crafted Lua scripts. A remote attacker […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 March 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8081-1 Related CVEs: CVE-2026-25646 CVE-2025-64505 CVE-2017-12652 CVE-2018-14048 CVE-2016-10087 CVE-2018-13785 Upstream summary: It was discovered that libpng did not properly handle memory when processing certain PNG files. An attacker could possibly […]

🟠 High   ⏱ 15–60 min  Last verified: 22 March 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8018-3 Related CVEs: CVE-2026-0672 CVE-2025-15282 CVE-2025-12084 CVE-2026-0865 CVE-2023-27043 https://launchpad.net/bugs/2125702 CVE-2025-8194 CVE-2025-0938  +12 more Upstream summary: USN-8018-1 fixed CVE-2025-12084, CVE-2025-15282, CVE-2026-0672, CVE-2026-0865 for python3. This update provides the corresponding updates for […]

🟠 High   ⏱ 15–60 min  Last verified: 20 March 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8022-1 Related CVEs: CVE-2026-25210 CVE-2026-24515 CVE-2025-59375 CVE-2024-50602 CVE-2024-45490 CVE-2024-45491 CVE-2024-45492 CVE-2022-43680  +12 more Upstream summary: It was discovered that Expat incorrectly handled memory when parsing certain XML files. An attacker […]

🟡 Medium   ⏱ 10–30 min  Last verified: 18 March 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7367-1 Related CVEs: CVE-2025-2173 CVE-2025-2174 CVE-2025-2175 CVE-2025-2176 CVE-2025-2177 Upstream summary: It was discovered that zvbi incorrectly handled memory when processing user input. An attacker could possibly use this issue to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 15 March 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8108-1 Related CVEs: CVE-2024-30172 CVE-2023-33201 CVE-2025-8916 CVE-2024-29857 CVE-2024-30171 CVE-2024-34447 Upstream summary: It was discovered that Bouncy Castle did not sanitize user input when inserting it into an LDAP search filter. […]

🟠 High   ⏱ 15–60 min  Last verified: 13 March 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7485-1 Related CVEs: CVE-2025-43961 CVE-2025-43962 CVE-2025-43963 CVE-2025-43964 CVE-2018-20337 CVE-2018-20363 CVE-2018-20364 CVE-2018-20365  +12 more Upstream summary: It was discovered that LibRaw could be made to read out of bounds. An attacker […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 March 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8133-1 Related CVEs: CVE-2026-32597 CVE-2017-11424 Upstream summary: It was discovered that PyJWT did not validate the critical header parameter, contrary to the RFC specification expectations. A remote attacker could possibly […]