CVE reports
The Common Vulnerabilities and Exposures (CVE) system is used to identify, define, and catalog publicly disclosed cybersecurity vulnerabilities. Canonical keeps track of all CVEs affecting Ubuntu, and releases a security notice when an issue is fixed.
Canonical also produces Open Vulnerability and Assessment Language (OVAL) data, which is machine-readable, to enable auditing for CVEs and to determine whether a particular patch, via an Ubuntu Security Notice (USN), is appropriate for the local system.
Search
Recent CVEs affecting Ubuntu
| ID | Priority | Package |
14.04 ESM
|
16.04 ESM
|
18.04 LTS
|
20.04 LTS
|
22.04 LTS
|
22.10
|
|---|---|---|---|---|---|---|---|---|
| CVE-2022-2869 |
low
|
tiff |
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
— |
| CVE-2022-2868 |
low
|
tiff |
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
— |
| CVE-2022-2867 |
low
|
tiff |
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
— |
| CVE-2022-2850 |
medium
|
389-ds-base |
Ignored
|
Ignored
|
Needs triage
|
Needs triage
|
Needs triage
|
— |
| CVE-2022-38238 |
low
|
xpdf |
Does not exist
|
Ignored
|
Needs triage
|
Does not exist
|
Needs triage
|
— |
| ipe |
Does not exist
|
Ignored
|
Needs triage
|
Needs triage
|
Needs triage
|
— | ||
| CVE-2022-38237 |
low
|
xpdf |
Does not exist
|
Ignored
|
Needs triage
|
Does not exist
|
Needs triage
|
— |
| ipe |
Does not exist
|
Ignored
|
Needs triage
|
Needs triage
|
Needs triage
|
— | ||
| CVE-2022-38236 |
low
|
xpdf |
Does not exist
|
Ignored
|
Needs triage
|
Does not exist
|
Needs triage
|
— |
| ipe |
Does not exist
|
Ignored
|
Needs triage
|
Needs triage
|
Needs triage
|
— | ||
| CVE-2022-38235 |
low
|
xpdf |
Does not exist
|
Ignored
|
Needs triage
|
Does not exist
|
Needs triage
|
— |
| ipe |
Does not exist
|
Ignored
|
Needs triage
|
Needs triage
|
Needs triage
|
— | ||
| CVE-2022-38234 |
low
|
xpdf |
Does not exist
|
Ignored
|
Needs triage
|
Does not exist
|
Needs triage
|
— |
| ipe |
Does not exist
|
Ignored
|
Needs triage
|
Needs triage
|
Needs triage
|
— | ||
| CVE-2022-38233 |
low
|
xpdf |
Does not exist
|
Ignored
|
Needs triage
|
Does not exist
|
Needs triage
|
— |
| ipe |
Does not exist
|
Ignored
|
Needs triage
|
Needs triage
|
Needs triage
|
— | ||
| CVE-2022-38231 |
low
|
xpdf |
Does not exist
|
Ignored
|
Needs triage
|
Does not exist
|
Needs triage
|
— |
| ipe |
Does not exist
|
Ignored
|
Needs triage
|
Needs triage
|
Needs triage
|
— | ||
| CVE-2022-38230 |
low
|
xpdf |
Does not exist
|
Ignored
|
Needs triage
|
Does not exist
|
Needs triage
|
— |
| ipe |
Does not exist
|
Ignored
|
Needs triage
|
Needs triage
|
Needs triage
|
— | ||
| CVE-2022-38229 |
low
|
xpdf |
Does not exist
|
Ignored
|
Needs triage
|
Does not exist
|
Needs triage
|
— |
| ipe |
Does not exist
|
Ignored
|
Needs triage
|
Needs triage
|
Needs triage
|
— | ||
| CVE-2022-38228 |
low
|
xpdf |
Does not exist
|
Ignored
|
Needs triage
|
Does not exist
|
Needs triage
|
— |
| ipe |
Does not exist
|
Ignored
|
Needs triage
|
Needs triage
|
Needs triage
|
— | ||
| CVE-2022-38227 |
low
|
ipe |
Does not exist
|
Ignored
|
Needs triage
|
Needs triage
|
Needs triage
|
— |
| xpdf |
Does not exist
|
Ignored
|
Needs triage
|
Does not exist
|
Needs triage
|
— | ||
| CVE-2022-37781 |
low
|
fdkaac |
Does not exist
|
Ignored
|
Needs triage
|
Needs triage
|
Needs triage
|
— |
| CVE-2022-36148 |
low
|
fdkaac |
Does not exist
|
Ignored
|
Needs triage
|
Needs triage
|
Needs triage
|
— |
| CVE-2022-36146 |
low
|
swfmill |
Ignored
|
Ignored
|
Needs triage
|
Needs triage
|
Needs triage
|
— |
| CVE-2022-36145 |
low
|
swfmill |
Ignored
|
Ignored
|
Needs triage
|
Needs triage
|
Needs triage
|
— |
| CVE-2022-36144 |
medium
|
swfmill |
Ignored
|
Ignored
|
Needs triage
|
Needs triage
|
Needs triage
|
— |