Canonical vulnerabilities
224 CVEs and advisories name Canonical as an affected vendor, newest first. Follow it as a feed.
- CVE-2019-11480Ubuntu kernel snap build process could use unauthenticated sources
- CVE-2019-7305eXtplorer exposes /usr and /etc/extplorer over HTTP
- CVE-2019-15789Microk8s Privilege Escalation Vulnerability
- CVE-2019-15796python-apt downloads from untrusted sources
- CVE-2019-15795python-apt uses MD5 for validation
- CVE-2019-11485apport created lock file in wrong directory
- CVE-2019-11484Integer overflow in bson_ensure_space
- CVE-2019-11483Sander Bos discovered Apport mishandled crash dumps originating from containers.
- CVE-2019-11482Race condition between reading current working directory and writing a core dump
- CVE-2019-11481Apport reads arbitrary files if ~/.config/apport/settings is a symlink
- CVE-2019-7304Local privilege escalation via snapd socket
- CVE-2019-7303Snapd seccomp filter TIOCSTI ioctl bypass
- CVE-2018-6559The Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10, allows local users to obtain names of files in which they would not normally
- CVE-2018-10896The default cloud-init configuration, in cloud-init 0.6.2 and newer, included "ssh_deletekeys: 0", disabling cloud-init's deletion of ssh ho