UBUNTU-CVE-2026-76884

ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

UBUNTU-CVE-2026-17183

An authenticated user with permission to create or edit alert rules can bypass datasource query authorization by marking an alert rule query as a server-side expression while referencing a real datasource UID incorrect authorization. This can expose data accessible through Grafana's configured...

UBUNTU-CVE-2026-19672

The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name...

UBUNTU-CVE-2026-47187

SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server can return absolute symlink targets or relative targets containing parent-directory components that SSHFS passes through FUSE for resolution by the client kernel against the local...

UBUNTU-CVE-2026-48711

SSHFS is a network filesystem client for connecting to SSH servers. From version 1.4 until 3.7.6, SSHFS accepts a bracketed mount source such as -oProxyCommand=CMD:/path and findbasepath removes the brackets, leaving a host value that begins with - and is passed directly to ssh as a command-line...

UBUNTU-CVE-2026-65610

nnn stores homelen variable as uchart, which can only represent values in the range 0-255. An attacker who can influence the victim's execution environment can provide an arbitrary HOME path with length that is truncated to 0. The expression homelen - 1 is promoted to signed int and becomes -1 an...

UBUNTU-CVE-2026-65611

nnn does not sanitize the path variable. An attacker can create a directory on a shared filesystem, removable media, or inside an extracted archive whose name contains a single quote followed by shell syntax. If the victim enters that directory in nnn and uses the batch copy or move workflow, the...

UBUNTU-CVE-2026-65612

nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or inside an extracted archive whose name contains a single quote followed by shell syntax. If the victim navigates to that file and opens it with preview-tabbed,...

ROOT-OS-UBUNTU-2404-CVE-2026-27456 CVE-2026-27456 in util-linux - Patched by Root

Root has patched CVE-2026-27456 in the util-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2510-CVE-0000-0000 CVE-0000-0000 in bash - Patched by Root

Root has patched CVE-0000-0000 in the bash package for Root:Ubuntu:25.10. Multiple fixed versions available...

USN-8649-1: libheif vulnerabilities

It was discovered that libheif had an integer underflow in the Fraction constructor when a clap transform was applied twice. An attacker could possibly use this issue to cause libheif to crash, resulting in a denial of service. CVE-2026-62289 It was discovered that libheif had an out-of-bounds re...

ROOT-OS-UBUNTU-2004-CVE-2025-48384 CVE-2025-48384 in git - Patched by Root

Root has patched CVE-2025-48384 in the git package for Root:Ubuntu:20.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2004-CVE-2026-41651 CVE-2026-41651 in packagekit - Patched by Root

Root has patched CVE-2026-41651 in the packagekit package for Root:Ubuntu:20.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2004-CVE-2025-68973 CVE-2025-68973 in gnupg2 - Patched by Root

Root has patched CVE-2025-68973 in the gnupg2 package for Root:Ubuntu:20.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2004-CVE-2026-45447 CVE-2026-45447 in openssl - Patched by Root

Root has patched CVE-2026-45447 in the openssl package for Root:Ubuntu:20.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2004-CVE-2025-32462 CVE-2025-32462 in sudo - Patched by Root

Root has patched CVE-2025-32462 in the sudo package for Root:Ubuntu:20.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2024-52005 CVE-2024-52005 in git - Patched by Root

Root has patched CVE-2024-52005 in the git package for Root:Ubuntu:24.04. Multiple fixed versions available...

USN-8093-2: libssh vulnerability

USN-8093-1 fixed a vulnerability in libssh. This update provides the corresponsing fix for Ubuntu 26.04 LTS. Original advisory details: It was discovered that libssh incorrectly performed bounds checking when processing SFTP extensions. If a client application queried extension data out of bounds...

USN-8093-2 libssh vulnerability

USN-8093-1 fixed a vulnerability in libssh. This update provides the corresponsing fix for Ubuntu 26.04 LTS. Original advisory details: It was discovered that libssh incorrectly performed bounds checking when processing SFTP extensions. If a client application queried extension data out of bounds...

UBUNTU-CVE-2026-49452

WeasyPrint helps web developers to create PDF documents. Prior to 69.0, WeasyPrint embeds unescaped HTML presentational-hint attribute values into CSS in weasyprint/css/init.py when presentationalhints=True. The background attribute is inserted into a background-image:url declaration and parsed b...