USN-8661-5 linux-raspi vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

USN-8760-2 linux-nvidia vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - User-space API UAPI; - Kernel build system; - ARM32 architecture; - ARM64 architecture; - RISC-V architecture; - S3...

USN-8801-1 linux-azure-fde, linux-azure-fde-7.0 vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been...

USN-8800-1 linux-nvidia-bos vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - User-space API UAPI; - Kernel build system; - ARM32 architecture; - ARM64 architecture; - RISC-V architecture; - S3...

USN-8799-1 libssh2 vulnerabilities

It was discovered that libssh2 incorrectly handled certain publickey subsystem attributes. A remote attacker controlling a malicious SSH server could use this issue to cause a denial of service or possibly execute arbitrary code. CVE-2026-58050 It was discovered that libssh2 did not properly...

USN-8798-1 gst-plugins-good1.0 vulnerabilities

It was discovered that GStreamer Good Plugins incorrectly parsed certain MRF files. A remote attacker could possibly use this issue to execute arbitrary code. CVE-2026-18295, CVE-2026-18296 It was discovered that GStreamer Good Plugins incorrectly parsed certain PNG files. A remote attacker could...

USN-8797-1 gst-plugins-base1.0 vulnerability

It was discovered that GStreamer Base Plugins incorrectly handled certain OGG media files. A remote attacker could possibly use this issue to execute arbitrary code if it opened a specially crafted file...

USN-8794-1 glib2.0 vulnerabilities

It was discovered that GLib's GDBus authentication mechanism failed to enforce length limitations on data lines read from a client. An unauthenticated attacker could exploit this to cause a denial of service via resource exhaustion. CVE-2026-15588 It was discovered that the xdgmime library in GLi...

USN-8796-1 openjdk-21 vulnerabilities

Kai Aizen discovered that the Networking component of OpenJDK 21 did not correctly handle user authentication. A remote attacker could possibly use this issue to leak sensitive information. CVE-2026-61308 It was discovered that the JSSE component of OpenJDK 21 did not correctly handle user...

USN-8795-1 openjdk-17 vulnerabilities

Kai Aizen discovered that the Networking component of OpenJDK 17 did not correctly handle user authentication. A remote attacker could possibly use this issue to leak sensitive information. CVE-2026-61308 It was discovered that the JSSE component of OpenJDK 17 did not correctly handle user...

USN-8790-1 expat vulnerabilities

It was discovered that Expat could be made to allocate large amounts of memory when parsing a small crafted document. An attacker could possibly use this issue to cause Expat to consume resources, leading to a denial of service. This issue was only addressed in Ubuntu 24.04 LTS. CVE-2025-59375 It...

USN-8793-1 linux-azure-fde vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Bluetooth drivers; - GPU drivers; - Hardware monitoring drivers; - SPI subsystem; - NTFS3 file system; - iouring...

USN-8668-2 linux-raspi vulnerabilities

Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...

USN-8726-3 linux-ibm vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been...

USN-8729-3 linux-gcp-6.8, linux-ibm, linux-xilinx vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute Acceleration Framework; - Drivers core;...

USN-8761-3 linux-azure-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute Acceleration Framework; - Drivers core;...

USN-8730-4 linux-azure-fde, linux-intel-iotg, linux-kvm, linux-oracle, linux-xilinx-zynqmp vulnerability

A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - IPv6 networking; - Netfilter;...

USN-8792-1 memcached vulnerability

It was discovered that Memcached incorrectly handled ASCII authentication. A remote attacker could possibly use this issue to cause Memcached to crash, resulting in a denial of service...

USN-8791-1 ghostscript vulnerability

It was discovered that Ghostscript incorrectly handled JPEG 2000 image components with mismatched subsampling factors. An attacker could possibly use this issue to cause Ghostscript to crash or execute arbitrary code if it opened a specially crafted file...

USN-8787-1 libxml2 vulnerabilities

It was discovered that libxml2 incorrectly handled certain XML elements under certain circumstances. An attacker could possibly use this issue to cause libxml2 to crash or execute arbitrary code. CVE-2026-86140 It was discovered that libxml2 incorrectly handled certain XML documents when used wit...

USN-8786-1 rsyslog vulnerability

It was discovered that rsyslog incorrectly calculated buffer sizes when replacing strings. A remote attacker could possibly use this issue to cause rsyslog to crash, resulting in a denial of service...

USN-8789-1 strongswan vulnerabilities

It was discovered that strongSwan incorrectly handled PKCS7 containers in the openssl plugin. A remote attacker could possibly use this issue to cause strongSwan to crash, resulting in a denial of service. CVE-2026-78123 It was discovered that strongSwan incorrectly handled memory when enumeratin...

USN-8788-1 clamav vulnerabilities

It was discovered that ClamAV incorrectly handled certain zip archive files. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. CVE-2026-20337, CVE-2026-20338 It was discovered that ClamAV incorrectly handled certain PESpin files. A remote...

USN-8785-1 openjdk-lts vulnerabilities

Kai Aizen discovered that the Networking component of OpenJDK 11 did not correctly handle user authentication. A remote attacker could possibly use this issue to leak sensitive information. CVE-2026-61308 It was discovered that the JSSE component of OpenJDK 11 did not correctly handle user...

USN-8784-1 openjdk-8 vulnerabilities

Kai Aizen discovered that the Networking component of OpenJDK 8 did not correctly handle user authentication. A remote attacker could possibly use this issue to leak sensitive information. CVE-2026-61308 It was discovered that the JSSE component of OpenJDK 8 did not correctly handle user...

USN-8783-1 openjdk-25 vulnerabilities

Weber Leon discovered that the 2D component of OpenJDK 25 did not correctly handle user authentication. A remote attacker could possibly use this issue to cause a denial of service. CVE-2026-70906 Kai Aizen discovered that the Networking component of OpenJDK 25 did not correctly handle user...

USN-8782-1 rclone vulnerability

It was discovered that Rclone incorrectly handled unauthenticated requests to the remote control API. An attacker could possibly use this issue to execute arbitrary commands as the user invoking rclone. CVE-2026-49980...

USN-8781-1 linux-nvidia-tegra vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been...

USN-8730-3 linux-azure-5.15, linux-azure-fde-5.15, linux-azure-fips vulnerability

A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - IPv6 networking; - Netfilter;...

USN-8761-2 linux-azure-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute Acceleration Framework; - Drivers core;...

USN-8729-2 linux-raspi-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute Acceleration Framework; - Drivers core;...

USN-8726-2 linux-raspi vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been...

USN-8725-2 linux-aws vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - NVIDIA Tegra memory controller driver; - File systems infrastructure; - Network file system NFS server daemon; -...

USN-8715-2 linux-aws-fips vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

USN-8714-3 linux-azure-5.4, linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - OCFS2 file system; - SCTP protocol; CVE-2026-53043, CVE-2026-53224, CVE-2026-53225, CVE-2026-53246, CVE-2026-53309...

USN-8779-2 bubblewrap regression

USN-8779-1 fixed vulnerabilities in Bubblewrap. Unfortunately, the fix for CVE-2026-87766 introduced a regression in symlink resolution, preventing certain Flatpak applications from launching. This update reverts that fix until a complete fix is available. We apologize for the inconvenience...

USN-8780-1 libsoup2.4, libsoup3 vulnerabilities

It was discovered that libsoup incorrectly handled certain URLs when using an HTTP proxy. A remote attacker could possibly use this issue to inject arbitrary HTTP headers. CVE-2026-1467 It was discovered that libsoup did not remove proxy authentication credentials when following HTTP redirects. A...

USN-8779-1 bubblewrap vulnerabilities

It was discovered that Bubblewrap incorrectly handled certain temporary directories. A local attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS. CVE-2019-12439 It was discovered that Bubblewrap incorrectly handl...

USN-8778-1 gst-plugins-good1.0 vulnerability

It was discovered that GStreamer Good Plugins did not limit the size of reassembly buffers when processing fragmented RTP packets. A remote attacker could possibly use this issue to cause GStreamer Good Plugins to use excessive resources, leading to a denial of service...

USN-8777-1 bison vulnerability

It was discovered that GNU Bison incorrectly handled grammar-defined configuration variables when generating HTML reports. An attacker could possibly use this issue to execute arbitrary code...

USN-8776-1 python-cryptography vulnerabilities

It was discovered that python-cryptography incorrectly accepted objects with immutable buffers when performing certain cipher operations. This would result in corrupted output, contrary to expectations. This issue only affected Ubuntu 18.04 LTS. CVE-2023-23931 It was discovered that...

USN-8775-1 sqlite3 vulnerability

It was discovered that SQLite was vulnerable to a buffer overflow in the sqlar extension. If a user were tricked into opening a specially crafted SQLar archive, an attacker could cause a denial of service...

USN-8774-1 libheif vulnerabilities

Ali Firas discovered that libheif incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-62291 Dmitrijs Trizna discovered that libheif incorrectly handled certain image sequences. An attacker could possibly us...

USN-8736-2 perl vulnerabilities

USN-8736-1 fixed vulnerabilities in Perl. This update provides the corresponding fix for Perl on Ubuntu 24.04 LTS. Original advisory details: It was discovered that Perl incorrectly handled certain large inputs during regular expression matching. An attacker could possibly use this issue to trigg...

USN-8773-1 guix vulnerability

It was discovered that GNU Guix incorrectly made build outputs accessible to local users before their file metadata was finalized. A local attacker could possibly use this issue to gain elevated privileges...

USN-8772-1 aom vulnerabilities

It was discovered that AOM incorrectly handled the first-pass statistics buffer in Look-Ahead Processing LAP mode. An attacker could possibly use this issue to cause a heap buffer overflow, leading to a denial of service or possibly execute arbitrary code. CVE-2026-56208 It was discovered that AO...

USN-8514-2 openssh vulnerability

USN-8514-1 fixed a vulnerability in OpenSSH. This update provides the corresponding fix for Ubuntu 14.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that OpenSSH incorrectly handled file permissions when downloading files as root using the legacy scp...

USN-8771-1 valkey vulnerabilities

Madelyn Olson discovered that Valkey incorrectly handled TLS connections under certain conditions. A remote attacker could possibly use this issue to cause Valkey to crash, resulting in a denial of service, or execute arbitrary code. CVE-2026-56684 It was discovered that Valkey incorrectly handle...

USN-8770-1 simplesamlphp vulnerabilities

It was discovered that SimpleSAMLphp incorrectly validated cryptographic signatures in XML messages. An authenticated attacker could possibly use this issue to impersonate users or gain elevated privileges. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. CVE-2019-3465 It was...

USN-8769-1 phpseclib vulnerability

It was discovered that phpseclib did not perform padding validation in constant time when using AES in CBC mode. A remote attacker could possibly use this issue to conduct a padding oracle timing attack and obtain sensitive information...