follow

20.04 LTS focal linux-image-5.4.0-1066-iot –  5.4.0-1066.69   Ubuntu Pro Fix available with Ubuntu Pro. linux-image-5.4.0-1080-xilinx-zynqmp –  5.4.0-1080.84   Ubuntu Pro Fix available with Ubuntu Pro. linux-image-5.4.0-1108-ibm –  5.4.0-1108.113   Ubuntu Pro Fix available with Ubuntu Pro. linux-image-5.4.0-1121-bluefield –  5.4.0-1121.128   Ubuntu Pro Fix available with Ubuntu Pro. linux-image-5.4.0-1136-fips –  5.4.0-1136.146   FIPS Updates FIPS-140 certified package with security fixes. Available…

It was discovered that PostgreSQL incorrectly handled COPY FROM STDIN whenan early failure occurred. An authenticated user could possibly use thisissue to execute arbitrary SQL commands. (CVE-2026-6464) It was discovered that PostgreSQL incorrectly reset extended statisticsownership during ALTER TABLE ALTER TYPE operations. An attacker couldpossibly use this issue to obtain sensitive information or gain unintendedprivileges….

Patrick Keshishian discovered that libpng incorrectly handled certaintext chunks. An attacker could possibly use this issue to cause a denial ofservice. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-10087) It was discovered that libpng incorrectly handled certain malformedimages. An attacker could possibly use this issue to cause a denial ofservice. This issue only affected Ubuntu…

Ameer Assadi discovered that Axios did not properly handle certainhostnames when applying NO_PROXY rules. An attacker could possibly usethis issue to bypass proxy restrictions and access internal services,resulting in server-side request forgery. (CVE-2025-62718) It was discovered that Axios did not properly protect certain HTTPheader values from prototype pollution. An attacker could possibly usethis issue to…

22.04 LTS jammy linux-image-5.15.0-1065-nvidia-tegra –  5.15.0-1065.67 linux-image-5.15.0-1065-nvidia-tegra-rt –  5.15.0-1065.67 linux-image-5.15.0-1076-xilinx-zynqmp –  5.15.0-1076.80 linux-image-5.15.0-1096-gkeop –  5.15.0-1096.104 linux-image-5.15.0-1105-intel-iot-realtime –  5.15.0-1105.107   Real-time Real-time kernel available with Ubuntu Pro. linux-image-5.15.0-1105-kvm –  5.15.0-1105.110 linux-image-5.15.0-1107-ibm –  5.15.0-1107.111 linux-image-5.15.0-1108-intel-iotg –  5.15.0-1108.114 linux-image-5.15.0-1108-nvidia –  5.15.0-1108.109 linux-image-5.15.0-1108-nvidia-lowlatency –  5.15.0-1108.109 linux-image-5.15.0-1112-realtime –  5.15.0-1112.121   Real-time Real-time kernel available with Ubuntu Pro. linux-image-5.15.0-1113-aws –  5.15.0-1113.120 linux-image-5.15.0-1113-aws-64k –  5.15.0-1113.120 linux-image-5.15.0-1113-aws-fips –  5.15.0-1113.120+fips1   FIPS Updates FIPS-140 certified package with security…

It was discovered that systemd-homed did not properly verify the signatureof home records. A local attacker could possibly use this issue to addarbitrary system groups to a logged-in user and gain elevated privileges.(CVE-2026-16742) It was discovered that systemd-machined incorrectly handled certain polkitauthorization checks. A local attacker could possibly use this issue toterminate arbitrary processes, including…

It was discovered that Samba’s pam_winbind incorrectly handled homedirectory ownership when mkhomedir was enabled. A local attacker couldpossibly use this issue to cause a denial of service by triggering a changein ownership of the root directory. (CVE-2026-15779) Arjun Basnet, Douglas Bagnall, and Andrew Tridgell discovered that Sambaincorrectly handled TSIG packets with name compression. A remote…

USN-8322-1 fixed a vulnerability in Apache Commons BeanUtils. It wasdiscovered that for Ubuntu 18.04 LTS, during the update preparationphase, a previous fix for CVE-2014-0114 and CVE-2019-10086 wasincorrectly dropped. This update reintroduces the fix forCVE-2014-0114 and CVE-2019-10086. We apologize for the inconvenience. Original advisory details: It was discovered that Apache Commons BeanUtils incorrectly allowedaccess to the…

It was discovered that libarchive did not properly manage memory whenunpacking certain RAR5 archives, leading to a double free. An attackercould possibly use this issue to cause a denial of service.(CVE-2026-14164) It was discovered that libarchive did not properly validate certain tararchives, leading to a buffer overflow. A remote attacker could possiblyuse this issue to…

26.04 LTS resolute imagemagick-7-common –  8:7.1.2.18+dfsg1-1ubuntu0.1~esm1   Ubuntu Pro Fix available with Ubuntu Pro via ESM Apps. A community fix might become publicly available in the future. imagemagick-7.q16 –  8:7.1.2.18+dfsg1-1ubuntu0.1~esm1   Ubuntu Pro Fix available with Ubuntu Pro via ESM Apps. A community fix might become publicly available in the future. imagemagick-7.q16hdri –  8:7.1.2.18+dfsg1-1ubuntu0.1~esm1   Ubuntu Pro Fix…