index

USN-8779-1 fixed vulnerabilities in Bubblewrap. Unfortunately, the fix forCVE-2026-87766 introduced a regression in symlink resolution, preventingcertain Flatpak applications from launching. This update reverts that fixuntil a complete fix is available. We apologize for the inconvenience. Original advisory details: It was discovered that Bubblewrap incorrectly handled certain temporarydirectories. A local attacker could possibly use this issue…

USN-8739-1 fixed vulnerabilities in ImageMagick. This update provides thecorresponding fixes for Ubuntu 24.04 LTS. Original advisory details: It was discovered that ImageMagick incorrectly handled certain images. Anattacker could possibly use this issue to cause a denial of service. Thisissue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,Ubuntu 20.04 LTS, and Ubuntu 22.04…

USN-8571-1 fixed vulnerabilities in Apache HTTP Server. That fix wasincomplete due to a missing library symbol, resulting in a regressionthat could cause Apache HTTP Server to fail to start when HTTP/2proxying was enabled. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Pavel Kohout and Arkadi Vainbrand discovered that Apache HTTP…

USN-8716-1 fixed several vulnerabilities in FFmpeg. This update providesthe corresponding fix for Ubuntu 26.04 LTS. Original advisory details: It was discovered that FFmpeg incorrectly handled certain crafted mediafiles in the VobSub subtitle demuxer. An attacker could possibly usethis issue to cause a denial of service or execute arbitrary code.(CVE-2026-64830) It was discovered that FFmpeg incorrectly…

26.04 LTS resolute miniupnpd –  2.3.9-2ubuntu0.1~esm1   Ubuntu Pro Fix available with Ubuntu Pro via ESM Apps. A community fix might become publicly available in the future. miniupnpd-iptables –  2.3.9-2ubuntu0.1~esm1   Ubuntu Pro Fix available with Ubuntu Pro via ESM Apps. A community fix might become publicly available in the future. miniupnpd-nftables –  2.3.9-2ubuntu0.1~esm1   Ubuntu Pro Fix…

It was discovered that the rabbitmq-c command-line tools only acceptedcredentials on the command line, making them visible to other local usersthrough the process list. An attacker could possibly use this to obtainsensitive credentials. This issue only affected Ubuntu 14.04 LTS, Ubuntu16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2023-35789) It was discovered that rabbitmq-c…

20.04 LTS focal linux-image-5.4.0-1067-iot –  5.4.0-1067.70   Ubuntu Pro Fix available with Ubuntu Pro. linux-image-5.4.0-1081-xilinx-zynqmp –  5.4.0-1081.85   Ubuntu Pro Fix available with Ubuntu Pro. linux-image-5.4.0-1109-ibm –  5.4.0-1109.114   Ubuntu Pro Fix available with Ubuntu Pro. linux-image-5.4.0-1137-fips –  5.4.0-1137.147   FIPS Updates FIPS-140 certified package with security fixes. Available with Ubuntu Pro. linux-image-5.4.0-1146-raspi –  5.4.0-1146.159   Ubuntu Pro Fix available…

It was discovered that the JSSE component of OpenJDK 26 did not correctlyauthenticate users. A remote attacker could possibly use this issue to reador modify sensitive data. (CVE-2026-46968) It was discovered that the JSSE component of OpenJDK 26 did not correctlyauthorize users. A remote attacker could possibly use this issue to cause adenial of service….

24.04 LTS noble libpam-doc –  1.5.3-5ubuntu5.7 libpam-modules –  1.5.3-5ubuntu5.7 libpam-modules-bin –  1.5.3-5ubuntu5.7 libpam-runtime –  1.5.3-5ubuntu5.7 libpam0g –  1.5.3-5ubuntu5.7 libpam0g-dev –  1.5.3-5ubuntu5.7 22.04 LTS jammy libpam-cracklib –  1.4.0-11ubuntu2.8 libpam-doc –  1.4.0-11ubuntu2.8 libpam-modules –  1.4.0-11ubuntu2.8 libpam-modules-bin –  1.4.0-11ubuntu2.8 libpam-runtime –  1.4.0-11ubuntu2.8 libpam0g –  1.4.0-11ubuntu2.8 libpam0g-dev –  1.4.0-11ubuntu2.8 20.04 LTS focal libpam-cracklib –  1.3.1-5ubuntu4.7+esm1   Ubuntu Pro Fix available with Ubuntu Pro. libpam-doc –  1.3.1-5ubuntu4.7+esm1   Ubuntu Pro Fix available with Ubuntu Pro….

It was discovered that OpenSSL incorrectly handled the QUIC server incomingchannel queue. A remote attacker could possibly use this issue to causeOpenSSL to use excessive resources, leading to a denial of service. Thisissue only affected Ubuntu 26.04 LTS. (CVE-2026-14456) It was discovered that OpenSSL incorrectly handled signature algorithmselection when using Raw Public Keys. A remote…