It was discovered that some AMD processors did not properly clear data inthe floating point divider unit during speculative execution. A localattacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 processors did not properly isolateshared resources in the operation cache. A local attacker could possiblyuse this issue…
It was discovered that NTFS-3G had a heap buffer overflow when readingcertain NTFS images. A local attacker could possibly use this issue toexecute arbitrary code. (CVE-2026-42616) It was discovered that NTFS-3G had multiple heap buffer overflows whenprocessing certain NTFS images. A local attacker could possibly use theseissues to execute arbitrary code. (CVE-2026-42617, CVE-2026-42618,CVE-2026-46569, CVE-2026-46570, CVE-2026-46572,…
Bilal Teke discovered that Ubuntu Advantage Tools exposed the Pro bearertoken in command-line arguments when validating APT credentials. A localattacker could possibly use this issue to obtain sensitive informationand gain unauthorized access to Ubuntu Pro repositories. (CVE-2026-9494) Frederick Jerusha discovered that Ubuntu Advantage Tools did not properlyvalidate data received from the contract server when writing…
Jay Neiva and Mauro Carrillo discovered that Authlib did not properlyvalidate cryptographic keys embedded in JWT headers. An attacker couldpossibly use this issue to forge trusted tokens, resulting inauthentication and authorization bypass. (CVE-2026-27962) Jay Neiva and Mauro Carrillo discovered that Authlib incorrectly handledRSA1_5 encrypted tokens. An attacker could possibly use this issue torecover sensitive encrypted…
It was discovered that the Net::IMAP client in Ruby did not properlysanitize Symbol arguments passed to IMAP commands. A remote attackercontrolling a malicious IMAP server, or able to influence commandarguments, could use this to inject arbitrary IMAP commands via CRLFsequences. (CVE-2026-42258) It was discovered that the Zlib::GzipReader in Ruby did not correctlyensure sufficient buffer capacity…
Artur Stetsko discovered that the .NET did not properly validateauthentication data. An attacker could possibly use this issue to elevateprivileges. (CVE-2026-47300) Levi Broderick discovered that .NET did not properly handle XML encryptionduring parsing. An attacker could possibly use this issue to consumeexcessive resources, resulting in a denial of service. (CVE-2026-47302) Pham Quang Minh discovered that…
It was discovered that Tomcat incorrectly handled authorization whenmultiple method constraints defined the same HTTP method. A remoteattacker could possibly use this issue to bypass authorizationrestrictions. (CVE-2026-43515) It was discovered that the Tomcat number guess example application didnot properly sanitize user-supplied input. An attacker could possiblyuse this issue to inject malicious scripts, resulting in cross-sitescripting….
24.04 LTS noble libluajit-5.1-2 – 2.1.0+git20231223.c525bcb+dfsg-1ubuntu0.1 libluajit-5.1-common – 2.1.0+git20231223.c525bcb+dfsg-1ubuntu0.1 luajit – 2.1.0+git20231223.c525bcb+dfsg-1ubuntu0.1 22.04 LTS jammy libluajit-5.1-2 – 2.1.0~beta3+dfsg-6ubuntu0.1 libluajit-5.1-common – 2.1.0~beta3+dfsg-6ubuntu0.1 luajit – 2.1.0~beta3+dfsg-6ubuntu0.1 20.04 LTS focal libluajit-5.1-2 – 2.1.0~beta3+dfsg-5.1ubuntu0.20.04.1~esm1  Ubuntu Pro Fix available with Ubuntu Pro via ESM Apps. A community fix might become publicly available in the future. libluajit-5.1-common – 2.1.0~beta3+dfsg-5.1ubuntu0.20.04.1~esm1  Ubuntu Pro Fix available with Ubuntu Pro via…
26.04 LTS resolute dnsmasq – 2.92-1ubuntu0.4 dnsmasq-base – 2.92-1ubuntu0.4 dnsmasq-base-lua – 2.92-1ubuntu0.4 dnsmasq-utils – 2.92-1ubuntu0.4 24.04 LTS noble dnsmasq – 2.90-2ubuntu0.4 dnsmasq-base – 2.90-2ubuntu0.4 dnsmasq-base-lua – 2.90-2ubuntu0.4 dnsmasq-utils – 2.90-2ubuntu0.4 22.04 LTS jammy dnsmasq – 2.90-0ubuntu0.22.04.4 dnsmasq-base – 2.90-0ubuntu0.22.04.4 dnsmasq-base-lua – 2.90-0ubuntu0.22.04.4 dnsmasq-utils – 2.90-0ubuntu0.22.04.4 20.04 LTS focal dnsmasq – 2.90-0ubuntu0.20.04.1+esm3  Ubuntu Pro Fix available with Ubuntu Pro. dnsmasq-base – 2.90-0ubuntu0.20.04.1+esm3  Ubuntu Pro Fix available with Ubuntu…
It was discovered that Wget mishandled semicolons in the userinfosubcomponent of a URL. A remote attacker could possibly use this issueto trick a user into connecting to a different host than intended. Thisissue only affected Ubuntu 14.04 LTS. (CVE-2024-38428) It was discovered that Wget incorrectly handled Metalink documentscontaining a whitespace-only URL. A remote attacker could…
