It was discovered that libexif had an integer overflow in its MakerNotedecoder when called with a zero-length buffer. An attacker could possiblyuse this issue to cause a denial of service or obtain sensitiveinformation. (CVE-2026-32775) It was discovered that libexif had an integer overflow in its NikonMakerNote handler on 32-bit systems. A local attacker could possibly…
It was discovered that LibreOffice incorrectly handled importing DXFdrawings. An attacker could use this issue to cause LibreOffice to crash,resulting in a denial of service, or possibly execute arbitrary code.(CVE-2026-6039) It was discovered that LibreOffice incorrectly handled certain ODF numberformats. An attacker could use this issue to cause LibreOffice to crash,resulting in a denial of…
It was discovered that OpenSSH sftp did not properly constrain the locationof downloaded files when connecting to an attacker-controlled server. Anattacker could possibly use this issue to write files to unintendedlocations on the file system. (CVE-2026-59995) It was discovered that OpenSSH scp could place files in the parentdirectory of the intended destination when copying between…
It was discovered that LibRaw incorrectly handled certain Nikon RAW imagefiles. An attacker could possibly use this issue to cause LibRaw to crash,resulting in a denial of service. (CVE-2026-5342) It was discovered that LibRaw had an integer overflow in its DNG imageloader. An attacker could possibly use this issue to cause LibRaw tocrash, resulting in…
26.04 LTS resolute libsoup-2.4-1 – 2.74.3-10.1ubuntu5+esm1  Ubuntu Pro Fix available with Ubuntu Pro via ESM Apps. A community fix might become publicly available in the future. libsoup-gnome-2.4-1 – 2.74.3-10.1ubuntu5+esm1  Ubuntu Pro Fix available with Ubuntu Pro via ESM Apps. A community fix might become publicly available in the future. libsoup2.4-common – 2.74.3-10.1ubuntu5+esm1  Ubuntu Pro Fix…
16.04 LTS xenial idle-python2.7 – 2.7.12-1ubuntu0~16.04.18+esm20  Ubuntu Pro Fix available with Ubuntu Pro via Legacy Support add-on. idle-python3.5 – 3.5.2-2ubuntu0~16.04.13+esm23  Ubuntu Pro Fix available with Ubuntu Pro via Legacy Support add-on. libpython2.7 – 2.7.12-1ubuntu0~16.04.18+esm20  Ubuntu Pro Fix available with Ubuntu Pro via Legacy Support add-on. libpython2.7-dev – 2.7.12-1ubuntu0~16.04.18+esm20  Ubuntu Pro Fix available with Ubuntu Pro…
Harry Sintonen discovered that curl incorrectly handled credentials whenfollowing HTTP redirects in conjunction with .netrc files. An attackercould possibly use this issue to obtain sensitive information. This issueonly affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS.(CVE-2024-11053) Hiroki Kurosawa discovered that curl incorrectly handled OCSP staplingresponses. A remote attacker could possibly use this…
Xianrui Dong discovered that libheif had an out-of-bounds read in itsHEIF sequence track parser. An attacker could possibly use this issueto cause a denial of service or obtain sensitive information. This issueonly affected Ubuntu 26.04 LTS. (CVE-2026-47254) Junyi Liu discovered that libheif had a null pointer dereference in itsimage tiling interface. An attacker could possibly…
It was discovered that Apache HTTP Server’s mod_ldap module incorrectlyhandled memory when processing per-directory configurations. An attackercould use this issue to cause the server to crash, resulting in a denial ofservice, or possibly execute arbitrary code. (CVE-2026-29167) It was discovered that Apache HTTP Server’s mod_proxy_ftp moduleincorrectly handled HTML generation for FTP directory listings. A remoteattacker…
It was discovered that ClamAV incorrectly handled certain PE files. Aremote attacker could possibly use this issue to cause ClamAV to crash,resulting in a denial of service. (CVE-2026-20213, CVE-2026-20214,CVE-2026-20217) It was discovered that ClamAV incorrectly handled certain 7z archivefiles. A remote attacker could possibly use this issue to cause ClamAV tocrash, resulting in a denial…
