Aleksander Iwicki discovered that Request Tracker did not properly sanitizethe search “Page” URL parameter. A remote attacker could possibly use thisissue to conduct a reflected cross-site scripting attack. (CVE-2026-6841) It was discovered that Request Tracker did not properly sanitize user-controlled data written to spreadsheet exports of search results. A remoteattacker could possibly use this issue…
It was discovered that Python incorrectly normalized paths in the tarfilemodule. An attacker could possibly use this issue to bypass pathrestrictions. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04LTS. (CVE-2025-13462) It was discovered that Python’s HTMLParser incorrectly handled certainmalformed HTML input. An attacker could possibly use this issue to causePython to crash, resulting…
It was discovered that PHP incorrectly handled SOAP object deduplicationwhen processing apache:Map nodes with duplicate keys. An attacker couldpossibly use this to cause a use-after-free, resulting in remote codeexecution. (CVE-2026-6722) It was discovered that PHP incorrectly handled SOAP request persistence whenconfigured with SOAP_PERSISTENCE_SESSION. An attacker could possibly use thisto cause a use-after-free, resulting in memory…
It was discovered that GnuTLS had a timing side-channel when processingmalformed ciphertexts in RSA-PSK ClientKeyExchange. A remote attackercould possibly use this issue to recover sensitive information. Thisissue only affected Ubuntu 18.04 LTS. (CVE-2024-0553) Bing Shi discovered that GnuTLS incorrectly handled decoding certainDER-encoded certificates. A remote attacker could possibly use thisissue to cause GnuTLS to consume…
It was discovered that the Linux kernel did not properly handle shared pagefragments during socket buffer operations, collectively known as DirtyFrag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in theRxRPC networking subsystem when processing paged fragments. A localattacker could use this to escalate privileges, or possibly escape acontainer. (CVE-2026-43284, CVE-2026-43500, CVE-2026-45998, CVE-2026-46000)…
It was discovered that the Linux kernel algif_aead module did not properlyhandle in-place cryptographic operations. This flaw is known as Copy Fail.A local attacker could use this to escalate privileges, or possibly escapea container. (CVE-2026-31431) It was discovered that the Linux kernel did not properly handle shared pagefragments during socket buffer operations, collectively known as…
26.04 LTS resolute vim – 2:9.1.2141-1ubuntu4.6 vim-common – 2:9.1.2141-1ubuntu4.6 vim-gtk3 – 2:9.1.2141-1ubuntu4.6 vim-gui-common – 2:9.1.2141-1ubuntu4.6 vim-motif – 2:9.1.2141-1ubuntu4.6 vim-nox – 2:9.1.2141-1ubuntu4.6 vim-runtime – 2:9.1.2141-1ubuntu4.6 vim-tiny – 2:9.1.2141-1ubuntu4.6 xxd – 2:9.1.2141-1ubuntu4.6 25.10 questing vim – 2:9.1.0967-1ubuntu6.8 vim-athena – 2:9.1.0967-1ubuntu6.8 vim-common – 2:9.1.0967-1ubuntu6.8 vim-gtk3 – 2:9.1.0967-1ubuntu6.8 vim-gui-common – 2:9.1.0967-1ubuntu6.8 vim-motif – 2:9.1.0967-1ubuntu6.8 vim-nox – 2:9.1.0967-1ubuntu6.8 vim-runtime – 2:9.1.0967-1ubuntu6.8 vim-tiny – 2:9.1.0967-1ubuntu6.8 xxd – 2:9.1.0967-1ubuntu6.8 24.04 LTS noble vim – 2:9.1.0016-1ubuntu7.17 vim-athena – 2:9.1.0016-1ubuntu7.17 vim-common – 2:9.1.0016-1ubuntu7.17 vim-gtk3 – 2:9.1.0016-1ubuntu7.17 vim-gui-common – …
USN-8467-1 fixed vulnerabilities in Perl. This update provides thecorresponding fix for Perl on Ubuntu 25.10. Original advisory details:It was discovered that Perl’s Archive::Tar module incorrectly handledsymlink and hardlink targets during extraction. An attacker could use thisissue to read or overwrite arbitrary files outside the extractiondirectory. (CVE-2026-42496)It was discovered that Perl had a heap buffer overflow…
22.04 LTS jammy linux-image-5.15.0-1052-nvidia-tegra-igx – 5.15.0-1052.52 linux-image-5.15.0-1052-nvidia-tegra-igx-rt – 5.15.0-1052.52 linux-image-5.15.0-1063-nvidia-tegra – 5.15.0-1063.63 linux-image-5.15.0-1063-nvidia-tegra-rt – 5.15.0-1063.63 linux-image-5.15.0-1094-gkeop – 5.15.0-1094.102 linux-image-5.15.0-1103-intel-iot-realtime – 5.15.0-1103.105  Real-time Real-time kernel available with Ubuntu Pro. linux-image-5.15.0-1103-kvm – 5.15.0-1103.108 linux-image-5.15.0-1105-ibm – 5.15.0-1105.109 linux-image-5.15.0-1106-intel-iotg – 5.15.0-1106.112 linux-image-5.15.0-1106-nvidia – 5.15.0-1106.107 linux-image-5.15.0-1106-nvidia-lowlatency – 5.15.0-1106.107 linux-image-5.15.0-1107-gke – 5.15.0-1107.113 linux-image-5.15.0-1108-oracle – 5.15.0-1108.114 linux-image-5.15.0-1110-realtime – 5.15.0-1110.119  Real-time Real-time kernel available with Ubuntu Pro. linux-image-5.15.0-1111-aws – 5.15.0-1111.118 linux-image-5.15.0-1111-aws-64k – 5.15.0-1111.118 linux-image-5.15.0-1111-aws-fips – 5.15.0-1111.118+fips1  FIPS…
