Bugs addressed in recent updates
| Origin | Bug number | Title | Packages |
|---|---|---|---|
| Launchpad | 2120577 | arctica-greeter FTBFS in Plucky | arctica-greeter |
| Launchpad | 2163156 | autopkgtest failure in containers due to swap file | nbd |
| Launchpad | 2168948 | gdebi FTBFS: setup.py passes Debian version (0.9.5.8build1) to setuptools, which rejects it as invalid PEP 440 | gdebi |
| Launchpad | 2170260 | Loupe profile needs to allow GVFS accesses | apparmor apparmor |
| Launchpad | 2170242 | Fix loupe profile nits identified in 6.0.0~alpha1-0ubuntu4 review | apparmor apparmor |
| Launchpad | 2169688 | Error opening file /home/corrado/Pictures/red eyes frog.tif: Permission denied | apparmor apparmor |
| Launchpad | 2169708 | Apparmor profile for notify-send breaks notification actions | apparmor apparmor |
| Launchpad | 2170226 | fwupd-refresh.service always fails with \ | fwupd fwupd |
| Launchpad | 2170857 | SRU upload of 21.1.25 | xorg-server xorg-server |
| Launchpad | 2170810 | epics-base FTBFS: tests abort with buffer overflow detected under _FORTIFY_SOURCE=3 (dbAllocRecord) | epics-base |
| Debian | 1128761 | yambar: FTBFS with glibc 2.43 due to ISO C23 const return types | yambar |
| Launchpad | 2153485 | Backport haproxy for stonking cycle | haproxy haproxy |
| CVE | CVE-2026-93546 | Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes | apache2 apache2 apache2 apache2 apache2 apache2 |
| CVE | CVE-2026-79768 | Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wildcard Us | apache2 apache2 apache2 apache2 apache2 apache2 |
| CVE | CVE-2026-73637 | Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote cl | apache2 apache2 apache2 apache2 apache2 apache2 |
| CVE | CVE-2026-73636 | Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a man-in-th | apache2 apache2 apache2 apache2 apache2 apache2 |
| CVE | CVE-2026-7363 | Use after free in Canvas in Google Chrome on Linux, ChromeOS prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a san | apache2 apache2 apache2 apache2 apache2 apache2 |
| CVE | CVE-2026-63718 | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') response smuggling vulnerability in Apache HTTP Server via mod_proxy | apache2 apache2 apache2 apache2 apache2 apache2 |
| CVE | CVE-2026-63686 | A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend | apache2 apache2 apache2 apache2 apache2 apache2 |
| CVE | CVE-2026-63292 | Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote clien | apache2 apache2 apache2 apache2 apache2 apache2 |
About
-
Send Feedback to @ubuntu_updates
