Bugs addressed in recent updates
| Origin | Bug number | Title | Packages |
|---|---|---|---|
| Debian | 1142771 | webkit2gtk: disable-nvidia-dmabuf.patch leaves backing store null, crashing WebKitGTK apps on NVIDIA | webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk |
| Launchpad | 2168736 | webkit crashes when compositing on NVIDIA | webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk webkit2gtk |
| Launchpad | 2156932 | Spice console empty page due to PicklingError | nova nova |
| Launchpad | 2162853 | [SRU] GTK3 X11 windows can permanently stop repainting after an oversized ConfigureNotify | gtk+3.0 |
| CVE | CVE-2026-11721 | It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is con | bind9 bind9 |
| Launchpad | 2126464 | Backport of bind9 for resolute, noble, and jammy | bind9 bind9 |
| Launchpad | 2153491 | Update Valkey to 7.2.14 in noble, 9.0.6 in resolute, and 9.1.2 in stonking | valkey valkey |
| Launchpad | 2144323 | Error saving from .png to .avif | shotwell |
| CVE | CVE-2026-80852 | In the Linux kernel, the following vulnerability has been resolved: tls: device: fix out-of-bounds write in tls_append_frag() Found with syzkaller | linux |
| CVE | CVE-2026-89761 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix out-of-bounds write when null terminating a label vec aa_vec_uniq | linux |
| CVE | CVE-2026-89680 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfsd_file leak on inter-server COPY setup failure When nfsd4_setup_in | linux |
| CVE | CVE-2026-89652 | In the Linux kernel, the following vulnerability has been resolved: ceph: bound copied dentry name length in NFS export get_name ceph_get_name() co | linux |
| CVE | CVE-2026-89625 | In the Linux kernel, the following vulnerability has been resolved: HID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind For GHL (Guitar | linux |
| CVE | CVE-2026-89553 | In the Linux kernel, the following vulnerability has been resolved: nouveau/gem: reserve the bo in the info ioctl around the vma lookup In the non- | linux |
| CVE | CVE-2026-89492 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate directory-index entry counts when reading metadata ocfs2_valida | linux |
| CVE | CVE-2026-89481 | In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix host memory disclosure on R2T for a read command nvme_tcp_handle_ | linux |
| CVE | CVE-2026-80947 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop rtl8xxxu arms rx_urb_ | linux |
| CVE | CVE-2026-97537 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix queue teardown NULL dma_free and bitmap locking qla25xx_free | linux |
| CVE | CVE-2026-97536 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown The response | linux |
| CVE | CVE-2026-97529 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Validate BSG request_len before reading vendor_cmd[] The FC BSG | linux |
About
-
Send Feedback to @ubuntu_updates
