Bugs addressed in recent updates
| Origin | Bug number | Title | Packages |
|---|---|---|---|
| CVE | CVE-2026-42528 | A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server chil | apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 |
| CVE | CVE-2026-42356 | Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as | apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 |
| CVE | CVE-2026-119618 | Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's mod_http2 in assign_headers() can lead | apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 |
| CVE | CVE-2026-109163 | Stack-based buffer overflow vulnerability in Apache HTTP Server's mod_vhost_alias (after CVE-2026-63292) This issue affects Apache HTTP Server: 2. | apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 |
| CVE | CVE-2026-106023 | NULL pointer dereference vulnerability in Apache HTTP Server's mod_md during HTTP request processing. This issue affects Apache HTTP Server: from | apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 |
| CVE | CVE-2026-97399 | The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, whi | glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc |
| CVE | CVE-2026-89092 | The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for | glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc |
| CVE | CVE-2026-95818 | A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to crash | glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc |
| CVE | CVE-2026-86805 | A time-of-check to time-of-use (TOCTOU) race condition in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a | glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc |
| CVE | CVE-2026-8674 | Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search list contains a domain of rough | glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc |
| CVE | CVE-2026-18374 | Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the `fopen` function in the GNU C Library version 2.45 or | glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc |
| CVE | CVE-2026-96639 | Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created for a narrow frame mod | pillow pillow pillow pillow |
| Launchpad | 2168955 | [SRU] honour custom_supported_gpus.json for nvidia driver installation | ubuntu-drivers-common ubuntu-drivers-common |
| Launchpad | 2166233 | [SRU] Backport D-Bus service to 26.04 | ubuntu-drivers-common ubuntu-drivers-common |
| Launchpad | 2165071 | Unable to detect packages to install based on CPU type | ubuntu-drivers-common ubuntu-drivers-common |
| Launchpad | 2154367 | New upstream release: 1.1 | dgx-desktop-defaults |
| CVE | CVE-2026-84243 | The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are | glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc |
| Launchpad | 2170563 | qemu-user: s390x libresolv.so loading fails on 64 KiB-page ppc64el hosts when a mapping fragment overlaps a file-backed page beyond EOF | glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc glibc |
| CVE | CVE-2026-112403 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft | pillow pillow pillow pillow pillow pillow pillow pillow pillow pillow pillow pillow pillow pillow pillow pillow |
| CVE | CVE-2026-112398 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write decoded scanlines beyond the allocated tile buffer | pillow pillow pillow pillow pillow pillow pillow pillow pillow pillow pillow pillow pillow pillow pillow pillow |
About
-
Send Feedback to @ubuntu_updates
