Bugs addressed in recent updates
| Origin | Bug number | Title | Packages |
|---|---|---|---|
| CVE | CVE-2026-97399 | The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, whi | glibc glibc glibc glibc glibc glibc |
| CVE | CVE-2026-89092 | The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for | glibc glibc glibc glibc glibc glibc |
| CVE | CVE-2026-95818 | A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to crash | glibc glibc glibc glibc glibc glibc |
| CVE | CVE-2026-86805 | A time-of-check to time-of-use (TOCTOU) race condition in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a | glibc glibc glibc glibc glibc glibc |
| CVE | CVE-2026-8674 | Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search list contains a domain of rough | glibc glibc glibc glibc glibc glibc |
| CVE | CVE-2026-18374 | Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the `fopen` function in the GNU C Library version 2.45 or | glibc glibc glibc glibc glibc glibc |
| CVE | CVE-2026-96639 | Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created for a narrow frame mod | pillow pillow |
| Launchpad | 2168955 | [SRU] honour custom_supported_gpus.json for nvidia driver installation | ubuntu-drivers-common ubuntu-drivers-common |
| Launchpad | 2166233 | [SRU] Backport D-Bus service to 26.04 | ubuntu-drivers-common ubuntu-drivers-common |
| Launchpad | 2165071 | Unable to detect packages to install based on CPU type | ubuntu-drivers-common ubuntu-drivers-common |
| Launchpad | 2154367 | New upstream release: 1.1 | dgx-desktop-defaults |
| CVE | CVE-2026-84243 | The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are | glibc glibc glibc glibc glibc glibc glibc glibc |
| Launchpad | 2170563 | qemu-user: s390x libresolv.so loading fails on 64 KiB-page ppc64el hosts when a mapping fragment overlaps a file-backed page beyond EOF | glibc glibc glibc glibc glibc glibc glibc glibc |
| CVE | CVE-2026-112403 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft | pillow pillow pillow pillow pillow pillow pillow pillow |
| CVE | CVE-2026-112398 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write decoded scanlines beyond the allocated tile buffer | pillow pillow pillow pillow pillow pillow pillow pillow |
| CVE | CVE-2026-112402 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow can double free image memory when ImagingScaleAffine encounters a selective allocation fa | pillow pillow pillow pillow pillow pillow pillow pillow |
| CVE | CVE-2026-112897 | Pillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow can return uninitialized memory as pixels when libtiff performs a short decode of | pillow pillow pillow pillow pillow pillow pillow pillow |
| CVE | CVE-2026-112404 | Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow's TIFF tile and RGBA decode paths can read beyond row data produced by libtiff. I | pillow pillow pillow pillow pillow pillow pillow pillow |
| CVE | CVE-2026-112406 | Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can enter an infinite loop while rewriting PDF pages. PdfParser.rewrite_pages() f | pillow pillow pillow pillow pillow pillow pillow pillow |
| CVE | CVE-2026-112892 | Pillow is a Python imaging library. From 4.1.0 until 13.0.0, Pillow's MSP RLE decoder can expand a small file into an unbounded in-memory buffer. The | pillow pillow pillow pillow pillow pillow pillow pillow |
About
-
Send Feedback to @ubuntu_updates
