Bugs addressed in recent updates
| Origin | Bug number | Title | Packages |
|---|---|---|---|
| CVE | CVE-2026-97689 | urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.read_chunked and HTTPResponse.stream methods can allocate unb | python-urllib3 python-urllib3 python-urllib3 |
| CVE | CVE-2026-97688 | urllib3 is an HTTP client library for Python. From 2.6.2 until 2.8.0, HTTPResponse.stream and HTTPResponse.read_chunked can enter an infinite loop be | python-urllib3 python-urllib3 |
| CVE | CVE-2026-97687 | urllib3 is an HTTP client library for Python. From 1.26.0 until 2.8.0, the proxy_ssl_context, proxy_assert_hostname, proxy_assert_fingerprint, ssl_co | python-urllib3 |
| Debian | 1150712 | libglibutil FTCBFS: hard codes the build architecture strip | libglibutil |
| CVE | CVE-2026-102273 | PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWT HMACAlgorithm.prepare_key is affected because HMAC key | pyjwt pyjwt pyjwt |
| CVE | CVE-2026-102272 | PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, HMACAlgorithm.prepare_key in jwt/algorithms.py is affected be | pyjwt pyjwt pyjwt |
| CVE | CVE-2026-102271 | PyJWT is a Python implementation of JSON Web Token standards. From 2.4.0 until 2.14.0, PyJWT HMACAlgorithm.prepare_key is affected because asymmetric | pyjwt pyjwt pyjwt |
| CVE | CVE-2026-102268 | PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, is_pem_format in jwt/utils.py is affected because is_pem_format does n | pyjwt pyjwt pyjwt |
| CVE | CVE-2026-102267 | PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT PyJWKClient is affected because redirect destinations are not re | pyjwt pyjwt pyjwt |
| CVE | CVE-2026-102266 | PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, HMACAlgorithm.from_jwk is affected because PyJWK verification | pyjwt |
| Launchpad | 2170758 | hexcurse 1.60.0-2 FTBFS with glibc 2.43 (discarded const qualifier in getopt.c) | hexcurse |
| Launchpad | 2170755 | ffcall FTBFS on ppc64el: vacall test fails when built with LTO | ffcall |
| Launchpad | 2170748 | Wrong mascot in Ubunut Studio when installation is completed or installer needs updating | ubuntustudio-default-settings |
| Launchpad | 2170662 | Xubuntu stonking (26.10) RC reports itself as 26.04 on booting | xubuntu-artwork |
| Launchpad | 2169706 | autopkgtest fails in Jammy because of iscsi_target_mod kernel module | resource-agents resource-agents |
| Launchpad | 2170509 | BlueZ 5.85 A2DP cache regression causes Bluetooth Multipoint failures on Ubuntu 26.04 (fixed upstream) | bluez bluez bluez bluez bluez bluez |
| Launchpad | 2170636 | libapache2-mod-ldap-userdir 1.1.19-2.2 FTBFS: bare -flto LDFLAGS passed to apxs ('Unknown option: f') | libapache2-mod-ldap-userdir libapache2-mod-ldap-userdir |
| Launchpad | 2170632 | mairix FTBFS in stonking: configure sed breaks on '%' in --package-metadata LDFLAGS | mairix mairix |
| Launchpad | 2121389 | afdko: FTBFS in Plucky | nototools nototools |
| Launchpad | 2170516 | gnome-language-selector crashes due to deprecated options to im-config | language-selector language-selector |
About
-
Send Feedback to @ubuntu_updates
