UbuntuUpdates.org

Bugs addressed in recent updates

All Launchpad Ubuntu Debian CVE

Origin Bug number Title Packages
Launchpad 2167899 [FFE/SRU] linux-entra-sso: broken compatibility with new MSFT msalcpp broker linux-entra-sso
CVE CVE-2026-94285 An out-of-bounds read in libX11's byte-oriented codeset parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clien libx11 libx11 libx11
CVE CVE-2026-94284 An out-of-bounds read vulnerability in libX11's XIM trigger-key registration parser in libX11 before 1.8.14 could be used by malicious X servers to c libx11 libx11 libx11
CVE CVE-2026-94283 An out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser in libX11 before 1.8.14 could be used by malicious X servers to libx11 libx11 libx11
CVE CVE-2026-88806 A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the key_sym_map. libx11 libx11 libx11
CVE CVE-2026-88816 DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName. fetchrow_hashref uses the string pointer of the libdbi-perl libdbi-perl libdbi-perl
CVE CVE-2026-78030 DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM. DBD::DBM passes the dbm_typ libdbi-perl libdbi-perl libdbi-perl
Launchpad 2156085 [SRU] Update rocwmma to 7.2.4 in Resolute rocwmma
Launchpad 2155138 SRU: New upstream version 7.2.4 rocsolver
Launchpad 2155653 SRU: New upstream version 7.2.4 hipblaslt
Launchpad 2156252 SRU: New upstream version 7.2.4 hipsparse
Launchpad 2155392 SRU: New upstream version 7.2.4 rocfft
Launchpad 2158673 qemu: virtio-net host-to-guest RX stalls under sustained traffic qemu qemu qemu qemu
Launchpad 2154711 SRU: New upstream version 7.2.4 rocthrust
Launchpad 2156307 drive-mirror/blockdev-mirror/active blockcommit silently lose guest writes during job startup qemu-hwe qemu qemu-hwe qemu qemu qemu
Launchpad 2160034 [Ubuntu 26.04] qemu s390x: interface hardening fixes qemu-hwe qemu qemu-hwe qemu
Launchpad 2164757 Release the CUDA-13-2 packages on Resolute cuda-cudart-13-2 libcusparse-13-2
Launchpad 2155648 SRU: New upstream version 7.2.4 hipcub
Launchpad 2154553 SRU: New upstream version 7.2.4 rocsparse
CVE CVE-2026-80186 A stack-based buffer overflow vulnerability exists in BlueZ, the Linux Bluetooth protocol stack. A remote user within Bluetooth radio range can send bluez bluez bluez bluez bluez bluez bluez bluez bluez bluez bluez bluez



About   -   Send Feedback to @ubuntu_updates