UbuntuUpdates.org

Bugs addressed in recent updates

All Launchpad Ubuntu Debian CVE

Origin Bug number Title Packages
CVE CVE-2024-25269 libheif <= 1.17.6 contains a memory leak in the function JpegEncoder::Encode. This flaw allows an attacker to cause a denial of service attack. libheif libheif libheif libheif
CVE CVE-2025-68431 libheif is an HEIF and AVIF file format decoder and encoder. Prior to version 1.21.0, a crafted HEIF that exercises the overlay image item path trigg libheif libheif libheif libheif libheif libheif libheif libheif libheif libheif libheif libheif
Launchpad 2136097 [SRU] libreoffice 25.8.4 for questing libreoffice libreoffice
Launchpad 2128240 Missing firmware for Intel NPU for Intel Panther Lake linux-firmware linux-firmware
Launchpad 2136894 [SRU][R/Q/N] mt7925: Fix invalid reporting of support for EMLSR on MLO link and add support for Indonesia 6GHz linux-firmware linux-firmware
Launchpad 2134514 Support audio on qualcomm IQ-X board linux-firmware
Launchpad 2137522 [SRU] iwlwifi: add new fw versions to satisfy 6.17 kernel requirement linux-firmware linux-firmware
Launchpad 2137181 Update last Intel VPU fw support for Jammy linux-firmware linux-firmware
Launchpad 2136991 Upgrade Intel xe GUC to v70.55.3 for Intel Panther Lake linux-firmware linux-firmware
Launchpad 2136987 Firmware updates for Intel WIFI core98 software release linux-firmware linux-firmware
Launchpad 2136743 Update Intel IPU7 product signed firmware binary linux-firmware linux-firmware
Launchpad 2135079 tas2781: Add more symbol links on SPI devices on HP platforms linux-firmware linux-firmware
Launchpad 2131521 Invalid symbolic link vmlinux -\u003e stubble.efi-6.17.0-5-generic linux-signed linux-generate
Launchpad 2091618 [SRU] enable squashfs support in noble for u-boot-rpi and u-boot-qemu u-boot u-boot
Launchpad 2121690 [SRU] Add support for RISC-V StarFive VisionFive 2 Lite u-boot u-boot
Launchpad 2129812 bareudp.sh in ubuntu_kselftests_net fails because of dash default shell linux
Launchpad 2137698 ubuntu_blktrace_smoke_test fails on questing with rust coreutils linux
CVE CVE-2025-38248 In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix use-after-free during router port configuration The bridge m linux linux
CVE CVE-2025-40215 In the Linux kernel, the following vulnerability has been resolved: xfrm: delete x->tunnel as we delete x The ipcomp fallback tunnels currently get linux linux
CVE CVE-2025-40256 In the Linux kernel, the following vulnerability has been resolved: xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were ne linux linux linux



About   -   Send Feedback to @ubuntu_updates