Bugs addressed in recent updates
| Origin | Bug number | Title | Packages |
|---|---|---|---|
| CVE | CVE-2026-89147 | Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smux_accept() performs an unauthenticated blocking read | net-snmp net-snmp net-snmp net-snmp net-snmp net-snmp |
| CVE | CVE-2026-59205 | Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, imOut) API can trigger controlled native heap corr | pillow pillow pillow pillow pillow pillow |
| CVE | CVE-2026-59204 | Pillow is a Python imaging library. From 8.2.0 through 12.2.0, src/libImaging/Jpeg2KDecode.c accumulates total_component_width across every tile in a | pillow pillow pillow pillow pillow pillow |
| CVE | CVE-2026-59203 | Pillow is a Python imaging library. From 12.0.0 through 12.2.0, Pillow's EPS parser in PIL/EpsImagePlugin.py accepts a negative byte count in the %%B | pillow pillow |
| CVE | CVE-2026-59200 | Pillow is a Python imaging library. From 5.1.0 until 12.3.0, PdfParser.PdfStream.decode() in PIL/PdfParser.py calls zlib.decompress() with bufsize se | pillow pillow pillow pillow pillow pillow |
| CVE | CVE-2026-59199 | Pillow is a Python imaging library. Prior to 12.3.0, Pillow public image coordinate APIs can trigger a native heap out-of-bounds write when given coo | pillow pillow pillow pillow pillow pillow |
| CVE | CVE-2026-59197 | Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very | pillow pillow pillow pillow pillow pillow |
| CVE | CVE-2026-55380 | Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile._open() read image dimensions from the GD 2.x header and stored t | pillow pillow pillow pillow pillow pillow |
| CVE | CVE-2026-55379 | Pillow is a Python imaging library. Prior to 12.3.0, PIL/BdfFontFile.py bdf_char() read the BBX width and height field from a BDF font file and passe | pillow pillow pillow pillow pillow pillow |
| CVE | CVE-2026-54060 | Pillow is a Python imaging library. Prior to 12.3.0, PIL/FontFile.py FontFile.compile() assembled per-glyph images into a combined bitmap with Image. | pillow pillow pillow pillow pillow pillow |
| CVE | CVE-2026-54059 | Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.py _load_bitmaps() read glyph dimensions from the PCF METRICS section and passed | pillow pillow pillow pillow pillow pillow |
| CVE | CVE-2026-54058 | Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec p | pillow pillow pillow pillow pillow pillow |
| CVE | CVE-2026-106454 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. In 25.5.0 and earlier, wildcardToRegexp() in twisted/mail/imap | twisted twisted twisted twisted |
| CVE | CVE-2026-109518 | On Debian, Ubuntu, and derivative Linux distributions, an on-path atta ... | apt apt |
| Debian | 1111554 | apt - daily job spams "Tried to start delayed item […], but failed" | apt apt |
| CVE | CVE-2026-34835 | Rack is a modular Ruby web server interface. From versions 3.0.0.beta1 to before 3.1.21, and 3.2.0 to before 3.2.6, Rack::Request parses the Host hea | ruby-rack |
| CVE | CVE-2026-34827 | Rack is a modular Ruby web server interface. From versions 3.0.0.beta1 to before 3.1.21, and 3.2.0 to before 3.2.6, Rack::Multipart::Parser#handle_mi | ruby-rack |
| CVE | CVE-2026-32762 | Rack is a modular Ruby web server interface. From versions 3.0.0.beta1 to before 3.1.21 and 3.2.0 to before 3.2.6, Rack::Utils.forwarded_values parse | ruby-rack |
| CVE | CVE-2026-26962 | Rack is a modular Ruby web server interface. From version 3.2.0 to before version 3.2.6, Rack::Multipart::Parser unfolds folded multipart part header | ruby-rack |
| CVE | CVE-2026-91786 | A flaw was found in GNOME Shell. When processing icons from a remote search provider via D-Bus, the system fails to validate the icon's declared dime | gnome-shell gnome-shell gnome-shell gnome-shell gnome-shell gnome-shell gnome-shell gnome-shell gnome-shell gnome-shell gnome-shell gnome-shell |
About
-
Send Feedback to @ubuntu_updates
