UbuntuUpdates.org

Bugs addressed in recent updates

All Launchpad Ubuntu Debian CVE

Origin Bug number Title Packages
Debian 1128130 lomiri-thumbnailer: FTBFS with boost 1.90 lomiri-thumbnailer
Launchpad 2142325 lomiri-thumbnailers FTBFS in resolute lomiri-thumbnailer
Launchpad 2154290 SRU: New upstream version 7.2.4 rccl
CVE CVE-2026-84784 QUIC: Unbounded RETIRE_CONNECTION_ID Backlog openssl openssl
CVE CVE-2026-84782 DTLS Retransmits Handshake Messages From a Stale Buffer Offset openssl openssl openssl openssl openssl openssl
CVE CVE-2026-77696 Timing Side-Channel in SM2 Signature Generation openssl openssl openssl openssl openssl openssl
CVE CVE-2026-75806 Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS openssl openssl openssl openssl openssl openssl
CVE CVE-2026-75805 NULL Pointer Dereference in CMP Client Revocation Response Handling openssl openssl openssl openssl openssl openssl
CVE CVE-2026-75804 QUIC Connection-Level Flow Control is Not Enforced for Streams openssl openssl
CVE CVE-2026-72897 Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake openssl openssl
CVE CVE-2026-54875 Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V openssl openssl
CVE CVE-2026-54872 Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves openssl openssl openssl openssl openssl openssl
CVE CVE-2026-35191 QUIC Unvalidated Amplification Credit may be Over Accounted openssl openssl
CVE CVE-2026-35189 Excessive Memory Allocation in Relative CRLDP Processing openssl openssl openssl openssl openssl openssl
CVE CVE-2026-84449 libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.19.6, Op_RGB24_32_to_YCbCr::convert_colorspace() stores image-plane strides in libheif libheif libheif libheif
CVE CVE-2026-84448 libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, the public heif_region_item_add_region_inline_mask_data() function in li libheif libheif libheif libheif libheif libheif libheif libheif
CVE CVE-2026-84447 libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.1 and earlier, crafted grid, iovl, and iden reference graphs can repeatedly decod libheif libheif libheif libheif
CVE CVE-2026-84446 libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, crafted HEIF sequence timing and edit-list data can make Track::init_sam libheif libheif libheif libheif
CVE CVE-2026-84384 libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.2, crafted HEIF or AVIF mime metadata and unci image data can caus libheif libheif libheif libheif libheif libheif libheif libheif
CVE CVE-2026-33630 c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The sa c-ares c-ares c-ares c-ares



About   -   Send Feedback to @ubuntu_updates