Bugs addressed in recent updates
| Origin | Bug number | Title | Packages |
|---|---|---|---|
| Debian | 1017064 | lintian: incorrectly complains about adopted-extended-field XB-Ruby-Versions | lintian |
| Debian | 1141065 | lintian: incorrectly complains about adopted-extended-field for derivatives (XS-Debian-Vcs-Browser, XS-Debian-Vcs-Git, XSBC-Original-Maintainer) | lintian |
| Debian | 1029471 | Conflict: unknown-field Go-Import-Path x missing-xs-go-import-path-for-golang-package | lintian |
| Launchpad | 2167987 | lintian: incorrectly complains about adopted-extended-field for derivatives (XS-Debian-Vcs-Browser, XS-Debian-Vcs-Git, XSBC-Original-Maintainer) | lintian |
| Launchpad | 2170614 | gdm3 crash on password field, missing ubuntu-session file on vanilla GNOME system: stonking after upgrade from resolute | gdm3 |
| Debian | 1141228 | lintian: Please use codenames from distro-info-data | distro-info distro-info distro-info lintian |
| Launchpad | 1012459 | carve out distro information from lintian to distro-info-data | distro-info distro-info distro-info lintian |
| CVE | CVE-2026-69184 | c-ares is an asynchronous resolver library. Prior to 1.34.7, ares_dns_name_parse() enforces backward DNS compression pointers but does not bound the | c-ares c-ares c-ares c-ares c-ares c-ares c-ares c-ares |
| CVE | CVE-2026-69186 | c-ares is an asynchronous resolver library. Prior to 1.34.7, ares_dns_parse() trusts the attacker-controlled ANCOUNT, NSCOUNT, and ARCOUNT fields bef | c-ares c-ares c-ares c-ares c-ares c-ares |
| Launchpad | 2161203 | vim: Please use distro-info-data instead of hard-coding distro codenames | vim vim |
| CVE | CVE-2026-107705 | Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in Decrypt::revision6Hash() that allows attackers controlling the password to o | poppler poppler poppler poppler poppler poppler poppler poppler poppler poppler poppler poppler poppler poppler poppler poppler |
| CVE | CVE-2026-55973 | In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option (code 18) from the la | unbound unbound unbound unbound |
| CVE | CVE-2026-32665 | In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, when downstream DNS-over-QUIC (DoQ) is enabled, the first two bidirectional streams on a new | unbound unbound unbound unbound |
| CVE | CVE-2026-103226 | A vulnerability was identified in Artifex Ghostscript up to 10.07.0. Affected is the function type1_callsubr of the file devices/vector/gdevpsfx.c of | ghostscript ghostscript ghostscript ghostscript ghostscript ghostscript ghostscript ghostscript |
| CVE | CVE-2026-101258 | A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitra | ghostscript ghostscript ghostscript ghostscript ghostscript ghostscript ghostscript ghostscript |
| Launchpad | 2171528 | Type 1 font-loader `.forceput` save/restore UAF yields native read/write and controlled dispatch/RCE under `-dSAFER` | ghostscript ghostscript ghostscript ghostscript ghostscript ghostscript ghostscript ghostscript |
| CVE | CVE-2026-81634 | In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRS | unbound unbound unbound unbound unbound unbound unbound unbound unbound unbound unbound unbound |
| CVE | CVE-2026-85501 | Novel vulnerabilities to launch algorithmic complexity attacks on DNSSEC have been researched under the term 'ReTrap'. These result in degradation of | unbound unbound unbound unbound unbound unbound unbound unbound unbound unbound unbound unbound |
| CVE | CVE-2026-40691 | In Unbound 1.9.0 up to and including 1.25.1, when a DNSCrypt query is received over TCP, the routine that encrypts the reply in place fails to bound | unbound unbound unbound unbound unbound unbound unbound unbound unbound unbound unbound unbound |
| CVE | CVE-2026-44690 | In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Labels field combined with premature cache writes during | unbound unbound unbound unbound unbound unbound unbound unbound unbound unbound unbound unbound |
About
-
Send Feedback to @ubuntu_updates
