Bugs addressed in recent updates
| Origin | Bug number | Title | Packages |
|---|---|---|---|
| CVE | CVE-2026-102631 | In authd before 0.7.1, the user identity matching in UpdateUser (internal/users/manager.go) resolves an incoming login by the broker-scoped provider | authd authd |
| CVE | CVE-2026-111497 | A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote | brotli brotli brotli brotli brotli brotli brotli brotli brotli brotli brotli brotli brotli brotli brotli |
| CVE | CVE-2026-97629 | Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size without an explicit ssl_session_ticket_key | nginx nginx nginx nginx nginx nginx nginx nginx nginx nginx nginx |
| CVE | CVE-2026-97205 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. When asynchronous file I/O (AIO) is enabled in certain conf | nginx nginx nginx nginx nginx nginx nginx nginx nginx nginx nginx nginx nginx nginx nginx |
| CVE | CVE-2026-95101 | Description NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with proxy_request_buffering | nginx nginx nginx nginx nginx nginx nginx nginx |
| CVE | CVE-2026-93479 | A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format refer | nginx nginx nginx nginx nginx nginx nginx nginx nginx nginx nginx nginx nginx nginx nginx |
| CVE | CVE-2026-15176 | A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a se | nginx nginx nginx nginx nginx nginx nginx nginx nginx nginx nginx nginx nginx nginx nginx |
| CVE | CVE-2026-99999 | In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad c | linux linux-riscv |
| Launchpad | 2169765 | Keyboard is not functional on some Snapdragon laptops due to 7.3 kernel regression | linux linux-riscv |
| Launchpad | 2077991 | Provide an arm64 linux-azure 64k kernel variant | linux-restricted-signatures-azure linux-restricted-modules-azure linux-signed-azure linux-meta-azure linux-main-signed-azure linux-main-modules-azure |
| Launchpad | 2161163 | SRU: pytorch-rocm 2.9.1+dfsg-1~exp2ubuntu4 to resolute | pytorch-rocm |
| Launchpad | 2163152 | [SRU] EAP-TLS Wi-Fi broken with TPM-backed PKCS#11 keys after upgrade to 0.4.12-1.1ubuntu1 | libp11 libp11 |
| Launchpad | 2172036 | [SRU] Placement 11.0.1 stable release | placement |
| Launchpad | 2165724 | Release libnvidia-container to 26.04 | libnvidia-container |
| Launchpad | 2153487 | Backport openldap for stonking cycle | openldap openldap |
| Launchpad | 2157988 | SRU: New upstream version 7.2.4 | miopen |
| Launchpad | 2082384 | snapd leaves behind artifacts after uninstalling apps | snapd snapd snapd snapd snapd snapd snapd snapd |
| Launchpad | 2106306 | snap remove deleting data too eagerly | snapd snapd snapd snapd snapd snapd snapd snapd |
| Launchpad | 2164689 | Space in personal-files interface causes snapd to generate invalid apparmor profile | snapd snapd snapd snapd snapd snapd snapd snapd |
| Launchpad | 2164382 | U2F / FIDO / CTAP rules should match usage page, not device IDs | snapd snapd snapd snapd snapd snapd snapd snapd |
About
-
Send Feedback to @ubuntu_updates
