Bugs addressed in recent updates
| Origin | Bug number | Title | Packages |
|---|---|---|---|
| Launchpad | 2168754 | Spinners never rotate with non-Yaru gtk-theme | libadwaita-1 |
| Launchpad | 2169504 | Wacom pen can't drag-and-drop in GNOME 50 Wayland; works in Xfce (X11) | mutter mutter |
| Launchpad | 2169577 | wacon intuos stop working in xournalpp | mutter mutter |
| Launchpad | 2147214 | Maximized windows moved by Shift+Super+Arrow get moved back when focus is lost | mutter mutter |
| Launchpad | 2152847 | Focus follows mouse: Focus-mode \ | mutter mutter |
| Launchpad | 2153484 | Backport dpdk for stonking cycle | dpdk dpdk dpdk dpdk |
| Launchpad | 2164265 | [SRU] localsearch index --remove silently discards the removal when dconf-service is not already running | localsearch localsearch |
| Launchpad | 2166701 | [SRU] localsearch 3.11.2 | localsearch localsearch |
| CVE | CVE-2026-50012 | Squid is a caching proxy for the Web. Prior to 7.6, due to an improper input validation bug in cache digest reply handling (peerDigestSwapInMask in s | squid squid |
| CVE | CVE-2026-47729 | Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/F | squid squid |
| Launchpad | 2153490 | Backport squid for stonking cycle | squid squid |
| CVE | CVE-2026-89422 | Key Exchange without Entity Authentication vulnerability in Erlang/OTP ssl allows a peer that answers a TLS 1.3 client connection to impersonate the | erlang erlang erlang erlang erlang erlang erlang erlang erlang erlang erlang erlang |
| CVE | CVE-2026-68956 | Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP ssh allows an authenticated remote attacker to exhaust node memory b | erlang erlang erlang erlang erlang erlang erlang erlang erlang erlang erlang erlang |
| CVE | CVE-2026-65634 | Inefficient algorithmic complexity in the Erlang/OTP asn1 OBJECT IDENTIFIER decoder allows a remote unauthenticated attacker to cause denial of servi | erlang erlang erlang erlang erlang erlang erlang erlang erlang erlang erlang erlang |
| CVE | CVE-2026-74994 | The mod_auth module in OTP's inets httpd server, when configured with dets or mnesia authentication backends and multiple directory configuration blo | erlang erlang erlang erlang erlang erlang erlang erlang erlang erlang erlang erlang |
| CVE | CVE-2026-47078 | Relative Path Traversal vulnerability in Erlang OTP (stdlib zip module) allows writing files outside the intended extraction directory via a crafted | erlang erlang erlang erlang erlang erlang erlang erlang erlang erlang erlang erlang |
| CVE | CVE-2026-55952 | The Erlang/OTP ssl application does not validate that the PSK identity list and binder list carried in a TLS 1.3 ClientHello pre-shared key extension | erlang erlang erlang erlang erlang erlang erlang erlang erlang erlang erlang erlang |
| CVE | CVE-2026-55950 | Time-of-check Time-of-use (TOCTOU) race condition vulnerability in Erlang/OTP ssl (dtls_packet_demux module) allows an unauthenticated remote attacke | erlang erlang erlang erlang erlang erlang erlang erlang |
| CVE | CVE-2026-54891 | Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Erlang/OTP ssl (tls_gen_connection module) | erlang erlang erlang erlang erlang erlang erlang erlang erlang erlang erlang erlang |
| CVE | CVE-2026-54887 | Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl (DTLS server) allows predictable DTLS cookie computation during the startup window, | erlang erlang erlang erlang erlang erlang erlang erlang erlang erlang erlang erlang |
About
-
Send Feedback to @ubuntu_updates
