UbuntuUpdates.org

Bugs addressed in recent updates

All Launchpad Ubuntu Debian CVE

Origin Bug number Title Packages
Launchpad 2118663 Backport support for arm64 BRBE and a future NVIDIA CPU ID linux-azure-nvidia-6.14 linux-azure-nvidia-6.14
Launchpad 2119656 Backport support for Grace virtualization features: vEVENTQ, HW QUEUE, and vEGM linux-azure-nvidia-6.14 linux-azure-nvidia-6.14
CVE CVE-2025-9287 Improper Input Validation vulnerability in cipher-base allows Input Data Manipulation.This issue affects cipher-base: through 1.0.4. node-cipher-base node-cipher-base node-cipher-base node-cipher-base node-cipher-base node-cipher-base
CVE CVE-2024-8354 A flaw was found in QEMU. An assertion failure was present in the usb_ep_get() function in hw/net/core.c when trying to get the USB endpoint from a U qemu qemu qemu qemu qemu qemu qemu qemu
CVE CVE-2024-7409 A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closur qemu qemu qemu qemu qemu qemu qemu qemu
CVE CVE-2024-6505 A flaw was found in the virtio-net device in QEMU. When enabling the RSS feature on the virtio-net network card, the indirections_table data within R qemu qemu qemu qemu qemu qemu qemu qemu
CVE CVE-2024-4467 A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. A specially crafted image file containing a `json:{}` value describing blo qemu qemu qemu qemu qemu qemu qemu qemu
CVE CVE-2024-3567 A flaw was found in QEMU. An assertion failure was present in the update_sctp_checksum() function in hw/net/net_tx_pkt.c when trying to calculate the qemu qemu qemu qemu
CVE CVE-2024-3447 A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both `s->data_count` and the size of `s->fif qemu qemu qemu qemu qemu qemu qemu qemu
CVE CVE-2024-3446 A double free vulnerability was found in QEMU virtio devices (virtio-gpu, virtio-serial-bus, virtio-crypto), where the mem_reentrancy_guard flag insu qemu qemu qemu qemu qemu qemu qemu qemu
Launchpad 2120814 binfmt_misc C (Credentials) flag as security risk with setuid binaries qemu qemu qemu qemu qemu qemu qemu qemu qemu qemu qemu qemu
Launchpad 2117280 [SRU] Asymmetric routing issue on amphorae in ACTIVE_STANDBY topology octavia octavia
Launchpad 2108860 floating IP due to \ openvpn openvpn openvpn openvpn
CVE CVE-2025-9714 Uncontrolled recursion inXPath evaluationin libxml2 up to and includin ... libxml2 libxml2 libxml2 libxml2 libxml2 libxml2
Launchpad 2122355 [SRU] New upstream microrelease .NET 9.0.110/9.0.9 dotnet9 dotnet9
Launchpad 2122356 [SRU] New upstream microrelease .NET 8.0.120/8.0.20 dotnet8 dotnet8 dotnet8 dotnet8 dotnet8 dotnet8
Launchpad 2117103 Hardcoded version in debian/rules breaks new uploads ksh93u+m ksh93u+m ksh93u+m
Launchpad 2121789 [SRU] libreoffice 25.2.6 for plucky libreoffice libreoffice libreoffice libreoffice
Launchpad 2120495 sru cloud-init (25.2 update) to jammy, noble, and plucky cloud-init cloud-init cloud-init cloud-init cloud-init cloud-init cloud-init cloud-init
Launchpad 2122165 osc uses removed modules/functions from Python 3.12, breaking on Noble osc osc



About   -   Send Feedback to @ubuntu_updates