Bugs addressed in recent updates
| Origin | Bug number | Title | Packages |
|---|---|---|---|
| CVE | CVE-2026-66079 | RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6, parse_array_primitive/2 for constructor 0x45 (lis | rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server |
| CVE | CVE-2026-66077 | RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6, The management UI uses EJS 1.0 in which <%= ... % | rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server |
| CVE | CVE-2026-66070 | RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.17, 4.0.22, 4.1.13, and 4.2.6, match_origin/1 returned the bare reflected Origin | rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server rabbitmq-server |
| CVE | CVE-2026-26081 | HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected. | haproxy haproxy haproxy haproxy |
| CVE | CVE-2026-26080 | HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are a | haproxy haproxy haproxy haproxy |
| Launchpad | 2170901 | datalad FTBFS: setup.py develop tries to download keyrings.alt from PyPI | datalad |
| Launchpad | 2120577 | arctica-greeter FTBFS in Plucky | arctica-greeter |
| Launchpad | 2163156 | autopkgtest failure in containers due to swap file | nbd |
| Launchpad | 2168948 | gdebi FTBFS: setup.py passes Debian version (0.9.5.8build1) to setuptools, which rejects it as invalid PEP 440 | gdebi |
| Launchpad | 2170260 | Loupe profile needs to allow GVFS accesses | apparmor apparmor |
| Launchpad | 2170242 | Fix loupe profile nits identified in 6.0.0~alpha1-0ubuntu4 review | apparmor apparmor |
| Launchpad | 2169688 | Error opening file /home/corrado/Pictures/red eyes frog.tif: Permission denied | apparmor apparmor |
| Launchpad | 2169708 | Apparmor profile for notify-send breaks notification actions | apparmor apparmor |
| Launchpad | 2170226 | fwupd-refresh.service always fails with \ | fwupd fwupd |
| Launchpad | 2170857 | SRU upload of 21.1.25 | xorg-server xorg-server |
| Launchpad | 2170810 | epics-base FTBFS: tests abort with buffer overflow detected under _FORTIFY_SOURCE=3 (dbAllocRecord) | epics-base |
| Debian | 1128761 | yambar: FTBFS with glibc 2.43 due to ISO C23 const return types | yambar yambar |
| Launchpad | 2153485 | Backport haproxy for stonking cycle | haproxy haproxy haproxy haproxy haproxy haproxy haproxy haproxy |
| CVE | CVE-2026-93546 | Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes | apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 |
| CVE | CVE-2026-79768 | Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wildcard Us | apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 apache2 |
About
-
Send Feedback to @ubuntu_updates
