UbuntuUpdates.org

Bugs addressed in recent updates

All Launchpad Ubuntu Debian CVE

Origin Bug number Title Packages
Launchpad 2148592 New upstream version 7.1.1 (rebuild no-changes) hipfft hipfft
Launchpad 2148603 New upstream version 7.1.1 (rebuild no-changes) hiprand hiprand
Launchpad 2148606 New upstream version 7.1.1 (rebuild no-changes) roctracer roctracer
CVE CVE-2025-5878 A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface Encoder.encodeForSQL of the SQL libowasp-esapi-java libowasp-esapi-java
CVE CVE-2026-34835 Rack is a modular Ruby web server interface. From versions 3.0.0.beta1 to before 3.1.21, and 3.2.0 to before 3.2.6, Rack::Request parses the Host hea ruby-rack ruby-rack
CVE CVE-2026-34827 Rack is a modular Ruby web server interface. From versions 3.0.0.beta1 to before 3.1.21, and 3.2.0 to before 3.2.6, Rack::Multipart::Parser#handle_mi ruby-rack ruby-rack
CVE CVE-2026-32762 Rack is a modular Ruby web server interface. From versions 3.0.0.beta1 to before 3.1.21 and 3.2.0 to before 3.2.6, Rack::Utils.forwarded_values parse ruby-rack ruby-rack
CVE CVE-2026-26962 Rack is a modular Ruby web server interface. From version 3.2.0 to before version 3.2.6, Rack::Multipart::Parser unfolds folded multipart part header ruby-rack ruby-rack
Launchpad 2145198 [SRU] libreoffice 25.8.6 for questing libreoffice libreoffice libreoffice libreoffice
Launchpad 2148560 New upstream version 7.1.1 (rebuild no-changes) miopen miopen
CVE CVE-2026-34831 Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Files#fail sets the Content-Length response header us ruby-rack ruby-rack ruby-rack ruby-rack
CVE CVE-2026-34830 Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Sendfile#map_accel_path interpolates the value of the ruby-rack ruby-rack ruby-rack ruby-rack
CVE CVE-2026-34829 Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Multipart::Parser only wraps the request body in a Bo ruby-rack ruby-rack ruby-rack ruby-rack
CVE CVE-2026-34826 Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Utils.get_byte_ranges parses the HTTP Range header wi ruby-rack ruby-rack ruby-rack ruby-rack
CVE CVE-2026-34786 Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Static#applicable_rules evaluates several header_rule ruby-rack ruby-rack ruby-rack ruby-rack
CVE CVE-2026-34785 Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Static determines whether a request should be served ruby-rack ruby-rack ruby-rack ruby-rack
CVE CVE-2026-34763 Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Directory interpolates the configured root path direc ruby-rack ruby-rack ruby-rack ruby-rack
CVE CVE-2026-34230 Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Utils.select_best_encoding processes Accept-Encoding ruby-rack ruby-rack ruby-rack ruby-rack
CVE CVE-2026-26961 Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Multipart::Parser extracts the boundary parameter fro ruby-rack ruby-rack ruby-rack ruby-rack
Launchpad 2140764 Can't copy error message update-manager



About   -   Send Feedback to @ubuntu_updates