Bugs addressed in recent updates
| Origin | Bug number | Title | Packages |
|---|---|---|---|
| CVE | CVE-2026-58050 | libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation num_attr | libssh2 libssh2 libssh2 libssh2 |
| CVE | CVE-2026-58051 | libssh2 through 1.11.1 grows its publickey list with SSH2_REALLOC but does not zero-initialize new entries before parsing populates them, so a parse | libssh2 libssh2 libssh2 libssh2 |
| CVE | CVE-2026-5805 | A weakness has been identified in code-projects Easy Blog Site up to 1.0. The impacted element is an unknown function of the file /users/contact_us.p | libssh2 libssh2 libssh2 libssh2 |
| CVE | CVE-2026-60002 | ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the cl | openssh openssh openssh openssh openssh openssh openssh openssh openssh openssh openssh openssh |
| CVE | CVE-2026-60001 | sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay. | openssh openssh openssh openssh openssh openssh openssh openssh openssh openssh openssh openssh |
| CVE | CVE-2026-60000 | sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) becaus | openssh openssh openssh openssh openssh openssh openssh openssh openssh openssh openssh openssh |
| CVE | CVE-2026-59999 | In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not. | openssh openssh openssh openssh openssh openssh openssh openssh openssh openssh openssh openssh |
| CVE | CVE-2026-59998 | sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active | openssh openssh openssh openssh openssh openssh openssh openssh openssh openssh openssh openssh |
| CVE | CVE-2026-59997 | internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argum | openssh openssh openssh openssh openssh openssh openssh openssh openssh openssh openssh openssh |
| CVE | CVE-2026-59996 | scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations. | openssh openssh openssh openssh openssh openssh openssh openssh openssh openssh openssh openssh |
| CVE | CVE-2026-59995 | sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controll | openssh openssh openssh openssh openssh openssh openssh openssh openssh openssh openssh openssh |
| Launchpad | 2145785 | portblock does not work due to iptables changes | resource-agents resource-agents |
| Launchpad | 2156047 | [SRU] Terminal profile is out of sync with the Desktop theme | wsl-setup wsl-setup |
| Launchpad | 2145790 | ocf:heartbeat:nfsserver resource's stop operation fails due to /var/lib/nfs filesystem failing to unmount | resource-agents resource-agents resource-agents resource-agents |
| CVE | CVE-2025-10263 | Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Corte | linux-azure-nvidia linux-azure-nvidia linux linux-hwe-7.0 linux-riscv |
| Launchpad | 2156472 | net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer | linux-azure-nvidia linux-azure-nvidia |
| Launchpad | 2155222 | [hyperv] Ensure MMIO Mapping is Correct for Kexec / kdump kernel on Azure v6 Instance Types | linux-azure-nvidia linux-azure-nvidia |
| Launchpad | 2155434 | net: mana: Avoid queue struct allocation failure under memory fragmentation | linux-azure-nvidia linux-azure-nvidia |
| Launchpad | 2156920 | Fix MANA RX queue creation/error-cleanup path issues when RXQ initialization fails partway through | linux-azure-nvidia linux-azure-nvidia |
| Launchpad | 2157545 | azure: backport \ | linux-azure-nvidia linux-azure-nvidia |
About
-
Send Feedback to @ubuntu_updates
