Ubuntu security note

USN-8932-1 — Open the advisory

curl vulnerabilities

Affected: 0 → 7.81.0-1ubuntu1.30, 0 → 8.5.0-2ubuntu10.16, 0 → 7.35.0-1ubuntu2.20+esm24, 0 → 7.47.0-1ubuntu2.19+esm21

USN-8927-1 — Open the advisory

curl vulnerabilities

Affected: 0 → 8.18.0-1ubuntu2.8

CVE-2026-53131 — Check if you run it

In the Linux kernel, the following vulnerability has been resolved: netfilter: require Ethernet MAC header before using eth_hdr() , , the , , and ipset types, and access after eith

Affected: 4.8.0-28.30~16.04.1, 4.8.0-30.32~16.04.1, 4.8.0-32.34~16.04.1, 0 → 3.13.0-218.269

CVE-2026-53221 — Check if you run it

In the Linux kernel, the following vulnerability has been resolved: ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() In vti6_tnl_lookup(), when an exact match for a tunn

Affected: 4.8.0-28.30~16.04.1, 4.8.0-30.32~16.04.1, 4.8.0-32.34~16.04.1, 0 → 4.4.0-1159.165

USN-8933-1 — Open the advisory

rabbitmq-server vulnerabilities

Affected: 0 → 3.9.27-0ubuntu0.6, 0 → 3.12.1-1ubuntu1.7, 0 → 4.0.5-10ubuntu5.2, 0 → 3.5.7-1ubuntu0.16.04.4+esm3

CVE-2025-40778 — Check if you run it

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache.

Affected: 4.3.5-3ubuntu2, 4.3.5-3ubuntu3, 4.3.5-3ubuntu4, 1:9.11.16+dfsg-3~build1

CVE-2026-11331 — Check if you run it

An attacker who knows (or guesses) that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during RPZ proce

Affected: 4.3.5-3ubuntu2, 4.3.5-3ubuntu3, 4.3.5-3ubuntu4, 1:9.11.16+dfsg-3~build1

CVE-2026-1519 — Check if you run it

If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU.

Affected: 4.3.5-3ubuntu2, 4.3.5-3ubuntu3, 4.3.5-3ubuntu4, 1:9.11.16+dfsg-3~build1

CVE-2025-7044 — Open the advisory

An Improper Input Validation vulnerability exists in the user websocket handler of MAAS.

No version range is stored, so an installed version cannot be checked.

CVE-2026-106585 — Check if you run it

In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data.

No version range is stored, so an installed version cannot be checked.

CVE-2026-106583 — Check if you run it

In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.

No version range is stored, so an installed version cannot be checked.

CVE-2026-64545 — Check if you run it

net, bpf: check master for NULL in xdp_master_redirect()

No version range is stored, so an installed version cannot be checked.

CVE-2026-64538 — Check if you run it

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix null-ptr-deref in fib6_nh_mtu_change().

No version range is stored, so an installed version cannot be checked.

CVE-2024-56779 — Check if you run it

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur The action force umount(umount -f) will attempt t

No version range is stored, so an installed version cannot be checked.

CVE-2024-56570 — Check if you run it

In the Linux kernel, the following vulnerability has been resolved: ovl: Filter invalid inodes with missing lookup function Add a check to the ovl_dentry_weird() function to preven

No version range is stored, so an installed version cannot be checked.

CVE-2026-49237 — Check if you run it

An issue was discovered in Canonical Multipass for macOS before version 1.16.3 due to an incomplete fix for CVE-2025-5199.

No version range is stored, so an installed version cannot be checked.