ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “Ubuntu 26.04 LTS”

5 stories

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllAdvisory 9Vulnerability 4AI industry 1Exploit / PoC 1Ransomware 1
SeverityAllcritical 3high 3medium 6low 3info 1

USN-8739-1: ImageMagick vulnerabilities

Canonical released USN-8739-1 fixing five ImageMagick flaws that could cause denial of service or arbitrary code execution.

Ubuntu security notice USN-8739-1 patches five ImageMagick vulnerabilities: CVE-2026-56366, CVE-2026-56368, CVE-2026-56371, and CVE-2026-56373 allow denial of service via crafted images on Ubuntu 14.04 through 22.04 LTS. CVE-2026-56370 affects Ubuntu 22.04 LTS and 26.04 LTS and could allow denial of service or arbitrary code execution. Users should apply the updated ImageMagick packages to affected releases.

Ubuntu Security Notices · 8d agoAdvisoryCVE-2026-56366CVE-2026-56368CVE-2026-56370+2 CVEs

USN-8743-1: PHP vulnerabilities

Ubuntu fixes three PHP flaws, including SQL injection in the PostgreSQL extension (CVE-2026-17543) and an out-of-bounds write in bccomp().

Ubuntu Security Notice USN-8743-1 patches three vulnerabilities in PHP. CVE-2026-17543 involves incorrect backslash escaping in the PostgreSQL extension enabling SQL injection. CVE-2026-17544 is an out-of-bounds write in bccomp() that could cause denial of service or arbitrary code execution on Ubuntu 26.04 LTS, and CVE-2026-7260 causes unbounded recursion via circular symlinks in phar archives.

Ubuntu Security Noticesupdated · 4h agofirst · 6d agoAdvisory 13 sourcesCVE-2026-17543CVE-2026-17544CVE-2026-72601

USN-8716-2: FFmpeg vulnerabilities

Ubuntu issued USN-8716-2 fixing FFmpeg VobSub, Vulkan HEVC, and NVDEC decoder flaws that could allow denial of service or code execution.

USN-8716-2 provides the Ubuntu 26.04 LTS counterpart to the FFmpeg fixes in USN-8716-1. Crafted media files could cause denial of service or arbitrary code execution through the VobSub subtitle demuxer (CVE-2026-64830), the Vulkan HEVC hardware decoder (CVE-2026-64831), and the NVDEC video decoder path.

Ubuntu Security Notices · 7d agoAdvisoryCVE-2026-64830CVE-2026-64831

USN-8737-1: GNU C Library vulnerabilities

Ubuntu patches GNU C Library flaws including a strfmon buffer overflow and tdelete out-of-bounds access that could enable code execution.

Ubuntu issued USN-8737-1 fixing multiple GNU C Library vulnerabilities. CVE-2026-19499 is a buffer overflow in the strfmon function when handling right-justification padding, affecting only Ubuntu 26.04 LTS. CVE-2026-19542 is an out-of-bounds stack array access in the tdelete function. An additional issue involves incorrect memory handling in wordexp with the WRDE_APPEND flag. All issues could potentially cause denial of service or arbitrary code execution.

Ubuntu Security Notices · 8d agoAdvisoryCVE-2026-19499CVE-2026-19542

USN-8739-2: ImageMagick vulnerabilities

Ubuntu releases USN-8739-2, extending ImageMagick fixes for four CVEs including possible arbitrary code execution to Ubuntu 24.04 LTS.

USN-8739-2 provides the ImageMagick fixes from USN-8739-1 for Ubuntu 24.04 LTS. The flaws stem from incorrect handling of certain images that could allow an attacker to cause a denial of service or possibly execute arbitrary code. The affected CVEs are CVE-2026-56366, CVE-2026-56368, CVE-2026-56371, and CVE-2026-56373.

Ubuntu Security Notices · 2d agoAdvisoryCVE-2026-56366CVE-2026-56368CVE-2026-56371+1 CVEs