https://ubuntu.com/security/notices/rss.xmlRecent content on Ubuntu security notices2026 Canonical Ltd. Ubuntu and Canonical are registered trademarks of Canonical Ltd.http://www.rssboard.org/rss-specificationFeedgenThu, 12 Nov 2026 16:01:57 +0000https://ubuntu.com/security/notices/USN-9063-1It was discovered that Yodl incorrectly handled certain input, leading to a buffer over-read. An attacker could possibly use this issue to cause Yodl to crash, resulting in a denial of service.https://ubuntu.com/security/notices/USN-9063-1Wed, 11 Nov 2026 18:33:50 +0000https://ubuntu.com/security/notices/USN-9062-1It was discovered that SNMPTT did not properly sanitize trap data passed to commands run through the EXEC, PREEXEC, and unknown_trap_exec options. A remote attacker could possibly use this issue to execute arbitrary shell commands.https://ubuntu.com/security/notices/USN-9062-1Wed, 11 Nov 2026 18:33:46 +0000https://ubuntu.com/security/notices/USN-9060-1It was discovered that kramdown processed the template option in documents by default. An attacker could possibly use this issue to read arbitrary files or execute arbitrary code.https://ubuntu.com/security/notices/USN-9060-1Wed, 11 Nov 2026 18:33:31 +0000https://ubuntu.com/security/notices/USN-9059-1It was discovered that ruby-jwt incorrectly verified HMAC signatures when the verification key was empty or missing. A remote attacker could possibly use this issue to forge tokens and bypass authentication.https://ubuntu.com/security/notices/USN-9059-1Wed, 11 Nov 2026 18:33:24 +0000https://ubuntu.com/security/notices/USN-9058-1It was discovered that Action Pack Page Caching incorrectly handled certain request paths when writing cached pages. A remote attacker could possibly use this issue to write arbitrary files to the web server, and possibly execute arbitrary code.https://ubuntu.com/security/notices/USN-9058-1Wed, 11 Nov 2026 18:33:04 +0000https://ubuntu.com/security/notices/USN-9057-1It was discovered that rkhunter downloaded mirror updates over an insecure channel. A remote attacker could possibly use this issue to execute arbitrary code.https://ubuntu.com/security/notices/USN-9057-1Wed, 11 Nov 2026 18:32:52 +0000https://ubuntu.com/security/notices/USN-9056-1It was discovered that the LDAP authentication modules in Prosody Community Modules did not fully verify XMPP addresses when checking for administrator privileges. A remote attacker could possibly use this issue to gain administrator privileges.https://ubuntu.com/security/notices/USN-9056-1Wed, 11 Nov 2026 18:32:46 +0000https://ubuntu.com/security/notices/USN-9055-1It was discovered that pecl_http incorrectly handled certain HTTP request parameters, leading to a type confusion. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service, or execute arbitrary code.https://ubuntu.com/security/notices/USN-9055-1Wed, 11 Nov 2026 18:32:38 +0000https://ubuntu.com/security/notices/USN-9054-1It was discovered that Babel incorrectly evaluated certain code during compilation when used with certain plugins. If a user or an automated system were tricked into compiling specially crafted code, an attacker could possibly use this issue to execute arbitrary code.https://ubuntu.com/security/notices/USN-9054-1Wed, 11 Nov 2026 18:32:25 +0000https://ubuntu.com/security/notices/USN-9053-1It was discovered that NetworkManager-ssh did not properly validate extra options in VPN connection settings. A local attacker could possibly use this issue to escalate privileges.https://ubuntu.com/security/notices/USN-9053-1Wed, 11 Nov 2026 18:32:05 +0000