USN-7981-1: wlc vulnerabilities

USN-7981-1: wlc vulnerabilities

Publication date: 27 January 2026
Overview: Several security issues were fixed in wlc.

Packages
wlc - A Weblate command-line client using Weblate’s REST API

Details
It was discovered that wlc did not correctly handle SSL verification. An
attacker could possibly use this issue to access sensitive resources.
(CVE-2026-22250)

It was discovered that wlc did not correctly handle API keys. An attacker
could possibly use this issue to leak API keys to a malicious server.
(CVE-2026-22251)

Update instructions
In general, a standard system update will make all the necessary changes.

The problem can be corrected by updating your system to the following package versions:

• 25.10 questing wlc – 1.15-2ubuntu0.1
• 24.04 LTS noble wlc – 1.13-2ubuntu0.1~esm1
• 22.04 LTS jammy wlc – 1.2-1ubuntu0.22.04.1~esm1
• 20.04 LTS focal wlc – 1.2-1ubuntu0.20.04.1~esm1
• 18.04 LTS bionic wlc – 0.8-1ubuntu0.1~esm1