Security Notices
Ubuntu USN-8832-1 Fixes Booth Vulnerability
Ubuntu Booth updates fix message authentication that could permit remote bypass. Coordinate package updates and required service restarts across sites and arbitrators, then verify ticket state; restarting every cluster participant blindly risks disruption.
Ubuntu USN-8830-1 Fixes phpseclib Vulnerabilities
Ubuntu phpseclib updates address AES-CBC and SSH timing leaks plus ASN.1 parsing denial of service. Identify the copy each PHP application loads; updating an OS package does not fix separately bundled Composer dependencies.
Ubuntu USN-8829-1 Fixes Plasma Workspace Vulnerability
Ubuntu 16.04 ESM Plasma Workspace has a local session-manager access flaw that can run code as another user. Confirm the affected package and entitlement, save users' work, and complete supported session or system maintenance.
Ubuntu USN-8828-1 Fixes dracut Vulnerabilities
Ubuntu dracut updates address boot-image permissions and network-configuration handling, including privileged processing of untrusted DHCP data. Match each CVE's release scope, preserve console recovery, and verify initramfs regeneration and reboot requirements.
Ubuntu USN-8827-1 Fixes Erlang Vulnerabilities
Ubuntu Erlang updates cover runtime, parser and network-protocol issues, including additional resource-exhaustion cases. Match packages to enabled application features and complete the documented reboot; restarting a single worker does not replace that requirement.
Ubuntu USN-8836-1 Fixes FreeRDP Vulnerabilities
Ubuntu FreeRDP 3 updates address disclosure, crashes and possible code execution on 24.04 and 26.04. Update each release-matched client or library consumer and restart as needed; an empty CVE list does not mean no security impact.
Ubuntu USN-8834-1 Fixes Exim Vulnerabilities
Ubuntu Exim updates address SMTP smuggling and proxy-related memory faults, with one GnuTLS issue limited to a stated configuration. Inventory proxy and TLS settings, preserve queue state, and install release-matched binary packages.
Ubuntu USN-8833-1 Fixes libvirt Vulnerabilities
Ubuntu 26.04's libvirt-hwe update covers six RPC, XML, storage and network-definition issues. Confirm the correct binary-package mapping, plan guest maintenance and reboot; the grouped flaws do not imply anonymous access to every guest.
Ubuntu USN-8831-1 Fixes libvirt Vulnerabilities
Ubuntu libvirt updates address an RPC overflow and symbolic-link ownership changes across local trust boundaries. Plan guest shutdown or migration, install release-matched packages, and complete Canonical's required reboot with host recovery access available.
Debian Updates libheif for Seven Image-Processing Vulnerabilities
Debian 13 libheif updates address malformed HEIF/AVIF images that can crash consumers, expose memory or potentially execute code. Update the binary libraries used by upload processors and thumbnail workers, assessing bundled copies separately.