Linux & Operating Systems
Ubuntu USN-8862-1 Fixes libXpm Vulnerability
Ubuntu libXpm updates address resource exhaustion from zero-dimension XPM images. Update installed runtime and utility binaries for the matching release, assess bundled copies separately, and avoid expanding the stated local denial-of-service risk into code execution.
Ubuntu USN-8861-1 Fixes OpenSSL Vulnerabilities
Ubuntu 26.04 OpenSSL updates fix QUIC CPU and packet-buffer memory exhaustion. Update the relevant libraries and complete Canonical's required reboot; ordinary TLS service presence does not establish that the affected QUIC paths are enabled.
Ubuntu USN-8860-1 Fixes OpenStack Designate Vulnerability
Ubuntu OpenStack Designate updates fix overlapping-zone validation that can let authenticated users redirect DNS traffic or cause denial of service. Update matching packages, restart Designate, and check tenant/zone ownership rather than DNS availability alone.
Ubuntu USN-8857-1 Fixes KCoreAddons Vulnerability
Ubuntu 26.04 KCoreAddons updates fix shell-argument quoting that can execute unintended commands when applications process user input. Update the loaded runtime library and verify its provenance; merely having a KDE desktop does not establish exposure.
Amazon Linux Publishes Thirty-Five Live Patches for CVE-2026-80521
Amazon Linux maps one AF_UNIX fix to thirty-five kernel-specific live patches. Match the running kernel and confirm livepatch prerequisites and loaded status; installing every package is wrong, and livepatching does not eliminate native-kernel updates or planned reboots.
Amazon Linux 2023 Kernel Updates Address CVE-2026-80521
Amazon Linux 2023 advisories map an AF_UNIX kernel fix to separate 6.1, 6.12 and 6.18 streams. Select the host's matching supported package and verify runtime state; the brief defect description does not establish remote code execution.
Amazon Linux Updates SSM Agent for Four Vulnerabilities
Amazon Linux SSM Agent updates address bundled dependency flaws and authenticated port-forwarding SSRF that can expose instance-role credentials. Update the deployed agent and validate management workflows; the set does not imply unauthenticated Internet exposure for every flaw.
Debian DSA-6533-1 Updates firefox-esr for Security Vulnerabilities
Debian 13's Firefox ESR update fixes browser security flaws while moving packaging from the 140 to 153 series. Validate managed-browser, profile and extension behavior alongside installation; this is also a branch transition.
Debian DSA-6532-1 Updates tor for a Security Vulnerability
Debian 13 Tor updates address multiple denial-of-service vulnerabilities with fixed package 0.4.9.13-0+deb13u1. Follow the supported trixie update path; the announcement's missing CVE identifiers do not mean the release lacks security impact.
Ubuntu USN-8858-1 Fixes Authen::SASL Vulnerability
Ubuntu Authen::SASL updates address a login-validation flaw, but Canonical's summary and detailed impact descriptions conflict. Apply the matching library build and check authentication success and rejection without presenting either impact account as definitively reconciled.