Linux & Operating Systems
Ubuntu USN-8859-1 Fixes ImageMagick Vulnerabilities
Ubuntu ImageMagick updates address release-dependent denial-of-service and disclosure flaws. Check ESM or Legacy Support access even on listed newer releases, update the libraries used by image workers, and assess bundled or container copies separately.
Ubuntu USN-8855-1 Fixes GStreamer Bad Plugins Vulnerability
Ubuntu GStreamer Bad Plugins updates address multi-channel WAV parsing that can crash consumers or permit code execution. Match the installed binary and repository entitlement, including applicable ESM Apps channels, then restart affected media workers.
Ubuntu USN-8856-1 Fixes Kdenlive, MLT Vulnerability
Ubuntu 26.04 Kdenlive and MLT updates fix command execution through malicious project proxy parameters. Update the actual editor and runtime packages, preserving project backups; separately packaged applications need their own supported update channels.
Ubuntu USN-8845-1 Fixes GVfs Vulnerabilities
Ubuntu GVfs updates fix malicious-SFTP data handling and a separate local ownership flaw with narrower release scope. Update installed backends and libraries, save work and restart user sessions; closing one file-manager window is not sufficient.
Ubuntu USN-8816-3 Fixes Linux kernel (Oracle) Vulnerabilities
Ubuntu 24.04 Oracle-cloud 7.0 kernel updates require matching standard or 64k binaries and a reboot. Update reusable launch images, check external modules and verify the running kernel; this is not an Oracle Linux update.
Debian DSA-6531-1 Updates openssl for Security Vulnerabilities
Debian 13 OpenSSL updates address protocol, certificate and signing flaws, with private-key recovery limited to particular conditions. Update loaded libraries and restart consumers; the advisory does not establish that every TLS certificate's key has leaked.
Debian DSA-6530-1 Updates pcre2 for a Security Vulnerability
Debian's PCRE2 backport fixes an out-of-bounds write involving attacker-controlled patterns and certain JIT APIs. Update affected libraries and restart consumers; a lower upstream-looking version does not invalidate Debian's maintained security fix.
Debian DSA-6529-1 Updates libwebsockets for Security Vulnerabilities
Debian 13 libwebsockets updates address missing validation in HPACK path-header parsing, with denial-of-service or possible code-execution risk. Update the actual consuming libraries and processes; not every WebSocket service uses this implementation or parser path.
Ubuntu USN-8818-3 Updates Cloud and IoT Kernels for 20 Vulnerabilities
Ubuntu 20.04 Pro updates cover AWS, Azure, Azure FDE and Intel IoTG 5.15 kernels. Preserve the installed flavor, prepare encrypted-boot or device recovery as appropriate, and complete module checks and the required reboot.
Ubuntu USN-8819-3 Updates Azure and AWS Kernels for Three Vulnerabilities
Older Ubuntu Azure and AWS-HWE kernels require release-specific Pro or Legacy Support access. Match image and metapackage versions separately, verify recovery and module readiness, then reboot; a targeted fix does not establish broad application support.