Linux & Operating Systems
Debian Updates Flatpak for Eight Sandbox Vulnerabilities
Debian 13 Flatpak updates address malicious-application denial of service and information disclosure. Update host-side packages and validate portal workflows while preserving least-privilege permissions; granting broad host-file access is not a substitute for the fix.
Ubuntu USN-8839-1 Fixes Atril Vulnerabilities
Ubuntu Atril updates address code-execution risk in crafted PDF actions, with two older flaws scoped only to Ubuntu 16.04. Install the release-matched viewer update and reopen sessions before handling unknown documents.
Ubuntu USN-8838-1 Fixes catdoc Vulnerabilities
Ubuntu catdoc updates fix malformed Office-document parsing that can crash extraction jobs or permit code execution. Update the binary used by automated upload processing as well as desktop tools, and validate ordinary document and spreadsheet extraction.
Ubuntu USN-8837-1 Fixes pdfminer Vulnerabilities
Ubuntu pdfminer fixes address crafted-PDF parsing flaws that can execute code in the consuming process. Inventory document-ingestion workers and Python environments, update the actual parser package, and restart long-lived consumers before benign regression checks.
Ubuntu USN-8835-1 Fixes Emacs Vulnerability
Ubuntu Emacs updates address memory corruption from crafted SVG images, with crash or information-exposure risk. Update the installed frontend and supporting packages, save work, and restart sessions or daemons; code execution is not established here.
Ubuntu USN-8832-1 Fixes Booth Vulnerability
Ubuntu Booth updates fix message authentication that could permit remote bypass. Coordinate package updates and required service restarts across sites and arbitrators, then verify ticket state; restarting every cluster participant blindly risks disruption.
Ubuntu USN-8830-1 Fixes phpseclib Vulnerabilities
Ubuntu phpseclib updates address AES-CBC and SSH timing leaks plus ASN.1 parsing denial of service. Identify the copy each PHP application loads; updating an OS package does not fix separately bundled Composer dependencies.
Ubuntu USN-8829-1 Fixes Plasma Workspace Vulnerability
Ubuntu 16.04 ESM Plasma Workspace has a local session-manager access flaw that can run code as another user. Confirm the affected package and entitlement, save users' work, and complete supported session or system maintenance.
Ubuntu USN-8828-1 Fixes dracut Vulnerabilities
Ubuntu dracut updates address boot-image permissions and network-configuration handling, including privileged processing of untrusted DHCP data. Match each CVE's release scope, preserve console recovery, and verify initramfs regeneration and reboot requirements.
Ubuntu USN-8827-1 Fixes Erlang Vulnerabilities
Ubuntu Erlang updates cover runtime, parser and network-protocol issues, including additional resource-exhaustion cases. Match packages to enabled application features and complete the documented reboot; restarting a single worker does not replace that requirement.