Linux & Operating Systems
Ubuntu USN-8836-1 Fixes FreeRDP Vulnerabilities
Ubuntu FreeRDP 3 updates address disclosure, crashes and possible code execution on 24.04 and 26.04. Update each release-matched client or library consumer and restart as needed; an empty CVE list does not mean no security impact.
Ubuntu USN-8834-1 Fixes Exim Vulnerabilities
Ubuntu Exim updates address SMTP smuggling and proxy-related memory faults, with one GnuTLS issue limited to a stated configuration. Inventory proxy and TLS settings, preserve queue state, and install release-matched binary packages.
Ubuntu USN-8833-1 Fixes libvirt Vulnerabilities
Ubuntu 26.04's libvirt-hwe update covers six RPC, XML, storage and network-definition issues. Confirm the correct binary-package mapping, plan guest maintenance and reboot; the grouped flaws do not imply anonymous access to every guest.
Ubuntu USN-8831-1 Fixes libvirt Vulnerabilities
Ubuntu libvirt updates address an RPC overflow and symbolic-link ownership changes across local trust boundaries. Plan guest shutdown or migration, install release-matched packages, and complete Canonical's required reboot with host recovery access available.
Debian Updates libheif for Seven Image-Processing Vulnerabilities
Debian 13 libheif updates address malformed HEIF/AVIF images that can crash consumers, expose memory or potentially execute code. Update the binary libraries used by upload processors and thumbnail workers, assessing bundled copies separately.
Ubuntu USN-8826-1 Fixes LXC Vulnerabilities
Ubuntu LXC updates address logging-related disclosure and a separate authorization denial of service. Match binary packages and support entitlement to the release, then restart affected containers; the two issues do not share identical Ubuntu scope.
Red Hat RRDtool Updates Fix RHEL 9 Memory-Safety Flaw
RRDtool's cache daemon can crash or execute code when a local attacker with socket access supplies an oversized CREATE request. Apply the entitled RHEL branch update, restart rrdcached, and verify dependent monitoring clients.
Red Hat Tesseract Update Fixes RHEL 9 Parsing Flaw
Red Hat's Tesseract update fixes a buffer-overflow risk in crafted trained-data model components. Update affected OCR workers and verify model provenance; the advisory does not establish that every ordinary scanned image triggers the flaw.
Red Hat Libreswan Update Fixes Four RHEL 8 Network Flaws
RHEL 8.8 Libreswan updates address denial of service and conditional RSA authentication risks. Match IKE mode, certificates and policy to the advisories, then update with a management path independent of the VPN tunnel.
Red Hat Updates Git LFS for Twelve RHEL 9 Vulnerabilities
RHEL 9.4 Update Services for SAP Solutions updates Git LFS and bundled dependencies. Inventory developer hosts and build runners, update the entitled package, and check separate binaries; replacing a Go compiler does not rebuild Git LFS.