Ubuntu Security Notice
Ubuntu USN-8838-1 Fixes catdoc Vulnerabilities
Ubuntu catdoc updates fix malformed Office-document parsing that can crash extraction jobs or permit code execution. Update the binary used by automated upload processing as well as desktop tools, and validate ordinary document and spreadsheet extraction.
Ubuntu USN-8837-1 Fixes pdfminer Vulnerabilities
Ubuntu pdfminer fixes address crafted-PDF parsing flaws that can execute code in the consuming process. Inventory document-ingestion workers and Python environments, update the actual parser package, and restart long-lived consumers before benign regression checks.
Ubuntu USN-8835-1 Fixes Emacs Vulnerability
Ubuntu Emacs updates address memory corruption from crafted SVG images, with crash or information-exposure risk. Update the installed frontend and supporting packages, save work, and restart sessions or daemons; code execution is not established here.
Ubuntu USN-8832-1 Fixes Booth Vulnerability
Ubuntu Booth updates fix message authentication that could permit remote bypass. Coordinate package updates and required service restarts across sites and arbitrators, then verify ticket state; restarting every cluster participant blindly risks disruption.
Ubuntu USN-8830-1 Fixes phpseclib Vulnerabilities
Ubuntu phpseclib updates address AES-CBC and SSH timing leaks plus ASN.1 parsing denial of service. Identify the copy each PHP application loads; updating an OS package does not fix separately bundled Composer dependencies.
Ubuntu USN-8829-1 Fixes Plasma Workspace Vulnerability
Ubuntu 16.04 ESM Plasma Workspace has a local session-manager access flaw that can run code as another user. Confirm the affected package and entitlement, save users' work, and complete supported session or system maintenance.
Ubuntu USN-8828-1 Fixes dracut Vulnerabilities
Ubuntu dracut updates address boot-image permissions and network-configuration handling, including privileged processing of untrusted DHCP data. Match each CVE's release scope, preserve console recovery, and verify initramfs regeneration and reboot requirements.
Ubuntu USN-8827-1 Fixes Erlang Vulnerabilities
Ubuntu Erlang updates cover runtime, parser and network-protocol issues, including additional resource-exhaustion cases. Match packages to enabled application features and complete the documented reboot; restarting a single worker does not replace that requirement.
Ubuntu USN-8836-1 Fixes FreeRDP Vulnerabilities
Ubuntu FreeRDP 3 updates address disclosure, crashes and possible code execution on 24.04 and 26.04. Update each release-matched client or library consumer and restart as needed; an empty CVE list does not mean no security impact.
Ubuntu USN-8834-1 Fixes Exim Vulnerabilities
Ubuntu Exim updates address SMTP smuggling and proxy-related memory faults, with one GnuTLS issue limited to a stated configuration. Inventory proxy and TLS settings, preserve queue state, and install release-matched binary packages.