Ubuntu
Ubuntu USN-8863-1 Updates GStreamer Good Plugins for Four Vulnerabilities
Ubuntu GStreamer Good Plugins updates address FLAC, AVI and closed-caption disclosure or denial-of-service flaws. Match runtime binaries and release-specific security/ESM channels; the closed-caption issue does not cover every older release in the combined notice.
Ubuntu USN-8862-1 Fixes libXpm Vulnerability
Ubuntu libXpm updates address resource exhaustion from zero-dimension XPM images. Update installed runtime and utility binaries for the matching release, assess bundled copies separately, and avoid expanding the stated local denial-of-service risk into code execution.
Ubuntu USN-8861-1 Fixes OpenSSL Vulnerabilities
Ubuntu 26.04 OpenSSL updates fix QUIC CPU and packet-buffer memory exhaustion. Update the relevant libraries and complete Canonical's required reboot; ordinary TLS service presence does not establish that the affected QUIC paths are enabled.
Ubuntu USN-8860-1 Fixes OpenStack Designate Vulnerability
Ubuntu OpenStack Designate updates fix overlapping-zone validation that can let authenticated users redirect DNS traffic or cause denial of service. Update matching packages, restart Designate, and check tenant/zone ownership rather than DNS availability alone.
Ubuntu USN-8857-1 Fixes KCoreAddons Vulnerability
Ubuntu 26.04 KCoreAddons updates fix shell-argument quoting that can execute unintended commands when applications process user input. Update the loaded runtime library and verify its provenance; merely having a KDE desktop does not establish exposure.
Ubuntu USN-8858-1 Fixes Authen::SASL Vulnerability
Ubuntu Authen::SASL updates address a login-validation flaw, but Canonical's summary and detailed impact descriptions conflict. Apply the matching library build and check authentication success and rejection without presenting either impact account as definitively reconciled.
Ubuntu USN-8859-1 Fixes ImageMagick Vulnerabilities
Ubuntu ImageMagick updates address release-dependent denial-of-service and disclosure flaws. Check ESM or Legacy Support access even on listed newer releases, update the libraries used by image workers, and assess bundled or container copies separately.
Ubuntu USN-8855-1 Fixes GStreamer Bad Plugins Vulnerability
Ubuntu GStreamer Bad Plugins updates address multi-channel WAV parsing that can crash consumers or permit code execution. Match the installed binary and repository entitlement, including applicable ESM Apps channels, then restart affected media workers.
Ubuntu USN-8856-1 Fixes Kdenlive, MLT Vulnerability
Ubuntu 26.04 Kdenlive and MLT updates fix command execution through malicious project proxy parameters. Update the actual editor and runtime packages, preserving project backups; separately packaged applications need their own supported update channels.
Ubuntu USN-8845-1 Fixes GVfs Vulnerabilities
Ubuntu GVfs updates fix malicious-SFTP data handling and a separate local ownership flaw with narrower release scope. Update installed backends and libraries, save work and restart user sessions; closing one file-manager window is not sufficient.
