Ubuntu
Ubuntu USN-8837-1 Fixes pdfminer Vulnerabilities
Ubuntu pdfminer fixes address crafted-PDF parsing flaws that can execute code in the consuming process. Inventory document-ingestion workers and Python environments, update the actual parser package, and restart long-lived consumers before benign regression checks.
Ubuntu USN-8835-1 Fixes Emacs Vulnerability
Ubuntu Emacs updates address memory corruption from crafted SVG images, with crash or information-exposure risk. Update the installed frontend and supporting packages, save work, and restart sessions or daemons; code execution is not established here.
Ubuntu USN-8832-1 Fixes Booth Vulnerability
Ubuntu Booth updates fix message authentication that could permit remote bypass. Coordinate package updates and required service restarts across sites and arbitrators, then verify ticket state; restarting every cluster participant blindly risks disruption.
Ubuntu USN-8830-1 Fixes phpseclib Vulnerabilities
Ubuntu phpseclib updates address AES-CBC and SSH timing leaks plus ASN.1 parsing denial of service. Identify the copy each PHP application loads; updating an OS package does not fix separately bundled Composer dependencies.
Ubuntu USN-8829-1 Fixes Plasma Workspace Vulnerability
Ubuntu 16.04 ESM Plasma Workspace has a local session-manager access flaw that can run code as another user. Confirm the affected package and entitlement, save users' work, and complete supported session or system maintenance.
Ubuntu USN-8828-1 Fixes dracut Vulnerabilities
Ubuntu dracut updates address boot-image permissions and network-configuration handling, including privileged processing of untrusted DHCP data. Match each CVE's release scope, preserve console recovery, and verify initramfs regeneration and reboot requirements.
Ubuntu USN-8827-1 Fixes Erlang Vulnerabilities
Ubuntu Erlang updates cover runtime, parser and network-protocol issues, including additional resource-exhaustion cases. Match packages to enabled application features and complete the documented reboot; restarting a single worker does not replace that requirement.
Ubuntu USN-8836-1 Fixes FreeRDP Vulnerabilities
Ubuntu FreeRDP 3 updates address disclosure, crashes and possible code execution on 24.04 and 26.04. Update each release-matched client or library consumer and restart as needed; an empty CVE list does not mean no security impact.
Ubuntu USN-8834-1 Fixes Exim Vulnerabilities
Ubuntu Exim updates address SMTP smuggling and proxy-related memory faults, with one GnuTLS issue limited to a stated configuration. Inventory proxy and TLS settings, preserve queue state, and install release-matched binary packages.
Ubuntu USN-8833-1 Fixes libvirt Vulnerabilities
Ubuntu 26.04's libvirt-hwe update covers six RPC, XML, storage and network-definition issues. Confirm the correct binary-package mapping, plan guest maintenance and reboot; the grouped flaws do not imply anonymous access to every guest.
