News · via Ubuntu Security
USN-8487-2: curl regression
USN-8487-1 fixed vulnerabilities in curl. Unfortunately that update contained an incomplete fix for CVE-2026-8927. This update fixes the problem.
Ubuntu
Coverage tagged "Ubuntu".
News · via Ubuntu Security
USN-8840-1: libevent vulnerabilities
Michał Majchrowicz and Marcin Wyczechowski discovered that libevent incorrectly handled certain DNS responses. A remote attacker could possibly use this issue to cause a denial of service or execute…
News · via Ubuntu Security
USN-8839-1: Atril vulnerabilities
It was discovered that Atril did not properly sanitize command-line arguments in PDF /GoToR actions. If a user opened a specially crafted PDF file, an attacker could possibly use this issue to…
News · via Ubuntu Security
USN-8838-1: catdoc vulnerabilities
It was discovered that catdoc had an integer overflow when processing shared string tables in malformed spreadsheet files. An attacker could possibly use this issue to cause catdoc to crash or…
News · via Ubuntu Security
USN-8837-1: pdfminer vulnerabilities
It was discovered that pdfminer did not safely parse specially crafted PDF files. An attacker could possibly use these issues to execute arbitrary code. (CVE-2025-64512, CVE-2025-70559)
News · via Ubuntu Security
USN-8835-1: Emacs vulnerability
It was discovered that Emacs improperly handled specially crafted SVG images, resulting in memory corruption. An attacker could possibly use this issue to cause Emacs to crash, resulting in a denial…
News · via Ubuntu Security
USN-8832-1: Booth vulnerability
It was discovered that Booth did not properly validate message authentication codes under certain circumstances. A remote attacker could possibly use this issue to bypass authentication.
News · via Ubuntu Security
USN-8830-1: phpseclib vulnerabilities
It was discovered that phpseclib did not perform constant-time padding validation when using AES in CBC mode. A remote attacker could possibly use this issue to obtain sensitive information…
News · via Ubuntu Security
USN-8829-1: Plasma Workspace vulnerability
Fabian Vogt discovered that Plasma Workspace did not properly authenticate local clients connecting to the session manager. A local attacker could possibly use this issue to execute arbitrary code as…
News · via Ubuntu Security
USN-8828-1: dracut vulnerabilities
It was discovered that dracut created initramfs images with overly permissive permissions under certain circumstances. A local attacker could possibly use this issue to obtain sensitive information…
News · via Ubuntu Security
USN-8827-1: Erlang vulnerabilities
It was discovered that the Erlang Port Mapper Daemon did not properly handle slow connections. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-42792) It was…
News · via Ubuntu Security
USN-8836-1: FreeRDP vulnerabilities
It was discovered that FreeRDP contained multiple security issues. An attacker could possibly use these issues to obtain sensitive information, cause FreeRDP to crash, resulting in a denial of…
News · via Ubuntu Security
USN-8834-1: Exim vulnerabilities
It was discovered that Exim had an out-of-bounds write when Proxy-Protocol was used with an attacker-controlled proxy. A remote attacker could possibly use this issue to execute arbitrary code…
News · via Ubuntu Security
USN-8833-1: libvirt vulnerabilities
It was discovered that libvirt did not properly validate newline characters in DNS TXT record values and SRV record attributes in its virtual network driver. A local attacker with permission to…
News · via Ubuntu Security
USN-8831-1: libvirt vulnerabilities
It was discovered that libvirt had an integer overflow vulnerability in the NodeGetFreePages RPC handler. A local attacker could possibly use this issue to cause a denial of service or execute…