Security fixes and advisories that landed overnight. Vendor notices and patches from Ubuntu are listed below. The notes include crashes, information disclosure, and several items that mention possible arbitrary code execution. Updated 04 Nov 2026 12:00 GMT.
Top items
Ubuntu
USN-8994-1: libvips vulnerabilities
Multiple bugs in libvips were found that can cause crashes, leak information, or in some cases allow arbitrary code execution. The issues affect various image and file handling operations across multiple Ubuntu LTS releases and are tracked under several CVE identifiers.
- Published: 03 Nov 2026 17:39 GMT
- CVEs: CVE-2025-59933, CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591, CVE-2026-69242, CVE-2026-70651, CVE-2026-70653, CVE-2026-70654
- Notes: integer overflow in vipsload operation
USN-8993-1: SOGo vulnerability
SOGo used the client-supplied Origin header when constructing password reset links. A remote attacker could possibly use this issue to obtain password reset tokens and take over user accounts.
- Published: 03 Nov 2026 17:38 GMT
- CVEs: Not stated in the advisory excerpt
- Notes: used the client-supplied Origin header when constructing password reset links
USN-8992-1: Shapelib vulnerability
The shpsort utility in Shapelib incorrectly handled certain inputs, leading to a double free. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code.
- Published: 03 Nov 2026 17:38 GMT
- CVEs: Not stated in the advisory excerpt
- Notes: double free in shpsort utility
USN-8991-1: rxvt-unicode vulnerability
rxvt-unicode incorrectly handled certain escape sequences. An attacker could possibly use this issue to execute arbitrary code if a user displayed specially crafted text in the terminal.
- Published: 03 Nov 2026 17:37 GMT
- CVEs: Not stated in the advisory excerpt
- Notes: requires displaying specially crafted text in the terminal
USN-8990-1: Sprockets vulnerability
Sprockets incorrectly handled certain specially crafted requests when the Sprockets server was used in production. A remote attacker could possibly use this issue to access files outside of the application’s root directory.
- Published: 03 Nov 2026 17:37 GMT
- CVEs: Not stated in the advisory excerpt
- Notes: access files outside of the application’s root directory
USN-8988-1: Relax-and-Recover vulnerability
Relax-and-Recover created a world-readable initrd when GRUB_RESCUE was enabled. A local attacker could possibly use this issue to obtain sensitive information.
- Published: 03 Nov 2026 17:37 GMT
- CVEs: Not stated in the advisory excerpt
- Notes: created a world-readable initrd when GRUB_RESCUE was enabled
USN-8987-1: libuser vulnerabilities
libuser did not properly validate the GECOS field when changing user information, which could allow a local attacker to corrupt the passwd file and cause a denial of service. libuser also modified the passwd file in place when updating user information, which could cause an inconsistent file state or possibly escalate privileges.
- Published: 03 Nov 2026 17:36 GMT
- CVEs: CVE-2015-3245, CVE-2015-3246
- Notes: did not properly validate the GECOS field when changing user information
USN-8986-1: Swift Mailer vulnerability
Swift Mailer did not properly sanitize e-mail addresses in the mail transport. A remote attacker could possibly use this issue to pass extra parameters to the mail command and execute arbitrary code.
- Published: 03 Nov 2026 17:36 GMT
- CVEs: Not stated in the advisory excerpt
- Notes: did not properly sanitize e-mail addresses in the mail transport
USN-8985-1: Net::EasyTCP vulnerability
Net::EasyTCP used the built-in Perl rand() function to generate encryption keys when no strong randomization module was present. An attacker could possibly use this issue to predict the keys and obtain sensitive information.
- Published: 03 Nov 2026 17:36 GMT
- CVEs: Not stated in the advisory excerpt
- Notes: used Perl rand() to generate encryption keys
USN-8984-1: jabberd2 vulnerability
jabberd2 allowed SASL ANONYMOUS authentication even when it was not enabled in the configuration. A remote attacker could possibly use this issue to bypass authentication.
- Published: 03 Nov 2026 17:35 GMT
- CVEs: Not stated in the advisory excerpt
- Notes: allowed SASL ANONYMOUS authentication even when not enabled
