Search: “Ubuntu 26.04 LTS”

2 stories in the last 3d

Ubuntu patches python-cryptography flaws including a PKCS#7 timing side-channel (CVE-2026-69247) that could allow key recovery.

Ubuntu Security Notice USN-8776-1 fixes multiple vulnerabilities in python-cryptography. CVE-2026-69247 describes distinguishable PKCS#7 decryption outcomes with observable timing differences that a remote attacker could exploit to recover encryption keys; it affects Ubuntu 26.04 LTS. CVE-2023-23931, affecting only Ubuntu 18.04 LTS, involves incorrect handling of objects with immutable buffers during cipher operations, causing corrupted output, and a third issue reported by Jack Lloyd is also addressed.

Ubuntu Security NoticesSep 16, 20:12 UTC · 8h agoAdvisory 15 sources CVE-2023-23931 CVE-2026-69247

USN-8739-2: ImageMagick vulnerabilities

Ubuntu releases USN-8739-2, extending ImageMagick fixes for four CVEs including possible arbitrary code execution to Ubuntu 24.04 LTS.

USN-8739-2 provides the ImageMagick fixes from USN-8739-1 for Ubuntu 24.04 LTS. The flaws stem from incorrect handling of certain images that could allow an attacker to cause a denial of service or possibly execute arbitrary code. The affected CVEs are CVE-2026-56366, CVE-2026-56368, CVE-2026-56371, and CVE-2026-56373.

Ubuntu Security NoticesSep 14, 18:22 UTC · 2d agoAdvisory CVE-2026-56366 CVE-2026-56368 CVE-2026-56371+1 CVEs

Search: “Ubuntu 26.04 LTS”

USN-8776-1: python-cryptography vulnerabilities

USN-8739-2: ImageMagick vulnerabilities