[USN-8395-1] Netatalk vulnerabilities
[USN-8410-1] shell-quote vulnerability
[USN-8044-2] alsa-lib vulnerability
[USN-8398-2] nginx regression
[USN-8415-1] Vim vulnerabilities
[USN-8414-1] OpenSSL vulnerabilities
[USN-8414-2] OpenSSL vulnerabilities
[USN-8416-1] Go Networking vulnerability
[USN-8411-1] Lodash vulnerabilities
[USN-8156-2] GDK-PixBuf vulnerability
[USN-8412-1] QEMU vulnerabilities
[USN-8413-1] Cyborg vulnerabilities
[USN-8395-1] Netatalk vulnerabilities
==========================================================================
Ubuntu Security Notice USN-8395-1
June 08, 2026
netatalk vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 26.04 LTS
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS
Summary:
Several security issues were fixed in Netatalk.
Software Description:
- netatalk: Apple Filing Protocol service
Details:
Arjun Basnet discovered that Netatalk incorrectly sanitized user input in
its MySQL CNID backend. A remote authenticated attacker could possibly
use this issue to conduct SQL injection attacks. (CVE-2026-44047)
Arjun Basnet discovered that Netatalk incorrectly handled UCS-2 character
set conversion. A remote authenticated attacker could possibly use this
issue to cause a denial of service or execute arbitrary code.
(CVE-2026-44048)
Arjun Basnet discovered that Netatalk improperly handled null termination
during character set conversion. A remote authenticated attacker could
possibly use this issue to cause a denial of service or execute arbitrary
code. (CVE-2026-44049)
Arjun Basnet discovered that the Netatalk CNID daemon improperly handled
request-supplied name lengths. A local attacker could possibly use this
issue to cause a denial of service or execute arbitrary code with
escalated privileges. (CVE-2026-44050)
Arjun Basnet discovered that Netatalk improperly resolved symbolic links.
A remote authenticated attacker could possibly use this issue to read or
overwrite arbitrary files on the system. (CVE-2026-44051)
Arjun Basnet discovered that Netatalk incorrectly handled logging when
performing LDAP simple-bind operations. A local attacker could possibly
use this issue to obtain sensitive information. (CVE-2026-44052)
Arjun Basnet discovered that Netatalk contained an operator precedence
logic error when processing input. A remote authenticated attacker could
possibly use this issue to cause a denial of service or execute arbitrary
code. (CVE-2026-44055)
Arjun Basnet discovered that Netatalk incorrectly handled DSI write
requests. A remote unauthenticated attacker could possibly use this
issue to cause a denial of service. (CVE-2026-44060)
Arjun Basnet discovered that Netatalk incorrectly validated output
lengths when converting character sets. A remote authenticated attacker
could possibly use this issue to cause a denial of service or execute
arbitrary code. (CVE-2026-44062)
Arjun Basnet discovered that Netatalk incorrectly handled length
validation when parsing certain session identifiers. An attacker could
possibly use this issue to cause a denial of service. (CVE-2026-44064)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 26.04 LTS
netatalk 4.2.3~ds-2.1ubuntu0.1
Ubuntu 24.04 LTS
netatalk 3.1.18~ds-1ubuntu0.1~esm2
Available with Ubuntu Pro
Ubuntu 22.04 LTS
netatalk 3.1.12~ds-9ubuntu0.22.04.4+esm1
Available with Ubuntu Pro
Ubuntu 20.04 LTS
netatalk 3.1.12~ds-4ubuntu0.20.04.4+esm1
Available with Ubuntu Pro
Ubuntu 18.04 LTS
netatalk 2.2.6-1ubuntu0.18.04.2+esm3
Available with Ubuntu Pro
Ubuntu 16.04 LTS
netatalk 2.2.5-1ubuntu0.2+esm3
Available with Ubuntu Pro
Ubuntu 14.04 LTS
netatalk 2.2.2-1ubuntu2.2+esm3
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-8395-1
CVE-2026-44047, CVE-2026-44048, CVE-2026-44049, CVE-2026-44050,
CVE-2026-44051, CVE-2026-44052, CVE-2026-44055, CVE-2026-44060,
CVE-2026-44062, CVE-2026-44064
Package Information:
https://launchpad.net/ubuntu/+source/netatalk/4.2.3~ds-2.1ubuntu0.1
[USN-8410-1] shell-quote vulnerability
==========================================================================
Ubuntu Security Notice USN-8410-1
June 09, 2026
node-shell-quote vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 26.04 LTS
- Ubuntu 25.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 18.04 LTS
Summary:
shell-quote could be made to crash or run programs as your login if it
received specially crafted input.
Software Description:
- node-shell-quote: Parse and quote shell commands
Details:
Akshat Sinha discovered that shell-quote improperly validated object-token
inputs. An attacker could possibly use this issue to cause shell-quote to
crash, resulting in a denial of service, or execute arbitrary code.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 26.04 LTS
node-shell-quote 1.8.3+~1.7.5-1ubuntu0.1~esm1
Available with Ubuntu Pro
Ubuntu 25.10
node-shell-quote 1.7.4+~1.7.1-1ubuntu0.25.10.1
Ubuntu 24.04 LTS
node-shell-quote 1.7.4+~1.7.1-1ubuntu0.24.04.1
Ubuntu 22.04 LTS
node-shell-quote 1.7.3+~1.7.1-1ubuntu0.1~esm1
Available with Ubuntu Pro
Ubuntu 18.04 LTS
node-shell-quote 1.6.1+20160617-git72fb5a8ce29b-1ubuntu0.1~esm1
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-8410-1
CVE-2026-9277
Package Information:
https://launchpad.net/ubuntu/+source/node-shell-quote/1.7.4+~1.7.1-1ubuntu0.25.10.1
https://launchpad.net/ubuntu/+source/node-shell-quote/1.7.4+~1.7.1-1ubuntu0.24.04.1
[USN-8044-2] alsa-lib vulnerability
==========================================================================
Ubuntu Security Notice USN-8044-2
June 09, 2026
alsa-lib vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 20.04 LTS
Summary:
alsa-lib could be made to crash or run programs if it opened a specially
crafted file.
Software Description:
- alsa-lib: shared library for ALSA applications
Details:
USN-8044-1 fixed a vulnerability in alsa-lib. This update provides the
corresponding fix for alsa-lib on Ubuntu 20.04 LTS.
Original advisory details:
It was discovered that alsa-lib incorrectly handled the topology mixer
control decoder. A local attacker could use a specially crafted topology
file to cause alsa-lib to crash, resulting in a denial of service, or
possibly execute arbitrary code.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 20.04 LTS
libasound2 1.2.2-2.1ubuntu2.5+esm1
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-8044-2
https://ubuntu.com/security/notices/USN-8044-1
CVE-2026-25068
[USN-8398-2] nginx regression
==========================================================================
Ubuntu Security Notice USN-8398-2
June 09, 2026
nginx regression
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 26.04 LTS
- Ubuntu 25.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
Summary:
USN-8398-1 introduced a regression in nginx
Software Description:
- nginx: small, powerful, scalable web/proxy server
Details:
USN-8398-1 fixed a vulnerability in nginx. The update introduced a
regression causing nginx to crash when being used with external modules.
This update reverts the fix for CVE-2026-49975 pending further
investigation.
We apologize for the inconvenience.
Original advisory details:
It was discovered that nginx incorrectly handled certain cookie headers in
the HTTP/2 implementation. A remote attacker could possibly use this issue
to cause nginx to consume excessive resources, resulting in a denial of
service.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 26.04 LTS
nginx 1.28.3-2ubuntu1.4
nginx-core 1.28.3-2ubuntu1.4
nginx-extras 1.28.3-2ubuntu1.4
nginx-full 1.28.3-2ubuntu1.4
nginx-light 1.28.3-2ubuntu1.4
Ubuntu 25.10
nginx 1.28.0-6ubuntu1.6
nginx-core 1.28.0-6ubuntu1.6
nginx-extras 1.28.0-6ubuntu1.6
nginx-full 1.28.0-6ubuntu1.6
nginx-light 1.28.0-6ubuntu1.6
Ubuntu 24.04 LTS
nginx 1.24.0-2ubuntu7.11
nginx-core 1.24.0-2ubuntu7.11
nginx-extras 1.24.0-2ubuntu7.11
nginx-full 1.24.0-2ubuntu7.11
nginx-light 1.24.0-2ubuntu7.11
Ubuntu 22.04 LTS
nginx 1.18.0-6ubuntu14.14
nginx-core 1.18.0-6ubuntu14.14
nginx-extras 1.18.0-6ubuntu14.14
nginx-full 1.18.0-6ubuntu14.14
nginx-light 1.18.0-6ubuntu14.14
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-8398-2
https://ubuntu.com/security/notices/USN-8398-1
https://launchpad.net/bugs/2155992
Package Information:
https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.4
https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.6
https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.11
https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.14
[USN-8415-1] Vim vulnerabilities
==========================================================================
Ubuntu Security Notice USN-8415-1
June 09, 2026
vim vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 26.04 LTS
- Ubuntu 25.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS
Summary:
Several security issues were fixed in Vim.
Software Description:
- vim: Vi IMproved - enhanced vi editor
Details:
It was discovered that Vim incorrectly handled marked filenames in the
netrw plugin. An attacker could possibly use this issue to execute
arbitrary code. (CVE-2026-43961)
It was discovered that Vim incorrectly handled filenames when
decompressing certain archives. An attacker could possibly use this issue
to execute arbitrary code. (CVE-2026-46483)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 26.04 LTS
vim 2:9.1.2141-1ubuntu4.3
vim-common 2:9.1.2141-1ubuntu4.3
vim-gtk3 2:9.1.2141-1ubuntu4.3
vim-gui-common 2:9.1.2141-1ubuntu4.3
vim-motif 2:9.1.2141-1ubuntu4.3
vim-nox 2:9.1.2141-1ubuntu4.3
vim-runtime 2:9.1.2141-1ubuntu4.3
vim-tiny 2:9.1.2141-1ubuntu4.3
xxd 2:9.1.2141-1ubuntu4.3
Ubuntu 25.10
vim 2:9.1.0967-1ubuntu6.6
vim-athena 2:9.1.0967-1ubuntu6.6
vim-common 2:9.1.0967-1ubuntu6.6
vim-gtk3 2:9.1.0967-1ubuntu6.6
vim-gui-common 2:9.1.0967-1ubuntu6.6
vim-motif 2:9.1.0967-1ubuntu6.6
vim-nox 2:9.1.0967-1ubuntu6.6
vim-runtime 2:9.1.0967-1ubuntu6.6
vim-tiny 2:9.1.0967-1ubuntu6.6
xxd 2:9.1.0967-1ubuntu6.6
Ubuntu 24.04 LTS
vim 2:9.1.0016-1ubuntu7.15
vim-athena 2:9.1.0016-1ubuntu7.15
vim-common 2:9.1.0016-1ubuntu7.15
vim-gtk3 2:9.1.0016-1ubuntu7.15
vim-gui-common 2:9.1.0016-1ubuntu7.15
vim-motif 2:9.1.0016-1ubuntu7.15
vim-nox 2:9.1.0016-1ubuntu7.15
vim-runtime 2:9.1.0016-1ubuntu7.15
vim-tiny 2:9.1.0016-1ubuntu7.15
xxd 2:9.1.0016-1ubuntu7.15
Ubuntu 22.04 LTS
vim 2:8.2.3995-1ubuntu2.31
vim-athena 2:8.2.3995-1ubuntu2.31
vim-common 2:8.2.3995-1ubuntu2.31
vim-gtk 2:8.2.3995-1ubuntu2.31
vim-gtk3 2:8.2.3995-1ubuntu2.31
vim-gui-common 2:8.2.3995-1ubuntu2.31
vim-nox 2:8.2.3995-1ubuntu2.31
vim-runtime 2:8.2.3995-1ubuntu2.31
vim-tiny 2:8.2.3995-1ubuntu2.31
xxd 2:8.2.3995-1ubuntu2.31
Ubuntu 20.04 LTS
vim 2:8.1.2269-1ubuntu5.32+esm7
Available with Ubuntu Pro
vim-athena 2:8.1.2269-1ubuntu5.32+esm7
Available with Ubuntu Pro
vim-common 2:8.1.2269-1ubuntu5.32+esm7
Available with Ubuntu Pro
vim-gtk 2:8.1.2269-1ubuntu5.32+esm7
Available with Ubuntu Pro
vim-gtk3 2:8.1.2269-1ubuntu5.32+esm7
Available with Ubuntu Pro
vim-gui-common 2:8.1.2269-1ubuntu5.32+esm7
Available with Ubuntu Pro
vim-nox 2:8.1.2269-1ubuntu5.32+esm7
Available with Ubuntu Pro
vim-runtime 2:8.1.2269-1ubuntu5.32+esm7
Available with Ubuntu Pro
vim-tiny 2:8.1.2269-1ubuntu5.32+esm7
Available with Ubuntu Pro
xxd 2:8.1.2269-1ubuntu5.32+esm7
Available with Ubuntu Pro
Ubuntu 18.04 LTS
vim 2:8.0.1453-1ubuntu1.13+esm19
Available with Ubuntu Pro
vim-athena 2:8.0.1453-1ubuntu1.13+esm19
Available with Ubuntu Pro
vim-common 2:8.0.1453-1ubuntu1.13+esm19
Available with Ubuntu Pro
vim-gnome 2:8.0.1453-1ubuntu1.13+esm19
Available with Ubuntu Pro
vim-gtk 2:8.0.1453-1ubuntu1.13+esm19
Available with Ubuntu Pro
vim-gtk3 2:8.0.1453-1ubuntu1.13+esm19
Available with Ubuntu Pro
vim-gui-common 2:8.0.1453-1ubuntu1.13+esm19
Available with Ubuntu Pro
vim-nox 2:8.0.1453-1ubuntu1.13+esm19
Available with Ubuntu Pro
vim-runtime 2:8.0.1453-1ubuntu1.13+esm19
Available with Ubuntu Pro
vim-tiny 2:8.0.1453-1ubuntu1.13+esm19
Available with Ubuntu Pro
xxd 2:8.0.1453-1ubuntu1.13+esm19
Available with Ubuntu Pro
Ubuntu 16.04 LTS
vim 2:7.4.1689-3ubuntu1.5+esm34
Available with Ubuntu Pro
vim-athena 2:7.4.1689-3ubuntu1.5+esm34
Available with Ubuntu Pro
vim-athena-py2 2:7.4.1689-3ubuntu1.5+esm34
Available with Ubuntu Pro
vim-common 2:7.4.1689-3ubuntu1.5+esm34
Available with Ubuntu Pro
vim-gnome 2:7.4.1689-3ubuntu1.5+esm34
Available with Ubuntu Pro
vim-gnome-py2 2:7.4.1689-3ubuntu1.5+esm34
Available with Ubuntu Pro
vim-gtk 2:7.4.1689-3ubuntu1.5+esm34
Available with Ubuntu Pro
vim-gtk-py2 2:7.4.1689-3ubuntu1.5+esm34
Available with Ubuntu Pro
vim-gtk3 2:7.4.1689-3ubuntu1.5+esm34
Available with Ubuntu Pro
vim-gtk3-py2 2:7.4.1689-3ubuntu1.5+esm34
Available with Ubuntu Pro
vim-gui-common 2:7.4.1689-3ubuntu1.5+esm34
Available with Ubuntu Pro
vim-nox 2:7.4.1689-3ubuntu1.5+esm34
Available with Ubuntu Pro
vim-nox-py2 2:7.4.1689-3ubuntu1.5+esm34
Available with Ubuntu Pro
vim-runtime 2:7.4.1689-3ubuntu1.5+esm34
Available with Ubuntu Pro
vim-tiny 2:7.4.1689-3ubuntu1.5+esm34
Available with Ubuntu Pro
Ubuntu 14.04 LTS
vim 2:7.4.052-1ubuntu3.1+esm28
Available with Ubuntu Pro
vim-athena 2:7.4.052-1ubuntu3.1+esm28
Available with Ubuntu Pro
vim-common 2:7.4.052-1ubuntu3.1+esm28
Available with Ubuntu Pro
vim-gnome 2:7.4.052-1ubuntu3.1+esm28
Available with Ubuntu Pro
vim-gtk 2:7.4.052-1ubuntu3.1+esm28
Available with Ubuntu Pro
vim-gui-common 2:7.4.052-1ubuntu3.1+esm28
Available with Ubuntu Pro
vim-lesstif 2:7.4.052-1ubuntu3.1+esm28
Available with Ubuntu Pro
vim-nox 2:7.4.052-1ubuntu3.1+esm28
Available with Ubuntu Pro
vim-runtime 2:7.4.052-1ubuntu3.1+esm28
Available with Ubuntu Pro
vim-tiny 2:7.4.052-1ubuntu3.1+esm28
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-8415-1
CVE-2026-43961, CVE-2026-46483
Package Information:
https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.3
https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.6
https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.15
https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.31
[USN-8414-1] OpenSSL vulnerabilities
==========================================================================
Ubuntu Security Notice USN-8414-1
June 09, 2026
openssl vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 26.04 LTS
- Ubuntu 25.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
Summary:
Several security issues were fixed in OpenSSL.
Software Description:
- openssl: Secure Socket Layer (SSL) cryptographic library and tools
Details:
Frank Buss discovered that OpenSSL had a heap buffer over-read in ASN.1
content parsing. An attacker could possibly use this issue to cause OpenSSL
to crash, resulting in a denial of service, or obtain sensitive
information. (CVE-2026-34180)
Pavol Zacik and Alex Gaynor discovered that OpenSSL incorrectly accepted
PKCS#12 files with short HMAC keys when using PBMAC1. An attacker could
possibly use this issue to bypass integrity checks. This issue only
affected Ubuntu 25.10 and Ubuntu 26.04 LTS. (CVE-2026-34181)
Asim Viladi Oglu Manizada and Alex Gaynor discovered that OpenSSL could
accept forged CMS AuthEnvelopedData messages. An attacker could possibly
use this issue to bypass message authentication checks. (CVE-2026-34182)
Abhinav Agarwal discovered that OpenSSL had unbounded memory growth in the
QUIC PATH_CHALLENGE handler. A remote attacker could possibly use this
issue to cause OpenSSL to use excessive resources, leading to a denial of
service. This issue only affected Ubuntu 25.10 and Ubuntu 26.04 LTS.
(CVE-2026-34183)
Sunwoo Lee, Hyuk Lim, and Seunghyun Yoon discovered that OpenSSL had a NULL
pointer dereference in QUIC server initial packet handling. A remote
attacker could possibly use this issue to cause OpenSSL to crash, resulting
in a denial of service. This issue only affected Ubuntu 25.10 and Ubuntu
26.04 LTS. (CVE-2026-42764)
Mayank Jangid, Kushal Khemka, Hari Priandana, Bhabani Sankar Das, and Qifan
Zhang discovered that OpenSSL had a possible NULL dereference in password-
based CMS decryption. An attacker could possibly use this issue to cause
OpenSSL to crash, resulting in a denial of service. (CVE-2026-42766)
Zhanpeng Liu, Guannan Wang, and Guancheng Li discovered that OpenSSL had a
NULL pointer dereference in CRMF EncryptedValue decryption. An attacker
could possibly use this issue to cause OpenSSL to crash, resulting in a
denial of service. (CVE-2026-42767)
Alex Gaynor discovered that OpenSSL had a Bleichenbacher oracle in
CMS_decrypt() and PKCS7_decrypt() with multiple RecipientInfo values. An
attacker could possibly use this issue to obtain sensitive information.
This issue only affected Ubuntu 25.10 and Ubuntu 26.04 LTS.
(CVE-2026-42768)
Alex Gaynor discovered that OpenSSL had a trust-anchor substitution issue
in CMP rootCaKeyUpdate processing. An attacker could possibly use this
issue to bypass certificate trust validation. This issue only affected
Ubuntu 25.10 and Ubuntu 26.04 LTS. (CVE-2026-42769)
Alex Gaynor discovered that OpenSSL used attacker-supplied parameters when
validating FFC-DH peers. An attacker could possibly use this issue to
weaken key validation and compromise security guarantees. (CVE-2026-42770)
Alex Gaynor discovered that OpenSSL could ignore the IV in AES-OCB mode on
the EVP_Cipher() path. An attacker could possibly use this issue to bypass
cryptographic protections and obtain sensitive information.
(CVE-2026-45445)
Alex Gaynor discovered that OpenSSL had incorrect tag processing for empty
messages in AES-GCM-SIV and AES-SIV modes. An attacker could possibly use
this issue to bypass cryptographic integrity checks. (CVE-2026-45446)
Thai Duong discovered that OpenSSL had a heap use-after-free in
PKCS7_verify(). An attacker could possibly use this issue to cause OpenSSL
to crash, resulting in a denial of service, or execute arbitrary code.
(CVE-2026-45447)
Zehua Qiao and Jinwen He discovered that OpenSSL had a possible heap buffer
overflow in ASN.1 multibyte string conversion. An attacker could possibly
use this issue to cause OpenSSL to crash, resulting in a denial of service,
or execute arbitrary code. (CVE-2026-7383)
Bhabani Sankar Das discovered that OpenSSL had an out-of-bounds read in CMS
password-based decryption. An attacker could possibly use this issue to
cause OpenSSL to crash, resulting in a denial of service. (CVE-2026-9076)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 26.04 LTS
libssl3t64 3.5.5-1ubuntu3.2
openssl 3.5.5-1ubuntu3.2
Ubuntu 25.10
libssl3t64 3.5.3-1ubuntu3.4
openssl 3.5.3-1ubuntu3.4
Ubuntu 24.04 LTS
libssl3t64 3.0.13-0ubuntu3.11
openssl 3.0.13-0ubuntu3.11
Ubuntu 22.04 LTS
libssl3 3.0.2-0ubuntu1.25
openssl 3.0.2-0ubuntu1.25
After a standard system update you need to reboot your computer to make all
the necessary changes.
References:
https://ubuntu.com/security/notices/USN-8414-1
CVE-2026-34180, CVE-2026-34181, CVE-2026-34182, CVE-2026-34183,
CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446,
CVE-2026-45447, CVE-2026-7383, CVE-2026-9076
Package Information:
https://launchpad.net/ubuntu/+source/openssl/3.5.5-1ubuntu3.2
https://launchpad.net/ubuntu/+source/openssl/3.5.3-1ubuntu3.4
https://launchpad.net/ubuntu/+source/openssl/3.0.13-0ubuntu3.11
https://launchpad.net/ubuntu/+source/openssl/3.0.2-0ubuntu1.25
[USN-8414-2] OpenSSL vulnerabilities
==========================================================================
Ubuntu Security Notice USN-8414-2
June 09, 2026
openssl, openssl1.0 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS
Summary:
USN-8414-1 fixed several vulnerabilities in OpenSSL.
Software Description:
- openssl: Secure Socket Layer (SSL) cryptographic library and tools
- openssl1.0: Secure Socket Layer (SSL) cryptographic library and tools
Details:
USN-8414-1 fixed several vulnerabilities in OpenSSL. This update provides
the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu
18.04 LTS, and Ubuntu 20.04 LTS.
Original advisory details:
Frank Buss discovered that OpenSSL had a heap buffer over-read in ASN.1
content parsing. An attacker could possibly use this issue to cause OpenSSL
to crash, resulting in a denial of service, or obtain sensitive
information. (CVE-2026-34180)
Asim Viladi Oglu Manizada and Alex Gaynor discovered that OpenSSL could
accept forged CMS AuthEnvelopedData messages. An attacker could possibly
use this issue to bypass message authentication checks. (CVE-2026-34182)
Mayank Jangid, Kushal Khemka, Hari Priandana, Bhabani Sankar Das, and Qifan
Zhang discovered that OpenSSL had a possible NULL dereference in password-
based CMS decryption. An attacker could possibly use this issue to cause
OpenSSL to crash, resulting in a denial of service. (CVE-2026-42766)
Zhanpeng Liu, Guannan Wang, and Guancheng Li discovered that OpenSSL had a
NULL pointer dereference in CRMF EncryptedValue decryption. An attacker
could possibly use this issue to cause OpenSSL to crash, resulting in a
denial of service. (CVE-2026-42767)
Thai Duong discovered that OpenSSL had a heap use-after-free in
PKCS7_verify(). An attacker could possibly use this issue to cause OpenSSL
to crash, resulting in a denial of service, or execute arbitrary code.
(CVE-2026-45447)
Zehua Qiao and Jinwen He discovered that OpenSSL had a possible heap buffer
overflow in ASN.1 multibyte string conversion. An attacker could possibly
use this issue to cause OpenSSL to crash, resulting in a denial of service,
or execute arbitrary code. (CVE-2026-7383)
Bhabani Sankar Das discovered that OpenSSL had an out-of-bounds read in CMS
password-based decryption. An attacker could possibly use this issue to
cause OpenSSL to crash, resulting in a denial of service. (CVE-2026-9076)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 20.04 LTS
openssl 1.1.1f-1ubuntu2.24+esm4
Available with Ubuntu Pro
Ubuntu 18.04 LTS
openssl 1.1.1-1ubuntu2.1~18.04.23+esm9
Available with Ubuntu Pro
openssl1.0 1.0.2n-1ubuntu5.13+esm5
Available with Ubuntu Pro
Ubuntu 16.04 LTS
openssl 1.0.2g-1ubuntu4.20+esm16
Available with Ubuntu Pro
Ubuntu 14.04 LTS
openssl 1.0.1f-1ubuntu2.27+esm14
Available with Ubuntu Pro
After a standard system update you need to reboot your computer to make all
the necessary changes.
References:
https://ubuntu.com/security/notices/USN-8414-2
https://ubuntu.com/security/notices/USN-8414-1
CVE-2026-34180, CVE-2026-34182, CVE-2026-42766, CVE-2026-45447,
CVE-2026-7383, CVE-2026-9076
[USN-8416-1] Go Networking vulnerability
==========================================================================
Ubuntu Security Notice USN-8416-1
June 09, 2026
golang-golang-x-net-dev vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
Summary:
Go Networking could allow unintended access to network services.
Software Description:
- golang-golang-x-net-dev: Supplementary Go networking development files
Details:
It was discovered that Go Networking incorrectly handled certain
Punycode-encoded labels in the idna package. An attacker could possibly use
this issue to bypass hostname-based access restrictions.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 20.04 LTS
golang-go.net-dev 1:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm3
Available with Ubuntu Pro
golang-golang-x-net-dev 1:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm3
Available with Ubuntu Pro
Ubuntu 18.04 LTS
golang-go.net-dev 1:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm3
Available with Ubuntu Pro
golang-golang-x-net-dev 1:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm3
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-8416-1
CVE-2026-39821
[USN-8411-1] Lodash vulnerabilities
==========================================================================
Ubuntu Security Notice USN-8411-1
June 09, 2026
node-lodash vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 26.04 LTS
- Ubuntu 25.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS
Summary:
Several security issues were fixed in Lodash.
Software Description:
- node-lodash: A modern JavaScript utility library delivering modularity, performance, & extras
Details:
It was discovered that Lodash was vulnerable to a prototype pollution
issue in the zipObjectDeep function. An attacker could possibly use this
issue to modify application behavior. This issue only affected Ubuntu
18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-8203)
Liyuan Chen discovered that Lodash was vulnerable to a regular
expression denial of service issue in the toNumber, trim, and trimEnd
functions. An attacker could possibly use this issue to consume
excessive system resources, resulting in a denial of service. This issue
only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-28500)
Marc Hassan discovered that Lodash did not properly sanitize input to
the template function. An attacker could possibly use this issue to
inject and execute arbitrary commands. This issue only affected Ubuntu
16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-23337)
It was discovered that Lodash was vulnerable to a prototype pollution
issue in the unset and omit functions. An attacker could possibly use
this issue to delete properties from global prototypes, resulting in
security restrictions being bypassed. This issue only affected Ubuntu
18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and
Ubuntu 25.10. (CVE-2025-13465)
It was discovered that Lodash was vulnerable to a prototype pollution
issue in the unset and omit functions. An attacker could possibly use
this issue to delete properties from built-in prototypes, resulting in
security restrictions being bypassed. This issue only affected Ubuntu
18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu
25.10, and Ubuntu 26.04 LTS. (CVE-2026-2950)
It was discovered that Lodash did not properly validate certain inputs
to the template function. An attacker could possibly use this issue to
inject malicious code during template processing, resulting in arbitrary
code execution. (CVE-2026-4800)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 26.04 LTS
libjs-lodash 4.17.23+dfsg-1ubuntu0.1~esm1
Available with Ubuntu Pro
node-lodash 4.17.23+dfsg-1ubuntu0.1~esm1
Available with Ubuntu Pro
node-lodash-packages 4.17.23+dfsg-1ubuntu0.1~esm1
Available with Ubuntu Pro
Ubuntu 25.10
libjs-lodash 4.17.21+dfsg+~cs8.31.198.20210220-9ubuntu0.25.10.1
node-lodash 4.17.21+dfsg+~cs8.31.198.20210220-9ubuntu0.25.10.1
node-lodash-packages 4.17.21+dfsg+~cs8.31.198.20210220-9ubuntu0.25.10.1
Ubuntu 24.04 LTS
libjs-lodash 4.17.21+dfsg+~cs8.31.198.20210220-9ubuntu0.24.04.1~esm1
Available with Ubuntu Pro
node-lodash 4.17.21+dfsg+~cs8.31.198.20210220-9ubuntu0.24.04.1~esm1
Available with Ubuntu Pro
node-lodash-packages 4.17.21+dfsg+~cs8.31.198.20210220-9ubuntu0.24.04.1~esm1
Available with Ubuntu Pro
Ubuntu 22.04 LTS
libjs-lodash 4.17.21+dfsg+~cs8.31.198.20210220-5ubuntu0.1~esm1
Available with Ubuntu Pro
node-lodash 4.17.21+dfsg+~cs8.31.198.20210220-5ubuntu0.1~esm1
Available with Ubuntu Pro
node-lodash-packages 4.17.21+dfsg+~cs8.31.198.20210220-5ubuntu0.1~esm1
Available with Ubuntu Pro
Ubuntu 20.04 LTS
libjs-lodash 4.17.15+dfsg-2ubuntu0.1~esm1
Available with Ubuntu Pro
node-lodash 4.17.15+dfsg-2ubuntu0.1~esm1
Available with Ubuntu Pro
node-lodash-packages 4.17.15+dfsg-2ubuntu0.1~esm1
Available with Ubuntu Pro
Ubuntu 18.04 LTS
libjs-lodash 4.17.4+dfsg-1ubuntu0.1~esm1
Available with Ubuntu Pro
node-lodash 4.17.4+dfsg-1ubuntu0.1~esm1
Available with Ubuntu Pro
Ubuntu 16.04 LTS
libjs-lodash 2.4.1+dfsg-3ubuntu0.1~esm1
Available with Ubuntu Pro
node-lodash 2.4.1+dfsg-3ubuntu0.1~esm1
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-8411-1
CVE-2020-28500, CVE-2020-8203, CVE-2021-23337, CVE-2025-13465,
CVE-2026-2950, CVE-2026-4800
Package Information:
https://launchpad.net/ubuntu/+source/node-lodash/4.17.21+dfsg+~cs8.31.198.20210220-9ubuntu0.25.10.1
[USN-8156-2] GDK-PixBuf vulnerability
==========================================================================
Ubuntu Security Notice USN-8156-2
June 09, 2026
gdk-pixbuf vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS
Summary:
GDK-PixBuf could be made to crash or run programs if it opened a specially
crafted file.
Software Description:
- gdk-pixbuf: GDK Pixbuf library
Details:
USN-8156-1 fixed a vulnerability in GDK-PixBuf. This update provides the
corresponding update for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu
20.04 LTS.
Original advisory details:
It was discovered that GDK-PixBuf incorrectly handled certain JPEG files.
An attacker could use this issue to cause GDK-PixBuf to crash, resulting
in a denial of service, or possibly execute arbitrary code.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 20.04 LTS
libgdk-pixbuf2.0-0 2.40.0+dfsg-3ubuntu0.5+esm3
Available with Ubuntu Pro
Ubuntu 18.04 LTS
libgdk-pixbuf2.0-0 2.36.11-2ubuntu0.1~esm3
Available with Ubuntu Pro
Ubuntu 16.04 LTS
libgdk-pixbuf2.0-0 2.32.2-1ubuntu1.6+esm3
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-8156-2
https://ubuntu.com/security/notices/USN-8156-1
CVE-2026-5201
[USN-8412-1] QEMU vulnerabilities
==========================================================================
Ubuntu Security Notice USN-8412-1
June 09, 2026
qemu vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS
Summary:
Several security issues were fixed in QEMU.
Software Description:
- qemu: Machine emulator and virtualizer
Details:
Felipe Franciosi, Raphael Norwitz, and Peter Turschmid discovered that the
iSCSI block driver in QEMU incorrectly handled certain responses from an
iSCSI server. A remote attacker could possibly use this issue to cause QEMU
to crash, resulting in a denial of service, or possibly execute arbitrary
code. This issue only affected Ubuntu 14.04 LTS. (CVE-2020-1711)
It was discovered that the iSCSI block driver in QEMU incorrectly handled
certain memory operations, leading to a heap-based buffer over-read. An
attacker could possibly use this issue to expose sensitive information from
the host. This issue only affected Ubuntu 14.04 LTS. (CVE-2020-11947)
Ziming Zhang discovered that the SM501 display driver in QEMU contained an
integer overflow. A local attacker could possibly use this issue to cause
QEMU to crash, resulting in a denial of service. This issue only affected
Ubuntu 14.04 LTS. (CVE-2020-12829)
Gaoning Pan and Xingwei Li discovered that the USB xHCI controller
implementation in QEMU contained an infinite loop. An attacker inside the
guest could possibly use this issue to cause QEMU to hang, resulting in a
denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04
LTS, and Ubuntu 18.04 LTS. (CVE-2020-14394)
Lei Sun discovered that QEMU incorrectly handled certain MemoryRegionOps
objects, leading to a NULL pointer dereference. An attacker inside the
guest could possibly use this issue to cause QEMU to crash, resulting in a
denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu
16.04 LTS. (CVE-2020-15469)
Alexander Bulekov discovered that the e1000e network device implementation
in QEMU contained a use-after-free. An attacker inside the guest could
possibly use this issue to cause QEMU to crash, resulting in a denial of
service. This issue only affected Ubuntu 14.04 LTS. (CVE-2020-15859)
Ziming Zhang discovered that the XGMAC Ethernet controller in QEMU
contained a buffer overflow. An attacker inside the guest could possibly
use this issue to cause QEMU to crash, resulting in a denial of service, or
possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS.
(CVE-2020-15863)
Alexander Bulekov discovered that the SDHCI device emulation in QEMU
contained a heap-based buffer overflow. An attacker inside the guest could
possibly use this issue to cause QEMU to crash, resulting in a denial of
service, or possibly execute arbitrary code. This issue only affected
Ubuntu 14.04 LTS. (CVE-2020-17380)
Sergej Schumilo, Cornelius Aschermann, and Simon Wörner discovered that the
USB xHCI controller implementation in QEMU did not check a return value,
leading to a use-after-free. An attacker inside the guest could possibly
use this issue to cause QEMU to crash, resulting in a denial of service.
This issue only affected Ubuntu 14.04 LTS. (CVE-2020-25084)
Gaoning Pan, Yongkang Jia, and Yi Ren discovered that the USB OHCI
controller implementation in QEMU contained a stack-based buffer over-read.
An attacker inside the guest could possibly use this issue to cause QEMU to
crash, resulting in a denial of service. This issue only affected Ubuntu
14.04 LTS. (CVE-2020-25624)
It was discovered that the USB OHCI controller implementation in QEMU
contained an infinite loop. An attacker inside the guest could possibly use
this issue to cause QEMU to consume resources, resulting in a denial of
service. This issue only affected Ubuntu 14.04 LTS. (CVE-2020-25625)
Cheolwoo Myung discovered that the USB EHCI emulation in QEMU did not
handle DMA memory map failures, leading to a reachable assertion. An
attacker inside the guest could possibly use this issue to cause QEMU to
crash, resulting in a denial of service. This issue only affected Ubuntu
14.04 LTS. (CVE-2020-25723)
Gaoning Pan discovered that the network device emulation in QEMU could be
made to trigger an assertion failure when processing packets that lacked a
valid layer 3 protocol. An attacker inside the guest could possibly use
this issue to cause QEMU to crash, resulting in a denial of service. This
issue only affected Ubuntu 14.04 LTS. (CVE-2020-27617)
Wenxiang Qian discovered that the ATAPI emulation in QEMU did not properly
validate a buffer index, leading to an out-of-bounds read. An attacker
inside the guest could possibly use this issue to expose sensitive
information or cause QEMU to crash, resulting in a denial of service. This
issue only affected Ubuntu 14.04 LTS. (CVE-2020-29443)
Cheolwoo Myung discovered that the ESP SCSI emulation in QEMU contained a
NULL pointer dereference. An attacker inside the guest could possibly use
this issue to cause QEMU to crash, resulting in a denial of service. This
issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2020-35504)
Cheolwoo Myung discovered that the am53c974 SCSI host bus adapter emulation
in QEMU contained a NULL pointer dereference. An attacker inside the guest
could possibly use this issue to cause QEMU to crash, resulting in a denial
of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS.
(CVE-2020-35505)
It was discovered that the SDHCI controller emulation in QEMU contained
out-of-bounds read and write issues. An attacker inside the guest could
possibly use this issue to cause QEMU to crash, resulting in a denial of
service, or possibly execute arbitrary code. This issue only affected
Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2021-3409)
It was discovered that several network device emulations in QEMU contained
an infinite loop when operating in loopback mode. An attacker inside the
guest could possibly use this issue to cause QEMU to crash, resulting in a
denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu
16.04 LTS. (CVE-2021-3416)
Alexander Bulekov discovered that the floppy disk emulation in QEMU
contained a heap-based buffer overflow. An attacker inside the guest could
possibly use this issue to expose sensitive information or cause QEMU to
crash, resulting in a denial of service. This issue only affected Ubuntu
14.04 LTS and Ubuntu 16.04 LTS. (CVE-2021-3507)
Remy Noel discovered that the USB redirector device emulation in QEMU
performed an unbounded stack allocation when combining USB packets. An
attacker inside the guest could possibly use this issue to cause QEMU to
crash, resulting in a denial of service. This issue only affected Ubuntu
14.04 LTS and Ubuntu 16.04 LTS. (CVE-2021-3527)
It was discovered that the QXL display device emulation in QEMU contained
an integer overflow, leading to a heap-based buffer overflow. An attacker
inside the guest could possibly use this issue to cause QEMU to crash,
resulting in a denial of service, or possibly execute arbitrary code. This
issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2021-4206)
It was discovered that the QXL display device emulation in QEMU performed a
double fetch of guest-controlled values, leading to a heap-based buffer
overflow. An attacker inside the guest could possibly use this issue to
cause QEMU to crash, resulting in a denial of service, or possibly execute
arbitrary code. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04
LTS. (CVE-2021-4207)
It was discovered that the 9pfs server implementation in QEMU contained a
race condition, leading to a use-after-free. A malicious 9p client could
possibly use this issue to escalate privileges. This issue only affected
Ubuntu 14.04 LTS. (CVE-2021-20181)
Gaoning Pan discovered that the floppy disk emulation in QEMU contained a
NULL pointer dereference. An attacker inside the guest could possibly use
this issue to cause QEMU to crash, resulting in a denial of service. This
issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2021-20196)
Gaoning Pan discovered that the vmxnet3 network device emulation in QEMU
contained an integer overflow. An attacker inside the guest could possibly
use this issue to cause QEMU to crash, resulting in a denial of service.
This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS.
(CVE-2021-20203)
It was discovered that the ARM Generic Interrupt Controller emulation in
QEMU contained an out-of-bounds heap access. An attacker inside the guest
could possibly use this issue to cause QEMU to crash, resulting in a denial
of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS.
(CVE-2021-20221)
Alexander Bulekov, Cheolwoo Myung, Sergej Schumilo, Cornelius Aschermann,
and Simon Wörner discovered that the e1000 network device emulation in QEMU
contained an infinite loop. An attacker inside the guest could possibly use
this issue to cause QEMU to consume resources, resulting in a denial of
service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS.
(CVE-2021-20257)
It was discovered that the 9p passthrough file system implementation in
QEMU did not prevent opening special files on the host. A malicious guest
could possibly use this issue to escape the exported 9p tree. This issue
only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS.
(CVE-2023-2861)
It was discovered that the virtio crypto device emulation in QEMU did not
properly validate certain buffer lengths, leading to a heap buffer
overflow. An attacker inside the guest could possibly use this issue to
cause QEMU to crash, resulting in a denial of service, or possibly execute
arbitrary code. This issue only affected Ubuntu 18.04 LTS. (CVE-2023-3180)
It was discovered that the built-in VNC server in QEMU contained a NULL
pointer dereference when cleaning up a connection that failed during the
handshake. A remote attacker could possibly use this issue to cause QEMU to
crash, resulting in a denial of service. This issue only affected Ubuntu
18.04 LTS. (CVE-2023-3354)
It was discovered that QEMU could incorrectly direct a guest I/O operation
to disk offset 0 instead of the intended offset. An attacker inside the
guest could possibly use this issue to read or overwrite sensitive data,
potentially gaining control of the host. This issue only affected Ubuntu
14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. (CVE-2023-5088)
It was discovered that several virtio device emulations in QEMU did not
properly guard against DMA reentrancy, leading to a double free. An
attacker inside the guest could possibly use this issue to cause QEMU to
crash, resulting in a denial of service, or possibly execute arbitrary
code. (CVE-2024-3446)
It was discovered that the SDHCI device emulation in QEMU contained a heap-
based buffer overflow. An attacker inside the guest could possibly use this
issue to cause QEMU to crash, resulting in a denial of service.
(CVE-2024-3447)
It was discovered that the QEMU disk image utility (qemu-img) did not
properly handle certain crafted image files. An attacker could possibly use
this issue to cause qemu-img to consume excessive resources or access an
unintended external file, resulting in a denial of service. This issue only
affected Ubuntu 20.04 LTS. (CVE-2024-4467)
Cyrille Chatras discovered that the LSI53C895A SCSI Host Bus Adapter
emulation in QEMU contained a use-after-free. An attacker inside the guest
could possibly use this issue to cause QEMU to crash, resulting in a denial
of service, or possibly execute arbitrary code. (CVE-2024-6519)
It was discovered that the NBD server in QEMU contained an improper
synchronization issue during socket closure. A remote attacker could
possibly use this issue to cause QEMU to crash, resulting in a denial of
service. (CVE-2024-7409)
It was discovered that the USB emulation in QEMU contained a reachable
assertion. An attacker inside the guest could possibly use this issue to
cause QEMU to crash, resulting in a denial of service. (CVE-2024-8354)
It was discovered that QEMU incorrectly handled resources during the VNC
WebSocket handshake, leading to a use-after-free. A remote attacker could
possibly use this issue to cause QEMU to crash, resulting in a denial of
service. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
(CVE-2025-11234)
It was discovered that QEMU could be made to read out of bounds when
reading VMDK images. An attacker could possibly use this issue to expose
sensitive information or cause QEMU to crash, resulting in a denial of
service. (CVE-2026-2243)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 20.04 LTS
qemu 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-block-extra 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-guest-agent 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-kvm 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-system 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-system-arm 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-system-common 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-system-data 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-system-gui 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-system-mips 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-system-misc 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-system-ppc 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-system-s390x 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-system-sparc 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-system-x86 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-system-x86-microvm 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-system-x86-xen 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-user 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-user-binfmt 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-user-static 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-utils 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
Ubuntu 18.04 LTS
qemu 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-block-extra 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-guest-agent 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-kvm 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-system 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-system-arm 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-system-common 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-system-mips 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-system-misc 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-system-ppc 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-system-s390x 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-system-sparc 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-system-x86 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-user 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-user-binfmt 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-user-static 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-utils 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
Ubuntu 16.04 LTS
qemu 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-block-extra 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-guest-agent 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-kvm 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-system 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-system-aarch64 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-system-arm 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-system-common 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-system-mips 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-system-misc 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-system-ppc 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-system-s390x 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-system-sparc 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-system-x86 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-user 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-user-binfmt 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-user-static 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-utils 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
Ubuntu 14.04 LTS
qemu 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-common 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-guest-agent 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-keymaps 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-kvm 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-system 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-system-aarch64 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-system-arm 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-system-common 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-system-mips 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-system-misc 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-system-ppc 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-system-sparc 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-system-x86 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-user 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-user-static 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-utils 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
After a standard system update you need to restart all QEMU virtual
machines to make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-8412-1
CVE-2020-11947, CVE-2020-12829, CVE-2020-14394, CVE-2020-15469,
CVE-2020-15859, CVE-2020-15863, CVE-2020-1711, CVE-2020-17380,
CVE-2020-25084, CVE-2020-25624, CVE-2020-25625, CVE-2020-25723,
CVE-2020-27617, CVE-2020-29443, CVE-2020-35504, CVE-2020-35505,
CVE-2021-20181, CVE-2021-20196, CVE-2021-20203, CVE-2021-20221,
CVE-2021-20257, CVE-2021-3409, CVE-2021-3416, CVE-2021-3507,
CVE-2021-3527, CVE-2021-4206, CVE-2021-4207, CVE-2023-2861,
CVE-2023-3180, CVE-2023-3354, CVE-2023-5088, CVE-2024-3446,
CVE-2024-3447, CVE-2024-4467, CVE-2024-6519, CVE-2024-7409,
CVE-2024-8354, CVE-2025-11234, CVE-2026-2243
[USN-8413-1] Cyborg vulnerabilities
==========================================================================
Ubuntu Security Notice USN-8413-1
June 09, 2026
cyborg vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 26.04 LTS
- Ubuntu 25.10
Summary:
Several security issues were fixed in Cyborg.
Software Description:
- cyborg: OpenStack Acceleration as a Service
Details:
It was discovered that Cyborg did not properly enforce project ownership in
the Accelerator Request (ARQ) API. An authenticated user could possibly use
this issue to delete ARQs bound to other projects' instances, resulting in
a cross-tenant denial of service. (CVE-2026-40214)
It was discovered that Cyborg used a permissive default policy that
authorized any request carrying a valid authentication token, regardless of
roles or scope, for multiple API endpoints. An authenticated user could
possibly use this issue to perform unauthorized actions, such as
reprogramming FPGA bitstreams on arbitrary compute nodes. (CVE-2026-40213)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 26.04 LTS
cyborg-agent 16.0.0-2ubuntu0.1
cyborg-api 16.0.0-2ubuntu0.1
cyborg-common 16.0.0-2ubuntu0.1
cyborg-conductor 16.0.0-2ubuntu0.1
python3-cyborg 16.0.0-2ubuntu0.1
Ubuntu 25.10
cyborg-agent 14.0.0-3+deb13u1build0.25.10.1
cyborg-api 14.0.0-3+deb13u1build0.25.10.1
cyborg-common 14.0.0-3+deb13u1build0.25.10.1
cyborg-conductor 14.0.0-3+deb13u1build0.25.10.1
python3-cyborg 14.0.0-3+deb13u1build0.25.10.1
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-8413-1
CVE-2026-40213, CVE-2026-40214
Package Information:
https://launchpad.net/ubuntu/+source/cyborg/16.0.0-2ubuntu0.1
https://launchpad.net/ubuntu/+source/cyborg/14.0.0-3+deb13u1build0.25.10.1
