Views
6

Your rating
Rate update installation process

Log in to rate this update.
Login

Risk factor
No ratings yet. Be the first to rate this update.

Smooth installs 0%
Minor issues 0%
Major issues 0%

AI enhanced content

Update Summary

USN-8776-1 addresses multiple python-cryptography security issues on Ubuntu 26.04 LTS, including timing differences in PKCS#7 decryption and certificate validation flaws. Update to python3-cryptography 46.0.5-1ubuntu2.2. Reference IDs: CVE-2026-69247, CVE-2026-69248, CVE-2026-69249.

Update Details

Security

  • CVE-2026-69247: Distinguishable PKCS#7 decryption outcomes and timing differences could let a remote attacker recover the message encryption key and sensitive information.
  • CVE-2026-69248: Wildcard DNS names were incorrectly handled when enforcing certificate authority name constraints, which could allow an invalid certificate chain to be accepted.
  • CVE-2026-69249: Duplicate certificates in a chain were handled inefficiently, potentially causing excessive resource use and a denial of service.

Hints

  • A standard system update will install the necessary fixes.
  • For Ubuntu 26.04 LTS resolute, update python3-cryptography and python-cryptography-doc to 46.0.5-1ubuntu2.2.

Product Information

Vendor: Canonical

Product: Ubuntu Server

Product type: Software

Application category: Utilities

Platform: Linux

Variant: 26.04 LTS (Resolute Raccoon)

Version: 46.0.5-1ubuntu2.2

Vendor release date: Sep 16, 2026

Original release notes: View on vendor site

Published on updatealert.io: Sep 17, 2026

Description: Server operating system for Linux infrastructure and workloads.