Canonical Ubuntu Server 26.04 LTS (Resolute Raccoon) Update Version 46.0.5-1ubuntu2.2
Your rating
Rate update installation process
Risk factor
No ratings yet. Be the first to rate this update.
AI enhanced content
Update Summary
USN-8776-1 addresses multiple python-cryptography security issues on Ubuntu 26.04 LTS, including timing differences in PKCS#7 decryption and certificate validation flaws. Update to python3-cryptography 46.0.5-1ubuntu2.2. Reference IDs: CVE-2026-69247, CVE-2026-69248, CVE-2026-69249.
Update Details
Security
- CVE-2026-69247: Distinguishable PKCS#7 decryption outcomes and timing differences could let a remote attacker recover the message encryption key and sensitive information.
- CVE-2026-69248: Wildcard DNS names were incorrectly handled when enforcing certificate authority name constraints, which could allow an invalid certificate chain to be accepted.
- CVE-2026-69249: Duplicate certificates in a chain were handled inefficiently, potentially causing excessive resource use and a denial of service.
Hints
- A standard system update will install the necessary fixes.
- For Ubuntu 26.04 LTS resolute, update
python3-cryptographyandpython-cryptography-docto 46.0.5-1ubuntu2.2.
Product Information
Vendor: Canonical
Product: Ubuntu Server
Product type: Software
Application category: Utilities
Platform: Linux
Variant: 26.04 LTS (Resolute Raccoon)
Version: 46.0.5-1ubuntu2.2
Vendor release date: Sep 16, 2026
Original release notes: View on vendor site
Published on updatealert.io: Sep 17, 2026
Description: Server operating system for Linux infrastructure and workloads.