Ubuntu alert USN-8377-1 (libtemplate-perl)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8377-1] Template-Toolkit vulnerability
Date:
             
 
Wed, 03 Jun 2026 17:19:07 +0000
Message-ID:
             
 
<E1wUpFD-0005lz-Rm@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8377-1
June 03, 2026

libtemplate-perl vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 25.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

Template-Toolkit could allow arbitrary HTML and JavaScript to be injected
into generated output.

Software Description:
- libtemplate-perl: template processing system in Perl

Details:

It was discovered that Template-Toolkit did not properly escape single
quotes in the html_filter function of Template::Plugin::HTML. An attacker
could possibly use this issue to inject arbitrary HTML and JavaScript into
generated output.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  libtemplate-perl                3.102-1ubuntu0.1

Ubuntu 25.10
  libtemplate-perl                2.27-1ubuntu0.25.10.1

Ubuntu 24.04 LTS
  libtemplate-perl                2.27-1ubuntu0.24.04.1

Ubuntu 22.04 LTS
  libtemplate-perl                2.27-1ubuntu0.22.04.1

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8377-1
  CVE-2026-5090

Package Information:
  https://launchpad.net/ubuntu/+source/libtemplate-perl/3.1...
  https://launchpad.net/ubuntu/+source/libtemplate-perl/2.2...
  https://launchpad.net/ubuntu/+source/libtemplate-perl/2.2...
  https://launchpad.net/ubuntu/+source/libtemplate-perl/2.2...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=Kiro
-----END PGP SIGNATURE-----