Ubuntu alert USN-8387-1 (inetutils)
| From: | noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com> | |
| To: | ubuntu-security-announce@lists.ubuntu.com | |
| Subject: | [USN-8387-1] Inetutils vulnerabilities | |
| Date: | Mon, 08 Jun 2026 16:24:49 +0000 | |
| Message-ID: | <E1wWcmP-0004wD-7z@lists.ubuntu.com> | |
| Cc: | noreply+usn-bot@canonical.com |
========================================================================== Ubuntu Security Notice USN-8387-1 June 04, 2026 inetutils vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: Several security issues were fixed in Inetutils. Software Description: - inetutils: Collection of common network programs Details: It was discovered that the Inetutils telnet daemon incorrectly handled the CREDENTIALS_DIRECTORY environment variable. An attacker could possibly use this issue to escalate privileges. (CVE-2026-28372) It was discovered that the Inetutils telnet daemon did not properly validate buffer bounds when processing LINEMODE SLC suboptions. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-32746) It was discovered that the Inetutils telnet client incorrectly handled the NEW_ENVIRON SEND USERVAR option. An attacker could possibly use this issue to read arbitrary environment variables. (CVE-2026-32772) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS inetutils-ftp 2:2.7-2ubuntu1.1 inetutils-ftpd 2:2.7-2ubuntu1.1 inetutils-inetd 2:2.7-2ubuntu1.1 inetutils-ping 2:2.7-2ubuntu1.1 inetutils-syslogd 2:2.7-2ubuntu1.1 inetutils-talk 2:2.7-2ubuntu1.1 inetutils-talkd 2:2.7-2ubuntu1.1 inetutils-telnet 2:2.7-2ubuntu1.1 inetutils-telnetd 2:2.7-2ubuntu1.1 inetutils-tools 2:2.7-2ubuntu1.1 inetutils-traceroute 2:2.7-2ubuntu1.1 telnet 0.17+2.7-2ubuntu1.1 telnetd 0.17+2.7-2ubuntu1.1 Ubuntu 25.10 inetutils-ftp 2:2.6-1ubuntu3.2 inetutils-ftpd 2:2.6-1ubuntu3.2 inetutils-inetd 2:2.6-1ubuntu3.2 inetutils-ping 2:2.6-1ubuntu3.2 inetutils-syslogd 2:2.6-1ubuntu3.2 inetutils-talk 2:2.6-1ubuntu3.2 inetutils-talkd 2:2.6-1ubuntu3.2 inetutils-telnet 2:2.6-1ubuntu3.2 inetutils-telnetd 2:2.6-1ubuntu3.2 inetutils-tools 2:2.6-1ubuntu3.2 inetutils-traceroute 2:2.6-1ubuntu3.2 telnet 0.17+2.6-1ubuntu3.2 telnetd 0.17+2.6-1ubuntu3.2 Ubuntu 24.04 LTS inetutils-ftp 2:2.5-3ubuntu4.2 inetutils-ftpd 2:2.5-3ubuntu4.2 inetutils-inetd 2:2.5-3ubuntu4.2 inetutils-ping 2:2.5-3ubuntu4.2 inetutils-syslogd 2:2.5-3ubuntu4.2 inetutils-talk 2:2.5-3ubuntu4.2 inetutils-talkd 2:2.5-3ubuntu4.2 inetutils-telnet 2:2.5-3ubuntu4.2 inetutils-telnetd 2:2.5-3ubuntu4.2 inetutils-tools 2:2.5-3ubuntu4.2 inetutils-traceroute 2:2.5-3ubuntu4.2 telnet 0.17+2.5-3ubuntu4.2 telnetd 0.17+2.5-3ubuntu4.2 Ubuntu 22.04 LTS inetutils-ftp 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro inetutils-ftpd 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro inetutils-inetd 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro inetutils-ping 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro inetutils-syslogd 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro inetutils-talk 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro inetutils-talkd 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro inetutils-telnet 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro inetutils-telnetd 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro inetutils-tools 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro inetutils-traceroute 2:2.2-2ubuntu0.2+esm1 Available with Ubuntu Pro Ubuntu 20.04 LTS inetutils-ftp 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro inetutils-ftpd 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro inetutils-inetd 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro inetutils-ping 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro inetutils-syslogd 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro inetutils-talk 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro inetutils-talkd 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro inetutils-telnet 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro inetutils-telnetd 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro inetutils-tools 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro inetutils-traceroute 2:1.9.4-11ubuntu0.2+esm4 Available with Ubuntu Pro Ubuntu 18.04 LTS inetutils-ftp 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro inetutils-ftpd 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro inetutils-inetd 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro inetutils-ping 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro inetutils-syslogd 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro inetutils-talk 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro inetutils-talkd 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro inetutils-telnet 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro inetutils-telnetd 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro inetutils-tools 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro inetutils-traceroute 2:1.9.4-3ubuntu0.1+esm5 Available with Ubuntu Pro Ubuntu 16.04 LTS inetutils-ftp 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro inetutils-ftpd 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro inetutils-inetd 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro inetutils-ping 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro inetutils-syslogd 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro inetutils-talk 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro inetutils-talkd 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro inetutils-telnet 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro inetutils-telnetd 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro inetutils-tools 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro inetutils-traceroute 2:1.9.4-1ubuntu0.1~esm6 Available with Ubuntu Pro Ubuntu 14.04 LTS inetutils-ftp 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro inetutils-ftpd 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro inetutils-inetd 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro inetutils-ping 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro inetutils-syslogd 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro inetutils-talk 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro inetutils-talkd 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro inetutils-telnet 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro inetutils-telnetd 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro inetutils-tools 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro inetutils-traceroute 2:1.9.2-1ubuntu0.1~esm4 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8387-1 CVE-2026-28372, CVE-2026-32746, CVE-2026-32772 Package Information: https://launchpad.net/ubuntu/+source/inetutils/2:2.7-2ubu... https://launchpad.net/ubuntu/+source/inetutils/2:2.6-1ubu... https://launchpad.net/ubuntu/+source/inetutils/2:2.5-3ubu...
Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEE+8neBLO2Hp/ppPlOcpJm3tlzhgEFAmom6/wACgkQcpJm3tlz hgH9jA//QFCj7ByAMEpEA3SNEquwYj1lhO4cFalu9qshHAxZAcB/7i0R5WIN57Lf iGzEkY7ceIPx7iu6NpMgQapWSCToaqqO2awVp1LDm7c1k1iaBiJxiLx2IDwvVPV1 la7bL9yAbIeOiy9dKnhN8wQzlPtC1mWHOBvxaIBW8O1rJ5mOratEksf50dAp8cjn umlkNiJ9QwkF0vFpcb4+Pe0UAMN7FcVfsjZ6YhGcxhUFhEwyPyoNesuqs+PEFpFb icwbjFGW1hzTxgLlljkhw8n7DotuWd3m/ch3drjAcoeEN3Fgx1XNaqq4BbvpTwOc eiwWqELwVsf0NdAgYvBLACSEOW2IFPxS2+t3hgp39SSDDTkoljL5kzoBqbrldjtp zscQ0IZoa3Aovr+nJt90mkVLBTt1GkEGvnjy+5or1F9PHgI6aNAmSCCP/C96zLWI PPnV16plSTSVpR6nt6xoIHgEeyuZ2wPL/v8n4nUIJQUdP8xlXZzx8ZAgQmtsMLEI o8bHFIjTkOtjFDUfHh4x/BEia6ymNXf20NpSXwunrSBRNOs/HzL1Jbwtb1O3w5zJ 4Yu02zxgRe01cfL5JPHHzFriWMkE8H7zS8qTKJiEsyfQeLrkT4YEyrnZJjMdjexQ G35H2WzdKCJnzQUEfmEf3pd5+jODAfYoq2FYdhOc3B8t40ayzxE= =N8Pm -----END PGP SIGNATURE-----