Ubuntu alert USN-8428-1 (tmux)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8428-1] tmux vulnerability
Date:
             
 
Mon, 15 Jun 2026 14:05:33 +0000
Message-ID:
             
 
<E1wZ7wT-0002Ku-6z@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8428-1
June 15, 2026

tmux vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS

Summary:

tmux could be made to crash if it received specially crafted
input.

Software Description:
- tmux: terminal multiplexer

Details:

It was discovered that tmux incorrectly handled image cleanup, leading to
a use-after-free vulnerability. A local attacker could possibly use this
issue to cause tmux to crash, resulting in a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  tmux                            3.6a-2ubuntu0.1

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8428-1
  CVE-2026-11623

Package Information:
  https://launchpad.net/ubuntu/+source/tmux/3.6a-2ubuntu0.1


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=A/lo
-----END PGP SIGNATURE-----