Ubuntu alert USN-8453-1 (libnet-cidr-lite-perl)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8453-1] Net::CIDR::Lite vulnerabilities
Date:
             
 
Thu, 18 Jun 2026 18:33:37 +0000
Message-ID:
             
 
<E1waHYX-0004aF-1n@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8453-1
June 18, 2026

libnet-cidr-lite-perl vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 25.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS

Summary:

Several security issues were fixed in Net::CIDR::Lite.

Software Description:
- libnet-cidr-lite-perl: module for merging IPv4 or IPv6 CIDR address ranges

Details:

It was discovered that Net::CIDR::Lite incorrectly validated IP address and
CIDR mask inputs. An attacker could possibly use this issue to bypass IP
access control lists. (CVE-2026-45190)

It was discovered that Net::CIDR::Lite incorrectly handled extraneous zero
characters in CIDR mask values. An attacker could possibly use this issue
to bypass IP access control lists. (CVE-2026-45191)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  libnet-cidr-lite-perl           0.22-2ubuntu0.26.04.2

Ubuntu 25.10
  libnet-cidr-lite-perl           0.22-2ubuntu0.25.10.2

Ubuntu 24.04 LTS
  libnet-cidr-lite-perl           0.22-2ubuntu0.24.04.2

Ubuntu 22.04 LTS
  libnet-cidr-lite-perl           0.22-1ubuntu0.2

Ubuntu 20.04 LTS
  libnet-cidr-lite-perl           0.21-2ubuntu0.1+esm2
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  libnet-cidr-lite-perl           0.21-1ubuntu0.18.04.1~esm2
                                  Available with Ubuntu Pro

Ubuntu 16.04 LTS
  libnet-cidr-lite-perl           0.21-1ubuntu0.16.04.1~esm2
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8453-1
  CVE-2026-45190, CVE-2026-45191

Package Information:
  https://launchpad.net/ubuntu/+source/libnet-cidr-lite-per...
  https://launchpad.net/ubuntu/+source/libnet-cidr-lite-per...
  https://launchpad.net/ubuntu/+source/libnet-cidr-lite-per...
  https://launchpad.net/ubuntu/+source/libnet-cidr-lite-per...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=UQMw
-----END PGP SIGNATURE-----