Ubuntu alert USN-8518-1 (mailcap)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8518-1] mailcap vulnerability
Date:
             
 
Wed, 08 Jul 2026 21:27:04 +0000
Message-ID:
             
 
<E1whZnM-0002OQ-Ho@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8518-1
July 08, 2026

mailcap vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 25.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

mailcap could allow applications to escape sandbox restrictions

Software Description:
- mailcap: Debian's mailcap system, and support programs

Details:

Aaron Rainbolt discovered that the cautious-launcher utility in the
mailcap package did not properly restrict the execution of certain
file types. An attacker could use this issue to escape a sandboxed
application and execute arbitrary code on the host operating system.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  mailcap                         3.75ubuntu1.1

Ubuntu 25.10
  mailcap                         3.74ubuntu1.1

Ubuntu 24.04 LTS
  mailcap                         3.70+nmu1ubuntu1.24.04.1

Ubuntu 22.04 LTS
  mailcap                         3.70+nmu1ubuntu1.22.04.1

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8518-1
  CVE-2026-10037

Package Information:
  https://launchpad.net/ubuntu/+source/mailcap/3.75ubuntu1.1
  https://launchpad.net/ubuntu/+source/mailcap/3.74ubuntu1.1
  https://launchpad.net/ubuntu/+source/mailcap/3.70+nmu1ubu...
  https://launchpad.net/ubuntu/+source/mailcap/3.70+nmu1ubu...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=WsBP
-----END PGP SIGNATURE-----