Ubuntu alert USN-8538-1 (alsa-lib)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8538-1] alsa-lib vulnerability
Date:
             
 
Tue, 14 Jul 2026 13:08:19 +0000
Message-ID:
             
 
<E1wjcrz-0001SG-Bf@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8538-1
July 14, 2026

alsa-lib vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

alsa-lib could be made to crash or run programs as your login if it opened
a specially crafted file.

Software Description:
- alsa-lib: shared library for ALSA applications

Details:

It was discovered that alsa-lib incorrectly handled certain ALSA
configuration text. An attacker could use this issue to cause alsa-lib to
crash, resulting in a denial of service, or possibly execute arbitrary
code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  libasound2t64                   1.2.15.3-1ubuntu1.1

Ubuntu 24.04 LTS
  libasound2t64                   1.2.11-1ubuntu0.3

Ubuntu 22.04 LTS
  libasound2                      1.2.6.1-1ubuntu1.2

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8538-1
  CVE-2026-56109

Package Information:
  https://launchpad.net/ubuntu/+source/alsa-lib/1.2.15.3-1u...
  https://launchpad.net/ubuntu/+source/alsa-lib/1.2.11-1ubu...
  https://launchpad.net/ubuntu/+source/alsa-lib/1.2.6.1-1ub...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEE+8neBLO2Hp/ppPlOcpJm3tlzhgEFAmpWM5sACgkQcpJm3tlz
hgGa1g//Yiw2tfMd7po4bwzOZj8emh5H8ywK5HdoLjqWp+cxRh9hIm3wo86XNinu
Yo9DPQTLr2RJa2PS2tVwZFhi/tPISiSGyZlg8q4PrX2cY8aP3bmRy/v7AW5yJVt7
uTd8IQfzrtegq7oFqR3sYdF5V6EuOk9NcIs41m84W3hBTCqBD0jNWkvS9/OyZM5t
KQsfpY99dqvfoOGxOnVvLsXR1bvdBY01tu1zCeZ61XMqb6eJF/yDuVWiTVYhz+Dq
0cVWZS5LWpLQNe8bpRqZK+8MAYkAnnFddd4FHNpNba1Zq/TFcey7s7cQgPoiWGft
JDtI4jhlUS0JRZ+k4VrUpnolWPj8ua3K75LtwNVyghlGnY5T3JvccriQS7tX1ibh
Fbkn8bsHEnszM83magG7nx51cDG89/Tq2i5RVX8QrG2U+Go2tvIJmX7deNxV5zWG
5qh3EkOrT9s07svwNewycffCS4kSdqDXPIN2c4UvidWZzP+vTYtLNLXG8Gzuqhqe
LSQ63zDGcCYjAnNHn5whWk9WYgScOhxXv/I7sHmYqwWQbEqpk7hSq7JfTMVxD3rz
kZGfzYg3bqKe/OxhdCKZNrqNuO1WeewQWyP/Ra4eDJq+8lLabWTPgSAout5kP/mi
8bEI8uOmxMC9jdiFt3k5qbpNHxBKRYM8pXvuyg6oQp4HrmxP1/I=
=snQt
-----END PGP SIGNATURE-----