USN-8751-1

Details

Katriel Moses discovered that Urwid used a weak PRNG. A local attacker could possibly use this issue to cause a denial of service or execute arbitrary code.

Affected Packages

urwid

Ubuntu 22.04 LTS

Fixed in:

2.1.2-2ubuntu0.1

urwid

Ubuntu Pro 18.04 LTS

Fixed in:

2.0.1-2ubuntu0.1~esm1

urwid

Ubuntu Pro 20.04 LTS

Fixed in:

2.0.1-3ubuntu0.1~esm1

urwid

Ubuntu Pro 26.04 LTS

Fixed in:

3.0.4-1ubuntu0.1~esm1

References

REPORT

https://ubuntu.com/security/CVE-2026-9323

ADVISORY

https://ubuntu.com/security/notices/USN-8751-1