Back Linuxsecurity Ubuntu 24.04 LTS Security Advisory USN-8128-1 libcryptx
A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: Several security issues were fixed in CryptX. Software Description: - libcryptx-perl: Perl modules providing cryptography based on LibTomCrypt library Details: It was discovered that CryptX did not verify authentication tags while performing GCM and ChaCha20-Poly1305 decryption. An attacker could possibly use this issue to cause CryptX to accept modified ciphertext, leading to data integrity violations or authentication bypass. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-25099) It was discovered that CryptX included a version of the tomcrypt library that was susceptible to malformed unicode handling. An attacker could possibly use this issue to cause unexpected behavior or incorrect processing of crafted input. This issue only affected Ubuntu 18.04 LTS. (CVE-2025-40912)
A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: Several security issues were fixed in CryptX. Software Description: - libcryptx-perl: Perl modules providing cryptography based on LibTomCrypt library Details: It was discovered that CryptX did not verify authentication tags while performing GCM and ChaCha20-Poly1305 decryption. An attacker could possibly use this issue to cause CryptX to accept modified ciphertext, leading to data integrity violations or authentication bypass. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-25099) It was discovered that CryptX included a version of the tomcrypt library that was susceptible to malformed unicode handling. An attacker could possibly use this issue to cause unexpected behavior or incorrect processing of crafted input. This issue only affected Ubuntu 18.04 LTS. (CVE-2025-40912)
The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS libcryptx-perl 0.080-2ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 22.04 LTS libcryptx-perl 0.076-1ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 20.04 LTS libcryptx-perl 0.067-1ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS libcryptx-perl 0.056-1ubuntu0.1~esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.
The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS libcryptx-perl 0.080-2ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 22.04 LTS libcryptx-perl 0.076-1ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 20.04 LTS libcryptx-perl 0.067-1ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS libcryptx-perl 0.056-1ubuntu0.1~esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
