Multiple OpenSSL Vulnerabilities Disclosed Affecting Ubuntu Systems

On June 9, 2026, multiple vulnerabilities in OpenSSL were disclosed, affecting various Ubuntu LTS versions including 14.04, 16.04, 18.04, 20.04, 25.10, and 26.04. Key vulnerabilities include a heap buffer over-read (CVE-2026-34180) that could lead to denial of service or information disclosure, and a flaw allowing forged CMS AuthEnvelopedData messages (CVE-2026-34182). Other issues include potential NULL pointer dereferences and memory growth problems. The vulnerabilities could be exploited by attackers to crash OpenSSL or bypass integrity checks. Affected systems are urged to apply the latest updates to mitigate these risks. The vulnerabilities were confirmed by multiple researchers and are now patched in the latest security updates.

Key Points: • OpenSSL vulnerabilities disclosed on June 9, 2026, affecting multiple Ubuntu LTS versions. • Critical issues include CVE-2026-34180 and CVE-2026-34182, leading to potential denial of service. • Affected systems must update to the latest patches to mitigate risks from these vulnerabilities.