Skip to content
Serious PHP Flaws in Ubuntu's Relax-and-Recover Expose Sensitive Data

Serious PHP Flaws in Ubuntu's Relax-and-Recover Expose Sensitive Data

First seen 3 Nov 2026, 22:45 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 3, 2026 at 22:46 UTC
  • •Two serious PHP vulnerabilities in Relax-and-Recover could allow local code execution.
  • •The issue is due to a world-readable initrd created when GRUB_RESCUE is enabled.
  • •Users should update to the latest versions of the rear package to mitigate risks.

Two serious vulnerabilities in the Relax-and-Recover tool for Ubuntu could allow local attackers to execute code without authentication. The issue arises from the creation of a world-readable initrd when GRUB_RESCUE is enabled, potentially exposing sensitive information. Affected versions include rear 2.6+dfsg-1+deb11u1build0.22.04.1 for Ubuntu 22.04 LTS, rear 2.5+dfsg-1ubuntu0.1~esm1 for Ubuntu 20.04 LTS, and rear 2.3+dfsg-1ubuntu0.1~esm1 for Ubuntu 18.04 LTS. Users are advised to perform a standard system update to mitigate the risks. The vulnerabilities have been disclosed today, November 3, 2026, and are included in Ubuntu Security Notice USN-8988-1.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 6h ago How this analysis works

Timeline

2026-11-03
Vulnerabilities disclosed in Relax-and-Recover
Two serious PHP flaws were discovered that could allow local attackers to execute code without logging in.
Linuxsecurity
2026-11-03
Ubuntu Security Notice USN-8988-1 issued
The vulnerabilities were formally announced, advising users to update their systems to mitigate the risks.
Ubuntu

More articles in this cluster (4)

Extracted Entities (6)

1 / 3

Common questions

Which versions of Ubuntu are affected?
Ubuntu 22.04 LTS, 20.04 LTS, and 18.04 LTS are affected based on the rear package versions.
What should I do to protect my systems?
Perform a standard system update to the latest versions of the rear package to mitigate the vulnerabilities.
Is there any active exploitation reported?
No active exploitation has been reported; the vulnerabilities are disclosed and patched.