Ubuntu 26.04 LTS sslh Vulnerability Allows File Overwrites

A security vulnerability has been identified in sslh affecting multiple Ubuntu releases, including 26.04 LTS. The flaw allows local attackers to overwrite arbitrary files due to improper handling of symbolic links when writing the PID file. This issue impacts Ubuntu versions 26.04 LTS, 25.10, 24.04 LTS, 22.04 LTS, 20.04 LTS, 18.04 LTS, and 16.04 LTS. Users are advised to update their systems to the patched versions of sslh to mitigate this risk. The vulnerability does not appear to have been actively exploited at this time. Affected users must restart sslh after applying the updates to ensure the changes take effect. The advisory emphasizes the importance of maintaining up-to-date systems to prevent potential exploitation.

Key Points: • A vulnerability in sslh allows local file overwrites in multiple Ubuntu versions. • The flaw affects Ubuntu 26.04 LTS and several earlier versions, from 16.04 to 25.10. • Users must update sslh and restart the service to apply the necessary security fixes.