USN-9072-1: IMAPFilter vulnerability
Published Nov 12, 2026
·Updated
It was discovered that IMAPFilter did not validate the hostname in SSL/TLS server certificates. A remote attacker could possibly use this issue to intercept secure communications.
Affected Software
4 affected componentsFixes available
All of the following
ubuntu/imapfilter<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=18.04
All of the following
ubuntu/imapfilter<1:2.6.4-1ubuntu0.1~esm1
1:2.6.4-1ubuntu0.1~esm1
Ubuntu Ubuntu=16.04
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/imapfilterto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/imapfilterto a version that resolves this vulnerability.Fixed in 1:2.6.4-1ubuntu0.1~esm1
Event History
Nov 12, 2026
Advisory Published
via Ubuntu·12:00 AM
Data Sourced
via Ubuntu·12:00 AM
DescriptionAffected Software
Frequently Asked Questions
1
Is local access required to exploit this issue?
No. The issue could be exploited by a remote attacker.
2
What could an attacker achieve by exploiting the flaw?
An attacker could possibly intercept communications that are intended to be secured with SSL/TLS.