Ubuntu 26.04 LTS libnet-cidr-lite-perl Important Bypass Issues USN-8453-1

ubuntu

June 18, 2026

Several security issues were fixed in Net::CIDR::Lite.

Summary

Several security issues were fixed in Net::CIDR::Lite.

Software Description:

- libnet-cidr-lite-perl: module for merging IPv4 or IPv6 CIDR address ranges

Details:

It was discovered that Net::CIDR::Lite incorrectly validated IP address and

CIDR mask inputs. An attacker could possibly use this issue to bypass IP

access control lists. (CVE-2026-45190)

It was discovered that Net::CIDR::Lite incorrectly handled extraneous zero

characters in CIDR mask values. An attacker could possibly use this issue

to bypass IP access control lists. (CVE-2026-45191)

Topics Covered

security advisory Ubuntu important IP-access control injecting cidr masking

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  libnet-cidr-lite-perl           0.22-2ubuntu0.26.04.2

Ubuntu 25.10
  libnet-cidr-lite-perl           0.22-2ubuntu0.25.10.2

Ubuntu 24.04 LTS
  libnet-cidr-lite-perl           0.22-2ubuntu0.24.04.2

Ubuntu 22.04 LTS
  libnet-cidr-lite-perl           0.22-1ubuntu0.2

Ubuntu 20.04 LTS
  libnet-cidr-lite-perl           0.21-2ubuntu0.1+esm2
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  libnet-cidr-lite-perl           0.21-1ubuntu0.18.04.1~esm2
                                  Available with Ubuntu Pro

Ubuntu 16.04 LTS
  libnet-cidr-lite-perl           0.21-1ubuntu0.16.04.1~esm2
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.