USN-5234-1: Byobu vulnerability
18 January 2022
Byobu could be made to expose sensitive information.
Releases
Packages
- byobu - text window manager, shell multiplexer, integrated DevOps environ
Details
Sander Bos discovered that Byobu incorrectly handled certain Apport data.
An attacker could possibly use this issue to expose sensitive information.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 16.04
-
byobu
-
5.106-0ubuntu1+esm1
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.