Alerts This Week
Warning Icon 1 1,295
Alerts This Week
Warning Icon 1 1,295

Ubuntu 20.04 LTS: USN-7316-1 critical: Raptor denial of service

ubuntu
Calendar Grey March 3, 2025
Dist Ubuntu Esm H88
Multiple vulnerabilities fixed in Raptor for Ubuntu 20.04 and beyond. Update released for urgent security problems.
Several security issues were fixed in Raptor.

Summary

Several security issues were fixed in Raptor.

Software Description:

- raptor2: RDF syntax library

Details:

It was discovered that Raptor incorrectly handled memory operations when

processing certain input files. A remote attacker could possibly use this

issue to cause Raptor to crash, resulting in a denial of service. This

issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2020-25713)

It was discovered that Raptor incorrectly handled parsing certain tuples. A

remote attacker could possibly use this issue to cause Raptor to crash,

resulting in a denial of service. (CVE-2024-57822)

It was discovered that Raptor incorrectly handled parsing certain turtles.

A remote attacker could use this issue to cause Raptor to crash, resulting

in a denial of service, or possibly execute arbitrary code.

(CVE-2024-57823)

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.10
   libraptor2-0                    2.0.16-4ubuntu0.1
   raptor2-utils                   2.0.16-4ubuntu0.1

Ubuntu 24.04 LTS
   libraptor2-0                    2.0.16-3ubuntu0.1
   raptor2-utils                   2.0.16-3ubuntu0.1

Ubuntu 22.04 LTS
   libraptor2-0                    2.0.15-0ubuntu4.1
   raptor2-utils                   2.0.15-0ubuntu4.1

Ubuntu 20.04 LTS
   libraptor2-0                    2.0.15-0ubuntu1.20.04.2
   raptor2-utils                   2.0.15-0ubuntu1.20.04.2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-7316-1

CVE-2020-25713, CVE-2024-57822, CVE-2024-57823

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7316-1

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here