Ubuntu 25.04 - 22.04: 7556-1 Critical Bootstrap XSS Threat

ubuntu

June 5, 2025

Several security issues were fixed in Bootstrap.

Summary

Several security issues were fixed in Bootstrap.

Software Description:

- twitter-bootstrap3: Powerful, extensible, and feature-packed frontend toolkit

- twitter-bootstrap4: Powerful, extensible, and feature-packed frontend toolkit

Details:

It was discovered that Bootstrap did not correctly sanitize certain input in

the carousel component. An attacker could possibly use this issue to execute a

cross-site scripting (XSS) attack. (CVE-2024-6484, CVE-2024-6531)

It was discovered that Bootstrap did not correctly sanitize certain input in

the button plugin. An attacker could possibly use this issue to execute a

cross-site scripting (XSS) attack. (CVE-2024-6485)

Topics Covered

security advisory security issue software update cross-site scripting ubuntu bootstrap

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.04
  libjs-bootstrap                 3.4.1+dfsg-3+deb12u1build0.25.04.1

Ubuntu 24.10
  libjs-bootstrap                 3.4.1+dfsg-3+deb12u1build0.24.10.1
  libjs-bootstrap4                4.6.1+dfsg1-4+deb12u1build0.24.10.1

Ubuntu 24.04 LTS
  libjs-bootstrap                 3.4.1+dfsg-3+deb12u1build0.24.04.1
  libjs-bootstrap4                4.6.1+dfsg1-4+deb12u1build0.24.04.1

Ubuntu 22.04 LTS
  libjs-bootstrap                 3.4.1+dfsg-2+deb11u2build0.22.04.1
  libjs-bootstrap4                4.6.0+dfsg1-4ubuntu0.1~esm1
                                  Available with Ubuntu Pro

Ubuntu 20.04 LTS
  libjs-bootstrap                 3.4.1+dfsg-1ubuntu0.1~esm1
                                  Available with Ubuntu Pro
  libjs-bootstrap4                4.4.1+dfsg1-2ubuntu0.1~esm1
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  libjs-bootstrap                 3.3.7+dfsg-2ubuntu0.1~esm1
                                  Available with Ubuntu Pro

Ubuntu 16.04 LTS
  libjs-bootstrap                 3.3.6+dfsg-1ubuntu0.1~esm1
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.