Stay Secure with the Latest Linux Advisories

security advisorydenial of serviceubuntu

Ubuntu 24.04 LTS, USN-6879-1 Moderate: Virtuoso Denial of Service Risk

Virtuoso Open-Source Edition could be made to crash if it received specially crafted input.. ========================================================================== Ubuntu Security Notice USN-6879-1 July 04, 2024 virtuoso-opensource vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Virtuoso Open-Source Edition could be made to crash if it received specially crafted input. Software Description: - virtuoso-opensource: high-performance database Details: Jingzhou Fu discovered that Virtuoso Open-Source Edition incorrectly handled certain crafted SQL statements. An attacker could possibly use this issue to crash the program, resulting in a denial of service. (CVE-2023-31620, CVE-2023-31622, CVE-2023-31624, CVE-2023-31626, CVE-2023-31627, CVE-2023-31629, CVE-2023-31630, CVE-2023-31631, CVE-2023-48951) Jingzhou Fu discovered that Virtuoso Open-Source Edition incorrectly handled certain crafted SQL statements. An attacker could possibly use this issue to crash the program, resulting in a denial of service. This issue only affects Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2023-48945, CVE-2023-48946, CVE-2023-48947, CVE-2023-48950) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS virtuoso-opensource 7.2.5.1+dfsg1-0.8ubuntu0.1~esm2 Available with Ubuntu Pro virtuoso-opensource-7 7.2.5.1+dfsg1-0.8ubuntu0.1~esm2 Available with Ubuntu Pro virtuoso-opensource-7-bin 7.2.5.1+dfsg1-0.8ubuntu0.1~esm2 Available with Ubuntu Pro Ubuntu 22.04 LTS virtuoso-opensource 7.2.5.1+dfsg1-0.2ubuntu0.1~esm2 Available with Ubuntu Pro virtuoso-opensource-7 7.2.5.1+dfsg1-0.2ubuntu0.1~esm2 Available with Ubuntu Pro virtuoso-opensource-7-bin 7.2.5.1+dfsg1-0.2ubuntu0.1~esm2 Available with Ubuntu Pro Ubuntu 20.04 LTS virtuoso-opensource 6.1.6+repack-0ubuntu10+esm2 Available with Ubuntu Pro virtuoso-opensource-6.1 6.1.6+repack-0ubuntu10+esm2 Available with Ubuntu Pro virtuoso-opensource-6.1-bin 6.1.6+repack-0ubuntu10+esm2 Available with Ubuntu Pro Ubuntu 18.04 LTS virtuoso-opensource 6.1.6+repack-0ubuntu9+esm2 Available with Ubuntu Pro virtuoso-opensource-6.1 6.1.6+repack-0ubuntu9+esm2 Available with Ubuntu Pro virtuoso-opensource-6.1-bin 6.1.6+repack-0ubuntu9+esm2 Available with Ubuntu Pro Ubuntu 16.04 LTS virtuoso-opensource 6.1.6+repack-0ubuntu5+esm2 Available with Ubuntu Pro virtuoso-opensource-6.1 6.1.6+repack-0ubuntu5+esm2 Available with Ubuntu Pro virtuoso-opensource-6.1-bin 6.1.6+repack-0ubuntu5+esm2 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6879-1 CVE-2023-31620, CVE-2023-31622, CVE-2023-31624, CVE-2023-31626, CVE-2023-31627, CVE-2023-31629, CVE-2023-31630, CVE-2023-31631, CVE-2023-48945, CVE-2023-48946, CVE-2023-48947, CVE-2023-48950, CVE-2023-48951 . Ubuntu Security Alert USN-6880-1 addresses flaws within the PostgreSQL Database leading to potential risks in significant Ubuntu versions.. Virutoso Advisory, Ubuntu Security Notice, Denialof Service, Ubuntu Updates, Open Source Security. . LinuxSecurity.com Team

Jul 04, 2024 Ubuntu