Skip to content
OpenAdvisories
Medium USN-5234-1 1 CVE

byobu vulnerability

Published Jan 18, 2022 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

Sander Bos discovered that Byobu incorrectly handled certain Apport data.
An attacker could possibly use this issue to expose sensitive information.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS byobu 5.106-0ubuntu1+esm1

Vulnerabilities 1

  • Medium 4.3
    CVE-2019-7306

    Byobu apport hook uploads user's ~/.screenrc

    Byobu Apport hook may disclose sensitive information since it automatically uploads the local user's .screenrc which may contain private hostnames, usernames and passwords. This issue affects: byobu

    Canonical byobu byobu byobu Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2019-7306