USN-4295-1: Rake vulnerability

Reference Links

• https://ubuntu.com/security/CVE-2020-8130
• https://launchpad.net/ubuntu/+source/rake/12.3.1-3ubuntu0.1
• https://launchpad.net/ubuntu/+source/rake/12.3.1-1ubuntu0.1
• https://launchpad.net/ubuntu/+source/rake/10.5.0-2ubuntu0.1
• https://ubuntu.com/security/notices/USN-4295-1 (Advisory)

Child vulnerabilities

(Contains the following vulnerabilities)

• CVE-2020-8130

Frequently Asked Questions

• What is the vulnerability ID of this security advisory?

  The vulnerability ID of this security advisory is USN-4295-1.

• What is the title of this security advisory?

  The title of this security advisory is Rake vulnerability.

• What is the severity of USN-4295-1?

  The severity of USN-4295-1 is not specified.

• What is the description of USN-4295-1?

  USN-4295-1: Rake vulnerability - It was discovered that Rake incorrectly handled certain files. An attacker could use this issue to possibly execute arbitrary commands.

• Which software versions are affected by USN-4295-1?

  The following software versions are affected by USN-4295-1: Ubuntu 19.10, Ubuntu 18.04, and Ubuntu 16.04.

• How can an attacker exploit USN-4295-1?

  An attacker could exploit USN-4295-1 by using certain files to execute arbitrary commands.

• Is there a fix available for USN-4295-1?

  Yes, there is a fix available for USN-4295-1. Please refer to the associated Ubuntu security advisories for more information.