USN-6876-1: Kopano Core vulnerabilities

Reference Links

• https://ubuntu.com/security/CVE-2019-19907
• https://ubuntu.com/security/CVE-2022-26562
• https://launchpad.net/ubuntu/+source/kopanocore/8.7.0-7.1ubuntu10.1
• https://launchpad.net/ubuntu/+source/kopanocore/8.7.0-7ubuntu1.1
• https://ubuntu.com/security/notices/USN-6876-1 (Advisory)

Child vulnerabilities

(Contains the following vulnerabilities)

• CVE-2019-19907
• CVE-2022-26562

Frequently Asked Questions

• What is the severity of USN-6876-1?

  The severity of USN-6876-1 is considered to be medium due to potential exposure of private information and authentication issues.

• How do I fix USN-6876-1?

  To fix USN-6876-1, update the Kopano Core packages to version 8.7.0-7.1ubuntu10.1 or later on affected Ubuntu versions.

• Which versions of Ubuntu are affected by USN-6876-1?

  USN-6876-1 affects Ubuntu 18.04 LTS, specifically the versions of Kopano Core prior to 8.7.0-7.1ubuntu10.1.

• What specific vulnerabilities are addressed in USN-6876-1?

  USN-6876-1 addresses an out-of-bounds access vulnerability and an issue allowing authentication with expired passwords in Kopano Core.

• Is there a known exploit for USN-6876-1?

  As of now, there are no public reports of an active exploit specifically targeting the vulnerabilities fixed by USN-6876-1.