[USN-4584-1] HtmlUnit vulnerability
Paulo Flabiano Smorigo
pfsmorigo at canonical.com
Thu Oct 15 23:05:41 UTC 2020
Ubuntu Security Notice USN-4584-1
October 15, 2020
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 16.04 LTS
HtmlUnit could be made to crash or run programs as an administrator
if it opened a specially crafted file.
- htmlunit: headless web browser written in Java
It was discovered that HtmlUnit incorrectly initialized Rhino engine. An
attacker could possibly use this issue to execute arbitrary Java code.
The problem can be corrected by updating your system to the following
Ubuntu 16.04 LTS:
In general, a standard system update will make all the necessary changes.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 833 bytes
Desc: not available
More information about the ubuntu-security-announce