USN-7430-1: Dino vulnerability
9 April 2025
Dino could be made to expose sensitive information over the network.
Releases
Packages
- dino-im - modern XMPP client
Details
Kim Alvefur discovered that Dino did not correctly sanitize certain
messages. A remote attacker could possibly use this issue to leak
sensitive information.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 22.04
-
dino-im
-
0.3.0-3ubuntu0.1~esm1
Available with Ubuntu Pro
Ubuntu 20.04
-
dino-im
-
0.1.0-1ubuntu0.1~esm1
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.