Ubuntu alert USN-8448-1 (dolibarr)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8448-1] Dolibarr vulnerability
Date:
             
 
Wed, 17 Jun 2026 17:58:55 +0000
Message-ID:
             
 
<E1wZuXP-0003qP-NI@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8448-1
June 17, 2026

dolibarr vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 16.04 LTS

Summary:

Dolibarr could be made to run programs if it received specially crafted
network traffic.

Software Description:
- dolibarr: Open Source ERP & CRM for business

Details:

It was discovered that Dolibarr incorrectly handled user-supplied
database name values during installation. A remote attacker could
possibly use this issue to execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS
  dolibarr                        3.5.8+dfsg1-1ubuntu1+esm1
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8448-1
  CVE-2018-25357


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=p1ee
-----END PGP SIGNATURE-----