Jackson Henry discovered that Velocity Tools incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to execute arbitrary code.
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "binary_version": "2.0-4ubuntu0.1~esm1", "binary_name": "libvelocity-tools-java" }, { "binary_version": "2.0-4ubuntu0.1~esm1", "binary_name": "libvelocity-tools-java-doc" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "binary_version": "2.0-7ubuntu0.18.04.1~esm1", "binary_name": "libvelocity-tools-java" }, { "binary_version": "2.0-7ubuntu0.18.04.1~esm1", "binary_name": "libvelocity-tools-java-doc" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "2.0-7ubuntu0.20.04.1", "binary_name": "libvelocity-tools-java" }, { "binary_version": "2.0-7ubuntu0.20.04.1", "binary_name": "libvelocity-tools-java-doc" } ] }