CVE catalog

CVE-2019-7306

byobu: CVE-2019-7306

[CVE catalog]

Severity
Low
Published
Source
[NVD] · [CVE record]
EPSS
1.77% · Oct 25, 2026

Byobu Apport hook may disclose sensitive information since it automatically uploads the local user's .screenrc which may contain private hostnames, usernames and passwords. This issue affects: byobu

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianbyobusid7.19-1vulnerable
Debianbyobuforky7.19-1vulnerable
Debianbyobutrixie5.133-1.1vulnerable
Debianbyobubookworm5.133-1.1vulnerable
Ubuntubyobupro5.97-0ubuntu1vulnerable
Ubuntubyobupro5.98-0ubuntu1vulnerable
Ubuntubyobupro5.99-0ubuntu1vulnerable
Ubuntubyobupro5.99-0ubuntu2vulnerable
Ubuntubyobupro5.100-0ubuntu1vulnerable
Ubuntubyobupro5.101-0ubuntu1vulnerable
Ubuntubyobupro5.102-0ubuntu1vulnerable
Ubuntubyobupro5.103-0ubuntu1vulnerable
Ubuntubyobupro5.104-0ubuntu1vulnerable
Ubuntubyobupro5.105-0ubuntu1vulnerable
Ubuntubyobupro5.106-0ubuntu1vulnerable
Ubuntubyobupro5.106-0ubuntu1+esm1fixed
Ubuntubyobu14.045.60-0ubuntu1vulnerable
Ubuntubyobu14.045.62-0ubuntu1vulnerable
Ubuntubyobu14.045.63-0ubuntu1vulnerable
Ubuntubyobu14.045.64-0ubuntu1vulnerable
Ubuntubyobu14.045.65-0ubuntu1vulnerable
Ubuntubyobu14.045.66-0ubuntu1vulnerable
Ubuntubyobu14.045.67-0ubuntu1vulnerable
Ubuntubyobu14.045.69-0ubuntu1vulnerable
Ubuntubyobu14.045.70-0ubuntu1vulnerable
Ubuntubyobu14.045.71-0ubuntu1vulnerable
Ubuntubyobu14.045.72-0ubuntu1vulnerable
Ubuntubyobu14.045.73-0ubuntu1vulnerable
Ubuntubyobu14.045.74-0ubuntu1vulnerable
Ubuntubyobu14.045.75-0ubuntu1vulnerable
Ubuntubyobu14.045.76-0ubuntu1vulnerable
Ubuntubyobu14.045.77-0ubuntu1vulnerable
Ubuntubyobu14.045.77-0ubuntu1.2vulnerable
Ubuntubyobupro5.97-0ubuntu1vulnerable
Ubuntubyobupro5.98-0ubuntu1vulnerable
Ubuntubyobupro5.99-0ubuntu1vulnerable
Ubuntubyobupro5.99-0ubuntu2vulnerable
Ubuntubyobupro5.100-0ubuntu1vulnerable
Ubuntubyobupro5.101-0ubuntu1vulnerable
Ubuntubyobupro5.102-0ubuntu1vulnerable
Ubuntubyobupro5.103-0ubuntu1vulnerable
Ubuntubyobupro5.104-0ubuntu1vulnerable
Ubuntubyobupro5.105-0ubuntu1vulnerable
Ubuntubyobupro5.106-0ubuntu1vulnerable
Ubuntubyobupro5.106-0ubuntu1+esm1fixed
Ubuntubyobu18.045.123-0ubuntu1vulnerable
Ubuntubyobu18.045.123-0ubuntu2vulnerable
Ubuntubyobu18.045.124-0ubuntu1vulnerable
Ubuntubyobu18.045.125-0ubuntu1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianbyobusourcesid(unfixed)unimportantNot reportedNot reported
Debianbyobusourceforky(unfixed)unimportantNot reportedNot reported
Debianbyobusourcetrixie(unfixed)unimportantNot reportedNot reported
Debianbyobusourcebookworm(unfixed)unimportantNot reportedNot reported
Ubuntubyobudebpro5.106-0ubuntu1+esm1Not reportedUSN-5234-1Not reported
Ubuntubyobudebpro5.106-0ubuntu1+esm1Not reportedUBUNTU-CVE-2019-7306Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [byobu]Affected
    Details (2)

    • 5.133-1.1 · all · bookworm

      Affected

      dsa · byobu · debian · bookworm; dsa · byobu · debian · 12

    • 5.133-1.1 · all · bookworm

      Affected

      dsa · byobu · debian · bookworm; dsa · byobu · debian · 12

[Debian 13 (Trixie)]

  • [byobu]Affected
    Details (2)

    • 5.133-1.1 · all · trixie

      Affected

      dsa · byobu · debian · 13

    • 5.133-1.1 · all · trixie

      Affected

      dsa · byobu · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]