Ubuntu Security Notice USN-5527-1

==========================================================================Ubuntu Security Notice USN-5527-1July 20, 2022check-mk vulnerabilities==========================================================================A security issue affects these releases of Ubuntu and its derivatives:- Ubuntu 18.04 LTSSummary:Several security issues were fixed in Checkmk.Software Description:- check-mk: general purpose monitoring plugin for retrieving dataDetails:It was discovered that Checkmk incorrectly handled authentication. An attacker could possibly use this issue to cause a race condition leading to information disclosure. (CVE-2017-14955)It was discovered that Checkmk incorrectly handled certain inputs. An attackercould use these cross-site scripting issues to inject arbitrary html or javascript code to obtain sensitive information including user information, session cookies and valid credentials. (CVE-2017-9781, CVE-2021-36563, CVE-2021-40906, CVE-2022-24565)Update instructions:The problem can be corrected by updating your system to the followingpackage versions:Ubuntu 18.04 LTS:  check-mk-livestatus             1.2.8p16-1ubuntu0.2  check-mk-multisite              1.2.8p16-1ubuntu0.2  check-mk-server                 1.2.8p16-1ubuntu0.2In general, a standard system update will make all the necessary changes.References:  https://ubuntu.com/security/notices/USN-5527-1  CVE-2017-14955, CVE-2017-9781, CVE-2021-36563, CVE-2021-40906,  CVE-2022-24565Package Information:  https://launchpad.net/ubuntu/+source/check-mk/1.2.8p16-1ubuntu0.2