This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============8821557737114710359==
Content-Language: en-CA
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature";
 boundary="------------Jk1eaks2Qsf0PyutyYGl0DvN"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--------------Jk1eaks2Qsf0PyutyYGl0DvN
Content-Type: multipart/mixed;
 boundary="------------0rmP0Ly6Vus5qcpNPBIyOFq0";
 protected-headers="v1"
From: Marc Deslauriers <marc.deslauriers@canonical.com>
Reply-To: Ubuntu Security <security@ubuntu.com>
To: "ubuntu-security-announce@lists.ubuntu.com"
 <ubuntu-security-announce@lists.ubuntu.com>
Message-ID: <31c7c21c-25b1-0270-b802-7e8ab77e47c6@canonical.com>
Subject: [USN-5426-1] needrestart vulnerability

--------------0rmP0Ly6Vus5qcpNPBIyOFq0
Content-Type: text/plain; charset=UTF-
Content-Transfer-Encoding: quoted-printable

==========================================================================
Ubuntu Security Notice USN-5426-1
May 17, 2022

needrestart vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 22.04 LTS
- Ubuntu 21.10
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS

Summary:

needrestart could be made to run programs.

Software Description:
- needrestart: check which daemons need to be restarted after library upgrades

Details:

Jakub Wilk discovered that needrestart incorrectly used some regular
expressions. A local attacker could possibly use this issue to execute
arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS:
  needrestart                     3.5-5ubuntu2.1

Ubuntu 21.10:
  needrestart                     3.5-4ubuntu2.1

Ubuntu 20.04 LTS:
  needrestart                     3.4-6ubuntu0.1

Ubuntu 18.04 LTS:
  needrestart                     3.1-1ubuntu0.1

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-5426-1
  CVE-2022-30688

Package Information:
  https://launchpad.net/ubuntu/+source/needrestart/3.5-5ubuntu2.1
  https://launchpad.net/ubuntu/+source/needrestart/3.5-4ubuntu2.1
  https://launchpad.net/ubuntu/+source/needrestart/3.4-6ubuntu0.1
  https://launchpad.net/ubuntu/+source/needrestart/3.1-1ubuntu0.1

--------------0rmP0Ly6Vus5qcpNPBIyOFq0--

--------------Jk1eaks2Qsf0PyutyYGl0DvN
Content-Type: application/pgp-signature; name="OpenPGP_signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="OpenPGP_signature"

-----BEGIN PGP SIGNATURE-----
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=h0pA
-----END PGP SIGNATURE-----

--------------Jk1eaks2Qsf0PyutyYGl0DvN--


--===============8821557737114710359==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

Cg==

--===============8821557737114710359==--