drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Zwei Probleme in Apport
Name: |
Zwei Probleme in Apport |
|
ID: |
USN-4315-1 |
|
Distribution: |
Ubuntu |
|
Plattformen: |
Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 19.10 |
|
Datum: |
Do, 2. April 2020, 08:11 |
|
Referenzen: |
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8831
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8833 |
|
Applikationen: |
Apport |
|
Originalnachricht |
--===============0921167336611849960== Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature"
--=-=-= Content-Type: text/plain
========================================================================== Ubuntu Security Notice USN-4315-1 April 02, 2020
apport vulnerabilities ==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 19.10 - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS
Summary:
Several security issues were fixed in Apport.
Software Description: - apport: automatically generate crash reports for debugging
Details:
Maximilien Bourgeteau discovered that the Apport lock file was created with insecure permissions. This could allow a local attacker to escalate their privileges via a symlink attack. (CVE-2020-8831)
Maximilien Bourgeteau discovered a race condition in Apport when setting crash report permissions. This could allow a local attacker to read arbitrary files via a symlink attack. (CVE-2020-8833)
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 19.10: apport 2.20.11-0ubuntu8.8 python-apport 2.20.11-0ubuntu8.8 python3-apport 2.20.11-0ubuntu8.8
Ubuntu 18.04 LTS: apport 2.20.9-0ubuntu7.14 python-apport 2.20.9-0ubuntu7.14 python3-apport 2.20.9-0ubuntu7.14
Ubuntu 16.04 LTS: apport 2.20.1-0ubuntu2.23 python-apport 2.20.1-0ubuntu2.23 python3-apport 2.20.1-0ubuntu2.23
In general, a standard system update will make all the necessary changes.
References: https://usn.ubuntu.com/4315-1 CVE-2020-8831, CVE-2020-8833
Package Information: https://launchpad.net/ubuntu/+source/apport/2.20.11-0ubuntu8.8 https://launchpad.net/ubuntu/+source/apport/2.20.9-0ubuntu7.14 https://launchpad.net/ubuntu/+source/apport/2.20.1-0ubuntu2.23
--=-=-= Content-Type: application/pgp-signature; name="signature.asc"
-----BEGIN PGP SIGNATURE-----
iQFOBAEBCgA4FiEEiOlTC8vdwgBRe16w9JjS2d59rZwFAl6FVREaHGFsZXgubXVy cmF5QGNhbm9uaWNhbC5jb20ACgkQ9JjS2d59rZzMKAf/cnk3AsCdYmXtII2u+qr0 Y6UERn1H4krntVMsQUqfE+ysV2nAxCJOcSmwVvlfcugCTO7mf2sdyRd3KY/lvdML AV1EkPCWl+k30lIN4MeTrerIe/HrvPXvIsS91mlxK1brqMze7OOcZrZi4g6aQ8n8 nDpSk/pxLkDF2adEBe2ur4wT/SG5tF8N/qMbznoebIuI9iiCNgKculXNkC2tDjyU zRiAdy207opX3Erq7LAKZpSa9eXO6+fRGdyLTbDTVVtk0+IgoBUvnmN5tdIdVqBy arnoUV+FHpxvv8JJusdkoCFm7o/L7DmmHlLFJ2HPjRFl61T5ZbHS7znG+f2g3b3R +A== =pGyc -----END PGP SIGNATURE----- --=-=-=--
--===============0921167336611849960== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline
-- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
|
|
|
|