Wednesday, October 30, 2019

[USN-4170-2] Whoopsie regression

-----BEGIN PGP SIGNATURE-----
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=SMeQ
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-4170-2
October 30, 2019

whoopsie regression
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 19.10
- Ubuntu 19.04
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS

Summary:

USN-4170-1 caused a regression in Whoopsie.

Software Description:
- whoopsie: Ubuntu error tracker submission

Details:

USN-4170-1 fixed a vulnerability in Whoopsie. The update caused Whoopsie to
crash when sending reports. This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

Kevin Backhouse discovered Whoopsie incorrectly handled very large crash
reports. A local attacker could possibly use this issue to cause a denial
of service, expose sensitive information or execute code as the whoopsie
user.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.10:
libwhoopsie0 0.2.66ubuntu0.2
whoopsie 0.2.66ubuntu0.2

Ubuntu 19.04:
libwhoopsie0 0.2.64ubuntu0.3
whoopsie 0.2.64ubuntu0.3

Ubuntu 18.04 LTS:
libwhoopsie0 0.2.62ubuntu0.3
whoopsie 0.2.62ubuntu0.3

Ubuntu 16.04 LTS:
libwhoopsie0 0.2.52.5ubuntu0.3
whoopsie 0.2.52.5ubuntu0.3

In general, a standard system update will make all the necessary changes.

References:
https://usn.ubuntu.com/4170-2
https://usn.ubuntu.com/4170-1
https://launchpad.net/bugs/1850608

Package Information:
https://launchpad.net/ubuntu/+source/whoopsie/0.2.66ubuntu0.2
https://launchpad.net/ubuntu/+source/whoopsie/0.2.64ubuntu0.3
https://launchpad.net/ubuntu/+source/whoopsie/0.2.62ubuntu0.3
https://launchpad.net/ubuntu/+source/whoopsie/0.2.52.5ubuntu0.3

No comments:

Post a Comment