==========================================================================
Ubuntu Security Notice USN-5825-2
February 06, 2023
pam regressions
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 22.10
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 ESM
- Ubuntu 14.04 ESM
Summary:
USN-5825-1 caused some minor regressions in PAM.
Software Description:
- pam: Pluggable Authentication Modules
Details:
USN-5825-1 fixed vulnerabilities in PAM. Unfortunately that update was
incomplete and could introduce a regression. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that PAM did not correctly restrict login from an IP
address that is not resolvable via DNS. An attacker could possibly use this
issue to bypass authentication.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 22.10:
libpam-modules 1.5.2-2ubuntu1.3
Ubuntu 22.04 LTS:
libpam-modules 1.4.0-11ubuntu2.3
Ubuntu 20.04 LTS:
libpam-modules 1.3.1-5ubuntu4.6
Ubuntu 18.04 LTS:
libpam-modules 1.1.8-3.6ubuntu2.18.04.6
Ubuntu 16.04 ESM:
libpam-modules 1.1.8-3.2ubuntu2.3+esm4
Ubuntu 14.04 ESM:
libpam-modules 1.1.8-1ubuntu2.2+esm3
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5825-2
https://ubuntu.com/security/notices/USN-5825-1
CVE-2022-28321, https://launchpad.net/bugs/2006073
Package Information:
https://launchpad.net/ubuntu/+source/pam/1.5.2-2ubuntu1.3
https://launchpad.net/ubuntu/+source/pam/1.4.0-11ubuntu2.3
https://launchpad.net/ubuntu/+source/pam/1.3.1-5ubuntu4.6
https://launchpad.net/ubuntu/+source/pam/1.1.8-3.6ubuntu2.18.04.6
Monday, February 6, 2023
Sunday, February 5, 2023
[USN-5816-2] Firefox regressions
==========================================================================
Ubuntu Security Notice USN-5816-2
February 06, 2023
firefox regressions
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
Summary:
USN-5816-1 caused some minor regressions in Firefox.
Software Description:
- firefox: Mozilla Open Source web browser
Details:
USN-5816-1 fixed vulnerabilities in Firefox. The update introduced
several minor regressions. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
Niklas Baumstark discovered that a compromised web child process of Firefox
could disable web security opening restrictions, leading to a new child
process being spawned within the file:// context. An attacker could
potentially exploits this to obtain sensitive information. (CVE-2023-23597)
Tom Schuster discovered that Firefox was not performing a validation check
on GTK drag data. An attacker could potentially exploits this to obtain
sensitive information. (CVE-2023-23598)
Vadim discovered that Firefox was not properly sanitizing a curl command
output when copying a network request from the developer tools panel. An
attacker could potentially exploits this to hide and execute arbitrary
commands. (CVE-2023-23599)
Luan Herrera discovered that Firefox was not stopping navigation when
dragging a URL from a cross-origin iframe into the same tab. An attacker
potentially exploits this to spoof the user. (CVE-2023-23601)
Dave Vandyke discovered that Firefox did not properly implement CSP policy
when creating a WebSocket in a WebWorker. An attacker who was able to
inject markup into a page otherwise protected by a Content Security Policy
may have been able to inject an executable script. (CVE-2023-23602)
Dan Veditz discovered that Firefox did not properly implement CSP policy
on regular expression when using console.log. An attacker potentially
exploits this to exfiltrate data from the browser. (CVE-2023-23603)
Nika Layzell discovered that Firefox was not performing a validation check
when parsing a non-system html document via DOMParser::ParseFromSafeString.
An attacker potentially exploits this to bypass web security checks.
(CVE-2023-23604)
Multiple security issues were discovered in Firefox. If a user were
tricked into opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, obtain sensitive
information across domains, or execute arbitrary code. (CVE-2023-23605,
CVE-2023-23606)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 20.04 LTS:
firefox 109.0.1+build1-0ubuntu0.20.04.2
Ubuntu 18.04 LTS:
firefox 109.0.1+build1-0ubuntu0.18.04.2
After a standard system update you need to restart Firefox to make all the
necessary changes.
References:
https://ubuntu.com/security/notices/USN-5816-2
https://ubuntu.com/security/notices/USN-5816-1
https://launchpad.net/bugs/2006075
Package Information:
https://launchpad.net/ubuntu/+source/firefox/109.0.1+build1-0ubuntu0.20.04.2
https://launchpad.net/ubuntu/+source/firefox/109.0.1+build1-0ubuntu0.18.04.2
Ubuntu Security Notice USN-5816-2
February 06, 2023
firefox regressions
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
Summary:
USN-5816-1 caused some minor regressions in Firefox.
Software Description:
- firefox: Mozilla Open Source web browser
Details:
USN-5816-1 fixed vulnerabilities in Firefox. The update introduced
several minor regressions. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
Niklas Baumstark discovered that a compromised web child process of Firefox
could disable web security opening restrictions, leading to a new child
process being spawned within the file:// context. An attacker could
potentially exploits this to obtain sensitive information. (CVE-2023-23597)
Tom Schuster discovered that Firefox was not performing a validation check
on GTK drag data. An attacker could potentially exploits this to obtain
sensitive information. (CVE-2023-23598)
Vadim discovered that Firefox was not properly sanitizing a curl command
output when copying a network request from the developer tools panel. An
attacker could potentially exploits this to hide and execute arbitrary
commands. (CVE-2023-23599)
Luan Herrera discovered that Firefox was not stopping navigation when
dragging a URL from a cross-origin iframe into the same tab. An attacker
potentially exploits this to spoof the user. (CVE-2023-23601)
Dave Vandyke discovered that Firefox did not properly implement CSP policy
when creating a WebSocket in a WebWorker. An attacker who was able to
inject markup into a page otherwise protected by a Content Security Policy
may have been able to inject an executable script. (CVE-2023-23602)
Dan Veditz discovered that Firefox did not properly implement CSP policy
on regular expression when using console.log. An attacker potentially
exploits this to exfiltrate data from the browser. (CVE-2023-23603)
Nika Layzell discovered that Firefox was not performing a validation check
when parsing a non-system html document via DOMParser::ParseFromSafeString.
An attacker potentially exploits this to bypass web security checks.
(CVE-2023-23604)
Multiple security issues were discovered in Firefox. If a user were
tricked into opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, obtain sensitive
information across domains, or execute arbitrary code. (CVE-2023-23605,
CVE-2023-23606)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 20.04 LTS:
firefox 109.0.1+build1-0ubuntu0.20.04.2
Ubuntu 18.04 LTS:
firefox 109.0.1+build1-0ubuntu0.18.04.2
After a standard system update you need to restart Firefox to make all the
necessary changes.
References:
https://ubuntu.com/security/notices/USN-5816-2
https://ubuntu.com/security/notices/USN-5816-1
https://launchpad.net/bugs/2006075
Package Information:
https://launchpad.net/ubuntu/+source/firefox/109.0.1+build1-0ubuntu0.20.04.2
https://launchpad.net/ubuntu/+source/firefox/109.0.1+build1-0ubuntu0.18.04.2
Thursday, February 2, 2023
[USN-5841-1] LibTIFF vulnerabilities
==========================================================================
Ubuntu Security Notice USN-5841-1
February 02, 2023
tiff vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 16.04 ESM
- Ubuntu 14.04 ESM
Summary:
Several security issues were fixed in LibTIFF.
Software Description:
- tiff: Tag Image File Format (TIFF) library
Details:
It was discovered that LibTIFF incorrectly handled certain malformed
images. If a user or automated system were tricked into opening a
specially crafted image, a remote attacker could crash the application,
leading to a denial of service, or possibly execute arbitrary code with
user privileges. This issue was only fixed in Ubuntu 14.04 ESM.
(CVE-2019-14973, CVE-2019-17546, CVE-2020-35523, CVE-2020-35524,
CVE-2022-3970)
It was discovered that LibTIFF was incorrectly acessing a data structure
when processing data with the tiffcrop tool, which could lead to a heap
buffer overflow. An attacker could possibly use this issue to cause a
denial of service or execute arbitrary code. (CVE-2022-48281)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 16.04 ESM:
libtiff-tools 4.0.6-1ubuntu0.8+esm9
libtiff5 4.0.6-1ubuntu0.8+esm9
Ubuntu 14.04 ESM:
libtiff-tools 4.0.3-7ubuntu0.11+esm6
libtiff5 4.0.3-7ubuntu0.11+esm6
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5841-1
CVE-2019-14973, CVE-2019-17546, CVE-2020-35523, CVE-2020-35524,
CVE-2022-3970, CVE-2022-48281
Ubuntu Security Notice USN-5841-1
February 02, 2023
tiff vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 16.04 ESM
- Ubuntu 14.04 ESM
Summary:
Several security issues were fixed in LibTIFF.
Software Description:
- tiff: Tag Image File Format (TIFF) library
Details:
It was discovered that LibTIFF incorrectly handled certain malformed
images. If a user or automated system were tricked into opening a
specially crafted image, a remote attacker could crash the application,
leading to a denial of service, or possibly execute arbitrary code with
user privileges. This issue was only fixed in Ubuntu 14.04 ESM.
(CVE-2019-14973, CVE-2019-17546, CVE-2020-35523, CVE-2020-35524,
CVE-2022-3970)
It was discovered that LibTIFF was incorrectly acessing a data structure
when processing data with the tiffcrop tool, which could lead to a heap
buffer overflow. An attacker could possibly use this issue to cause a
denial of service or execute arbitrary code. (CVE-2022-48281)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 16.04 ESM:
libtiff-tools 4.0.6-1ubuntu0.8+esm9
libtiff5 4.0.6-1ubuntu0.8+esm9
Ubuntu 14.04 ESM:
libtiff-tools 4.0.3-7ubuntu0.11+esm6
libtiff5 4.0.3-7ubuntu0.11+esm6
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5841-1
CVE-2019-14973, CVE-2019-17546, CVE-2020-35523, CVE-2020-35524,
CVE-2022-3970, CVE-2022-48281
F39 proposal: Mass Retire Golang Leaves (Self-Contained Change proposal)
https://fedoraproject.org/wiki/Changes/Mass_Retire_Golang_Leaves
This document represents a proposed Change. As part of the Changes
process, proposals are publicly announced in order to receive
community feedback. This proposal will only be implemented if approved
by the Fedora Engineering Steering Committee.
== Summary ==
As of Jan 2023, 275/1660 (17%) library only Go source packages are
leaves.
Overall, these packages are maintained by 35 different maintainers along with
the Go SIG.
[https://pagure.io/GoSIG/go-leaves/blob/main/f/leaves These leaves]
([https://pagure.io/GoSIG/go-leaves/blob/main/f/leaves-by-maintainer
by maintainer])
will be mass retired in Fedora 39.
== Owner ==
* Name: [[User:gotmax23| Maxwell G]]; [[User:alexsaezm | Alejandro
Sáez Morollón]]; [https://pagure.io/GoSIG/go-sig the Go SIG]
* Email: gotmax@e.email; asm@redhat.com; golang@lists.fedoraproject.org
== Definitions ==
* ''library only source package'' -- a component/source package that
only contains noarch golang ''*-devel'' subpackages.
* ''binary subpackage'' -- an arched subpackage that contains go binaries.
* ''source package with binaries'' - a component/source package that
contains at least one ''binary subpackage''; may also contain library
subpackages.
* ''leaf'' -- a library only source package whose subpackages don't
have any dependents
== Detailed Description ==
The Go SIG maintains over 2000 source packages. 275 of these packages are
''leaves''. Overall, these packages are assigned to 35 different maintainers.
We'd like to clean up these unneeded packages to allow us to better direct our
time and unclutter the distribution. Handling this large number of leaves one
by one and maintainer by maintainer proved ineffective, so we're taking a more
heavy handed approach and mass retiring these leaf packages prior to the
release of Fedora 39.
''Source packages with binaries'' will be excluded even if the ''binary
subpackage''(s) and/or the -devel subpackage(s) are leaves.
See the next section for more information on how we plan to implement this.
In short:
* We wrote a script to identify the ''leaf'' packages.
* The current list of ''leaf'' packages is available at
https://pagure.io/GoSIG/go-leaves/blob/main/f/leaves. A by maintainer
breakdown is available at
https://pagure.io/GoSIG/go-leaves/blob/main/f/leaves-by-maintainer.
* We will contact the maintainers of these packages and allow them to opt-out.
* We will use Copr to verify our work before proceeding with the mass removal.
=== Implementation ===
Finding the leaves:
([https://git.sr.ht/~gotmax23/fedora-scripts/tree/main/item/go-sig/go_leaves.py
go_leaves.py])
# Find the source packages that BuildRequire go-rpm-macros or any
golang.src subpackage
# Iterate over the source packages list and find the subpackages for each one
# If all of a source package's subpackages are noarch and contain
"-devel", it is considered a leaf.
# Remove packages from the leaves list if they've opted out.
# Store the output in
https://pagure.io/GoSIG/go-leaves/blob/main/f/leaves. Update it
periodically.
Confirmation:
# Create a blank ''blocker'' package that Conflicts with the to be
removed packages.
# Create a new Copr with the blocker package in its default buildroot.
This will simulate the actual removal of these packages.
# Rebuild all of the non leaf packages.
# Investigate new failures and rebuild in a control Copr.
Opt outs:
# A list of opt outs will be kept in
https://pagure.io/GoSIG/go-leaves. Go SIG members will have `commit`.
# As explained in the aforementioned repo's README, packagers can
simply push an `opt-out/{component}` text file with a short
justification to opt out.
Mass Retirement:
# Shallow clone the ''leaves''' distgit repositories and run `fedpkg
retire` on each.
# Double check that the packages are properly blocked/retired in Koji and PDC.
== Feedback ==
This was briefly discussed in a Go SIG meeting
([https://meetbot.fedoraproject.org/fedora-golang/2023-01-16/go_sig_meeting.2023-01-16-19.00.html
minutes]).
Feedback was generally positive.
== Benefit to Fedora ==
This change will allow the Go SIG to focus its limited people power on
maintaining packages that are actually needed.
Fedora won't waste resources uselessly rebuilding these packages.
Hopefully, the other packages will be better maintained.
== Scope ==
* Proposal owners:
** ✅ Write a script to determine leaves.
([https://git.sr.ht/~gotmax23/fedora-scripts/tree/main/item/go-sig/go_leaves.py
go_leaves.py])
** ✅ Store an updated list of leaves in https://pagure.io/GoSIG/go-leaves
** Directly contact affected maintainers and devel-announce. Ensure
opt outs are properly accounted for.
** Simulate the removal of these packages and rebuild the Golang stack
in Copr. Investigate any new failures.
** Mass retire packages after waiting a few weeks for maintainers to
opt out. Aim to have this completed before the mass rebuild.
* Release engineering: [https://pagure.io/releng/issue/11253 #11253]
** After we preform the mass retirement, releng will allow any Go SIG
member to unretire a ''leaf'' within eight weeks even if they're not
the main admin.
** The change owners will mass retire the packages themselves using
go-sig/provenpackager membership.
** Ensure that the packages are properly blocked/retired in Koji and PDC.
== Upgrade/compatibility impact ==
There should be none. These library packages are not meant for end users.
We will not Obsolete these packages, so they won't be removed from
existing systems.
== Contingency Plan ==
The change can be deferred if the prep work isn't completed in time.
The change owners are taking multiple measures to avoid retiring packages that
are not actually ''leaves'' (i.e. false positives).
In the event of unforeseen issues, some or all of the packages can be
unretired and rebuilt.
Retagging builds from F38 is also possible,
as Golang library packages only contain source code and are architecture
independent.
== Documentation ==
The current draft of the package leaves script
[https://git.sr.ht/~gotmax23/fedora-scripts/tree/main/item/go-sig/go_leaves.py
is available].
== Release Notes ==
Remove unused Golang libraries from the repositories.
These packages are not meant for end user consumption to begin with.
We will not Obsolete these packages, so they won't be removed from
existing systems.
--
Ben Cotton
He / Him / His
Fedora Program Manager
Red Hat
TZ=America/Indiana/Indianapolis
_______________________________________________
devel-announce mailing list -- devel-announce@lists.fedoraproject.org
To unsubscribe send an email to devel-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedoraproject.org
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
This document represents a proposed Change. As part of the Changes
process, proposals are publicly announced in order to receive
community feedback. This proposal will only be implemented if approved
by the Fedora Engineering Steering Committee.
== Summary ==
As of Jan 2023, 275/1660 (17%) library only Go source packages are
leaves.
Overall, these packages are maintained by 35 different maintainers along with
the Go SIG.
[https://pagure.io/GoSIG/go-leaves/blob/main/f/leaves These leaves]
([https://pagure.io/GoSIG/go-leaves/blob/main/f/leaves-by-maintainer
by maintainer])
will be mass retired in Fedora 39.
== Owner ==
* Name: [[User:gotmax23| Maxwell G]]; [[User:alexsaezm | Alejandro
Sáez Morollón]]; [https://pagure.io/GoSIG/go-sig the Go SIG]
* Email: gotmax@e.email; asm@redhat.com; golang@lists.fedoraproject.org
== Definitions ==
* ''library only source package'' -- a component/source package that
only contains noarch golang ''*-devel'' subpackages.
* ''binary subpackage'' -- an arched subpackage that contains go binaries.
* ''source package with binaries'' - a component/source package that
contains at least one ''binary subpackage''; may also contain library
subpackages.
* ''leaf'' -- a library only source package whose subpackages don't
have any dependents
== Detailed Description ==
The Go SIG maintains over 2000 source packages. 275 of these packages are
''leaves''. Overall, these packages are assigned to 35 different maintainers.
We'd like to clean up these unneeded packages to allow us to better direct our
time and unclutter the distribution. Handling this large number of leaves one
by one and maintainer by maintainer proved ineffective, so we're taking a more
heavy handed approach and mass retiring these leaf packages prior to the
release of Fedora 39.
''Source packages with binaries'' will be excluded even if the ''binary
subpackage''(s) and/or the -devel subpackage(s) are leaves.
See the next section for more information on how we plan to implement this.
In short:
* We wrote a script to identify the ''leaf'' packages.
* The current list of ''leaf'' packages is available at
https://pagure.io/GoSIG/go-leaves/blob/main/f/leaves. A by maintainer
breakdown is available at
https://pagure.io/GoSIG/go-leaves/blob/main/f/leaves-by-maintainer.
* We will contact the maintainers of these packages and allow them to opt-out.
* We will use Copr to verify our work before proceeding with the mass removal.
=== Implementation ===
Finding the leaves:
([https://git.sr.ht/~gotmax23/fedora-scripts/tree/main/item/go-sig/go_leaves.py
go_leaves.py])
# Find the source packages that BuildRequire go-rpm-macros or any
golang.src subpackage
# Iterate over the source packages list and find the subpackages for each one
# If all of a source package's subpackages are noarch and contain
"-devel", it is considered a leaf.
# Remove packages from the leaves list if they've opted out.
# Store the output in
https://pagure.io/GoSIG/go-leaves/blob/main/f/leaves. Update it
periodically.
Confirmation:
# Create a blank ''blocker'' package that Conflicts with the to be
removed packages.
# Create a new Copr with the blocker package in its default buildroot.
This will simulate the actual removal of these packages.
# Rebuild all of the non leaf packages.
# Investigate new failures and rebuild in a control Copr.
Opt outs:
# A list of opt outs will be kept in
https://pagure.io/GoSIG/go-leaves. Go SIG members will have `commit`.
# As explained in the aforementioned repo's README, packagers can
simply push an `opt-out/{component}` text file with a short
justification to opt out.
Mass Retirement:
# Shallow clone the ''leaves''' distgit repositories and run `fedpkg
retire` on each.
# Double check that the packages are properly blocked/retired in Koji and PDC.
== Feedback ==
This was briefly discussed in a Go SIG meeting
([https://meetbot.fedoraproject.org/fedora-golang/2023-01-16/go_sig_meeting.2023-01-16-19.00.html
minutes]).
Feedback was generally positive.
== Benefit to Fedora ==
This change will allow the Go SIG to focus its limited people power on
maintaining packages that are actually needed.
Fedora won't waste resources uselessly rebuilding these packages.
Hopefully, the other packages will be better maintained.
== Scope ==
* Proposal owners:
** ✅ Write a script to determine leaves.
([https://git.sr.ht/~gotmax23/fedora-scripts/tree/main/item/go-sig/go_leaves.py
go_leaves.py])
** ✅ Store an updated list of leaves in https://pagure.io/GoSIG/go-leaves
** Directly contact affected maintainers and devel-announce. Ensure
opt outs are properly accounted for.
** Simulate the removal of these packages and rebuild the Golang stack
in Copr. Investigate any new failures.
** Mass retire packages after waiting a few weeks for maintainers to
opt out. Aim to have this completed before the mass rebuild.
* Release engineering: [https://pagure.io/releng/issue/11253 #11253]
** After we preform the mass retirement, releng will allow any Go SIG
member to unretire a ''leaf'' within eight weeks even if they're not
the main admin.
** The change owners will mass retire the packages themselves using
go-sig/provenpackager membership.
** Ensure that the packages are properly blocked/retired in Koji and PDC.
== Upgrade/compatibility impact ==
There should be none. These library packages are not meant for end users.
We will not Obsolete these packages, so they won't be removed from
existing systems.
== Contingency Plan ==
The change can be deferred if the prep work isn't completed in time.
The change owners are taking multiple measures to avoid retiring packages that
are not actually ''leaves'' (i.e. false positives).
In the event of unforeseen issues, some or all of the packages can be
unretired and rebuilt.
Retagging builds from F38 is also possible,
as Golang library packages only contain source code and are architecture
independent.
== Documentation ==
The current draft of the package leaves script
[https://git.sr.ht/~gotmax23/fedora-scripts/tree/main/item/go-sig/go_leaves.py
is available].
== Release Notes ==
Remove unused Golang libraries from the repositories.
These packages are not meant for end user consumption to begin with.
We will not Obsolete these packages, so they won't be removed from
existing systems.
--
Ben Cotton
He / Him / His
Fedora Program Manager
Red Hat
TZ=America/Indiana/Indianapolis
_______________________________________________
devel-announce mailing list -- devel-announce@lists.fedoraproject.org
To unsubscribe send an email to devel-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedoraproject.org
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
[USN-5840-1] Long Range ZIP vulnerabilities
-----BEGIN PGP PUBLIC KEY BLOCK-----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=grCX
-----END PGP PUBLIC KEY BLOCK-----
==========================================================================
Ubuntu Security Notice USN-5840-1
February 02, 2023
lrzip vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 22.10
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 ESM
- Ubuntu 14.04 ESM
Summary:
Several security issues were fixed in Long Range ZIP.
Software Description:
- lrzip: compression program with a very high compression ratio
Details:
It was discovered that Long Range ZIP incorrectly handled pointers. If
a user or an automated system were tricked into opening a certain
specially crafted ZIP file, an attacker could possibly use this issue
to cause a denial of service. This issue only affected Ubuntu 14.04 ESM,
Ubuntu 16.04 ESM, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2020-25467)
It was discovered that Long Range ZIP incorrectly handled pointers. If
a user or an automated system were tricked into opening a certain
specially crafted ZIP file, an attacker could possibly use this issue
to cause a denial of service. This issue only affected Ubuntu 18.04 LTS
and Ubuntu 20.04 LTS. (CVE-2021-27345, CVE-2021-27347)
It was discovered that Long Range ZIP incorrectly handled pointers. If
a user or an automated system were tricked into opening a certain
specially crafted ZIP file, an attacker could possibly use this issue
to cause a denial of service. This issue only affected Ubuntu 16.04 ESM,
Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2022-26291)
It was discovered that Long Range ZIP incorrectly handled memory allocation,
which could lead to a heap memory corruption. An attacker could possibly use
this issue to cause denial of service. This issue affected Ubuntu 14.04 ESM,
Ubuntu 16.04 ESM, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and
Ubuntu 22.10. (CVE-2022-28044)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 22.10:
lrzip 0.651-2ubuntu0.22.10.1
Ubuntu 22.04 LTS:
lrzip 0.651-2ubuntu0.22.04.1
Ubuntu 20.04 LTS:
lrzip 0.631+git180528-1+deb10u1build0.20.04.1
Ubuntu 18.04 LTS:
lrzip 0.631-1+deb9u3build0.18.04.1
Ubuntu 16.04 ESM:
lrzip 0.621-1ubuntu0.1~esm2
Ubuntu 14.04 ESM:
lrzip 0.616-1ubuntu0.1~esm2
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5840-1
CVE-2018-5786, CVE-2020-25467, CVE-2021-27345, CVE-2021-27347,
CVE-2022-26291, CVE-2022-28044
Package Information:
https://launchpad.net/ubuntu/+source/lrzip/0.651-2ubuntu0.22.10.1
https://launchpad.net/ubuntu/+source/lrzip/0.651-2ubuntu0.22.04.1
https://launchpad.net/ubuntu/+source/lrzip/0.631+git180528-1+deb10u1build0.20.04.1
https://launchpad.net/ubuntu/+source/lrzip/0.631-1+deb9u3build0.18.04.1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=grCX
-----END PGP PUBLIC KEY BLOCK-----
==========================================================================
Ubuntu Security Notice USN-5840-1
February 02, 2023
lrzip vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 22.10
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 ESM
- Ubuntu 14.04 ESM
Summary:
Several security issues were fixed in Long Range ZIP.
Software Description:
- lrzip: compression program with a very high compression ratio
Details:
It was discovered that Long Range ZIP incorrectly handled pointers. If
a user or an automated system were tricked into opening a certain
specially crafted ZIP file, an attacker could possibly use this issue
to cause a denial of service. This issue only affected Ubuntu 14.04 ESM,
Ubuntu 16.04 ESM, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2020-25467)
It was discovered that Long Range ZIP incorrectly handled pointers. If
a user or an automated system were tricked into opening a certain
specially crafted ZIP file, an attacker could possibly use this issue
to cause a denial of service. This issue only affected Ubuntu 18.04 LTS
and Ubuntu 20.04 LTS. (CVE-2021-27345, CVE-2021-27347)
It was discovered that Long Range ZIP incorrectly handled pointers. If
a user or an automated system were tricked into opening a certain
specially crafted ZIP file, an attacker could possibly use this issue
to cause a denial of service. This issue only affected Ubuntu 16.04 ESM,
Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2022-26291)
It was discovered that Long Range ZIP incorrectly handled memory allocation,
which could lead to a heap memory corruption. An attacker could possibly use
this issue to cause denial of service. This issue affected Ubuntu 14.04 ESM,
Ubuntu 16.04 ESM, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and
Ubuntu 22.10. (CVE-2022-28044)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 22.10:
lrzip 0.651-2ubuntu0.22.10.1
Ubuntu 22.04 LTS:
lrzip 0.651-2ubuntu0.22.04.1
Ubuntu 20.04 LTS:
lrzip 0.631+git180528-1+deb10u1build0.20.04.1
Ubuntu 18.04 LTS:
lrzip 0.631-1+deb9u3build0.18.04.1
Ubuntu 16.04 ESM:
lrzip 0.621-1ubuntu0.1~esm2
Ubuntu 14.04 ESM:
lrzip 0.616-1ubuntu0.1~esm2
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5840-1
CVE-2018-5786, CVE-2020-25467, CVE-2021-27345, CVE-2021-27347,
CVE-2022-26291, CVE-2022-28044
Package Information:
https://launchpad.net/ubuntu/+source/lrzip/0.651-2ubuntu0.22.10.1
https://launchpad.net/ubuntu/+source/lrzip/0.651-2ubuntu0.22.04.1
https://launchpad.net/ubuntu/+source/lrzip/0.631+git180528-1+deb10u1build0.20.04.1
https://launchpad.net/ubuntu/+source/lrzip/0.631-1+deb9u3build0.18.04.1
[USN-5839-2] Apache HTTP Server vulnerability
==========================================================================
Ubuntu Security Notice USN-5839-2
February 02, 2023
apache2 vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 16.04 ESM
Summary:
Several security issues were fixed in Apache HTTP Server.
Software Description:
- apache2: Apache HTTP server
Details:
USN-5839-1 fixed a vulnerability in Apache. This update provides
the corresponding update for Ubuntu 16.04 ESM.
Original advisory details:
Dimas Fariski Setyawan Putra discovered that the Apache HTTP Server
mod_proxy module incorrectly truncated certain response headers. This may
result in later headers not being interpreted by the client.
(CVE-2022-37436)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 16.04 ESM:
apache2 2.4.18-2ubuntu3.17+esm9
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5839-2
https://ubuntu.com/security/notices/USN-5839-1
CVE-2022-37436
Ubuntu Security Notice USN-5839-2
February 02, 2023
apache2 vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 16.04 ESM
Summary:
Several security issues were fixed in Apache HTTP Server.
Software Description:
- apache2: Apache HTTP server
Details:
USN-5839-1 fixed a vulnerability in Apache. This update provides
the corresponding update for Ubuntu 16.04 ESM.
Original advisory details:
Dimas Fariski Setyawan Putra discovered that the Apache HTTP Server
mod_proxy module incorrectly truncated certain response headers. This may
result in later headers not being interpreted by the client.
(CVE-2022-37436)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 16.04 ESM:
apache2 2.4.18-2ubuntu3.17+esm9
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5839-2
https://ubuntu.com/security/notices/USN-5839-1
CVE-2022-37436
OpenBSD Errata: February 2, 2023 (sshd)
Errata patch for sshd(8) has been released for OpenBSD 7.2.
Binary updates for the amd64, i386 and arm64 platform are available
via the syspatch utility. Source code patches can be found on the
respective errata page:
https://www.openbsd.org/errata72.html
Binary updates for the amd64, i386 and arm64 platform are available
via the syspatch utility. Source code patches can be found on the
respective errata page:
https://www.openbsd.org/errata72.html
Wednesday, February 1, 2023
[USN-5837-2] Django vulnerability
==========================================================================
Ubuntu Security Notice USN-5837-2
February 01, 2023
python-django vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 16.04 ESM
Summary:
Django could be made to consume memory if it received specially crafted
network traffic.
Software Description:
- python-django: High-level Python web development framework
Details:
USN-5837-1 fixed a vulnerability in Django. This update provides
the corresponding update for Ubuntu 16.04 ESM.
Original advisory details:
Nick Pope discovered that Django incorrectly handled certain
Accept-Language headers. A remote attacker could possibly use this issue to
cause Django to consume memory, leading to a denial of service.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 16.04 ESM:
python-django 1.8.7-1ubuntu5.15+esm6
python3-django 1.8.7-1ubuntu5.15+esm6
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5837-2
https://ubuntu.com/security/notices/USN-5837-1
CVE-2023-23969
Ubuntu Security Notice USN-5837-2
February 01, 2023
python-django vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 16.04 ESM
Summary:
Django could be made to consume memory if it received specially crafted
network traffic.
Software Description:
- python-django: High-level Python web development framework
Details:
USN-5837-1 fixed a vulnerability in Django. This update provides
the corresponding update for Ubuntu 16.04 ESM.
Original advisory details:
Nick Pope discovered that Django incorrectly handled certain
Accept-Language headers. A remote attacker could possibly use this issue to
cause Django to consume memory, leading to a denial of service.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 16.04 ESM:
python-django 1.8.7-1ubuntu5.15+esm6
python3-django 1.8.7-1ubuntu5.15+esm6
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5837-2
https://ubuntu.com/security/notices/USN-5837-1
CVE-2023-23969
[USN-5838-1] AdvanceCOMP vulnerabilities
==========================================================================
Ubuntu Security Notice USN-5838-1
February 01, 2023
advancecomp vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 22.10
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 ESM
Summary:
Several security issues were fixed in AdvanceCOMP.
Software Description:
- advancecomp: collection of recompression utilities
Details:
It was discovered that AdvanceCOMP did not properly manage memory while
performing read operations on MNG file. If a user were tricked into opening
a specially crafted MNG file, a remote attacker could possibly use this
issue to cause AdvanceCOMP to crash, resulting in a denial of service.
(CVE-2022-35014, CVE-2022-35017, CVE-2022-35018, CVE-2022-35019,
CVE-2022-35020)
It was discovered that AdvanceCOMP did not properly manage memory while
performing read operations on ZIP file. If a user were tricked into opening
a specially crafted ZIP file, a remote attacker could possibly use this
issue to cause AdvanceCOMP to crash, resulting in a denial of service.
(CVE-2022-35015, CVE-2022-35016)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 22.10:
advancecomp 2.3-1ubuntu0.22.10.1
Ubuntu 22.04 LTS:
advancecomp 2.1-2.1ubuntu2.1
Ubuntu 20.04 LTS:
advancecomp 2.1-2.1ubuntu0.20.04.1
Ubuntu 18.04 LTS:
advancecomp 2.1-1ubuntu0.18.04.3
Ubuntu 16.04 ESM:
advancecomp 1.20-1ubuntu0.2+esm2
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5838-1
CVE-2022-35014, CVE-2022-35015, CVE-2022-35016, CVE-2022-35017,
CVE-2022-35018, CVE-2022-35019, CVE-2022-35020
Package Information:
https://launchpad.net/ubuntu/+source/advancecomp/2.3-1ubuntu0.22.10.1
https://launchpad.net/ubuntu/+source/advancecomp/2.1-2.1ubuntu2.1
https://launchpad.net/ubuntu/+source/advancecomp/2.1-2.1ubuntu0.20.04.1
https://launchpad.net/ubuntu/+source/advancecomp/2.1-1ubuntu0.18.04.3
Ubuntu Security Notice USN-5838-1
February 01, 2023
advancecomp vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 22.10
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 ESM
Summary:
Several security issues were fixed in AdvanceCOMP.
Software Description:
- advancecomp: collection of recompression utilities
Details:
It was discovered that AdvanceCOMP did not properly manage memory while
performing read operations on MNG file. If a user were tricked into opening
a specially crafted MNG file, a remote attacker could possibly use this
issue to cause AdvanceCOMP to crash, resulting in a denial of service.
(CVE-2022-35014, CVE-2022-35017, CVE-2022-35018, CVE-2022-35019,
CVE-2022-35020)
It was discovered that AdvanceCOMP did not properly manage memory while
performing read operations on ZIP file. If a user were tricked into opening
a specially crafted ZIP file, a remote attacker could possibly use this
issue to cause AdvanceCOMP to crash, resulting in a denial of service.
(CVE-2022-35015, CVE-2022-35016)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 22.10:
advancecomp 2.3-1ubuntu0.22.10.1
Ubuntu 22.04 LTS:
advancecomp 2.1-2.1ubuntu2.1
Ubuntu 20.04 LTS:
advancecomp 2.1-2.1ubuntu0.20.04.1
Ubuntu 18.04 LTS:
advancecomp 2.1-1ubuntu0.18.04.3
Ubuntu 16.04 ESM:
advancecomp 1.20-1ubuntu0.2+esm2
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5838-1
CVE-2022-35014, CVE-2022-35015, CVE-2022-35016, CVE-2022-35017,
CVE-2022-35018, CVE-2022-35019, CVE-2022-35020
Package Information:
https://launchpad.net/ubuntu/+source/advancecomp/2.3-1ubuntu0.22.10.1
https://launchpad.net/ubuntu/+source/advancecomp/2.1-2.1ubuntu2.1
https://launchpad.net/ubuntu/+source/advancecomp/2.1-2.1ubuntu0.20.04.1
https://launchpad.net/ubuntu/+source/advancecomp/2.1-1ubuntu0.18.04.3
[USN-5837-1] Django vulnerability
==========================================================================
Ubuntu Security Notice USN-5837-1
February 01, 2023
python-django vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 22.10
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
Summary:
Django could be made to consume memory if it received specially crafted
network traffic.
Software Description:
- python-django: High-level Python web development framework
Details:
Nick Pope discovered that Django incorrectly handled certain
Accept-Language headers. A remote attacker could possibly use this issue to
cause Django to consume memory, leading to a denial of service.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 22.10:
python3-django 3:3.2.15-1ubuntu1.1
Ubuntu 22.04 LTS:
python3-django 2:3.2.12-2ubuntu1.4
Ubuntu 20.04 LTS:
python3-django 2:2.2.12-1ubuntu0.15
Ubuntu 18.04 LTS:
python-django 1:1.11.11-1ubuntu1.19
python3-django 1:1.11.11-1ubuntu1.19
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5837-1
CVE-2023-23969
Package Information:
https://launchpad.net/ubuntu/+source/python-django/3:3.2.15-1ubuntu1.1
https://launchpad.net/ubuntu/+source/python-django/2:3.2.12-2ubuntu1.4
https://launchpad.net/ubuntu/+source/python-django/2:2.2.12-1ubuntu0.15
https://launchpad.net/ubuntu/+source/python-django/1:1.11.11-1ubuntu1.19
Ubuntu Security Notice USN-5837-1
February 01, 2023
python-django vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 22.10
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
Summary:
Django could be made to consume memory if it received specially crafted
network traffic.
Software Description:
- python-django: High-level Python web development framework
Details:
Nick Pope discovered that Django incorrectly handled certain
Accept-Language headers. A remote attacker could possibly use this issue to
cause Django to consume memory, leading to a denial of service.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 22.10:
python3-django 3:3.2.15-1ubuntu1.1
Ubuntu 22.04 LTS:
python3-django 2:3.2.12-2ubuntu1.4
Ubuntu 20.04 LTS:
python3-django 2:2.2.12-1ubuntu0.15
Ubuntu 18.04 LTS:
python-django 1:1.11.11-1ubuntu1.19
python3-django 1:1.11.11-1ubuntu1.19
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5837-1
CVE-2023-23969
Package Information:
https://launchpad.net/ubuntu/+source/python-django/3:3.2.15-1ubuntu1.1
https://launchpad.net/ubuntu/+source/python-django/2:3.2.12-2ubuntu1.4
https://launchpad.net/ubuntu/+source/python-django/2:2.2.12-1ubuntu0.15
https://launchpad.net/ubuntu/+source/python-django/1:1.11.11-1ubuntu1.19
[USN-5839-1] Apache HTTP Server vulnerabilities
==========================================================================
Ubuntu Security Notice USN-5839-1
February 01, 2023
apache2 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 22.10
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
Summary:
Several security issues were fixed in Apache HTTP Server.
Software Description:
- apache2: Apache HTTP server
Details:
It was discovered that the Apache HTTP Server mod_dav module incorrectly
handled certain If: request headers. A remote attacker could possibly use
this issue to cause the server to crash, resulting in a denial of service.
(CVE-2006-20001)
ZeddYu_Lu discovered that the Apache HTTP Server mod_proxy_ajp module
incorrectly interpreted certain HTTP Requests. A remote attacker could
possibly use this issue to perform an HTTP Request Smuggling attack.
(CVE-2022-36760)
Dimas Fariski Setyawan Putra discovered that the Apache HTTP Server
mod_proxy module incorrectly truncated certain response headers. This may
result in later headers not being interpreted by the client.
(CVE-2022-37436)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 22.10:
apache2 2.4.54-2ubuntu1.1
Ubuntu 22.04 LTS:
apache2 2.4.52-1ubuntu4.3
Ubuntu 20.04 LTS:
apache2 2.4.41-4ubuntu3.13
Ubuntu 18.04 LTS:
apache2 2.4.29-1ubuntu4.26
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5839-1
CVE-2006-20001, CVE-2022-36760, CVE-2022-37436
Package Information:
https://launchpad.net/ubuntu/+source/apache2/2.4.54-2ubuntu1.1
https://launchpad.net/ubuntu/+source/apache2/2.4.52-1ubuntu4.3
https://launchpad.net/ubuntu/+source/apache2/2.4.41-4ubuntu3.13
https://launchpad.net/ubuntu/+source/apache2/2.4.29-1ubuntu4.26
Ubuntu Security Notice USN-5839-1
February 01, 2023
apache2 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 22.10
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
Summary:
Several security issues were fixed in Apache HTTP Server.
Software Description:
- apache2: Apache HTTP server
Details:
It was discovered that the Apache HTTP Server mod_dav module incorrectly
handled certain If: request headers. A remote attacker could possibly use
this issue to cause the server to crash, resulting in a denial of service.
(CVE-2006-20001)
ZeddYu_Lu discovered that the Apache HTTP Server mod_proxy_ajp module
incorrectly interpreted certain HTTP Requests. A remote attacker could
possibly use this issue to perform an HTTP Request Smuggling attack.
(CVE-2022-36760)
Dimas Fariski Setyawan Putra discovered that the Apache HTTP Server
mod_proxy module incorrectly truncated certain response headers. This may
result in later headers not being interpreted by the client.
(CVE-2022-37436)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 22.10:
apache2 2.4.54-2ubuntu1.1
Ubuntu 22.04 LTS:
apache2 2.4.52-1ubuntu4.3
Ubuntu 20.04 LTS:
apache2 2.4.41-4ubuntu3.13
Ubuntu 18.04 LTS:
apache2 2.4.29-1ubuntu4.26
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5839-1
CVE-2006-20001, CVE-2022-36760, CVE-2022-37436
Package Information:
https://launchpad.net/ubuntu/+source/apache2/2.4.54-2ubuntu1.1
https://launchpad.net/ubuntu/+source/apache2/2.4.52-1ubuntu4.3
https://launchpad.net/ubuntu/+source/apache2/2.4.41-4ubuntu3.13
https://launchpad.net/ubuntu/+source/apache2/2.4.29-1ubuntu4.26
[USN-4781-2] Slurm vulnerabilities
-----BEGIN PGP PUBLIC KEY BLOCK-----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=RGXl
-----END PGP PUBLIC KEY BLOCK-----
==========================================================================
Ubuntu Security Notice USN-4781-2
February 01, 2023
slurm-llnl vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 16.04 ESM
- Ubuntu 14.04 ESM
Summary:
Several security issues were fixed in Slurm.
Software Description:
- slurm-llnl: Simple Linux Utility for Resource Management
Details:
USN-4781-1 fixed several vulnerabilities in Slurm. This update provides
the corresponding updates for Ubuntu 14.04 ESM (CVE-2016-10030) and
Ubuntu 16.04 ESM (CVE-2018-10995).
Original advisory details:
It was discovered that Slurm incorrectly handled certain messages
between the daemon and the user. An attacker could possibly use this
issue to assume control of an arbitrary file on the system. This
issue only affected Ubuntu 16.04 ESM.
(CVE-2016-10030)
It was discovered that Slurm mishandled SPANK environment variables.
An attacker could possibly use this issue to gain elevated privileges.
This issue only affected Ubuntu 16.04 ESM. (CVE-2017-15566)
It was discovered that Slurm mishandled certain SQL queries. A local
attacker could use this issue to gain elevated privileges. This
issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and
Ubuntu 18.04 ESM. (CVE-2018-7033)
It was discovered that Slurm mishandled user names and group ids. A local
attacker could use this issue to gain administrative privileges.
This issue only affected Ubuntu 14.04 ESM and Ubuntu 18.04 ESM.
(CVE-2018-10995)
It was discovered that Slurm mishandled 23-bit systems. A local attacker
could use this to gain administrative privileges. This issue only affected
Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2019-6438)
It was discovered that Slurm incorrectly handled certain inputs
when Message Aggregation is enabled. An attacker could possibly
use this issue to launch a process as an arbitrary user.
This issue only affected Ubuntu 16.04 ESM, Ubuntu 18.04 ESM
and Ubuntu 20.04 ESM. (CVE-2020-12693)
It was discovered that Slurm incorrectly handled certain RPC inputs.
An attacker could possibly use this issue to execute arbitrary code.
This issue only affected Ubuntu 18.04 ESM and Ubuntu 20.04 ESM.
(CVE-2020-27745)
Jonas Stare discovered that Slurm exposes sensitive information related
to the X protocol. An attacker could possibly use this issue to obtain
a graphical session from an arbitrary user. This issue only affected
Ubuntu 18.04 ESM and Ubuntu 20.04 ESM. (CVE-2020-27746)
It was discovered that Slurm incorrectly handled environment parameters.
An attacker could possibly use this issue to execute arbitrary code.
(CVE-2021-31215)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 16.04 ESM:
libpam-slurm 15.08.7-1ubuntu0.1~esm5
libpmi0 15.08.7-1ubuntu0.1~esm5
libslurm-perl 15.08.7-1ubuntu0.1~esm5
libslurm29 15.08.7-1ubuntu0.1~esm5
libslurmdb-perl 15.08.7-1ubuntu0.1~esm5
libslurmdb29 15.08.7-1ubuntu0.1~esm5
slurm-client 15.08.7-1ubuntu0.1~esm5
slurm-client-emulator 15.08.7-1ubuntu0.1~esm5
slurm-llnl 15.08.7-1ubuntu0.1~esm5
slurm-llnl-slurmdbd 15.08.7-1ubuntu0.1~esm5
slurm-wlm 15.08.7-1ubuntu0.1~esm5
slurm-wlm-basic-plugins 15.08.7-1ubuntu0.1~esm5
slurm-wlm-emulator 15.08.7-1ubuntu0.1~esm5
slurm-wlm-torque 15.08.7-1ubuntu0.1~esm5
slurmctld 15.08.7-1ubuntu0.1~esm5
slurmd 15.08.7-1ubuntu0.1~esm5
slurmdbd 15.08.7-1ubuntu0.1~esm5
sview 15.08.7-1ubuntu0.1~esm5
Ubuntu 14.04 ESM:
libpam-slurm 2.6.5-1ubuntu0.1~esm6
libpmi0 2.6.5-1ubuntu0.1~esm6
libslurm-perl 2.6.5-1ubuntu0.1~esm6
libslurm26 2.6.5-1ubuntu0.1~esm6
libslurmdb-perl 2.6.5-1ubuntu0.1~esm6
libslurmdb26 2.6.5-1ubuntu0.1~esm6
slurm-llnl 2.6.5-1ubuntu0.1~esm6
slurm-llnl-basic-plugins 2.6.5-1ubuntu0.1~esm6
slurm-llnl-slurmdbd 2.6.5-1ubuntu0.1~esm6
slurm-llnl-sview 2.6.5-1ubuntu0.1~esm6
slurm-llnl-torque 2.6.5-1ubuntu0.1~esm6
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-4781-2
https://ubuntu.com/security/notices/USN-4781-1
CVE-2016-10030, CVE-2018-10995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=RGXl
-----END PGP PUBLIC KEY BLOCK-----
==========================================================================
Ubuntu Security Notice USN-4781-2
February 01, 2023
slurm-llnl vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 16.04 ESM
- Ubuntu 14.04 ESM
Summary:
Several security issues were fixed in Slurm.
Software Description:
- slurm-llnl: Simple Linux Utility for Resource Management
Details:
USN-4781-1 fixed several vulnerabilities in Slurm. This update provides
the corresponding updates for Ubuntu 14.04 ESM (CVE-2016-10030) and
Ubuntu 16.04 ESM (CVE-2018-10995).
Original advisory details:
It was discovered that Slurm incorrectly handled certain messages
between the daemon and the user. An attacker could possibly use this
issue to assume control of an arbitrary file on the system. This
issue only affected Ubuntu 16.04 ESM.
(CVE-2016-10030)
It was discovered that Slurm mishandled SPANK environment variables.
An attacker could possibly use this issue to gain elevated privileges.
This issue only affected Ubuntu 16.04 ESM. (CVE-2017-15566)
It was discovered that Slurm mishandled certain SQL queries. A local
attacker could use this issue to gain elevated privileges. This
issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and
Ubuntu 18.04 ESM. (CVE-2018-7033)
It was discovered that Slurm mishandled user names and group ids. A local
attacker could use this issue to gain administrative privileges.
This issue only affected Ubuntu 14.04 ESM and Ubuntu 18.04 ESM.
(CVE-2018-10995)
It was discovered that Slurm mishandled 23-bit systems. A local attacker
could use this to gain administrative privileges. This issue only affected
Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2019-6438)
It was discovered that Slurm incorrectly handled certain inputs
when Message Aggregation is enabled. An attacker could possibly
use this issue to launch a process as an arbitrary user.
This issue only affected Ubuntu 16.04 ESM, Ubuntu 18.04 ESM
and Ubuntu 20.04 ESM. (CVE-2020-12693)
It was discovered that Slurm incorrectly handled certain RPC inputs.
An attacker could possibly use this issue to execute arbitrary code.
This issue only affected Ubuntu 18.04 ESM and Ubuntu 20.04 ESM.
(CVE-2020-27745)
Jonas Stare discovered that Slurm exposes sensitive information related
to the X protocol. An attacker could possibly use this issue to obtain
a graphical session from an arbitrary user. This issue only affected
Ubuntu 18.04 ESM and Ubuntu 20.04 ESM. (CVE-2020-27746)
It was discovered that Slurm incorrectly handled environment parameters.
An attacker could possibly use this issue to execute arbitrary code.
(CVE-2021-31215)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 16.04 ESM:
libpam-slurm 15.08.7-1ubuntu0.1~esm5
libpmi0 15.08.7-1ubuntu0.1~esm5
libslurm-perl 15.08.7-1ubuntu0.1~esm5
libslurm29 15.08.7-1ubuntu0.1~esm5
libslurmdb-perl 15.08.7-1ubuntu0.1~esm5
libslurmdb29 15.08.7-1ubuntu0.1~esm5
slurm-client 15.08.7-1ubuntu0.1~esm5
slurm-client-emulator 15.08.7-1ubuntu0.1~esm5
slurm-llnl 15.08.7-1ubuntu0.1~esm5
slurm-llnl-slurmdbd 15.08.7-1ubuntu0.1~esm5
slurm-wlm 15.08.7-1ubuntu0.1~esm5
slurm-wlm-basic-plugins 15.08.7-1ubuntu0.1~esm5
slurm-wlm-emulator 15.08.7-1ubuntu0.1~esm5
slurm-wlm-torque 15.08.7-1ubuntu0.1~esm5
slurmctld 15.08.7-1ubuntu0.1~esm5
slurmd 15.08.7-1ubuntu0.1~esm5
slurmdbd 15.08.7-1ubuntu0.1~esm5
sview 15.08.7-1ubuntu0.1~esm5
Ubuntu 14.04 ESM:
libpam-slurm 2.6.5-1ubuntu0.1~esm6
libpmi0 2.6.5-1ubuntu0.1~esm6
libslurm-perl 2.6.5-1ubuntu0.1~esm6
libslurm26 2.6.5-1ubuntu0.1~esm6
libslurmdb-perl 2.6.5-1ubuntu0.1~esm6
libslurmdb26 2.6.5-1ubuntu0.1~esm6
slurm-llnl 2.6.5-1ubuntu0.1~esm6
slurm-llnl-basic-plugins 2.6.5-1ubuntu0.1~esm6
slurm-llnl-slurmdbd 2.6.5-1ubuntu0.1~esm6
slurm-llnl-sview 2.6.5-1ubuntu0.1~esm6
slurm-llnl-torque 2.6.5-1ubuntu0.1~esm6
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-4781-2
https://ubuntu.com/security/notices/USN-4781-1
CVE-2016-10030, CVE-2018-10995
Subscribe to:
Posts (Atom)