Ubuntu 17.04/16.10/16.04 USN-3310-1 Moderate: Lintian Code Execution

ubuntu

June 6, 2017

lintian could be made to run programs if it processed a specially crafted package.

Summary

lintian could be made to run programs if it processed a specially crafted

package.

Software Description:

- lintian: Debian package checker

Details:

Jakub Wilk discovered that lintian incorrectly handled deserializing

certain YAML files. If a user or automated system were tricked into running

lintian on a specially crafted package, a remote attacker could possibly

use this issue to execute arbitrary code.

Topics Covered

security advisory moderate software update code execution Ubuntu arbitrary code lintian

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 17.04:
  lintian                         2.5.50.1ubuntu0.1

Ubuntu 16.10:
  lintian                         2.5.48ubuntu0.1

Ubuntu 16.04 LTS:
  lintian                         2.5.43ubuntu0.1

In general, a standard system update will make all the necessary changes.