Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 436
Alerts This Week
Warning Icon 1 436

Ubuntu 16.04 & 14.04: USN-3894-1 Critical: Gnome Keyring Threat

ubuntu
Calendar Grey February 26, 2019
Scroller Ubuntu
=========================================================================Ubuntu Security Notice USN-
GNOME Keyring could be made to expose sensitive information.

Summary

GNOME Keyring could be made to expose sensitive information.

Software Description:

- gnome-keyring: GNOME keyring services

Details:

It was discovered that GNOME Keyring incorrectly cleared out credentials

supplied to the PAM module. A local attacker could possibly use this issue

to discover login credentials.

Topics%20covered

Topics Covered

security advisory critical local attack pam module information exposure ubuntu gnome-keyring

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  gnome-keyring                   3.18.3-0ubuntu2.1
  libpam-gnome-keyring            3.18.3-0ubuntu2.1

Ubuntu 14.04 LTS:
  gnome-keyring                   3.10.1-1ubuntu4.4
  libpam-gnome-keyring            3.10.1-1ubuntu4.4

After a standard system update you need to restart your session to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-3894-1

CVE-2018-20781

Severity
critical
Lowest
Low
Medium
High
Critical

February 26, 2019

Topics%20covered

Topics Covered

security advisory critical local attack pam module information exposure ubuntu gnome-keyring

Package Information

https://launchpad.net/ubuntu/+source/gnome-keyring/3.18.3-0ubuntu2.1
https://launchpad.net/ubuntu/+source/gnome-keyring/3.10.1-1ubuntu4.4

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.