Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 428
Alerts This Week
Warning Icon 1 428

Ubuntu 19.04 LTS: USN-4052-1 moderate: whoopsie denial of service

ubuntu
Calendar Grey July 9, 2019
Dist Ubuntu Esm H88
An oversight flaw in Ubuntu may result in system failures or leakage of confidential information; patches have been released.
Whoopsie could be made to crash or expose sensitive information if it processed a specially crafted crash report.

Summary

Whoopsie could be made to crash or expose sensitive information if it

processed a specially crafted crash report.

Software Description:

- whoopsie: Ubuntu error tracker submission

Details:

Kevin Backhouse discovered Whoopsie incorrectly handled very large crash

reports. A local attacker could possibly use this issue to cause a denial of

service or expose sensitive information.

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
  libwhoopsie0                    0.2.64ubuntu0.1
  whoopsie                        0.2.64ubuntu0.1

Ubuntu 18.10:
  libwhoopsie0                    0.2.62ubuntu1
  whoopsie                        0.2.62ubuntu1

Ubuntu 18.04 LTS:
  libwhoopsie0                    0.2.62ubuntu0.1
  whoopsie                        0.2.62ubuntu0.1

Ubuntu 16.04 LTS:
  libwhoopsie0                    0.2.52.5ubuntu0.1
  whoopsie                        0.2.52.5ubuntu0.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4052-1

CVE-2019-11476

July 09, 2019

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.