Linux Security
    Linux Security
    Linux Security

    Ubuntu 4539-1: AWL vulnerability

    Date
    95
    Posted By
    DAViCal Andrew's Web Libraries could be made to run programs as your login if it received specially crafted input.
    ==========================================================================
    Ubuntu Security Notice USN-4539-1
    September 24, 2020
    
    awl vulnerability
    ==========================================================================
    
    A security issue affects these releases of Ubuntu and its derivatives:
    
    - Ubuntu 20.04 LTS
    
    Summary:
    
    DAViCal Andrew's Web Libraries could be made to run programs as your login
    if it received specially crafted input.
    
    Software Description:
    - awl: PHP Utility Libraries
    
    Details:
    
    Andrew Bartlett discovered that DAViCal Andrew's Web Libraries (AWL) did
    not properly manage session keys. An attacker could possibly use this
    issue to impersonate a session. (CVE-2020-11728)
    
    Update instructions:
    
    The problem can be corrected by updating your system to the following
    package versions:
    
    Ubuntu 20.04 LTS:
      libawl-php                      0.60-1+deb10u1ubuntu1
    
    In general, a standard system update will make all the necessary changes.
    
    References:
      https://usn.ubuntu.com/4539-1
      CVE-2020-11728
    
    Package Information:
      https://launchpad.net/ubuntu/+source/awl/0.60-1+deb10u1ubuntu1
    
    
    

    Advisories

    LinuxSecurity Poll

    Tails is the most secure Linux distro out there.

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 2 answer(s).
    /main-polls/41-ubuntu-is-a-more-secure-distro-than-fedora?task=poll.vote&format=json
    41
    radio
    [{"id":"142","title":"Yes - Tails get my vote!","votes":"1","type":"x","order":"1","pct":100,"resources":[]},{"id":"143","title":"Nope - Parrot OS has surpassed Tails in its security and privacy.","votes":"0","type":"x","order":"2","pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350


    VIEW MORE POLLS

    bottom 200

    Please enable / Bitte aktiviere JavaScript!
    Veuillez activer / Por favor activa el Javascript![ ? ]

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.