Ubuntu 22.04 LTS USN-5426-1 Critical: Needrestart Execution Risk

ubuntu

May 17, 2022

needrestart could be made to run programs.

Summary

needrestart could be made to run programs.

Software Description:

- needrestart: check which daemons need to be restarted after library upgrades

Details:

Jakub Wilk discovered that needrestart incorrectly used some regular

expressions. A local attacker could possibly use this issue to execute

arbitrary code.

Topics Covered

security advisory critical local execution ubuntu execution risk needrestart

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS:
  needrestart                     3.5-5ubuntu2.1

Ubuntu 21.10:
  needrestart                     3.5-4ubuntu2.1

Ubuntu 20.04 LTS:
  needrestart                     3.4-6ubuntu0.1

Ubuntu 18.04 LTS:
  needrestart                     3.1-1ubuntu0.1

In general, a standard system update will make all the necessary changes.