=========================================================================Ubuntu Security Notice USN-5584-1
August 29, 2022

schroot vulnerability
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 ESM

Summary:

Schroot could be made to denial of service if certain
schroot names are used.

Software Description:
- schroot: Execute commands in a chroot environment

Details:

It was discovered that Schroot incorrectly handled certain Schroot names.
An attacker could possibly use this issue to break schroot's internal
state causing a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS:
  schroot                         1.6.10-12ubuntu3.1

Ubuntu 20.04 LTS:
  schroot                         1.6.10-9ubuntu0.1

Ubuntu 18.04 LTS:
  schroot                         1.6.10-4ubuntu0.1

Ubuntu 16.04 ESM:
  schroot                         1.6.10-1ubuntu3+esm1

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-5584-1
  CVE-2022-2787

Package Information:
  https://launchpad.net/ubuntu/+source/schroot/1.6.10-12ubuntu3.1
  https://launchpad.net/ubuntu/+source/schroot/1.6.10-9ubuntu0.1
  https://launchpad.net/ubuntu/+source/schroot/1.6.10-4ubuntu0.1

Ubuntu 5584-1: Schroot vulnerability

August 29, 2022
Schroot could be made to denial of service if certain schroot names are used.

Summary

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS: schroot 1.6.10-12ubuntu3.1 Ubuntu 20.04 LTS: schroot 1.6.10-9ubuntu0.1 Ubuntu 18.04 LTS: schroot 1.6.10-4ubuntu0.1 Ubuntu 16.04 ESM: schroot 1.6.10-1ubuntu3+esm1 In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5584-1

CVE-2022-2787

Severity
August 29, 2022

Package Information

https://launchpad.net/ubuntu/+source/schroot/1.6.10-12ubuntu3.1 https://launchpad.net/ubuntu/+source/schroot/1.6.10-9ubuntu0.1 https://launchpad.net/ubuntu/+source/schroot/1.6.10-4ubuntu0.1

Related News