Stay Secure with the Latest Linux Advisories

security advisoryexecutionubuntu

Ubuntu 18.04 LTS: 4552-1 Critical: Pam-Python Execution Risk

Pam-python could be made to crash or run programs as an administrator if certain environment variables are set.. =========================================================================Ubuntu Security Notice USN-4552-1 September 28, 2020 pam-python vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.04 LTS Summary: Pam-python could be made to crash or run programs as an administrator if certain environment variables are set. Software Description: - pam-python: Enables PAM modules to be written in Python Details: Malte Kraus discovered that Pam-python mishandled certain environment variables. A local attacker could potentially use this vulnerability to execute programs as root. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS: libpam-python 1.0.6-1.1+deb10u1build0.18.04.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4552-1 CVE-2019-16729 Package Information: https://launchpad.net/ubuntu/+source/pam-python/1.0.6-1.1+deb10u1build0.18.04.1 -- ubuntu-security-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce . A vulnerability in Pam-python within Ubuntu 18.04 enables local users to run programs with root permissions. It is advised to apply updates to mitigate potential security risks.. Pam-Python Security, Ubuntu Administration, Environment Variable Exploit. . LinuxSecurity.com Team

Sep 28, 2020 Ubuntu