NTFS-3G could be made to crash or run programs as an administrator if it mounted a specially crafted disk.. =========================================================================Ubuntu Security Notice USN-5711-1 November 02, 2022 ntfs-3g vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.10 - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: NTFS-3G could be made to crash or run programs as an administrator if it mounted a specially crafted disk. Software Description: - ntfs-3g: read/write NTFS driver for FUSE Details: Yuchen Zeng and Eduardo Vela discovered that NTFS-3G incorrectly validated certain NTFS metadata. A local attacker could possibly use this issue to gain privileges. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.10: ntfs-3g 1:2022.5.17-1ubuntu1.1 Ubuntu 22.04 LTS: ntfs-3g 1:2021.8.22-3ubuntu1.2 Ubuntu 20.04 LTS: ntfs-3g 1:2017.3.23AR.3-3ubuntu1.3 Ubuntu 18.04 LTS: ntfs-3g 1:2017.3.23-2ubuntu0.18.04.5 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5711-1 CVE-2022-40284 Package Information: https://launchpad.net/ubuntu/+source/ntfs-3g/1:2021.8.22-3ubuntu1.2 . Keep updated on the recent NTFS-3G flaw affecting Ubuntu, as it poses significant risks to system stability and management.. ntfs-3g, local privilege escalation, Ubuntu security, crash issue. . Severity: Critical. LinuxSecurity.com Team
policykit-1 could be made to run programs as an administrator.. =========================================================================Ubuntu Security Notice USN-5252-2 January 25, 2022 policykit-1 vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 ESM - Ubuntu 14.04 ESM Summary: policykit-1 could be made to run programs as an administrator. Software Description: - policykit-1: framework for managing administrative policies and privileges Details: USN-5252-1 fixed a vulnerability in policykit-1. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that the PolicyKit pkexec tool incorrectly handled command-line arguments. A local attacker could use this issue to escalate privileges to an administrator. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 ESM: policykit-1 0.105-14.1ubuntu0.5+esm1 Ubuntu 14.04 ESM: policykit-1 0.105-4ubuntu3.14.04.6+esm1 After a standard system update you need to reboot your computer to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5252-2 https://ubuntu.com/security/notices/USN-5252-1 CVE-2021-4034 . Uncover the recent vulnerability in PolicyKit outlined in Ubuntu Security Notice USN-5252-2, which poses risks to privilege elevation.. PolicyKit Vulnerability, Ubuntu ESM Security, Admin Privilege Escalation. . Severity: Important. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.