lintian could be made to run programs if it processed a specially crafted package.. =========================================================================Ubuntu Security Notice USN-3310-1 June 06, 2017 lintian vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 17.04 - Ubuntu 16.10 - Ubuntu 16.04 LTS Summary: lintian could be made to run programs if it processed a specially crafted package. Software Description: - lintian: Debian package checker Details: Jakub Wilk discovered that lintian incorrectly handled deserializing certain YAML files. If a user or automated system were tricked into running lintian on a specially crafted package, a remote attacker could possibly use this issue to execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 17.04: lintian 2.5.50.1ubuntu0.1 Ubuntu 16.10: lintian 2.5.48ubuntu0.1 Ubuntu 16.04 LTS: lintian 2.5.43ubuntu0.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-3310-1 CVE-2017-8829 Package Information: https://launchpad.net/ubuntu/+source/lintian/2.5.50.1ubuntu0.1 https://launchpad.net/ubuntu/+source/lintian/2.5.48ubuntu0.1 https://launchpad.net/ubuntu/+source/lintian/2.5.43ubuntu0.1 . The recent Security Update USN-3310-2 addresses a critical vulnerability in OpenSSL that could allow unauthorized access on various Ubuntu releases.. lintian Exploit, Ubuntu Security Update, Code Execution Risk. . LinuxSecurity.com Team
It was discovered that lintian did not correctly validate certainfilenames when processing input. If a user or an automated systemwere tricked into running lintian on a specially crafted set of files,a remote attacker could execute arbitrary code with user privileges. [More...]. ==========================================================Ubuntu Security Notice USN-891-1 January 28, 2010 lintian vulnerabilities CVE-2009-4013, CVE-2009-4014, CVE-2009-4015 ========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 8.04 LTS Ubuntu 8.10 Ubuntu 9.04 Ubuntu 9.10 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: lintian 1.23.16ubuntu2.1 Ubuntu 8.04 LTS: lintian 1.23.46ubuntu0.1 Ubuntu 8.10: lintian 1.24.3ubuntu0.1 Ubuntu 9.04: lintian 2.2.5ubuntu1.1 Ubuntu 9.10: lintian 2.2.17ubuntu1.1 In general, a standard system upgrade is sufficient to effect the necessary changes. Details follow: It was discovered that lintian did not correctly validate certain filenames when processing input. If a user or an automated system were tricked into running lintian on a specially crafted set of files, a remote attacker could execute arbitrary code with user privileges. Updated packages for Ubuntu 6.06 LTS: Source archives: Size/MD5: 830 a47fe6f70e2eba48fb33d0564b9725e4 Size/MD5: 276511 50d6bfca45e5bed01983bdc83b00d19a Architecture independent packages: Size/MD5: 238462 db9ef682ad8968f5654e5cf61eefb758 Updated packages for Ubuntu 8.04 LTS: Source archives: Size/MD5: 1015 f920dd072c6a0f3a468999c3bbbbe121 Size/MD5: 396901 7778649c0f4fb64428b9b4ff895e1a37 Architecture independentpackages: Size/MD5: 329624 9a624f6eb3664bb2c22be3d1af3206d6 Updated packages for Ubuntu 8.10: Source archives: Size/MD5: 1244 0f8c73db743ead863a7d3488b476ee0d Size/MD5: 485785 a7d56250c3cb465c4312aa40ad5beda0 Architecture independent packages: Size/MD5: 359254 a6caa1f945de160e203f28bbfd842912 Updated packages for Ubuntu 9.04: Source archives: Size/MD5: 1284 e4c08e6d5485857e84d5354cdf01e9f6 Size/MD5: 634606 d3fee56c7bedbe0088ce8749f44bcacf Architecture independent packages: Size/MD5: 437450 927b8d2bf0fde9a62267a44d7f1779d3 Updated packages for Ubuntu 9.10: Source archives: Size/MD5: 1283 2845994c571ce78a3be8b2121c950db9 Size/MD5: 747007 dab8b5b18c5f0904df90b07027223af0 Architecture independent packages: Size/MD5: 475958 4b633e03d586b04674a9c8266b6d3273 . Mitigating lintian security weaknesses in Ubuntu may enable remote code execution with user-level permissions on compromised installations.. Ubuntu Security,Lintian Issue,Remote Code Attack,Linux Advisory. . Severity: Important. LinuxSecurity.com Team
Multiple vulnerabilities have been discovered in lintian, a Debian package checker. The following Common Vulnerabilities and Exposures project ids have been assigned to identify them: . - ------------------------------------------------------------------------ Debian Security Advisory DSA-1979-1
Jeroen van Wolffelaar discovered a problem in lintian, the Debian package checker. The program removes the working directory even if it wasn't created at program start, removing an unrelated file or directory a malicious user inserted via a symlink attack.. --------------------------------------------------------------------------Debian Security Advisory DSA 630-1
Get the latest Linux and open source security news straight to your inbox.