Several security issues were fixed in whoopsie.. =========================================================================Ubuntu Security Notice USN-4450-1 August 04, 2020 whoopsie vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Several security issues were fixed in whoopsie. Software Description: - whoopsie: Ubuntu error tracker submission Details: Seong-Joong Kim discovered that Whoopsie incorrectly handled memory. A local attacker could use this issue to cause Whoopsie to consume memory, resulting in a denial of service. (CVE-2020-11937) Seong-Joong Kim discovered that Whoopsie incorrectly handled parsing files. A local attacker could use this issue to cause Whoopsie to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2020-12135) Seong-Joong Kim discovered that Whoopsie incorrectly handled memory. A local attacker could use this issue to cause Whoopsie to consume memory, resulting in a denial of service. (CVE-2020-15570) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS: libwhoopsie0 0.2.69ubuntu0.1 whoopsie 0.2.69ubuntu0.1 Ubuntu 18.04 LTS: libwhoopsie0 0.2.62ubuntu0.5 whoopsie 0.2.62ubuntu0.5 Ubuntu 16.04 LTS: libwhoopsie0 0.2.52.5ubuntu0.5 whoopsie 0.2.52.5ubuntu0.5 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4450-1 CVE-2020-11937, CVE-2020-12135, CVE-2020-15570 Package Information: https://launchpad.net/ubuntu/+source/whoopsie/0.2.69ubuntu0.1 https://launchpad.net/ubuntu/+source/whoopsie/0.2.62ubuntu0.5 https://launchpad.net/ubuntu/+source/whoopsie/0.2.52.5ubuntu0.5 . Recent findings reveal significant vulnerabilities in Ubuntu LTS versions 20.04, 18.04, and 16.04, urging users to update promptly to enhance security. whoopsie vulnerabilities, Ubuntu updates, local attack risks. . Severity: Important. LinuxSecurity.com Team
USN-4170-2 caused a regression in Whoopsie. =========================================================================Ubuntu Security Notice USN-4170-3 November 05, 2019 whoopsie regression ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 19.10 - Ubuntu 19.04 - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: USN-4170-2 caused a regression in Whoopsie Software Description: - whoopsie: Ubuntu error tracker submission Details: USN-4170-1 fixed a vulnerability in Whoopsie and USN-4170-2 fixed a subsequent regression. That update was incomplete and could still result in Whoopsie potentially crashing when uploading crash reports on some architectures. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Kevin Backhouse discovered Whoopsie incorrectly handled very large crash reports. A local attacker could possibly use this issue to cause a denial of service, expose sensitive information or execute code as the whoopsie user. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 19.10: libwhoopsie0 0.2.66ubuntu0.3 whoopsie 0.2.66ubuntu0.3 Ubuntu 19.04: libwhoopsie0 0.2.64ubuntu0.4 whoopsie 0.2.64ubuntu0.4 Ubuntu 18.04 LTS: libwhoopsie0 0.2.62ubuntu0.4 whoopsie 0.2.62ubuntu0.4 Ubuntu 16.04 LTS: libwhoopsie0 0.2.52.5ubuntu0.4 whoopsie 0.2.52.5ubuntu0.4 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4170-3 https://ubuntu.com/security/notices/USN-4170-1 https://bugs.launchpad.net/ubuntu/+source/whoopsie/+bug/1850608 Package Information: https://launchpad.net/ubuntu/+source/whoopsie/0.2.66ubuntu0.3 https://launchpad.net/ubuntu/+source/whoopsie/0.2.64ubuntu0.4 https://launchpad.net/ubuntu/+source/whoopsie/0.2.62ubuntu0.4 https://launchpad.net/ubuntu/+source/whoopsie/0.2.52.5ubuntu0.4 . Ubuntu Security Announcement USN-4181-2 tackles a vulnerability in APT that may result in an unauthorized access incident.. Whoopsie Regression, Ubuntu Security Notice, Denial Of Service, Bug Fix, USN-4170-3. . LinuxSecurity.com Team
Whoopsie could be made to crash, expose sensitive information or run programs if it processed a specially crafted crash report.. =========================================================================Ubuntu Security Notice USN-4170-1 October 30, 2019 whoopsie vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 19.10 - Ubuntu 19.04 - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Whoopsie could be made to crash, expose sensitive information or run programs if it processed a specially crafted crash report. Software Description: - whoopsie: Ubuntu error tracker submission Details: Kevin Backhouse discovered Whoopsie incorrectly handled very large crash reports. A local attacker could possibly use this issue to cause a denial of service, expose sensitive information or execute code as the whoopsie user. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 19.10: libwhoopsie0 0.2.66ubuntu0.1 whoopsie 0.2.66ubuntu0.1 Ubuntu 19.04: libwhoopsie0 0.2.64ubuntu0.2 whoopsie 0.2.64ubuntu0.2 Ubuntu 18.04 LTS: libwhoopsie0 0.2.62ubuntu0.2 whoopsie 0.2.62ubuntu0.2 Ubuntu 16.04 LTS: libwhoopsie0 0.2.52.5ubuntu0.2 whoopsie 0.2.52.5ubuntu0.2 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4170-1 CVE-2019-11484 Package Information: https://launchpad.net/ubuntu/+source/whoopsie/0.2.66ubuntu0.1 https://launchpad.net/ubuntu/+source/whoopsie/0.2.64ubuntu0.2 https://launchpad.net/ubuntu/+source/whoopsie/0.2.62ubuntu0.2 https://launchpad.net/ubuntu/+source/whoopsie/0.2.52.5ubuntu0.2 . Ubuntu Security Notice USN-4171-1 highlights a critical vulnerability present in variousLTS releases.. Whoopsie Vulnerability, Ubuntu Security Advisory, Crash Report Issue. . LinuxSecurity.com Team
Whoopsie could be made to crash or expose sensitive information if it processed a specially crafted crash report.. =========================================================================Ubuntu Security Notice USN-4052-1 July 09, 2019 whoopsie vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 19.04 - Ubuntu 18.10 - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Whoopsie could be made to crash or expose sensitive information if it processed a specially crafted crash report. Software Description: - whoopsie: Ubuntu error tracker submission Details: Kevin Backhouse discovered Whoopsie incorrectly handled very large crash reports. A local attacker could possibly use this issue to cause a denial of service or expose sensitive information. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 19.04: libwhoopsie0 0.2.64ubuntu0.1 whoopsie 0.2.64ubuntu0.1 Ubuntu 18.10: libwhoopsie0 0.2.62ubuntu1 whoopsie 0.2.62ubuntu1 Ubuntu 18.04 LTS: libwhoopsie0 0.2.62ubuntu0.1 whoopsie 0.2.62ubuntu0.1 Ubuntu 16.04 LTS: libwhoopsie0 0.2.52.5ubuntu0.1 whoopsie 0.2.52.5ubuntu0.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4052-1 CVE-2019-11476 Package Information: https://launchpad.net/ubuntu/+source/whoopsie/0.2.64ubuntu0.1 https://launchpad.net/ubuntu/+source/whoopsie/0.2.62ubuntu1 https://launchpad.net/ubuntu/+source/whoopsie/0.2.62ubuntu0.1 https://launchpad.net/ubuntu/+source/whoopsie/0.2.52.5ubuntu0.1 . An oversight flaw in Ubuntu may result in system failures or leakage of confidential information; patches have been released.. whoopsie security, Ubuntuvulnerability, denial of service, sensitive information leak. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.