rss-bot
October 5th, 2007, 01:10 AM
Referenced CVEs:
CVE-2007-3912
Description:
================================================== ========= Ubuntu Security Notice USN-526-1 October 04, 2007 debian-goodies vulnerability CVE-2007-3912 ================================================== ========= A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 6.10 Ubuntu 7.04 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: debian-goodies 0.23ubuntu0.6.06.1 Ubuntu 6.10: debian-goodies 0.23ubuntu0.6.10.1 Ubuntu 7.04: debian-goodies 0.27ubuntu0.1 In general, a standard system upgrade is sufficient to affect the necessary changes. Details follow: Thomas de Grenier de Latour discovered that the checkrestart program included in debian-goodies did not correctly handle shell meta-characters. A local attacker could exploit this to gain the privileges of the user running checkrestart.
More... (http://www.ubuntu.com/usn/usn-526-1)
CVE-2007-3912
Description:
================================================== ========= Ubuntu Security Notice USN-526-1 October 04, 2007 debian-goodies vulnerability CVE-2007-3912 ================================================== ========= A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 6.10 Ubuntu 7.04 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: debian-goodies 0.23ubuntu0.6.06.1 Ubuntu 6.10: debian-goodies 0.23ubuntu0.6.10.1 Ubuntu 7.04: debian-goodies 0.27ubuntu0.1 In general, a standard system upgrade is sufficient to affect the necessary changes. Details follow: Thomas de Grenier de Latour discovered that the checkrestart program included in debian-goodies did not correctly handle shell meta-characters. A local attacker could exploit this to gain the privileges of the user running checkrestart.
More... (http://www.ubuntu.com/usn/usn-526-1)