Ubuntu
accountsservice package

  1. Bug #1900255
  2. Comment #7

Comment 7 for bug 1900255

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package accountsservice - 0.6.45-1ubuntu1.3

---------------
accountsservice (0.6.45-1ubuntu1.3) bionic-security; urgency=medium

  * SECURITY UPDATE: accountsservice drop privileges SIGSTOP DoS
    (LP: #1900255)
    - debian/patches/0010-set-language.patch: updated to not drop real uid
      and real gid in user_drop_privileges_to_user.
    - debian/patches/0009-language-tools.patch: updated to not reset
      effective uid.
    - CVE-2020-16126
  * SECURITY UPDATE: directory traversal issue
    - debian/patches/CVE-2018-14036.patch: fix insufficient path prefix
      check in src/user.c.
    - CVE-2018-14036

 -- Marc Deslauriers <email address hidden> Mon, 02 Nov 2020 12:05:51 -0500