Ubuntu
accountsservice package

  1. Bug #1974250
  2. Comment #2

Comment 2 for bug 1974250

Revision history for this message
Marc Deslauriers (mdeslaur) wrote :

Looks like this change got reverted:

accountsservice (0.6.55-0ubuntu13.2) groovy-security; urgency=medium

  * SECURITY UPDATE: accountsservice drop privileges SIGSTOP DoS
    (LP: #1900255)
    - debian/patches/0010-set-language.patch: updated to not drop real uid
      and real gid in user_drop_privileges_to_user.
    - debian/patches/0009-language-tools.patch: updated to not reset
      effective uid.
    - CVE-2020-16126