Ubuntu
networkd-dispatcher package

networkd-dispatcher 1.7-0ubuntu3.4 source package in Ubuntu

Changelog

networkd-dispatcher (1.7-0ubuntu3.4) bionic-security; urgency=medium

    * SECURITY UPDATE: Directory traversal
    - debian/patches/CVE-2022-29799.patch: Add allowed admin and
      operational states in networkd-dispatcher and throw exceptions in
      handle_state function if the current state is not one of those.
    - CVE-2022-29799
  * SECURITY UPDATE: Time-of-check-time-of-use race condition
    - debian/patches/CVE-2022-29800-1.patch: Add check_perms function that
      will be invoked in scripts_in_path function before appending a file
      path to the script_list in networkd-dispatcher.
    - debian/patches/CVE-2022-29800-2.patch: Passes os.path.dirname(path)
      when checking for permissions in scripts_in_path function in
      networkd-dispatcher.
    - CVE-2022-29800

 -- Rodrigo Figueiredo Zaiden <email address hidden>  Thu, 28 Apr 2022 07:43:22 -0300

Upload details

Uploaded by:
Rodrigo Figueiredo Zaiden
Uploaded to:
Bionic
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
utils
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Bionic: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
networkd-dispatcher_1.7.orig.tar.gz 22.4 KiB 81c3509602b3540fbd261de3a9a526fc959dd774c529e8fbc581f9bac1d0d933
networkd-dispatcher_1.7-0ubuntu3.4.debian.tar.xz 7.7 KiB 4f830ebbe63dc1e0ce407b5f75915c6285b752f8ecc666205ce2255d9ce9bcf5
networkd-dispatcher_1.7-0ubuntu3.4.dsc 1.8 KiB 50e2b0d6bbf3e6dbb8052cdbf8f8479264d1417065ee0fe37d74341a257f8017

View changes file

Binary packages built by this source

networkd-dispatcher: Dispatcher service for systemd-networkd connection status changes

 Networkd-dispatcher is a dispatcher daemon for systemd-networkd
 connection status changes. It is similar to NetworkManager-dispatcher,
 but is much more limited in the types of events it supports due to the
 limited nature of systemd-networkd.