Summary
Jakub Wilk discovered that lintian incorrectly handled deserializing
certain YAML files. If a user or automated system were tricked into running
lintian on a specially crafted package, a remote attacker could possibly
use this issue to execute arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | lintian | 2.5.43ubuntu0.1 |
Vulnerabilities 1
-
Unscored —
Deserialization vulnerability in lintian through 2.5.50.3 allows attackers to trigger code execution by requesting a re…
References
-
report
https://ubuntu.com/security/CVE-2017-8829