Summary
It was discovered that GLib incorrectly handled certain environment variables.
An attacker could possibly use this issue to escalate privileges.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | glib2.0 | 2.56.4-0ubuntu0.18.04.9 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | glib2.0 | 2.40.2-0ubuntu1.1+esm4 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | glib2.0 | 2.48.2-0ubuntu4.8+esm1 |
Vulnerabilities 1
-
Unscored —
A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned b…
References
-
report
https://ubuntu.com/security/CVE-2021-3800