Summary
Jakub Wilk discovered that needrestart incorrectly used some regular
expressions. A local attacker could possibly use this issue to execute
arbitrary code.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | needrestart | 3.1-1ubuntu0.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | needrestart | 3.4-6ubuntu0.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | needrestart | 3.5-5ubuntu2.1 |
Vulnerabilities 1
-
Unscored —
needrestart 0.8 through 3.5 before 3.6 is prone to local privilege escalation. Regexes to detect the Perl, Python, and …
References
-
report
https://ubuntu.com/security/CVE-2022-30688