Summary
It was discovered that tracker-miners incorrectly handled sandboxing. If a
second security issue was discovered in tracker-miners, an attacker
could possibly use this issue in combination with it to escape the sandbox.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | tracker-miners | 3.3.3-0ubuntu0.20.04.1 |
Vulnerabilities 1
-
High 7.5
Tracker-miners: sandbox escape
A flaw was found in the tracker-miners package. A weakness in the sandbox allows a maliciously-crafted file to execute code outside the sandbox if the tracker-extract process has first been compromised by a separate vulnerability.
References
-
report
https://ubuntu.com/security/CVE-2023-5557