Ubuntu - Pam-python vulnerability (2020-09-28)

USN-4552-1: Pam-python vulnerability

pam-python vulnerability<br/>A security issue affects these releases of Ubuntu and its derivatives:<br/>Ubuntu 18.04 LTS<br/>Summary<br/>Pam-python could be made to crash or run programs as an administrator if certain environment variables are set.<br/>Software Description<br/>pam-python - Enables PAM modules to be written in Python<br/>Details<br/>Malte Kraus discovered that Pam-python mishandled certain environment variables. A local attacker could potentially use this vulnerability to execute programs as root.<br/>Update instructions<br/>The problem can be corrected by updating your system to the following package versions:<br/>Ubuntu 18.04 LTS<br/>libpam-python - 1.0.6-1.1+deb10u1build0.18.04.1<br/>To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.<br/>In general, a standard system update will make all the necessary changes.<br/>References<br/>CVE-2019-16729<br/>]]&gt;

Ubuntu是一个以桌面应用为主的Linux操作系统

<p><a target="_blank" href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16729">CVE-2019-16729</a></p>

暂无

暂无

https://usn.ubuntu.com/4552-1/