Ubuntu - Pam-python vulnerability (2020-10-21)

USN-4552-2: Pam-python vulnerability

pam-python vulnerability<br/>A security issue affects these releases of Ubuntu and its derivatives:<br/>Ubuntu 16.04 LTS<br/>Summary<br/>Pam-python could be made to crash or run programs as an administrator if certain environment variables are set.<br/>Software Description<br/>pam-python - Enables PAM modules to be written in Python<br/>Details<br/>Malte Kraus discovered that Pam-python mishandled certain environment variables. A local attacker could potentially use this vulnerability to execute programs as root.<br/>Update instructions<br/>The problem can be corrected by updating your system to the following package versions:<br/>Ubuntu 16.04 LTS<br/>libpam-python - 1.0.4-1.1+deb8u1build0.16.04.1<br/>To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.<br/>In general, a standard system update will make all the necessary changes.<br/>References<br/>USN-4552-1<br/>CVE-2019-16729<br/>]]&gt;

Ubuntu是一个以桌面应用为主的Linux操作系统

<p><a target="_blank" href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16729">CVE-2019-16729</a></p>

暂无

暂无

https://usn.ubuntu.com/4552-2/