Ubuntu Security Notice USN-6687-1 ≈ Packet Storm

Roger Wilco Alertes 11 mars 2024 Affichages : 36

Home ^[1] Files ^[2] News ^[3] &[SERVICES_TAB] Contact ^[4] Add New ^[5]

Ubuntu Security Notice USN-6687-1^[6]: Authored by Ubuntu ^[7] | Site security.ubuntu.com ^[8]; Ubuntu Security Notice 6687-1 - It was discovered that AccountsService called a helper incorrectly when performing password change operations. A local attacker could possibly use this issue to obtain encrypted passwords.; systems | linux ^[9], ubuntu ^[10]; advisories | CVE-2012-6655 ^[11]; SHA-256 | 5935f51374bbedbe8e20bc4619732fb163c84254783cd4b5e539b7512d9bce32; Download ^[12] | Favorite ^[13] | View ^[14]

        ==========================================================================
Ubuntu Security Notice USN-6687-1
March 11, 2024
accountsservice vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
Summary:
AccountsService could be made to expose sensitive information.
Software Description:
- accountsservice: query and manipulate user account information
Details:
It was discovered that AccountsService called a helper incorrectly when
performaing password change operations. A local attacker could possibly use
this issue to obtain encrypted passwords.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 22.04 LTS:
accountsservice                 22.07.5-2ubuntu1.5
libaccountsservice0             22.07.5-2ubuntu1.5
Ubuntu 20.04 LTS:
accountsservice                 0.6.55-0ubuntu12~20.04.7
libaccountsservice0             0.6.55-0ubuntu12~20.04.7
After a standard system update you need to reboot your computer to make all
the necessary changes.
References:
https://ubuntu.com/security/notices/USN-6687-1
CVE-2012-6655
Package Information:
https://launchpad.net/ubuntu/+source/accountsservice/22.07.5-2ubuntu1.5
https://launchpad.net/ubuntu/+source/accountsservice/0.6.55-0ubuntu12~20.04.7