needrestart: Security fix in new release (3.6)

Debian Bug report logs - #1011154
needrestart: Security fix in new release (3.6)

Reply or subscribe to this bug.

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Amin Vakil <info@aminvakil.com>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: needrestart: Security fix in new release (3.6)

Date: Tue, 17 May 2022 20:14:52 +0430

Package: needrestart
Version: 3.4-5
Severity: normal
Tags: security

CVE-2022-30688: Anchor interpreter regex to prevent local privilege escalation.
(responsibly reported by Jakub Wilk)
https://github.com/liske/needrestart/releases/tag/v3.6

-- Package-specific info:
needrestart output:



-- System Information:
Debian Release: 10.12
  APT prefers oldstable-updates
  APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-20-cloud-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages needrestart depends on:
ii  binutils                   2.31.1-16
ii  dpkg                       1.19.7
ii  gettext-base               0.19.8.1-9
ii  libintl-perl               1.26-2
ii  libmodule-find-perl        0.13-1
ii  libmodule-scandeps-perl    1.27-1
ii  libproc-processtable-perl  0.56-1
ii  libsort-naturally-perl     1.03-2
ii  libterm-readkey-perl       2.38-1
ii  perl                       5.28.1-6+deb10u1
ii  xz-utils                   5.2.4-1+deb10u1

Versions of packages needrestart recommends:
ii  libpam-systemd  241-7~deb10u8

Versions of packages needrestart suggests:
pn  iucode-tool                          <none>
pn  needrestart-session | libnotify-bin  <none>

-- no debconf information

Message #20 received at 1011154-submitter@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>

To: control@bugs.debian.org

Cc: 1011154-submitter@bugs.debian.org

Subject: closing 1011154, closing 1011154, closing 1011154, tagging 1011154

Date: Tue, 17 May 2022 17:51:00 +0200

close 1011154 3.6-1
close 1011154 3.5-4+deb11u1
close 1011154 3.4-5+deb10u1
tags 1011154 + upstream fixed-upstream
thanks

Send a report that this bug log contains spam.