—–BEGIN PGP SIGNED MESSAGE—–
\nHash: SHA512<\/p>\n
– ————————————————————————-
\nDebian Security Advisory DSA-5650-1 security@debian.org
\nhttps:\/\/www.debian.org\/security\/ Salvatore Bonaccorso
\nMarch 31, 2024 https:\/\/www.debian.org\/security\/faq
\n– ————————————————————————-<\/p>\n
Package : util-linux
\nCVE ID : CVE-2024-28085
\nDebian Bug : 1067849<\/p>\n
Skyler Ferrante discovered that the wall tool from util-linux does not
\nproperly handle escape sequences from command line arguments. A local
\nattacker can take advantage of this flaw for information disclosure.<\/p>\n
With this update wall and write are not anymore installed with setgid
\ntty.<\/p>\n
For the oldstable distribution (bullseye), this problem has been fixed
\nin version 2.36.1-8+deb11u2.<\/p>\n
For the stable distribution (bookworm), this problem has been fixed in
\nversion 2.38.1-5+deb12u1.<\/p>\n
We recommend that you upgrade your util-linux packages.<\/p>\n
For the detailed security status of util-linux please refer to its
\nsecurity tracker page at:
\nhttps:\/\/security-tracker.debian.org\/tracker\/util-linux<\/p>\n
Further information about Debian Security Advisories, how to apply
\nthese updates to your system and frequently asked questions can be
\nfound at: https:\/\/www.debian.org\/security\/<\/p>\n
Mailing list: debian-security-announce@lists.debian.org
\n—–BEGIN PGP SIGNATURE—–<\/p>\n
iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmYJTYpfFIAAAAAALgAo
\naXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
\nNDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND
\nz0Sm+A\/\/cJhy\/p0UGnSP5MYNc1a1sLeAMcNJm4lwxqR3zDYYqPWAe0jwsspaguNY
\n1QPdaqa3d\/Vm8pDO8WCnqxuzwqDjwyKNLUYmFbOyDx+U4EyVxC6wsUq936XMvx\/5
\nxiuTJripQm8urnvCaa7lGLhNSWHOc2jHWCqLnXC2AKwAtSGT7LWFKzC8csHxtRYO
\n5A5iUaDONPWJtGpNDx1cczfIuEUvGpANQWOgxrcyAmHb1kjpGHm0RTikpkqKNm4W
\nVH+DbgzuXlLtzUn0\/YUXJPJkZtPe1LDshhUwFhU13K2lIUk3hWBWyGIrXgG+OZhu
\nXgPc\/5yAZHjmffHawUPE0LWGA3U6xOWV3pvBIi07XF\/kFwR00PXGfMdv9WrTUxxV
\nV6Fv5\/kd2MsWvZQSYJ9Bn\/6Wo5O9w8M3Lfso2OYx01OFRQHQfn4rfRek0ED81155
\nqqPaemJYeUIJsDEmiwdr+eh0LZm7+3oMOgdfKDc9ARm9fasWxA7SFg4w5P1h0IWO
\nlzuwEzm2W0az9YJ\/BFMaZfoTTn\/DW9FJHL7Fo5F2vO9CLAihxMYUDM3mUZNBexY8
\nZ6XzhdWOSkOAiYI4khDK\/TK8jQxSpEjNiFh7Z2pIZs4F6COjI94xtIn+N5nyJxnk
\nAweXW0GGSZxt1sXD99JeD27Rv0UXNKyHfcQRPaYo9FyHntkVxi4=
\n=jL1I
\n—–END PGP SIGNATURE—–<\/p>\n","protected":false},"excerpt":{"rendered":"
—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA512 – ————————————————————————- Debian Security Advisory DSA-5650-1 security@debian.org https:\/\/www.debian.org\/security\/ Salvatore Bonaccorso March 31, 2024 https:\/\/www.debian.org\/security\/faq – ————————————————————————- Package : util-linux CVE ID : CVE-2024-28085 Debian Bug : 1067849 Skyler Ferrante discovered that the wall tool from util-linux does not properly handle escape sequences from command line arguments. A local attacker …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-55762","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/55762","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=55762"}],"version-history":[{"count":1,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/55762\/revisions"}],"predecessor-version":[{"id":55776,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/55762\/revisions\/55776"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=55762"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=55762"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=55762"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}