[ubuntu/noble-updates] needrestart 3.6-7ubuntu4.3 (Accepted)

[Ubuntu Archive Robot]

needrestart (3.6-7ubuntu4.3) noble-security; urgency=medium

  * SECURITY UPDATE: incorrect usage of PYTHONPATH environment variable
    - debian/patches/CVE-2024-48990.patch: chdir to a clean directory 
      to avoid loading arbirary objects, sanitize PYTHONPATH before
      spawning a new python interpreter
    - CVE-2024-48990
  * SECURITY UPDATE: race condition for checking path to python
    - debian/patches/CVE-2024-48991.patch: sync path for both check
      and usage for python interpreter
    - CVE-2024-48991
  * SECURITY UPDATE: incorrect usage of RUBYLIB environment variable
    - debian/patches/CVE-2024-48992.patch: chdir to a clean directory
      to avoid loading arbirary objects, sanitize RUBYLIB before
      spawning a new ruby interpreter
    - CVE-2024-48992
  * SECURITY UPDATE: incorrect usage of Perl ScanDeps
    - debian/patches/CVE-2024-11003.patch: remove usage of ScanDeps
      to avoid parsing arbitrary code
    - CVE-2024-11003

needrestart (3.6-7ubuntu4.2) noble; urgency=medium

  * Fix container handling (LP: #2084571)
    - d/p/ubuntu-mode.patch: make sure containers aren't restarted from APT
    - d/p/lp2084571/0019-container-fix-always-ignoring-lxc-lxd-instances-regr.patch:
      cherry-picked fix from upstream.

Date: 2024-11-14 09:35:23.565831+00:00
Changed-By: Sudhakar Verma <sudhakar.verma at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/needrestart/3.6-7ubuntu4.3
-------------- next part --------------
Sorry, changesfile not available.