[ubuntu/resolute-security] accountsservice 23.13.9-8ubuntu5.2 (Accepted)

[Marc Deslauriers]

accountsservice (23.13.9-8ubuntu5.2) resolute-security; urgency=medium

  * SECURITY UPDATE: SetLanguage leads to local privilege escalation and
    root code execution (LP: #2157985)
    - d/p/0001-user-Fully-drop-privileges-when-running-locale-helpe.patch: user:
      Fully drop privileges when running locale helpers in src/user.c,
      src/util.c, src/util.h.
    - debian/patches/0002-langtools-Handle-input-as-untrusted.patch: langtools:
      Handle input as untrusted in data/langtools/save-to-pam-env,
      data/langtools/set-language-helper, data/langtools/update-langlist.
    - CVE-2026-61897
    - CVE-2026-61898

Date: 2026-07-13 17:26:32.151270+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/accountsservice/23.13.9-8ubuntu5.2
-------------- next part --------------
Sorry, changesfile not available.