[ubuntu/xenial-security] accountsservice 0.6.40-2ubuntu11.6 (Accepted)

[Marc Deslauriers]

accountsservice (0.6.40-2ubuntu11.6) xenial-security; urgency=medium

  * SECURITY UPDATE: accountsservice drop privileges SIGSTOP DoS
    (LP: #1900255)
    - debian/patches/0010-set-language.patch: updated to not drop real uid
      and real gid in user_drop_privileges_to_user.
    - debian/patches/0009-language-tools.patch: updated to not reset
      effective uid.
    - CVE-2020-16126
  * SECURITY UPDATE: directory traversal issue
    - debian/patches/CVE-2018-14036.patch: fix insufficient path prefix
      check in src/user.c.
    - CVE-2018-14036

Date: 2020-11-02 17:37:14.256387+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/accountsservice/0.6.40-2ubuntu11.6
-------------- next part --------------
Sorry, changesfile not available.