Ubuntu Security Notice 4052-1 - Kevin Backhouse discovered Whoopsie incorrectly handled very large crash reports. A local attacker could possibly use this issue to cause a denial of service or expose sensitive information.
3e796f9ad44b762fa85ee67a3defe93c4f1f810a50926f702705ce1d73fa0c74
=========================================================================
Ubuntu Security Notice USN-4052-1
July 09, 2019
whoopsie vulnerability
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 19.04
- Ubuntu 18.10
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS
Summary:
Whoopsie could be made to crash or expose sensitive information if it
processed a specially crafted crash report.
Software Description:
- whoopsie: Ubuntu error tracker submission
Details:
Kevin Backhouse discovered Whoopsie incorrectly handled very large crash
reports. A local attacker could possibly use this issue to cause a denial of
service or expose sensitive information.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 19.04:
libwhoopsie0 0.2.64ubuntu0.1
whoopsie 0.2.64ubuntu0.1
Ubuntu 18.10:
libwhoopsie0 0.2.62ubuntu1
whoopsie 0.2.62ubuntu1
Ubuntu 18.04 LTS:
libwhoopsie0 0.2.62ubuntu0.1
whoopsie 0.2.62ubuntu0.1
Ubuntu 16.04 LTS:
libwhoopsie0 0.2.52.5ubuntu0.1
whoopsie 0.2.52.5ubuntu0.1
In general, a standard system update will make all the necessary changes.
References:
https://usn.ubuntu.com/4052-1
CVE-2019-11476
Package Information:
https://launchpad.net/ubuntu/+source/whoopsie/0.2.64ubuntu0.1
https://launchpad.net/ubuntu/+source/whoopsie/0.2.62ubuntu1
https://launchpad.net/ubuntu/+source/whoopsie/0.2.62ubuntu0.1
https://launchpad.net/ubuntu/+source/whoopsie/0.2.52.5ubuntu0.1