https://usn.ubuntu.com/4512-1/

USN-4512-1: util-linux vulnerability

util-linux vulnerability
A security issue affects these releases of Ubuntu and its derivatives:
Ubuntu 18.04 LTS
Summary
util-linux could be made to run programs when performing bash completion.
Software Description
util-linux - miscellaneous system utilities
Details
It was discovered that the umount bash completion script shipped in util-linux incorrectly handled certain mountpoints. If a local attacker were able to create arbitrary mountpoints, another user could be tricked into executing arbitrary code when attempting to run the umount command with bash completion.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 18.04 LTS
util-linux - 2.31.1-0.4ubuntu3.7
To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.
In general, a standard system update will make all the necessary changes.
References
CVE-2018-7738
]]>

Ubuntu是一个以桌面应用为主的Linux操作系统

CVE-2018-7738

暂无

暂无