==========================================================================
Ubuntu Security Notice USN-7059-2 October 17, 2024 oath-toolkit vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.10 Summary: OATH Toolkit could be made to overwrite files as the administrator. Software Description: - oath-toolkit: Development files for the OATH Toolkit Liboath library Details: USN-7059-1 fixed a vulnerability in OATH Toolkit library. This update provides the corresponding update for Ubuntu 24.10. Original advisory details: Fabian Vogt discovered that OATH Toolkit incorrectly handled file permissions. A remote attacker could possibly use this issue to overwrite root owned files, leading to a privilege escalation attack. (CVE-2024-47191) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.10 liboath-dev 2.6.11-3ubuntu1 In general, a standard system update will make all the necessary changes. References:https://ubuntu.com/security/notices/USN-7059-2 <https://ubuntu.com/security/notices/USN-7059-2> https://ubuntu.com/security/notices/USN-7059-1 <https://ubuntu.com/security/notices/USN-7059-1>
CVE-2024-47191 Package Information:https://launchpad.net/ubuntu/+source/oath-toolkit/2.6.11-3ubuntu1 <https://launchpad.net/ubuntu/+source/oath-toolkit/2.6.11-3ubuntu1>
OpenPGP_0x401EFCBCDA0FF1BD.asc
Description: OpenPGP public key
OpenPGP_signature.asc
Description: OpenPGP digital signature
