USN-5426-1

Jakub Wilk discovered that needrestart incorrectly used some regular expressions. A local attacker could possibly use this issue to execute arbitrary code.

References

Affected packages

Ubuntu:18.04:LTS / needrestart

Package

Name: needrestart
Purl: pkg:deb/ubuntu/needrestart@3.1-1ubuntu0.1?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.1-1ubuntu0.1

Affected versions

2.*

2.11-4

3.*

3.0-1

3.1-1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "needrestart",
            "binary_version": "3.1-1ubuntu0.1"
        }
    ]
}

Ubuntu:20.04:LTS / needrestart

Package

Name: needrestart
Purl: pkg:deb/ubuntu/needrestart@3.4-6ubuntu0.1?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.4-6ubuntu0.1

Affected versions

3.*

3.4-5

3.4-6

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "needrestart",
            "binary_version": "3.4-6ubuntu0.1"
        }
    ]
}

Ubuntu:22.04:LTS / needrestart

Package

Name: needrestart
Purl: pkg:deb/ubuntu/needrestart@3.5-5ubuntu2.1?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.5-5ubuntu2.1

Affected versions

3.*

3.5-4ubuntu2

3.5-5ubuntu1

3.5-5ubuntu2

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "needrestart",
            "binary_version": "3.5-5ubuntu2.1"
        }
    ]
}