[SECURITY] [DLA 3533-1] lxc security update

2023-08-2120:49:49

lists.debian.org

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

6.3 Medium

AI Score

Confidence

Low

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:S/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.3%

JSON

Debian LTS Advisory DLA-3533-1 [email protected]
https://www.debian.org/lts/security/ Santiago Ruano Rincón
August 17, 2023 https://wiki.debian.org/LTS

Package : lxc
Version : 1:3.1.0+really3.0.3-8+deb10u1
CVE ID : CVE-2022-47952

LXC is a Linux Containers userspace tool set. Maher Azzouzi reported that the
lxc-user-nic command, included in LXC, allowed unprivileged users to infer
whether any file exists, even in protected directory trees.

For Debian 10 buster, this problem has been fixed in version
1:3.1.0+really3.0.3-8+deb10u1.

We recommend that you upgrade your lxc packages.

For the detailed security status of lxc please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/lxc

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
Attachment:
signature.asc
Description: PGP signature

OSVersionArchitecturePackageVersionFilename
Debian11mipsellxc-tests-dbgsym< 1:4.0.6-2+deb11u2lxc-tests-dbgsym_1:4.0.6-2+deb11u2_mipsel.deb
Debian10i386libpam-cgfs< 1:3.1.0+really3.0.3-8+deb10u1libpam-cgfs_1:3.1.0+really3.0.3-8+deb10u1_i386.deb
Debian11ppc64ellibpam-cgfs-dbgsym< 1:4.0.6-2+deb11u2libpam-cgfs-dbgsym_1:4.0.6-2+deb11u2_ppc64el.deb
Debian11ppc64ellibpam-cgfs< 1:4.0.6-2+deb11u2libpam-cgfs_1:4.0.6-2+deb11u2_ppc64el.deb
Debian11arm64liblxc1-dbgsym< 1:4.0.6-2+deb11u2liblxc1-dbgsym_1:4.0.6-2+deb11u2_arm64.deb
Debian11amd64liblxc1-dbgsym< 1:4.0.6-2+deb11u2liblxc1-dbgsym_1:4.0.6-2+deb11u2_amd64.deb
Debian11armhflibpam-cgfs-dbgsym< 1:4.0.6-2+deb11u2libpam-cgfs-dbgsym_1:4.0.6-2+deb11u2_armhf.deb
Debian11s390xlibpam-cgfs< 1:4.0.6-2+deb11u2libpam-cgfs_1:4.0.6-2+deb11u2_s390x.deb
Debian11armhflxc< 1:4.0.6-2+deb11u2lxc_1:4.0.6-2+deb11u2_armhf.deb
Debian11ppc64ellxc< 1:4.0.6-2+deb11u2lxc_1:4.0.6-2+deb11u2_ppc64el.deb

OS	Version	Architecture	Package	Version	Filename
Debian	11	mipsel	lxc-tests-dbgsym	< 1:4.0.6-2+deb11u2	lxc-tests-dbgsym_1:4.0.6-2+deb11u2_mipsel.deb
Debian	10	i386	libpam-cgfs	< 1:3.1.0+really3.0.3-8+deb10u1	libpam-cgfs_1:3.1.0+really3.0.3-8+deb10u1_i386.deb
Debian	11	ppc64el	libpam-cgfs-dbgsym	< 1:4.0.6-2+deb11u2	libpam-cgfs-dbgsym_1:4.0.6-2+deb11u2_ppc64el.deb
Debian	11	ppc64el	libpam-cgfs	< 1:4.0.6-2+deb11u2	libpam-cgfs_1:4.0.6-2+deb11u2_ppc64el.deb
Debian	11	arm64	liblxc1-dbgsym	< 1:4.0.6-2+deb11u2	liblxc1-dbgsym_1:4.0.6-2+deb11u2_arm64.deb
Debian	11	amd64	liblxc1-dbgsym	< 1:4.0.6-2+deb11u2	liblxc1-dbgsym_1:4.0.6-2+deb11u2_amd64.deb
Debian	11	armhf	libpam-cgfs-dbgsym	< 1:4.0.6-2+deb11u2	libpam-cgfs-dbgsym_1:4.0.6-2+deb11u2_armhf.deb
Debian	11	s390x	libpam-cgfs	< 1:4.0.6-2+deb11u2	libpam-cgfs_1:4.0.6-2+deb11u2_s390x.deb
Debian	11	armhf	lxc	< 1:4.0.6-2+deb11u2	lxc_1:4.0.6-2+deb11u2_armhf.deb
Debian	11	ppc64el	lxc	< 1:4.0.6-2+deb11u2	lxc_1:4.0.6-2+deb11u2_ppc64el.deb