USN-4170-2: Whoopsie regression
USN-4170-1 fixed a vulnerability in Whoopsie. The update caused Whoopsie to crash when sending reports. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Kevin Backhouse discovered Whoopsie incorrectly handled very large crash reports. A local attacker could possibly use this issue to cause a denial of service, expose sensitive information or execute code as the whoopsie user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-4170-2?
The severity of USN-4170-2 is important as it addresses a crash in Whoopsie that occurred when sending reports.
How do I fix USN-4170-2?
To fix USN-4170-2, update the Whoopsie package to version 0.2.66ubuntu0.2 or apply the provided updates for your specific Ubuntu version.
What software is affected by USN-4170-2?
USN-4170-2 affects Whoopsie and libwhoopsie0 packages on Ubuntu versions 16.04, 18.04, 19.04, and 19.10.
Who discovered the vulnerability addressed by USN-4170-2?
The vulnerability addressed by USN-4170-2 was discovered by Kevin Backhouse.
What does the update in USN-4170-2 resolve?
The update in USN-4170-2 resolves the issue of Whoopsie crashing when handling large crash reports.