USN-6614-1: amanda vulnerability
30 January 2024
amanda could be used to escalate privilege if it was provided with specially crafted arguments.
Releases
Packages
- amanda - Advanced Maryland Automatic Network Disk Archiver (Client)
Details
It was discovered that amanda did not properly check certain arguments. A
local unprivileged attacker could possibly use this issue to perform a
privilege escalation attack.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 23.10
Ubuntu 22.04
Ubuntu 20.04
Ubuntu 18.04
-
amanda-client
-
1:3.5.1-1ubuntu0.3+esm1
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.