Ubuntu alert USN-5439-1 (accountsservice)

From:
             
 
Marc Deslauriers <marc.deslauriers@canonical.com>
To:
             
 
"ubuntu-security-announce@lists.ubuntu.com" <ubuntu-security-announce@lists.ubuntu.com>
Subject:
             
 
[USN-5439-1] AccountsService vulnerability
Date:
             
 
Tue, 24 May 2022 10:31:27 -0400
Message-ID:
             
 
<bb0a5c2a-e004-8d8b-c79e-d8f1fe345ffc@canonical.com>
==========================================================================
Ubuntu Security Notice USN-5439-1
May 24, 2022

accountsservice vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 22.04 LTS

Summary:

AccountsService could be made to crash or stop responding.

Software Description:
- accountsservice: query and manipulate user account information

Details:

Gunnar Hjalmarsson discovered that AccountsService incorrectly dropped
privileges. A local user could possibly use this issue to cause
AccountsService to crash or stop responding, resulting in a denial of
service. (CVE-2022-1804)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS:
  accountsservice                 22.07.5-2ubuntu1.3
  libaccountsservice0             22.07.5-2ubuntu1.3

After a standard system update you need to reboot your computer to make all
the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-5439-1
  CVE-2022-1804

Package Information:
  https://launchpad.net/ubuntu/+source/accountsservice/22.0...