[SECURITY] [DLA 3880-1] amanda security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian LTS Advisory DLA-3880-1 debian-lts@lists.debian.org
https://www.debian.org/lts/security/ Adrian Bunk
September 07, 2024 https://wiki.debian.org/LTS
- -------------------------------------------------------------------------
Package : amanda
Version : 1:3.5.1-7+deb11u1
CVE ID : CVE-2022-37703 CVE-2022-37704 CVE-2022-37705 CVE-2023-30577
Debian Bug : 1021017 1029829 1055253
Multiple vulnerabilities have been fixed in the Amanda backup system.
CVE-2022-37703
Directory existence disclosure
CVE-2022-37704
Privilege escalation in rundump
CVE-2022-37705
Privilege escalation in runtar
CVE-2023-30577
Privilege escalation in runtar
For Debian 11 bullseye, these problems have been fixed in version
1:3.5.1-7+deb11u1.
We recommend that you upgrade your amanda packages.
For the detailed security status of amanda please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/amanda
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----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=fPMw
-----END PGP SIGNATURE-----
Reply to: