util-linux vulnerability
A security issue affects these releases of Ubuntu and its
derivatives:
* Ubuntu 18.04 LTS
Summary
util-linux could be made to run programs when performing bash
completion.
Software Description
* util-linux - miscellaneous system utilities
Details
It was discovered that the umount bash completion script shipped
in util-linux incorrectly handled certain mountpoints. If a local
attacker were able to create arbitrary mountpoints, another user
could be tricked into executing arbitrary code when attempting to
run the umount command with bash completion.
Update instructions
The problem can be corrected by updating your system to the
following package versions:
Ubuntu 18.04 LTS
util-linux - 2.31.1-0.4ubuntu3.7
To update your system, please follow these instructions:
https://wiki.ubuntu.com/Security/Upgrades.
In general, a standard system update will make all the necessary
changes.
References
* CVE-2018-7738
--- Mystic BBS v1.12 A46 (Linux/64)
* Origin: BZ&BZ BBS (21:4/110)