USN-4820-1: S-nail vulnerability
15 March 2021
S-nail could be made to overwrite files as the administrator.
Releases
Packages
- s-nail - feature-rich BSD mail(1)
Details
It was discovered that S-nail incorrectly handled paths. An attacker could
possible use this issue to write arbitrary files and escalate privileges.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 16.04
-
heirloom-mailx
-
14.8.6-1ubuntu0.1~esm1
Available with Ubuntu Pro
-
s-nail
-
14.8.6-1ubuntu0.1~esm1
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.