USN-6687-1: AccountsService vulnerability

Releases

• Ubuntu 22.04 LTS
• Ubuntu 20.04 LTS

Packages

• accountsservice - query and manipulate user account information

Details

It was discovered that AccountsService called a helper incorrectly when
performing password change operations. A local attacker could possibly use
this issue to obtain encrypted passwords.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 22.04

• accountsservice - 22.07.5-2ubuntu1.5
• libaccountsservice0 - 22.07.5-2ubuntu1.5

Ubuntu 20.04

• accountsservice - 0.6.55-0ubuntu12~20.04.7
• libaccountsservice0 - 0.6.55-0ubuntu12~20.04.7

After a standard system update you need to reboot your computer to make all
the necessary changes.

References

• CVE-2012-6655