Ubuntu Security Notice USN-5966-2

Ubuntu Security Notice 5966-2 - USN-5966-1 fixed vulnerabilities in amanda. Unfortunately it introduced a regression in GNUTAR-based backups. This update reverts all of the changes in amanda until a better fix is provided. Maher Azzouzi discovered an information disclosure vulnerability in the calcsize binary within amanda. calcsize is a suid binary owned by root that could possibly be used by a malicious local attacker to expose sensitive file system information.

amanda backups binary disclosure file system fix information information disclosure local malicious notice root security security notice system ubuntu update usn vulnerabilities vulnerability