USN-6504-1: tracker-miners vulnerability

Releases

• Ubuntu 23.10
• Ubuntu 23.04
• Ubuntu 22.04 LTS

Packages

• tracker-miners - Metadata database, indexer and search tool

Details

It was discovered that tracker-miners incorrectly handled sandboxing. If a
second security issue was discovered in tracker-miners, an attacker
could possibly use this issue in combination with it to escape the sandbox.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 23.10

• tracker-extract - 3.4.6-0ubuntu0.23.10.1

Ubuntu 23.04

• tracker-extract - 3.4.6-0ubuntu0.23.04.1

Ubuntu 22.04

• tracker-extract - 3.3.3-0ubuntu0.20.04.1

This update uses a new upstream release, which includes additional bug
fixes. In general, a standard system update will make all the necessary
changes.

References

• CVE-2023-5557