Hey,
The useful new fact is that the documented workaround cannot run without
ovs-vsctl on netplan 0.107.1-3ubuntu0.22.04.5 which does not include the
1.1.1 fix... So the fix is appropriate, but not available to you yet.
Jammy's CVE-2022-4968 hardening explicitly writes service units as 0640
$ stat -c '%a %U:%G %n' /run/systemd/system/netplan-ovs-cleanup.service
640 root:root /run/systemd/system/netplan-ovs-cleanup.service
Until the Jammy SRU lands, it would help to document a workaround that
does not depend on the unit starting
BR
** CVE added: https://cve.org/CVERecord?id=CVE-2022-4968
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2072486
Title:
netplan-ovs-cleanup.service is marked world-inaccessible
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/netplan.io/+bug/2072486/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
