USN-6851-1: Netplan vulnerabilities | Ubuntu security notices

Packages

netplan.io - YAML network configuration abstraction for various backends

Details

Andreas Hasenack discovered that netplan incorrectly handled the permissions
for netdev files containing wireguard configuration. An attacker could use this to obtain
wireguard secret keys.

It was discovered that netplan configuration could be manipulated into injecting
arbitrary commands while setting up network interfaces. An attacker could
use this to execute arbitrary commands or escalate privileges.

Andreas Hasenack discovered that netplan incorrectly handled the permissions
for netdev files containing wireguard configuration. An attacker could use this to obtain
wireguard secret keys.

It was discovered that netplan configuration could be manipulated into injecting
arbitrary commands while setting up network interfaces. An attacker could
use this to execute arbitrary commands or escalate privileges.

Update instructions

After a standard system update you need to reboot your computer to make all the necessary changes.

Learn more about how to get the fixes.

Ubuntu Release	Package Version
24.04 noble	libnetplan1 – 1.0-2ubuntu1.1
	netplan-generator – 1.0-2ubuntu1.1
	netplan.io – 1.0-2ubuntu1.1
23.10 mantic	libnetplan0 – 0.107-5ubuntu0.3
	netplan-generator – 0.107-5ubuntu0.3
	netplan.io – 0.107-5ubuntu0.3
22.04 jammy	libnetplan0 – 0.106.1-7ubuntu0.22.04.3
22.04 jammy	netplan.io – 0.106.1-7ubuntu0.22.04.3
20.04 focal	libnetplan0 – 0.104-0ubuntu2~20.04.5
20.04 focal	netplan.io – 0.104-0ubuntu2~20.04.5

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

CVE-2022-4968