Copied from
ubuntu xenial in
Private PPA for Ubuntu Security Team
by Marc Deslauriers
Changelog
accountsservice (0.6.40-2ubuntu11.6) xenial-security; urgency=medium
* SECURITY UPDATE: accountsservice drop privileges SIGSTOP DoS
(LP: #1900255)
- debian/patches/0010-set-language.patch: updated to not drop real uid
and real gid in user_drop_privileges_to_user.
- debian/patches/0009-language-tools.patch: updated to not reset
effective uid.
- CVE-2020-16126
* SECURITY UPDATE: directory traversal issue
- debian/patches/CVE-2018-14036.patch: fix insufficient path prefix
check in src/user.c.
- CVE-2018-14036
-- Marc Deslauriers <email address hidden> Mon, 02 Nov 2020 12:10:06 -0500