UbuntuUpdates.org

Package "netplan.io"

Name: netplan.io

Description:

YAML network configuration abstraction for various backends
Latest version: 0.107-5ubuntu0.4
Release: mantic (23.10)
Level: security
Repository: main
Homepage: https://netplan.io/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "netplan.io"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "netplan.io" in Mantic

Repository Area Version
base main 0.107-5
updates main 0.107-5ubuntu0.4

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 0.107-5ubuntu0.4 2024-06-28 22:07:17 UTC

  netplan.io (0.107-5ubuntu0.4) mantic-security; urgency=medium

  * SECURITY REGRESSION: failure on systems without dbus
    - debian/netplan-generator.postinst: Don't call the generator if no
      networkd configuration file exists. (LP: #2071333)

 -- Sudhakar Verma <email address hidden> Fri, 28 Jun 2024 22:17:07 +0530
Source diff to previous version
2071333 netplan.io causes systemctl enable to fail on systems without dbus

Version: 0.107-5ubuntu0.3 2024-06-26 17:07:27 UTC

  netplan.io (0.107-5ubuntu0.3) mantic-security; urgency=medium

  * SECURITY UPDATE: weak permissions on secret files, command injection
    - d/p/lp2065738/0012-libnetplan-use-more-restrictive-file-permissions.patch:
      Use more restrictive file permissions to prevent unprivileged users to
      read sensitive data from back end files (LP: #2065738, #1987842)
    - CVE-2022-4968
    - d/p/lp2065738/0013-cli-generate-call-daemon-reload-after-generate.patch:
      Call systemd daemon-reload as part of the netplan generate cli command
    - d/p/lp2066258/0014-libnetplan-escape-control-characters.patch:
      Escape control characters in the parser and double quotes in backend
      files.
    - d/p/lp2066258/0015-backends-escape-file-paths.patch:
      Escape special characters in file paths.
    - d/p/lp2066258/0016-backends-escape-semicolons-in-service-units.patch:
      Escape isolated semicolons in systemd service units. (LP: #2066258)
  * debian/netplan-generator.postinst: Add a postinst maintainer script to call
    the generator. It's needed so the file permissions fixes will be applied
    automatically, thanks to danilogondolfo

 -- Sudhakar Verma <email address hidden> Mon, 24 Jun 2024 23:58:40 +0530
2065738 Leaks wireguard keys
CVE-2022-4968 netplan leaks the private key of wireguard to local users. A security fix will be released soon.


About   -   Send Feedback to @ubuntu_updates