Ubuntu notice covers Relax-and-Recover flaw exposing initrd to local users
VULNERABILITYUbunturedteam/daily · 1 source
- Severity
- Low
- Sources
- 1
What happened
A tool used for system recovery on Ubuntu could leave a startup file readable by anyone with a local account. A person already on the machine could possibly use this to see sensitive information.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Check whether the Relax-and-Recover package is installed on Ubuntu systems.
- Check whether GRUBRESCUE is enabled, and review the Ubuntu notice USN-8988-1 for the fixed package version.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Ubuntu Security Notices
Who and what is in it
Products