USN-6189-1: etcd vulnerability

Releases

• Ubuntu 23.04
• Ubuntu 22.10
• Ubuntu 22.04 LTS
• Ubuntu 20.04 LTS
• Ubuntu 18.04 ESM

Packages

• etcd - Transitional package for etcd-client and etcd-server

Details

It was discovered that etcd leaked credentials when debugging
was enabled. This allowed remote attackers to discover etcd
authentication credentials and possibly escalate privileges on
systems using etcd.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 23.04

• etcd-server - 3.4.23-4ubuntu0.1
• etcd-client - 3.4.23-4ubuntu0.1

Ubuntu 22.10

• etcd-server - 3.3.25+dfsg-7ubuntu0.22.10.2
• etcd-client - 3.3.25+dfsg-7ubuntu0.22.10.2

Ubuntu 22.04

• etcd-server - 3.3.25+dfsg-7ubuntu0.22.04.1+esm1
  Available with Ubuntu Pro
• etcd-client - 3.3.25+dfsg-7ubuntu0.22.04.1+esm1
  Available with Ubuntu Pro

Ubuntu 20.04

• etcd-server - 3.2.26+dfsg-6ubuntu0.2+esm1
  Available with Ubuntu Pro
• etcd-client - 3.2.26+dfsg-6ubuntu0.2+esm1
  Available with Ubuntu Pro

Ubuntu 18.04

• etcd-server - 3.2.17+dfsg-1ubuntu0.1+esm2
  Available with Ubuntu Pro
• etcd-client - 3.2.17+dfsg-1ubuntu0.1+esm2
  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

• CVE-2021-28235