Security Update for Amanda Package
Summary
DLA-3880-1: amanda - security update. Affects amanda versions < 1:3.5.1-7+deb11u1. Fixed in 1:3.5.1-7+deb11u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Amanda package is a backup and recovery software that allows users to easily and efficiently back up their data. It is commonly used in Debian 11 systems. However, a security vulnerability has been identified in the Amanda package.
Vulnerability Detail
The vulnerability, identified as CVE-2022-37703, CVE-2022-37704, CVE-2022-37705, and CVE-2023-30577, poses a risk to the security of the Amanda package. These vulnerabilities could potentially be exploited by malicious actors to gain unauthorized access, execute arbitrary code, or cause a denial-of-service attack. The impact of these vulnerabilities can vary depending on the specific circumstances and configuration of the affected system.
How To Fix
Minimum fixed version
1:3.5.1-7+deb11u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade amandaTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There are no known workarounds for these vulnerabilities at this time.
Conclusion
The Amanda package in Debian 11 is vulnerable to multiple security vulnerabilities. To mitigate the risks, it is crucial to update the package to version 1:3.5.1-7+deb11u1 or later. No workarounds are currently available for these vulnerabilities. For more information and detailed instructions, refer to the Debian Security Advisory DLA-3880-1.
See every vulnerability recorded for amanda →
FAQ
The impact of these vulnerabilities can vary depending on the specific circumstances and configuration of the affected system. However, potential risks include unauthorized access, arbitrary code execution, and denial-of-service attacks.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by these vulnerabilities. Simply upload your manifest file, such as package-lock.json, and Vulert will analyze it in real-time.
Yes, a fix is available for these vulnerabilities. It is recommended to update the Amanda package to version 1:3.5.1-7+deb11u1 or later using the package manager of your Debian 11 system.
There are no known workarounds for these vulnerabilities at this time. It is recommended to apply the available fix by updating the Amanda package.
You can find more information about these vulnerabilities in the Debian Security Advisory DLA-3880-1 (https://storage.googleapis.com/debian-osv/dla-osv/DLA-3880-1.json).
Related vulnerabilities
Recent vulnerabilities recorded for amanda.
