ASA-201807-13 log generated external raw

[ASA-201807-13] networkmanager-vpnc: privilege escalation
Arch Linux Security Advisory ASA-201807-13 ========================================== Severity: High Date : 2018-07-20 CVE-ID : CVE-2018-10900 Package : networkmanager-vpnc Type : privilege escalation Remote : No Link : Summary ======= The package networkmanager-vpnc before version 1.2.6-1 is vulnerable to privilege escalation. Resolution ========== Upgrade to 1.2.6-1. # pacman -Syu "networkmanager-vpnc>=1.2.6-1" The problem has been fixed upstream in version 1.2.6. Workaround ========== None. Description =========== When initiating a VPNC connection, Network Manager spawns a new vpnc process and passes the configuration via STDIN. By injecting a \n character into a configuration parameter, an attacker can coerce Network Manager to set the Password helper option to an attacker controlled executable file. Impact ====== A local attacker is able to escalate privileges via a specially crafted configuration file. References ==========