NS-SA-2025-1001

简介

important: appstream-data security update

严重级别

important

主题

An update for appstream-data is now available for NewStartOS V4.5.2
NewStart Security has rated this update as having a security impact of critical.

详细描述

The '/var/share/appstream data/update appstream data. sh' file of NewStartOS will automatically trigger execution when the user clicks on the software center. NewStartOS defaults to a script that is readable and writable by all users. After the attacker modifies the content of this script to malicious code, if the administrator clicks on the Software Center, the update-appstream-data.sh script will be automatically triggered with administrator privileges, running the malicious code implanted by the attacker with administrator privileges.

影响组件

• appstream-data

影响产品

• NewStartOS V4.5.2

更新包

CVE

参考