{"id":"USN-6851-2","summary":"netplan.io regression","details":"USN-6851-1 fixed vulnerabilities in Netplan. The update lead to the discovery of\na regression in netplan which caused systemctl enable to fail on systems where\nsystemd is not running. This update fixes the problem.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\nAndreas Hasenack discovered that netplan incorrectly handled the permissions\nfor netdev files containing wireguard configuration. An attacker could use\nthis to obtain wireguard secret keys.\n\nIt was discovered that netplan configuration could be manipulated into injecting\narbitrary commands while setting up network interfaces. An attacker could\nuse this to execute arbitrary commands or escalate privileges.\n","modified":"2026-04-22T10:49:45.337286Z","published":"2024-06-28T19:14:48Z","references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-6851-2"},{"type":"REPORT","url":"https://launchpad.net/bugs/2071333"}],"affected":[{"package":{"name":"netplan.io","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/netplan.io@0.104-0ubuntu2~20.04.6?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.104-0ubuntu2~20.04.6"}]}],"versions":["0.98-0ubuntu1","0.98-0ubuntu2","0.98-0ubuntu3","0.98-0ubuntu4","0.99-0ubuntu1","0.99-0ubuntu2","0.99-0ubuntu3~20.04.1","0.99-0ubuntu3~20.04.2","0.100-0ubuntu4~20.04.2","0.100-0ubuntu4~20.04.3","0.101-0ubuntu3~20.04.2","0.102-0ubuntu1~20.04.1","0.102-0ubuntu1~20.04.2","0.103-0ubuntu5~20.04.1","0.103-0ubuntu5~20.04.2","0.103-0ubuntu5~20.04.3","0.103-0ubuntu5~20.04.5","0.103-0ubuntu5~20.04.6","0.104-0ubuntu2~20.04.1","0.104-0ubuntu2~20.04.2","0.104-0ubuntu2~20.04.4","0.104-0ubuntu2~20.04.5"],"ecosystem_specific":{"binaries":[{"binary_name":"libnetplan0","binary_version":"0.104-0ubuntu2~20.04.6"},{"binary_name":"netplan.io","binary_version":"0.104-0ubuntu2~20.04.6"}],"availability":"No subscription required"},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:20.04:LTS","cves":[]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-6851-2.json"}},{"package":{"name":"netplan.io","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/netplan.io@0.106.1-7ubuntu0.22.04.4?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.106.1-7ubuntu0.22.04.4"}]}],"versions":["0.103-0ubuntu7","0.103-0ubuntu8","0.103-0ubuntu9","0.103-0ubuntu10","0.104-0ubuntu1","0.104-0ubuntu2","0.104-0ubuntu2.1","0.105-0ubuntu2~22.04.1","0.105-0ubuntu2~22.04.3","0.106.1-7ubuntu0.22.04.2","0.106.1-7ubuntu0.22.04.3"],"ecosystem_specific":{"binaries":[{"binary_name":"libnetplan0","binary_version":"0.106.1-7ubuntu0.22.04.4"},{"binary_name":"netplan.io","binary_version":"0.106.1-7ubuntu0.22.04.4"}],"availability":"No subscription required"},"database_specific":{"cves_map":{"cves":[],"ecosystem":"Ubuntu:22.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-6851-2.json"}},{"package":{"name":"netplan.io","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/netplan.io@1.0-2ubuntu1.2?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-2ubuntu1.2"}]}],"versions":["0.107-5","0.107-5ubuntu1","0.107-5ubuntu2","0.107.1-3","1.0-1","1.0-2","1.0-2build1","1.0-2ubuntu1","1.0-2ubuntu1.1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"libnetplan1","binary_version":"1.0-2ubuntu1.2"},{"binary_name":"netplan-generator","binary_version":"1.0-2ubuntu1.2"},{"binary_name":"netplan.io","binary_version":"1.0-2ubuntu1.2"},{"binary_name":"python3-netplan","binary_version":"1.0-2ubuntu1.2"}]},"database_specific":{"cves_map":{"cves":[],"ecosystem":"Ubuntu:24.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-6851-2.json"}}],"schema_version":"1.7.5"}