==========================================================================
Ubuntu Security Notice USN-2782-1
October 27, 2015
apport vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
– Ubuntu 15.10
– Ubuntu 15.04
– Ubuntu 14.04 LTS
– Ubuntu 12.04 LTS
Summary:
Apport could be made to run programs as an administrator.
Software Description:
– apport: automatically generate crash reports for debugging
Details:
Gabriel Campana discovered that Apport incorrectly handled Python module
imports. A local attacker could use this issue to elevate privileges.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 15.10:
apport 2.19.1-0ubuntu4
Ubuntu 15.04:
apport 2.17.2-0ubuntu1.7
Ubuntu 14.04 LTS:
apport 2.14.1-0ubuntu3.18
Ubuntu 12.04 LTS:
apport 2.0.1-0ubuntu17.13
In general, a standard system update will make all the necessary changes.
References:
http://www.ubuntu.com/usn/usn-2782-1
CVE-2015-1341
Package Information:
https://launchpad.net/ubuntu/+source/apport/2.19.1-0ubuntu4
https://launchpad.net/ubuntu/+source/apport/2.17.2-0ubuntu1.7
https://launchpad.net/ubuntu/+source/apport/2.14.1-0ubuntu3.18
https://launchpad.net/ubuntu/+source/apport/2.0.1-0ubuntu17.13
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2
iQIcBAEBCgAGBQJWL3l2AAoJEGVp2FWnRL6T9owQAKykqYJqWE8Pzr5tbvxvbko0
UTcCn7FN6SeNq1uo5ygaOWIF6QYWKD/6c+W1z5TuoGmAkcCe8Uq83KmjmEqDsXNC
qlD2DGLEiTbYaJIHngRoAOn2YrJeneJmLKr/ZHmwFPrl3frh9LBY4Iim7yLXKh15
Ied+2asXBee7vdk0JHaxBBwcs0fkofQoWmCd8pl/leki3/R/f6zVmKXhklyneGDL
3gASKovm+FVnix9+940u4WLwN//bszXPeTp3m9XlHxRi3k4Z4o8Z2Yqa2BciPvA+
HZkjGCEN+e2YFUG+NFsCSou6U6It47wt0BJKnSYSh+gST3kX6TV250E1lrZuEkFf
oZBHVcKwhkh1YIDCfz3jjkrbUNn5FnEKzTIlVyZflg4vmMQbiYyEyr62u1VXRomf
8jkb9h2lExyVlIUp3zrt6nz2IXQonoLmVq5gVao2mjqz/GB/JMB7n5O/SSl1AhEi
AQtDVD/aSPRlT0pehKnTth2HuLIaNGNAhTyaQDWceJmBk+jCE3D9ZBIgboelBDS1
5WdY35cFD+UMcT/cgkVEFzW8yEg0E5UmAHJ7UhAy33YT7GG7ou9QE1BnLI5RHlby
4kA4MDmuJluHLDw5Dt/83iDgbW9fSC7A9Hiw6y/hZgSnbRJ8eZZBQIhRKBpucr+f
H9XPbaRzhThT9i27YVzC
=BikZ
—–END PGP SIGNATURE—–
—
