-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/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=XdOm
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-1668-1
December 17, 2012
apport update
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 12.04 LTS
- Ubuntu 11.10
- Ubuntu 10.04 LTS
Summary:
A hardening measure was added to apport.
Software Description:
- apport: automatically generate crash reports for debugging
Details:
Dan Rosenberg discovered that an application running under an AppArmor
profile that allowed unconfined execution of apport-bug could escape
confinement by calling apport-bug with a crafted environment. While not a
vulnerability in apport itself, this update mitigates the issue by
sanitizing certain variables in the apport-bug shell script.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 12.04 LTS:
apport 2.0.1-0ubuntu15.1
Ubuntu 11.10:
apport 1.23-0ubuntu4.1
Ubuntu 10.04 LTS:
apport 1.13.3-0ubuntu2.2
In general, a standard system update will make all the necessary changes.
References:
http://www.ubuntu.com/usn/usn-1668-1
https://launchpad.net/bugs/1045986
Package Information:
https://launchpad.net/ubuntu/+source/apport/2.0.1-0ubuntu15.1
https://launchpad.net/ubuntu/+source/apport/1.23-0ubuntu4.1
https://launchpad.net/ubuntu/+source/apport/1.13.3-0ubuntu2.2
No comments:
Post a Comment