[ubuntu/precise-updates] software-properties 0.82.7.5 (Accepted)

Ubuntu Archive Robot cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk
Wed Sep 18 14:59:34 UTC 2013


software-properties (0.82.7.5) precise-security; urgency=low

  * SECURITY UPDATE: possible privilege escalation via policykit UID lookup
    race.
    - softwareproperties/dbus/SoftwarePropertiesDBus.py: pass
      system-bus-name as a subject instead of pid so policykit can get the
      information from the system bus.
    - CVE-2013-1061

Date: 2013-09-13 14:12:13.591226+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Maintainer: Michael Vogt <michaelvogt at imap.cc>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/precise/+source/software-properties/0.82.7.5
-------------- next part --------------
Sorry, changesfile not available.


More information about the Precise-changes mailing list