SimGear could be made to run programs as an administrator if it opened a
specially crafted file.
Software Description:
- simgear: set of open-source libraries for assembling 3d simulations, games, and visualizations
Details:
It was discovered that SimGear could be made to bypass the sandboxing of
Nasal scripts. An attacker could possibly use this issue to execute
arbitrary code.
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 24.04 LTS
libsimgear-dev 1:2020.3.18+dfsg-2.1ubuntu0.1~esm1
Available with Ubuntu Pro
Ubuntu 22.04 LTS
libsimgear-dev 1:2020.3.6+dfsg-1ubuntu0.1~esm2
Available with Ubuntu Pro
Ubuntu 20.04 LTS
libsimgear-dev 1:2019.1.1+dfsg-3ubuntu0.1~esm1
Available with Ubuntu Pro
Ubuntu 18.04 LTS
libsimgear-dev 1:2018.1.1+dfsg-1ubuntu0.1~esm1
Available with Ubuntu Pro
Ubuntu 16.04 LTS
libsimgear-dev 3.4.0-3ubuntu0.1~esm1
Available with Ubuntu Pro
libsimgearcore3.4.0v5 3.4.0-3ubuntu0.1~esm1
Available with Ubuntu Pro
libsimgearscene3.4.0v5 3.4.0-3ubuntu0.1~esm1
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.https://ubuntu.com/security/notices/USN-7965-1
CVE-2025-0781
Get the latest Linux and open source security news straight to your inbox.