Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Ubuntu 11.10 and 11.04: USN-1414-1 Critical Aptdaemon Risk

ubuntu
Calendar Grey April 2, 2012
Scroller Ubuntu
Address Aptdaemon vulnerability affecting package management in Ubuntu versions 11.10 and 11.04. Ensure your system is updated immediately.
An attacker could trick Aptdaemon into installing altered packages.

Summary

An attacker could trick Aptdaemon into installing altered packages.

Software Description:

- aptdaemon: transaction based package management service

Details:

It was discovered that Aptdaemon incorrectly handled installing packages

without performing a transaction simulation. An attacker could possibly use

this flaw to install altered packages.

Topics%20covered

Topics Covered

security advisory software update ubuntu package management installation issue aptdaemon altered packages

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.10:
  python-aptdaemon                0.43+bzr697-0ubuntu1.2

Ubuntu 11.04:
  python-aptdaemon                0.41+bzr661-0ubuntu0.2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1414-1

CVE-2012-0944

Severity
critical
Lowest
Low
Medium
High
Critical

April 02, 2012

Topics%20covered

Topics Covered

security advisory software update ubuntu package management installation issue aptdaemon altered packages

Package Information

https://launchpad.net/ubuntu/+source/aptdaemon/0.43+bzr697-0ubuntu1.2
https://launchpad.net/ubuntu/+source/aptdaemon/0.41+bzr661-0ubuntu0.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.