Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 481
Alerts This Week
Warning Icon 1 481

Ubuntu 12.04 LTS: USN-1443-2 Critical: Update Manager Exposure

ubuntu
Calendar Grey June 4, 2012
Scroller Ubuntu
Ubuntu Security Notice USN-1444-1 provides insights on a critical vulnerability in the Network Manager that could lead to unauthorized data access.
Update Manager could expose sensitive information in certain circumstances.

Summary

Update Manager could expose sensitive information in certain circumstances.

Software Description:

- update-manager: GNOME application that manages apt updates

Details:

USN-1443-1 fixed vulnerabilities in Update Manager. The fix for

CVE-2012-0949 was discovered to be incomplete. This update fixes the

problem.

Original advisory details:

Felix Geyer discovered that the Update Manager Apport hook incorrectly

uploaded certain system state archive files to Launchpad when reporting

bugs. This could possibly result in repository credentials being included

in public bug reports. (CVE-2012-0949)

Topics%20covered

Topics Covered

security advisory critical issue information leak ubuntu data exposure update-manager

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
  update-manager-core             1:0.156.14.5

Ubuntu 11.10:
  update-manager-core             1:0.152.25.12

Ubuntu 11.04:
  update-manager-core             1:0.150.5.4

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1443-2

https://ubuntu.com/security/notices/USN-1443-1

CVE-2012-0950

Severity
critical
Lowest
Low
Medium
High
Critical

June 04, 2012

Topics%20covered

Topics Covered

security advisory critical issue information leak ubuntu data exposure update-manager

Package Information

https://launchpad.net/ubuntu/+source/update-manager/1:0.156.14.5
https://launchpad.net/ubuntu/+source/update-manager/1:0.152.25.12
https://launchpad.net/ubuntu/+source/update-manager/1:0.150.5.4

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.