Ubuntu 12.10: USN-1662-1 High: APT Information Exposure Risk

ubuntu

December 12, 2012

APT could expose sensitive information.

Summary

APT could expose sensitive information.

Software Description:

- apt: Advanced front-end for dpkg

Details:

It was discovered that APT set inappropriate permissions on the term.log

file. A local attacker could use this flaw to possibly obtain sensitive

information.

Topics Covered

security advisory Ubuntu local attack information exposure APT

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.10:
  apt                             0.9.7.5ubuntu5.2

Ubuntu 12.04 LTS:
  apt                             0.8.16~exp12ubuntu10.7

Ubuntu 11.10:
  apt                             0.8.16~exp5ubuntu13.6

In general, a standard system update will make all the necessary changes.