Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Ubuntu 18.04 LTS: USN-3137-1 Important: Network Manager Security Fix

ubuntu
Calendar Grey December 17, 2012
Scroller Ubuntu
The Ubuntu Security Note USN-1669-2 outlines actions taken to address a software vulnerability impacting various versions.
A hardening measure was added to apport.

Summary

A hardening measure was added to apport.

Software Description:

- apport: automatically generate crash reports for debugging

Details:

Dan Rosenberg discovered that an application running under an AppArmor

profile that allowed unconfined execution of apport-bug could escape

confinement by calling apport-bug with a crafted environment. While not a

vulnerability in apport itself, this update mitigates the issue by

sanitizing certain variables in the apport-bug shell script.

Topics%20covered

Topics Covered

security advisory system hardening Ubuntu moderate severity update instructions application issue apport

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
  apport                          2.0.1-0ubuntu15.1

Ubuntu 11.10:
  apport                          1.23-0ubuntu4.1

Ubuntu 10.04 LTS:
  apport                          1.13.3-0ubuntu2.2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1668-1

https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1045986

Severity
important
Lowest
Low
Medium
High
Critical

=========================================================================Ubuntu Security Notice USN-1668-1

Topics%20covered

Topics Covered

security advisory system hardening Ubuntu moderate severity update instructions application issue apport

Package Information

https://launchpad.net/ubuntu/+source/apport/2.0.1-0ubuntu15.1
https://launchpad.net/ubuntu/+source/apport/1.23-0ubuntu4.1
https://launchpad.net/ubuntu/+source/apport/1.13.3-0ubuntu2.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.