Ubuntu: USN-2431-2 Moderate: Fix for MAAS Regression Issue Released

ubuntu

December 4, 2014

USN-2431-1 caused a regression in the MAAS package.

Summary

USN-2431-1 caused a regression in the MAAS package.

Software Description:

- maas: Ubuntu MAAS Server

Details:

USN-2431-1 fixed vulnerabilities in mod_wsgi. The security update exposed

an issue in the MAAS package, causing a regression. This update fixes the

problem.

We apologize for the inconvenience.

Original advisory details:

It was discovered that mod_wsgi incorrectly handled errors when setting up

the working directory and group access rights. A malicious application

could possibly use this issue to cause a local privilege escalation when

using daemon mode.

Topics Covered

security advisory update local privilege escalation Ubuntu regression maas

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.10:
  maas-region-controller-min      1.7.0~beta8+bzr3272-0ubuntu1.2

Ubuntu 14.04 LTS:
  maas-region-controller-min      1.5.4+bzr2294-0ubuntu1.2

Ubuntu 12.04 LTS:
  maas-region-controller          1.2+bzr1373+dfsg-0ubuntu1~12.04.6

In general, a standard system update will make all the necessary changes.