Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 464
Alerts This Week
Warning Icon 1 464

Ubuntu 15.04: USN-2741-1 Medium: Unity Settings Daemon Local Access Risk

ubuntu
Calendar Grey September 16, 2015
Scroller Ubuntu
=========================================================================Ubuntu Security Notice USN-
Unity Settings Daemon would allow mounting removable media while the screen is locked.

Summary

Unity Settings Daemon would allow mounting removable media while the screen

is locked.

Software Description:

- unity-settings-daemon: daemon handling the Unity session settings

Details:

It was discovered that the Unity Settings Daemon incorrectly allowed

removable media to be mounted when the screen is locked. If a vulnerability

were discovered in some other desktop component, such as an image library,

a local attacker could possibly use this issue to gain access to the

session.

Topics%20covered

Topics Covered

security advisory local access ubuntu medium media access issue

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.04:
  unity-settings-daemon           15.04.1+15.04.20150408-0ubuntu1.2

Ubuntu 14.04 LTS:
  unity-settings-daemon           14.04.0+14.04.20150825-0ubuntu2

After a standard system update you need to restart your session to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2741-1

CVE-2015-1319

Severity
medium
Lowest
Low
Medium
High
Critical

September 16, 2015

Topics%20covered

Topics Covered

security advisory local access ubuntu medium media access issue

Package Information

https://launchpad.net/ubuntu/+source/unity-settings-daemon/15.04.1+15.04.20150408-0ubuntu1.2
https://launchpad.net/ubuntu/+source/unity-settings-daemon/14.04.0+14.04.20150825-0ubuntu2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.