Discover Government News

=========================================================================Ubuntu Security Notice USN-2744-1
September 24, 2015

apport vulnerability
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 15.04
- Ubuntu 14.04 LTS
- Ubuntu 12.04 LTS

Summary:

Apport could be made to crash or overwrite files as an administrator.

Software Description:
- apport: automatically generate crash reports for debugging

Details:

Halfdog discovered that Apport incorrectly handled kernel crash dump files.
A local attacker could use this issue to cause a denial of service, or
possibly elevate privileges. The default symlink protections for affected
releases should reduce the vulnerability to a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.04:
  apport                          2.17.2-0ubuntu1.5

Ubuntu 14.04 LTS:
  apport                          2.14.1-0ubuntu3.15

Ubuntu 12.04 LTS:
  apport                          2.0.1-0ubuntu17.10

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-2744-1
  CVE-2015-1338

Package Information:
  https://launchpad.net/ubuntu/+source/apport/2.17.2-0ubuntu1.5
  https://launchpad.net/ubuntu/+source/apport/2.14.1-0ubuntu3.15
  https://launchpad.net/ubuntu/+source/apport/2.0.1-0ubuntu17.10


Ubuntu 2744-1: Apport vulnerability

September 24, 2015
Apport could be made to crash or overwrite files as an administrator.

Summary

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 15.04: apport 2.17.2-0ubuntu1.5 Ubuntu 14.04 LTS: apport 2.14.1-0ubuntu3.15 Ubuntu 12.04 LTS: apport 2.0.1-0ubuntu17.10 In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2744-1

CVE-2015-1338

Severity
September 24, 2015

Package Information

https://launchpad.net/ubuntu/+source/apport/2.17.2-0ubuntu1.5 https://launchpad.net/ubuntu/+source/apport/2.14.1-0ubuntu3.15 https://launchpad.net/ubuntu/+source/apport/2.0.1-0ubuntu17.10

Related News