Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 514
Alerts This Week
Warning Icon 1 514

Ubuntu 15.04 LTS: 2771-1 Moderate: Click Access Security Issue

ubuntu
Calendar Grey October 15, 2015
Scroller Ubuntu
=========================================================================Ubuntu Security Notice USN-
Click could be made to allow malicious apps unintended access to the system.

Summary

Click could be made to allow malicious apps unintended access to the

system.

Software Description:

- click: Click package manager

Details:

It was discovered that click did not properly perform input sanitization

during click package installation. If a user were tricked into installing a

crafted click package, a remote attacker could exploit this to escalate

privileges by tricking click into installing lenient security policy for

the installed application.

Topics%20covered

Topics Covered

security advisory Ubuntu moderate severity click access issue system access issue

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.04:
  python3-click                   0.4.38.5ubuntu0.2

Ubuntu 14.04 LTS:
  python3-click                   0.4.21.1ubuntu0.2

In general, a standard system update will make all the necessary changes. A
corresponding update will be provided to Ubuntu Phone users soon.

For more information, please see:

References

https://ubuntu.com/security/notices/USN-2771-1

https://bugs.launchpad.net/ubuntu/+source/click/+bug/1506467

=========================================================================Ubuntu Security Notice USN-2771-1

Topics%20covered

Topics Covered

security advisory Ubuntu moderate severity click access issue system access issue

Package Information

https://launchpad.net/ubuntu/+source/click/0.4.38.5ubuntu0.2
https://launchpad.net/ubuntu/+source/click/0.4.21.1ubuntu0.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.