Ubuntu 15.10 USN-2782-1 Moderate: Apport Privilege Escalation Threat

ubuntu

October 27, 2015

Apport could be made to run programs as an administrator.

Summary

Apport could be made to run programs as an administrator.

Software Description:

- apport: automatically generate crash reports for debugging

Details:

Gabriel Campana discovered that Apport incorrectly handled Python module

imports. A local attacker could use this issue to elevate privileges.

Topics Covered

security advisory privilege escalation moderate threat ubuntu apport

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.10:
  apport                          2.19.1-0ubuntu4

Ubuntu 15.04:
  apport                          2.17.2-0ubuntu1.7

Ubuntu 14.04 LTS:
  apport                          2.14.1-0ubuntu3.18

Ubuntu 12.04 LTS:
  apport                          2.0.1-0ubuntu17.13

In general, a standard system update will make all the necessary changes.