=========================================================================Ubuntu Security Notice USN-2809-1
November 12, 2015

lxd vulnerability
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 15.10

Summary:

LXD could be made to run programs as an administrator.

Software Description:
- lxd: Container hypervisor based on LXC

Details:

Jeroen Simonetti discovered that LXD incorrectly set socket permissions. A
local attacker could use this issue to escalate privileges.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.10:
  lxd                             0.20-0ubuntu4.1

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-2809-1
  https://launchpad.net/bugs/1515689

Package Information:
  https://launchpad.net/ubuntu/+source/lxd/0.20-0ubuntu4.1


Ubuntu 2809-1: LXD vulnerability

November 12, 2015
LXD could be made to run programs as an administrator.

Summary

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 15.10: lxd 0.20-0ubuntu4.1 In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2809-1

https://launchpad.net/bugs/1515689

Severity
November 12, 2015

Package Information

https://launchpad.net/ubuntu/+source/lxd/0.20-0ubuntu4.1

Related News