Jockey could be tricked into bypassing polkit authorizations.. =========================================================================Ubuntu Security Notice USN-1957-1 September 18, 2013 jockey vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 LTS Summary: Jockey could be tricked into bypassing polkit authorizations. Software Description: - jockey: user interface and desktop integration for driver management Details: It was discovered that Jockey was using polkit in an unsafe manner. A local attacker could possibly use this issue to bypass intended polkit authorizations. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 LTS: jockey-common 0.9.7-0ubuntu7.11 After a standard system update you need to reboot your computer to make all the necessary changes. References: CVE-2013-1065 Package Information: https://launchpad.net/ubuntu/+source/jockey/0.9.7-0ubuntu7.11 . Uncover the Jockey exploit in Ubuntu that facilitates the circumvention of polkit permissions, alongside the specifics of the recent patch.. Jockey Vulnerability, Ubuntu Security, Polkit Authorization, Local Attack, Security Update. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.