Stay Secure with the Latest Linux Advisories

security advisorymoderateubuntu

Ubuntu 13.04 USN-1959-1 Moderate: RealtimeKit Polkit Bypass

RealtimeKit could be tricked into bypassing polkit authorizations.. =========================================================================Ubuntu Security Notice USN-1959-1 September 18, 2013 rtkit vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 13.04 - Ubuntu 12.10 - Ubuntu 12.04 LTS Summary: RealtimeKit could be tricked into bypassing polkit authorizations. Software Description: - rtkit: Realtime Policy and Watchdog Daemon Details: It was discovered that RealtimeKit was using polkit in an unsafe manner. A local attacker could possibly use this issue to bypass intended polkit authorizations. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 13.04: rtkit 0.10-2ubuntu0.13.04.1 Ubuntu 12.10: rtkit 0.10-2ubuntu0.12.10.1 Ubuntu 12.04 LTS: rtkit 0.10-2ubuntu0.12.04.1 After a standard system update you need to reboot your computer to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-1959-1 CVE-2013-4326 Package Information: https://launchpad.net/ubuntu/+source/rtkit/0.10-2ubuntu0.13.04.1 https://launchpad.net/ubuntu/+source/rtkit/0.10-2ubuntu0.12.10.1 https://launchpad.net/ubuntu/+source/rtkit/0.10-2ubuntu0.12.04.1 . Versions 13.04, 12.10, and 12.04 LTS of Ubuntu vulnerable due to RealtimeKit exploit. Ensure you update your system for security enhancements.. RealtimeKit Vulnerability, Polkit Bypass, Ubuntu Update. . Severity: Important. LinuxSecurity.com Team

Sep 18, 2013 •Important Ubuntu