[ubuntu/precise-security] usb-creator 0.2.38.2 (Accepted)

[Marc Deslauriers]

usb-creator (0.2.38.2) precise-security; urgency=low

  * SECURITY UPDATE: possible privilege escalation via policykit UID lookup
    race.
    - bin/usb-creator-helper: pass system-bus-name as a subject instead of
      pid so policykit can get the information from the system bus.
    - CVE-2013-1063
  * This update does _not_ include the changes from 0.2.38.1 that was
    in precise-proposed.

Date: 2013-09-18 15:44:12.860994+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Maintainer: usb-creator hackers <usb-creator-hackers at lists.launchpad.net>
https://launchpad.net/ubuntu/precise/+source/usb-creator/0.2.38.2
-------------- next part --------------
Sorry, changesfile not available.