[ubuntu/quantal-security] usb-creator 0.2.40ubuntu2 (Accepted)
Marc Deslauriers
marc.deslauriers at canonical.com
Wed Sep 18 14:21:02 UTC 2013
usb-creator (0.2.40ubuntu2) quantal-security; urgency=low
* SECURITY UPDATE: possible privilege escalation via policykit UID lookup
race.
- bin/usb-creator-helper: pass system-bus-name as a subject instead of
pid so policykit can get the information from the system bus.
- CVE-2013-1063
Date: 2013-09-13 14:31:15.511597+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/quantal/+source/usb-creator/0.2.40ubuntu2
-------------- next part --------------
Sorry, changesfile not available.
More information about the Quantal-changes
mailing list