[ubuntu/quantal-security] usb-creator 0.2.40ubuntu2 (Accepted)

Marc Deslauriers marc.deslauriers at canonical.com
Wed Sep 18 14:21:02 UTC 2013


usb-creator (0.2.40ubuntu2) quantal-security; urgency=low

  * SECURITY UPDATE: possible privilege escalation via policykit UID lookup
    race.
    - bin/usb-creator-helper: pass system-bus-name as a subject instead of
      pid so policykit can get the information from the system bus.
    - CVE-2013-1063

Date: 2013-09-13 14:31:15.511597+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/quantal/+source/usb-creator/0.2.40ubuntu2
-------------- next part --------------
Sorry, changesfile not available.


More information about the Quantal-changes mailing list