============================================================================ Ubuntu Security Notice USN-2782-1 October 27, 2015 apport vulnerability ============================================================================ A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 15.10 - Ubuntu 15.04 - Ubuntu 14.04 LTS - Ubuntu 12.04 LTS Summary: Apport could be made to run programs as an administrator. Software Description: - apport: automatically generate crash reports for debugging Details: Gabriel Campana discovered that Apport incorrectly handled Python module imports. A local attacker could use this issue to elevate privileges. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 15.10: apport 2.19.1-0ubuntu4 Ubuntu 15.04: apport 2.17.2-0ubuntu1.7 Ubuntu 14.04 LTS: apport 2.14.1-0ubuntu3.18 Ubuntu 12.04 LTS: apport 2.0.1-0ubuntu17.13 In general, a standard system update will make all the necessary changes. References: http://www.ubuntu.com/usn/usn-2782-1 CVE-2015-1341 Package Information: https://launchpad.net/ubuntu/+source/apport/2.19.1-0ubuntu4 https://launchpad.net/ubuntu/+source/apport/2.17.2-0ubuntu1.7 https://launchpad.net/ubuntu/+source/apport/2.14.1-0ubuntu3.18 https://launchpad.net/ubuntu/+source/apport/2.0.1-0ubuntu17.13