==========================================================================
Ubuntu Security Notice USN-2297-1
July 22, 2014

acpi-support vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 12.04 LTS

Summary:

The system could be made to run programs as an administrator.

Software Description:
– acpi-support: scripts for handling many ACPI events

Details:

CESG discovered that acpi-support incorrectly handled certain privileged
operations when checking for power management daemons. A local attacker
could use this flaw to execute arbitrary code and elevate privileges to
root.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
acpi-support 0.140.2

In general, a standard system update will make all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-2297-1
CVE-2014-1419

Package Information:
https://launchpad.net/ubuntu/+source/acpi-support/0.140.2

—–BEGIN PGP SIGNATURE—–
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird – http://www.enigmail.net/
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=C118
—–END PGP SIGNATURE—–
—