==========================================================================
Ubuntu Security Notice USN-2581-1
April 28, 2015

network-manager vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 15.04
– Ubuntu 14.10
– Ubuntu 14.04 LTS

Summary:

NetworkManager would allow unintended access to files and modem device
configuration.

Software Description:
– network-manager: Network connection manager

Details:

Tavis Ormandy discovered that NetworkManager incorrectly filtered paths
when requested to read modem device contexts. A local attacker could
possibly use this issue to bypass privileges and manipulate modem device
configuration or read arbitrary files.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.04:
network-manager 0.9.10.0-4ubuntu15.1

Ubuntu 14.10:
network-manager 0.9.8.8-0ubuntu28.1

Ubuntu 14.04 LTS:
network-manager 0.9.8.8-0ubuntu7.1

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-2581-1
CVE-2015-1322

Package Information:
https://launchpad.net/ubuntu/+source/network-manager/0.9.10.0-4ubuntu15.1
https://launchpad.net/ubuntu/+source/network-manager/0.9.8.8-0ubuntu28.1
https://launchpad.net/ubuntu/+source/network-manager/0.9.8.8-0ubuntu7.1

—–BEGIN PGP SIGNATURE—–
Version: GnuPG v1

iQIcBAEBCgAGBQJVP5MHAAoJEGVp2FWnRL6TvIAP/05r/9MUZfmJnDE5N9tmBS/D
m0aotcBM64yXMIieSRJJRLMmqo/ZgYaB+ZjP5TfGdm1hQFZ3yUG9VkBCvFzR2o2k
j36Ti9M2nsjH+/RjGk5uBcRs/IutCDrd244swSqaqVz67u4w4IekEF8r+GmhAC2h
ODNEFUogooFVUtf6KFheccUsD9r4AIoZ+NMilubKekYwSXbymoHW9IOkQlm0nem6
XoXSGt8PqqlmdW1gOMdi1A5nQj2GUwBuzMKc+X6lnWdq1+i66qo3V3OUBkgZx6X4
G36Hq6yBQCznbH+5N5j2/4Jy4goYys7hhco+MOLUBagSsJcwE/BaeYuc5Go4ooaL
OibhSlElKZd8tVoAudGTGYxYm21KpIdOLy3Nu3uWy5zz+Hf4palT7XxjMrTXKpKc
20Gbv9Z6YRRvb+NrpWv6lpXA9/DRmW/BE65fR2cqJ7Qp0mo0hxHZ8wDmWyacE20Z
UyddPbI5Idilpztcv+IpBRNaKP7YmOkNkrFnyXPkDesILFfFH3e6zx2eRVKqe+IO
B1dlHkPjKS0Um+oO+GC7m3YKKd5eZyD2mytrdYTj0iiYO+qBRhwBoDF3/6mFjyWG
bkOpIvtEcUrF9x1oUIOiBt67EhS5E4NeXaEdrKyR5h+bxYerwY8nxoW7wp5xzqAa
IDTpWfe3MetUWl4OTZm9
=sPiX
—–END PGP SIGNATURE—–
—