USN-1485-1: AccountsService vulnerability

Releases

• Ubuntu 12.04
• Ubuntu 11.10

Packages

• accountsservice - query and manipulate user account information

Details

Florian Weimer discovered that AccountsService incorrectly handled
privileges when copying certain files to the system cache directory. A
local attacker could exploit this issue to read arbitrary files, bypassing
intended permissions.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 12.04

• accountsservice - 0.6.15-2ubuntu9.1
• libaccountsservice0 - 0.6.15-2ubuntu9.1

Ubuntu 11.10

• accountsservice - 0.6.14-1git1ubuntu1.2
• libaccountsservice0 - 0.6.14-1git1ubuntu1.2

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

• CVE-2012-2737