USN-2297-1: acpi-support vulnerability
22 July 2014
The system could be made to run programs as an administrator.
Releases
Packages
- acpi-support - scripts for handling many ACPI events
Details
CESG discovered that acpi-support incorrectly handled certain privileged
operations when checking for power management daemons. A local attacker
could use this flaw to execute arbitrary code and elevate privileges to
root.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 12.04
In general, a standard system update will make all the necessary changes.