USN-2431-2: MAAS regression
4 December 2014
USN-2431-1 caused a regression in the MAAS package.
- maas - Ubuntu MAAS Server
USN-2431-1 fixed vulnerabilities in mod_wsgi. The security update exposed
an issue in the MAAS package, causing a regression. This update fixes the
We apologize for the inconvenience.
Original advisory details:
It was discovered that mod_wsgi incorrectly handled errors when setting up
the working directory and group access rights. A malicious application
could possibly use this issue to cause a local privilege escalation when
using daemon mode.
The problem can be corrected by updating your system to the following package versions:
In general, a standard system update will make all the necessary changes.