USN-1662-1: APT vulnerability

Releases

• Ubuntu 12.10
• Ubuntu 12.04
• Ubuntu 11.10

Packages

• apt - Advanced front-end for dpkg

Details

It was discovered that APT set inappropriate permissions on the term.log
file. A local attacker could use this flaw to possibly obtain sensitive
information.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 12.10

• apt - 0.9.7.5ubuntu5.2

Ubuntu 12.04

• apt - 0.8.16~exp12ubuntu10.7

Ubuntu 11.10

• apt - 0.8.16~exp5ubuntu13.6

In general, a standard system update will make all the necessary changes.

References

• CVE-2012-0961