*** This bug is a security vulnerability ***
You have been subscribed to a public security bug by Marc Deslauriers
(mdeslaur):
User priviliges are enough to perform update w/o the need for root
password.
ProblemType: Bug
DistroRelease: Ubuntu 11.10
Package: update-manager 1:0.152.25
ProcVersionSignature: Ubuntu 3.0.0-12.20-generic 3.0.4
Uname: Linux 3.0.0-12-generic i686
ApportVersion: 1.23-0ubuntu3
Architecture: i386
Date: Mon Oct 17 16:21:19 2011
ExecutablePath: /usr/bin/update-manager
InstallationMedia: Xubuntu 11.04 "Natty Narwhal" - Release i386 (20110427)
InterpreterPath: /usr/bin/python2.7
PackageArchitecture: all
ProcEnviron:
PATH=(custom, no user)
LANG=en_US.UTF-8
SHELL=/bin/bash
SourcePackage: update-manager
UpgradeStatus: Upgraded to oneiric on 2011-10-13 (3 days ago)
** Affects: update-manager (Ubuntu)
Importance: Undecided
Status: New
** Tags: apport-bug dist-upgrade i386 oneiric
--
User can perform update w/o root password
https://bugs.launchpad.net/bugs/876568
You received this bug notification because you are a member of Ubuntu Bugs,
which is subscribed to the bug report.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs