*** This bug is a security vulnerability *** You have been subscribed to a public security bug by Marc Deslauriers (mdeslaur):
User priviliges are enough to perform update w/o the need for root password. ProblemType: Bug DistroRelease: Ubuntu 11.10 Package: update-manager 1:0.152.25 ProcVersionSignature: Ubuntu 3.0.0-12.20-generic 3.0.4 Uname: Linux 3.0.0-12-generic i686 ApportVersion: 1.23-0ubuntu3 Architecture: i386 Date: Mon Oct 17 16:21:19 2011 ExecutablePath: /usr/bin/update-manager InstallationMedia: Xubuntu 11.04 "Natty Narwhal" - Release i386 (20110427) InterpreterPath: /usr/bin/python2.7 PackageArchitecture: all ProcEnviron: PATH=(custom, no user) LANG=en_US.UTF-8 SHELL=/bin/bash SourcePackage: update-manager UpgradeStatus: Upgraded to oneiric on 2011-10-13 (3 days ago) ** Affects: update-manager (Ubuntu) Importance: Undecided Status: New ** Tags: apport-bug dist-upgrade i386 oneiric -- User can perform update w/o root password https://bugs.launchpad.net/bugs/876568 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs