USN-2845-1: SoS vulnerabilities

Ubuntu Security Notice USN-2845-1

17th December, 2015

sosreport vulnerabilities

A security issue affects these releases of Ubuntu and its
derivatives:

• Ubuntu 15.10



• Ubuntu 15.04



• Ubuntu 14.04 LTS

Summary

sosreport could be made to expose sensitive information or overwrite files
as the administrator.

Software description

• sosreport
  - Set of tools to gather troubleshooting data from a system
  
  

Details

Dolev Farhi discovered an information disclosure issue in SoS. If the
/etc/fstab file contained passwords, the passwords were included in the
SoS report. This issue only affected Ubuntu 14.04 LTS. ()

Update instructions

The problem can be corrected by updating your system to the following
package version:

Ubuntu 15.10:

Ubuntu 15.04:

Ubuntu 14.04 LTS:

To update your system, please follow these instructions:
,

CVE-2015-7529