Ubuntu Security Notices
USN-1955-1

USN-1955-1: apt-xapian-index vulnerability

Publication date

18 September 2013

Overview

apt-xapian-index could be tricked into bypassing polkit authorizations.

Releases

13.04 12.10 12.04

Packages

apt-xapian-index - maintenance and search tools for a Xapian index of Debian package

Details

It was discovered that apt-xapian-index was using polkit in an unsafe
manner. A local attacker could possibly use this issue to bypass intended
polkit authorizations.

Update instructions

After a standard system update you need to reboot your computer to make all the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release	Package Version
13.04 raring	apt-xapian-index – 0.45ubuntu2.1
12.10 quantal	apt-xapian-index – 0.44ubuntu7.1
12.04 precise	apt-xapian-index – 0.44ubuntu5.1

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

CVE-2013-1064

CVE-2013-1064