This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============5913253592314124415==
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature";
 boundary="KVaMI6H1GETUnSl9pbcjF3PTfoTQH81Ws"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--KVaMI6H1GETUnSl9pbcjF3PTfoTQH81Ws
Content-Type: text/plain; charset=utf-
Content-Transfer-Encoding: quoted-printable

==========================================================================
Ubuntu Security Notice USN-2581-1
April 28, 2015

network-manager vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 15.04
- Ubuntu 14.10
- Ubuntu 14.04 LTS

Summary:

NetworkManager would allow unintended access to files and modem device
configuration.

Software Description:
- network-manager: Network connection manager

Details:

Tavis Ormandy discovered that NetworkManager incorrectly filtered paths
when requested to read modem device contexts. A local attacker could
possibly use this issue to bypass privileges and manipulate modem device
configuration or read arbitrary files.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.04:
  network-manager                 0.9.10.0-4ubuntu15.1

Ubuntu 14.10:
  network-manager                 0.9.8.8-0ubuntu28.1

Ubuntu 14.04 LTS:
  network-manager                 0.9.8.8-0ubuntu7.1

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
  http://www.ubuntu.com/usn/usn-2581-1
  CVE-2015-1322

Package Information:
  https://launchpad.net/ubuntu/+source/network-manager/0.9.10.0-4ubuntu15.1
  https://launchpad.net/ubuntu/+source/network-manager/0.9.8.8-0ubuntu28.1
  https://launchpad.net/ubuntu/+source/network-manager/0.9.8.8-0ubuntu7.1



--KVaMI6H1GETUnSl9pbcjF3PTfoTQH81Ws
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=sPiX
-----END PGP SIGNATURE-----

--KVaMI6H1GETUnSl9pbcjF3PTfoTQH81Ws--


--===============5913253592314124415==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

--===============5913253592314124415==--