** Information type changed from Private Security to Public Security
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to packagekit in Ubuntu.
https://bugs.launchpad.net/bugs/1888887
Title:
Reading local files as root leads to sensitive information disclosure
Status in packagekit package in Ubuntu:
Fix Released
Bug description:
Hi,
The InstallFiles, GetFilesLocal and GetDetailsLocal methods of the
d-bus interface to PackageKit accesses given files before checking for
authorization. This allows non-privileged users to learn the MIME type
of any file on the system.
Example in attached Python script:
$ python3 test_file_exists_pk.py /root/.bashrc
File exists and is of MIME type: 'text/plain'
$ python3 test_file_exists_pk.py /root/.bashrca
File does not exist
Description: Ubuntu 20.04 LTS
Release: 20.04
packagekit:
Installed: 1.1.13-2ubuntu1
Candidate: 1.1.13-2ubuntu1
Version table:
*** 1.1.13-2ubuntu1 500
500 http://nl.archive.ubuntu.com/ubuntu focal/main amd64 Packages
100 /var/lib/dpkg/status
Kind regards,
Vaisha Bernard
EYE Control B.V.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/packagekit/+bug/1888887/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
