Copied from
ubuntu precise in
Private PPA for Ubuntu Security Team
by Marc Deslauriers
Changelog
usb-creator (0.2.38.2) precise-security; urgency=low
* SECURITY UPDATE: possible privilege escalation via policykit UID lookup
race.
- bin/usb-creator-helper: pass system-bus-name as a subject instead of
pid so policykit can get the information from the system bus.
- CVE-2013-1063
* This update does _not_ include the changes from 0.2.38.1 that was
in precise-proposed.
-- Marc Deslauriers <email address hidden> Wed, 18 Sep 2013 11:34:06 -0400