{"id":"USN-2431-2","summary":"maas regression","details":"USN-2431-1 fixed vulnerabilities in mod_wsgi. The security update exposed\nan issue in the MAAS package, causing a regression. This update fixes the\nproblem.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\n It was discovered that mod_wsgi incorrectly handled errors when setting up\n the working directory and group access rights. A malicious application\n could possibly use this issue to cause a local privilege escalation when\n using daemon mode.\n","modified":"2026-02-10T04:40:51Z","published":"2014-12-04T20:25:09Z","references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-2431-2"},{"type":"REPORT","url":"https://launchpad.net/bugs/1399016"}],"affected":[{"package":{"name":"maas","ecosystem":"Ubuntu:14.04:LTS","purl":"pkg:deb/ubuntu/maas@1.5.4+bzr2294-0ubuntu1.2?arch=source&distro=trusty"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4+bzr2294-0ubuntu1.2"}]}],"versions":["1.4+bzr1693+dfsg-0ubuntu2","1.4+bzr1693+dfsg-0ubuntu3","1.4+bzr1789+dfsg-0ubuntu1","1.4+bzr1817+dfsg-0ubuntu1","1.4+bzr1820+dfsg-0ubuntu1","1.4+bzr1853+dfsg-0ubuntu1","1.5+bzr1909-0ubuntu1","1.5+bzr1948-0ubuntu1","1.5+bzr1948-0ubuntu2","1.5+bzr1951-0ubuntu1","1.5+bzr1976-0ubuntu1","1.5+bzr1977-0ubuntu1","1.5+bzr1977-0ubuntu2","1.5+bzr1977-0ubuntu3","1.5+bzr1977-0ubuntu4","1.5+bzr1977-0ubuntu5","1.5+bzr2204-0ubuntu1","1.5+bzr2227-0ubuntu1","1.5+bzr2230-0ubuntu1","1.5+bzr2236-0ubuntu1","1.5+bzr2252-0ubuntu1","1.5.1+bzr2269-0ubuntu0.1","1.5.2+bzr2282-0ubuntu0.2","1.5.4+bzr2294-0ubuntu1.1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"maas","binary_version":"1.5.4+bzr2294-0ubuntu1.2"},{"binary_name":"maas-cli","binary_version":"1.5.4+bzr2294-0ubuntu1.2"},{"binary_name":"maas-cluster-controller","binary_version":"1.5.4+bzr2294-0ubuntu1.2"},{"binary_name":"maas-common","binary_version":"1.5.4+bzr2294-0ubuntu1.2"},{"binary_version":"1.5.4+bzr2294-0ubuntu1.2","binary_name":"maas-dhcp"},{"binary_name":"maas-dns","binary_version":"1.5.4+bzr2294-0ubuntu1.2"},{"binary_name":"maas-region-controller","binary_version":"1.5.4+bzr2294-0ubuntu1.2"},{"binary_name":"maas-region-controller-min","binary_version":"1.5.4+bzr2294-0ubuntu1.2"},{"binary_name":"python-django-maas","binary_version":"1.5.4+bzr2294-0ubuntu1.2"},{"binary_name":"python-maas-client","binary_version":"1.5.4+bzr2294-0ubuntu1.2"},{"binary_name":"python-maas-provisioningserver","binary_version":"1.5.4+bzr2294-0ubuntu1.2"}]},"database_specific":{"cves_map":{"cves":[],"ecosystem":"Ubuntu:14.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-2431-2.json"}}],"schema_version":"1.7.3"}