Skip to content
OpenAdvisories
Unscored USN-2431-2 0 CVEs

maas regression

Published Dec 4, 2014 · Updated Feb 10, 2026

Summary

USN-2431-1 fixed vulnerabilities in mod_wsgi. The security update exposed
an issue in the MAAS package, causing a regression. This update fixes the
problem.

We apologize for the inconvenience.

Original advisory details:

It was discovered that mod_wsgi incorrectly handled errors when setting up
the working directory and group access rights. A malicious application
could possibly use this issue to cause a local privilege escalation when
using daemon mode.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS maas 1.5.4+bzr2294-0ubuntu1.2

References

  • report
    https://launchpad.net/bugs/1399016