Summary
It was discovered that SimGear could be made to bypass the sandboxing of
Nasal scripts. An attacker could possibly use this issue to execute
arbitrary code.
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | simgear | 3.4.0-3ubuntu0.1~esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | simgear | 1:2018.1.1+dfsg-1ubuntu0.1~esm1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | simgear | 1:2019.1.1+dfsg-3ubuntu0.1~esm1 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | simgear | 1:2020.3.6+dfsg-1ubuntu0.1~esm2 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | simgear | 1:2020.3.18+dfsg-2.1ubuntu0.1~esm1 |
References
-
report
https://ubuntu.com/security/CVE-2025-0781