CVE-2011-3154

CVE-2011-3154 affects Ubuntu Update Manager (DistUpgrade/DistUpgradeViewKDE.py) where temporary files are created insecurely, enabling a local user to read the attacker’s XAUTHORITY file via a symlink attack. The issue is documented in CVE-2011-3154 with affected versions prior to specific update...

CVE-2011-3152

CVE-2011-3152 affects Ubuntu Update Manager before certain versions of DistUpgradeFetcherCore.py (before 1:0.87.31.1, 1:0.134.x before 1:0.134.11.1, 1:0.142.x before 1:0.142.23.1, 1:0.150.x before 1:0.150.5.1, and 1:0.152.x before 1:0.152.25.5) on Ubuntu 8.04–11.10. The flaw is improper verificat...