USN-2431-2
maas regression
USN-2431-1 fixed vulnerabilities in mod_wsgi. The security update exposed an issue in the MAAS package, causing a regression. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that mod_wsgi incorrectly handled errors when setting up the working directory and group access rights. A malicious application could possibly use this issue to cause a local privilege escalation when using daemon mode.
What each source reports
OSV No score
maas regression
USN-2431-1 fixed vulnerabilities in mod_wsgi. The security update exposed an issue in the MAAS package, causing a regression. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that mod_wsgi incorrectly handled errors when setting up the working directory and group access rights. A malicious application could possibly use this issue to cause a local privilege escalation when using daemon mode.
- Record
USN-2431-2- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
maasUbuntu:14.04:LTS |
before 1.5.4+bzr2294-0ubuntu1.2, plus listed versions 1.4+bzr1693+dfsg-0ubuntu21.4+bzr1693+dfsg-0ubuntu31.4+bzr1789+dfsg-0ubuntu11.4+bzr1817+dfsg-0ubuntu11.4+bzr1820+dfsg-0ubuntu1 Show 19 moreShow less1.4+bzr1853+dfsg-0ubuntu11.5+bzr1909-0ubuntu11.5+bzr1948-0ubuntu11.5+bzr1948-0ubuntu21.5+bzr1951-0ubuntu11.5+bzr1976-0ubuntu11.5+bzr1977-0ubuntu11.5+bzr1977-0ubuntu21.5+bzr1977-0ubuntu31.5+bzr1977-0ubuntu41.5+bzr1977-0ubuntu51.5+bzr2204-0ubuntu11.5+bzr2227-0ubuntu11.5+bzr2230-0ubuntu11.5+bzr2236-0ubuntu11.5+bzr2252-0ubuntu11.5.1+bzr2269-0ubuntu0.11.5.2+bzr2282-0ubuntu0.21.5.4+bzr2294-0ubuntu1.1 |
1.5.4+bzr2294-0ubuntu1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-2431-2 is a vulnerability with no CVSS score yet in maas, published December 4, 2014. No source lists public exploit code. Fixed in maas 1.5.4+bzr2294-0ubuntu1.2.