Description:
===========================================================Ubuntu Security Notice USN-708-1 January 13, 2009hplip vulnerabilityhttps://launchpad.net/bugs/191299===========================================================A security issue affects the following Ubuntu releases:Ubuntu 7.10This advisory also applies to the corresponding versions ofKubuntu, Edubuntu, and Xubuntu.The problem can be corrected by upgrading your system to thefollowing package versions:Ubuntu 7.10: hplip 2.7.7.dfsg.1-0ubuntu5.3In general, a standard system upgrade is sufficient to effect thenecessary changes.Details follow:It was discovered that an installation script in the HPLIP package wouldchange permissions on the hplip config files located in user's home directories.A local user could exploit this and change permissions on arbitrary filesupon an HPLIP installation or upgrade, which could lead to root privileges.