Back Linuxsecurity Ubuntu 24.04 LTS SimGear Important Exec Risk USN-7965-1 CVE-2025
A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: SimGear could be made to run programs as an administrator if it opened a specially crafted file. Software Description: - simgear: set of open-source libraries for assembling 3d simulations, games, and visualizations Details: It was discovered that SimGear could be made to bypass the sandboxing of Nasal scripts. An attacker could possibly use this issue to execute arbitrary code.
A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: SimGear could be made to run programs as an administrator if it opened a specially crafted file. Software Description: - simgear: set of open-source libraries for assembling 3d simulations, games, and visualizations Details: It was discovered that SimGear could be made to bypass the sandboxing of Nasal scripts. An attacker could possibly use this issue to execute arbitrary code.
The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS libsimgear-dev 1:2020.3.18+dfsg-2.1ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 22.04 LTS libsimgear-dev 1:2020.3.6+dfsg-1ubuntu0.1~esm2 Available with Ubuntu Pro Ubuntu 20.04 LTS libsimgear-dev 1:2019.1.1+dfsg-3ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS libsimgear-dev 1:2018.1.1+dfsg-1ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 16.04 LTS libsimgear-dev 3.4.0-3ubuntu0.1~esm1 Available with Ubuntu Pro libsimgearcore3.4.0v5 3.4.0-3ubuntu0.1~esm1 Available with Ubuntu Pro libsimgearscene3.4.0v5 3.4.0-3ubuntu0.1~esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.
The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS libsimgear-dev 1:2020.3.18+dfsg-2.1ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 22.04 LTS libsimgear-dev 1:2020.3.6+dfsg-1ubuntu0.1~esm2 Available with Ubuntu Pro Ubuntu 20.04 LTS libsimgear-dev 1:2019.1.1+dfsg-3ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS libsimgear-dev 1:2018.1.1+dfsg-1ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 16.04 LTS libsimgear-dev 3.4.0-3ubuntu0.1~esm1 Available with Ubuntu Pro libsimgearcore3.4.0v5 3.4.0-3ubuntu0.1~esm1 Available with Ubuntu Pro libsimgearscene3.4.0v5 3.4.0-3ubuntu0.1~esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
