Kevin Backhouse

In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process.

apt integer wraparound

gdm3 would start gnome-initial-setup if it cannot contact accountservice

Integer overflow in bson_ensure_space

Apport reads arbitrary files if ~/.config/apport/settings is a symlink

Various memory and file descriptor leaks in apt-python

Free of static data in accountsservice

accountsservice .pam_environment infinite loop

accountsservice drops ruid, allows unprivileged users to send it signals

Aptdaemon error messages disclosed file existence to unprivileged users via dbus properties