Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Debian 11: DLA-4016-1 moderate: ucf command injection risk

debian lts
Calendar Grey January 21, 2025
Dist Debian Esm H88
Debian LTS Advisory DLA-4016-1 mitigates command-injection vulnerabilities in the ucf utility; applying the update is strongly advised.
It was discovered that there was a potential command-injection vulnerability was discovered in ucf, a tool to preserve user changes to config files

Summary

For Debian 11 bullseye, this problem has been fixed in version
3.0043+deb11u2.

We recommend that you upgrade your ucf packages.

For the detailed security status of ucf please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/ucf

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS



Package: ucf
Version: 3.0043+deb11u2
Debian Bug: 1089015

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here