Alerts This Week
Warning Icon 1 1,394
Alerts This Week
Warning Icon 1 1,394

Ubuntu 14.04 ESM: USN-4457-2 Moderate: Software Properties Display Risk

ubuntu
Calendar Grey August 17, 2020
Dist Ubuntu Esm H88
Ubuntu Security Update USN-4457-3 addresses a vulnerability in software-properties that impacts Ubuntu 16.04 ESM versions.
Software Properties could be made to manipulate the display.

Summary

Software Properties could be made to manipulate the display.

Software Description:

- software-properties: manage the repositories that you install software from

Details:

USN-4457-1 fixed a vulnerability in Software. This update provides

the corresponding update for Ubuntu 14.04 ESM.

Original advisory details:

Jason A. Donenfeld discovered that Software Properties incorrectly filtered

certain escape sequences when displaying PPA descriptions. If a user were

tricked into adding an arbitrary PPA, a remote attacker could possibly

manipulate the screen.

Topics%20covered

Topics Covered

security advisory security issue remote code execution package update ubuntu software properties display manipulation

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 ESM:
  python-software-properties      0.92.37.8ubuntu0.1~esm1
  python3-software-properties     0.92.37.8ubuntu0.1~esm1
  software-properties-common      0.92.37.8ubuntu0.1~esm1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4457-2

https://ubuntu.com/security/notices/USN-4457-1

CVE-2020-15709

August 17, 2020

Topics%20covered

Topics Covered

security advisory security issue remote code execution package update ubuntu software properties display manipulation

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here