Ubuntu 20.04 LTS USN-4664-1: Aptdaemon Security Issues Detected

ubuntu

December 8, 2020

Several security issues were fixed in Aptdaemon.

Summary

Several security issues were fixed in Aptdaemon.

Software Description:

- aptdaemon: transaction based package management service

Details:

Kevin Backhouse discovered that Aptdaemon incorrectly handled certain

properties. A local attacker could use this issue to test for the presence

of local files. (CVE-2020-16128)

Kevin Backhouse discovered that Aptdaemon incorrectly handled permission

checks. A local attacker could possibly use this issue to cause a denial of

service. (CVE-2020-27349)

Topics Covered

security advisory security issue update Ubuntu Denial of Service local file access aptdaemon

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.10:
  aptdaemon                       1.1.1+bzr982-0ubuntu34.1

Ubuntu 20.04 LTS:
  aptdaemon                       1.1.1+bzr982-0ubuntu32.3

Ubuntu 18.04 LTS:
  aptdaemon                       1.1.1+bzr982-0ubuntu19.5

Ubuntu 16.04 LTS:
  aptdaemon                       1.1.1+bzr982-0ubuntu14.5

After a standard system update you need to reboot your computer to make all
the necessary changes.