Ubuntu 23.10 USN-6714-1 High: Debian Goodies Shell Command Issue
ubuntu
March 25, 2024
debmany in Debian Goodies could be made to execute arbitrary shell commands if it received a specially crafted deb file.
Summary
A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 23.10 - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: debmany in Debian Goodies could be made to execute arbitrary shell commands if it received a specially crafted deb file. Software Description: - debian-goodies: Small toolbox-style utilities for Debian systems Details: It was discovered that debmany in Debian Goodies incorrectly handled certain deb files. An attacker could possibly use this issue to execute arbitrary shell commands.
Topics Covered
Update Instructions
The problem can be corrected by updating your system to the following package versions: Ubuntu 23.10: debian-goodies 0.88.1ubuntu1.2 Ubuntu 22.04 LTS: debian-goodies 0.87ubuntu1.1 Ubuntu 20.04 LTS: debian-goodies 0.84ubuntu0.1 In general, a standard system update will make all the necessary changes.
References
CVE-2023-27635
PREVIOUS
NEXT
Ubuntu Security Notice USN-6714-1
Topics Covered
Package Information
https://launchpad.net/ubuntu/+source/debian-goodies/0.88.1ubuntu1.2 https://launchpad.net/ubuntu/+source/debian-goodies/0.87ubuntu1.1 https://launchpad.net/ubuntu/+source/debian-goodies/0.84ubuntu0.1
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!