Ubuntu 23.10 USN-6714-1 High: Debian Goodies Shell Command Issue

ubuntu

March 25, 2024

debmany in Debian Goodies could be made to execute arbitrary shell commands if it received a specially crafted deb file.

Summary

debmany in Debian Goodies could be made to execute arbitrary shell

commands if it received a specially crafted deb file.

Software Description:

- debian-goodies: Small toolbox-style utilities for Debian systems

Details:

It was discovered that debmany in Debian Goodies incorrectly handled certain

deb files. An attacker could possibly use this issue to execute arbitrary shell

commands.

Topics Covered

security advisory high severity command execution ubuntu debian goodies

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 23.10:
  debian-goodies                  0.88.1ubuntu1.2

Ubuntu 22.04 LTS:
  debian-goodies                  0.87ubuntu1.1

Ubuntu 20.04 LTS:
  debian-goodies                  0.84ubuntu0.1

In general, a standard system update will make all the necessary changes.