Software Properties could be made to manipulate the display.. =========================================================================Ubuntu Security Notice USN-4457-2 August 17, 2020 software-properties vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 14.04 ESM Summary: Software Properties could be made to manipulate the display. Software Description: - software-properties: manage the repositories that you install software from Details: USN-4457-1 fixed a vulnerability in Software. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Jason A. Donenfeld discovered that Software Properties incorrectly filtered certain escape sequences when displaying PPA descriptions. If a user were tricked into adding an arbitrary PPA, a remote attacker could possibly manipulate the screen. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 14.04 ESM: python-software-properties 0.92.37.8ubuntu0.1~esm1 python3-software-properties 0.92.37.8ubuntu0.1~esm1 software-properties-common 0.92.37.8ubuntu0.1~esm1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4457-2 https://ubuntu.com/security/notices/USN-4457-1 CVE-2020-15709 . Ubuntu Security Update USN-4457-3 addresses a vulnerability in software-properties that impacts Ubuntu 16.04 ESM versions.. security advisory, software properties, ubuntu 14.04, display manipulation, package update. . LinuxSecurity.com Team
Software Properties could be made to manipulate the display.. =========================================================================Ubuntu Security Notice USN-4457-1 August 12, 2020 software-properties vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Software Properties could be made to manipulate the display. Software Description: - software-properties: manage the repositories that you install software from Details: Jason A. Donenfeld discovered that Software Properties incorrectly filtered certain escape sequences when displaying PPA descriptions. If a user were tricked into adding an arbitrary PPA, a remote attacker could possibly manipulate the screen. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS: python3-software-properties 0.98.9.2 software-properties-common 0.98.9.2 Ubuntu 18.04 LTS: python3-software-properties 0.96.24.32.14 software-properties-common 0.96.24.32.14 Ubuntu 16.04 LTS: python-software-properties 0.96.20.10 python3-software-properties 0.96.20.10 software-properties-common 0.96.20.10 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4457-1 CVE-2020-15709 Package Information: https://launchpad.net/ubuntu/+source/software-properties/0.98.9.2 https://launchpad.net/ubuntu/+source/software-properties/0.96.24.32.14 https://launchpad.net/ubuntu/+source/software-properties/0.96.20.10 . Ubuntu Security Alert USN-4458-1 brings attention to a flaw in system-packages across multiple iterations. Apply updates immediately. software properties vulnerability, ubuntu security, update instructions. . Severity: Critical. LinuxSecurity.com Team
Software Properties could be tricked into installing arbitrary PPA GPG keys.. =========================================================================Ubuntu Security Notice USN-1588-1 October 01, 2012 software-properties vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 LTS - Ubuntu 11.10 - Ubuntu 11.04 - Ubuntu 10.04 LTS Summary: Software Properties could be tricked into installing arbitrary PPA GPG keys. Software Description: - software-properties: manage the repositories that you install software from Details: It was discovered that the apt-add-repository tool incorrectly validated PPA GPG keys when importing from a keyserver. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could be exploited to install altered package repository GPG keys. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 LTS: python-software-properties 0.82.7.3 Ubuntu 11.10: python-software-properties 0.81.13.5 Ubuntu 11.04: python-software-properties 0.80.9.2 Ubuntu 10.04 LTS: python-software-properties 0.75.10.3 In general, a standard system update will make all the necessary changes. References: https://bugs.launchpad.net/ubuntu/+source/software-properties/+bug/1016643 Package Information: https://launchpad.net/ubuntu/+source/software-properties/0.82.7.3 https://launchpad.net/ubuntu/+source/software-properties/0.81.13.5 https://launchpad.net/ubuntu/+source/software-properties/0.80.9.2 https://launchpad.net/ubuntu/+source/software-properties/0.75.10.3 . Critical notice regarding Software Elements malfunction impacting several Ubuntu releases. Prompt system upgrade advised.. Software Properties,GPG Key,Ubuntu Security Warning. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.