security advisoryupdateDebian
It was discovered that there was a potential command-injection vulnerability was discovered in ucf, a tool to preserve user changes to config files. . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4016-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Chris Lamb January 21, 2025 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : ucf Version : 3.0043+deb11u2 Debian Bug : 1089015 It was discovered that there was a potential command-injection vulnerability was discovered in ucf, a tool to preserve user changes to config files. For Debian 11 bullseye, this problem has been fixed in version 3.0043+deb11u2. We recommend that you upgrade your ucf packages. For the detailed security status of ucf please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/ucf Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Debian LTS Advisory DLA-4016-1 mitigates command-injection vulnerabilities in the ucf utility; applying the update is strongly advised.. Debian LTS, ucf tool, command injection, security updates, software vulnerabilities. . LinuxSecurity.com Team
Jan 21, 2025
Debian LTS