Summary
USN-4457-1 fixed a vulnerability in Software. This update provides
the corresponding update for Ubuntu 14.04 ESM.
Original advisory details:
Jason A. Donenfeld discovered that Software Properties incorrectly filtered
certain escape sequences when displaying PPA descriptions. If a user were
tricked into adding an arbitrary PPA, a remote attacker could possibly
manipulate the screen.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | software-properties | 0.92.37.8ubuntu0.1~esm1 |
Vulnerabilities 1
-
Unscored —
add-apt-repository print ASNI terminal codes
Versions of add-apt-repository before 0.98.9.2, 0.96.24.32.14, 0.96.20.10, and 0.92.37.8ubuntu0.1~esm1, printed a PPA (personal package archive) description to the terminal as-is, which allowed PPA owners to provide ANSI terminal escapes to modify terminal co…
References
-
report
https://ubuntu.com/security/CVE-2020-15709