Summary
It was discovered that debmany in Debian Goodies incorrectly handled certain
deb files. An attacker could possibly use this issue to execute arbitrary shell
commands.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | debian-goodies | 0.84ubuntu0.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | debian-goodies | 0.87ubuntu1.1 |
Vulnerabilities 1
-
Unscored —
debmany in debian-goodies 0.88.1 allows attackers to execute arbitrary shell commands (because of an eval call) via a c…
References
-
report
https://ubuntu.com/security/CVE-2023-27635