Summary
Jakub Wilk discovered that debmany in Debian Goodies incorrectly handled
certain deb files. An attacker could possibly use this issue to execute
arbitrary shell commands.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 24.04 LTS 24.04:LTS | debian-goodies | 0.88.1ubuntu1.3 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | debian-goodies | 0.63ubuntu1+esm1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | debian-goodies | 0.64ubuntu0.1~esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | debian-goodies | 0.79ubuntu0.1~esm1 |
References
-
report
https://ubuntu.com/security/CVE-2023-27635