USN-4457-1: Software Properties vulnerability
12 August 2020
Software Properties could be made to manipulate the display.
Releases
Packages
- software-properties - manage the repositories that you install software from
Details
Jason A. Donenfeld discovered that Software Properties incorrectly filtered
certain escape sequences when displaying PPA descriptions. If a user were
tricked into adding an arbitrary PPA, a remote attacker could possibly
manipulate the screen.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 20.04
Ubuntu 18.04
Ubuntu 16.04
-
python-software-properties
-
0.96.20.10
-
python3-software-properties
-
0.96.20.10
-
software-properties-common
-
0.96.20.10
In general, a standard system update will make all the necessary changes.
References
Related notices
- USN-4457-2: software-properties, python3-software-properties, software-properties-gtk, software-properties-kde, software-properties-common, python-software-properties