USN-4457-2: Software Properties vulnerability

Releases

• Ubuntu 14.04 ESM

Packages

• software-properties - manage the repositories that you install software from

Details

USN-4457-1 fixed a vulnerability in Software. This update provides
the corresponding update for Ubuntu 14.04 ESM.

Original advisory details:

Jason A. Donenfeld discovered that Software Properties incorrectly filtered
certain escape sequences when displaying PPA descriptions. If a user were
tricked into adding an arbitrary PPA, a remote attacker could possibly
manipulate the screen.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 14.04

• python-software-properties - 0.92.37.8ubuntu0.1~esm1
• software-properties-common - 0.92.37.8ubuntu0.1~esm1
• python3-software-properties - 0.92.37.8ubuntu0.1~esm1

In general, a standard system update will make all the necessary changes.

References

• CVE-2020-15709

Related notices

• USN-4457-1: software-properties, python3-software-properties, software-properties-gtk, software-properties-kde, software-properties-qt, software-properties-common, python-software-properties