USN-4664-1: Aptdaemon vulnerabilities

Releases

• Ubuntu 20.10
• Ubuntu 20.04 LTS
• Ubuntu 18.04 ESM
• Ubuntu 16.04 ESM

Packages

• aptdaemon - transaction based package management service

Details

Kevin Backhouse discovered that Aptdaemon incorrectly handled certain
properties. A local attacker could use this issue to test for the presence
of local files. (CVE-2020-16128)

Kevin Backhouse discovered that Aptdaemon incorrectly handled permission
checks. A local attacker could possibly use this issue to cause a denial of
service. (CVE-2020-27349)

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 20.10

• aptdaemon - 1.1.1+bzr982-0ubuntu34.1

Ubuntu 20.04

• aptdaemon - 1.1.1+bzr982-0ubuntu32.3

Ubuntu 18.04

• aptdaemon - 1.1.1+bzr982-0ubuntu19.5

Ubuntu 16.04

• aptdaemon - 1.1.1+bzr982-0ubuntu14.5

After a standard system update you need to reboot your computer to make all
the necessary changes.

References

• CVE-2020-27349
• CVE-2020-16128