UbuntuUpdates.org

Package "click"

Name: click

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • Click packages (PackageKit plugin)
Latest version: 0.4.21.1ubuntu0.2
Release: trusty (14.04)
Level: updates
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "click" in Trusty

Repository Area Version
base universe 0.4.21.1
base main 0.4.21.1
security main 0.4.21.1ubuntu0.2
security universe 0.4.21.1ubuntu0.2
updates main 0.4.21.1ubuntu0.2
PPA: Phablet Tools 0.4.32.1
PPA: Ubuntu SDK Release 0.4.46+17.10.20170607.3-0~622~ubuntu14.04.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 0.4.21.1ubuntu0.2 2015-10-15 21:06:28 UTC

  click (0.4.21.1ubuntu0.2) trusty-security; urgency=medium

  * SECURITY UPDATE: fix privilege escalation via crafted data.tar.gz that
    can be used to install alternate security policy than what is defined
    - click/install.py: Forbid installing packages with data tarball members
      whose names do not start with "./". Based on patch from Colin Watson.
    - CVE-2015-XXXX
    - LP: #1506467

 -- Jamie Strandboge Thu, 15 Oct 2015 10:05:35 -0500
1506467 click install does not ignore shipped files without leading './'


About   -   Send Feedback to @ubuntu_updates