UbuntuUpdates.org

Package "ubuntu-pro-auto-attach"

Name: ubuntu-pro-auto-attach

Description:

Service to auto-attach Ubuntu Pro cloud images
Latest version: 37.1ubuntu0~18.04.1
Release: bionic (18.04)
Level: security
Repository: main
Head package: ubuntu-advantage-tools
Homepage: https://canonical-ubuntu-pro-client.readthedocs-hosted.com/en/latest/explanations/what_are_ubunt...

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "ubuntu-pro-auto-attach"

All arch deb package
APT INSTALL

Other versions of "ubuntu-pro-auto-attach" in Bionic

Repository Area Version
updates main 37.1ubuntu0~18.04.1

Changelog

Version: 37.1ubuntu0~18.04.1 2026-07-16 13:09:02 UTC

  ubuntu-advantage-tools (37.1ubuntu0~18.04.1) bionic-security; urgency=medium

  * SECURITY UPDATE: Information disclosure
    - Remove credentials out of argv into apt's own auth.conf.d facility.
    - CVE-2026-9494
  * SECURITY UPDATE: Improper input validation
    - enforce StrictStringDataValue to applicable fields in directives
    - reject newline, carriage return, spaces, and shell meta characters
      in StrictStringDataValue
    - CVE-2026-11386
  * SECURITY UPDATE: Symlink attack
    - reject symlink log files in user-controlled directory trees during
      pro collect-logs
    - restrict pro collect-logs generated support archive permission to
      root only
    - CVE-2026-12391

 -- Eduardo Barretto <email address hidden> Tue, 07 Jul 2026 17:01:20 +0200


About   -   Send Feedback to @ubuntu_updates