UbuntuUpdates.org

Package "ubuntu-pro-auto-attach"

Name: ubuntu-pro-auto-attach

Description:

Service to auto-attach Ubuntu Pro cloud images
Latest version: 37.1ubuntu0~20.04.1
Release: focal (20.04)
Level: security
Repository: main
Head package: ubuntu-advantage-tools
Homepage: https://canonical-ubuntu-pro-client.readthedocs-hosted.com/en/latest/explanations/what_are_ubunt...

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "ubuntu-pro-auto-attach"

All arch deb package
APT INSTALL

Other versions of "ubuntu-pro-auto-attach" in Focal

Repository Area Version
updates main 37.1ubuntu0~20.04.1

Changelog

Version: 37.1ubuntu0~20.04.1 2026-07-16 13:09:06 UTC

  ubuntu-advantage-tools (37.1ubuntu0~20.04.1) focal-security; urgency=medium

  * SECURITY UPDATE: Information disclosure
    - Remove credentials out of argv into apt's own auth.conf.d facility.
    - CVE-2026-9494
  * SECURITY UPDATE: Improper input validation
    - enforce StrictStringDataValue to applicable fields in directives
    - reject newline, carriage return, spaces, and shell meta characters
      in StrictStringDataValue
    - CVE-2026-11386
  * SECURITY UPDATE: Symlink attack
    - reject symlink log files in user-controlled directory trees during
      pro collect-logs
    - restrict pro collect-logs generated support archive permission to
      root only
    - CVE-2026-12391

 -- Eduardo Barretto <email address hidden> Mon, 06 Jul 2026 15:37:04 +0200


About   -   Send Feedback to @ubuntu_updates