UbuntuUpdates.org

Package "ubuntu-pro-auto-attach"

Name: ubuntu-pro-auto-attach

Description:

Service to auto-attach Ubuntu Pro cloud images
Latest version: 37.1ubuntu0~20.04.1
Release: focal (20.04)
Level: updates
Repository: main
Head package: ubuntu-advantage-tools
Homepage: https://canonical-ubuntu-pro-client.readthedocs-hosted.com/en/latest/explanations/what_are_ubunt...

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "ubuntu-pro-auto-attach"

All arch deb package
APT INSTALL

Other versions of "ubuntu-pro-auto-attach" in Focal

Repository Area Version
security main 37.1ubuntu0~20.04.1

Changelog

Version: 37.1ubuntu0~20.04.1 2026-07-17 18:08:12 UTC

  ubuntu-advantage-tools (37.1ubuntu0~20.04.1) focal-security; urgency=medium

  * SECURITY UPDATE: Information disclosure
    - Remove credentials out of argv into apt's own auth.conf.d facility.
    - CVE-2026-9494
  * SECURITY UPDATE: Improper input validation
    - enforce StrictStringDataValue to applicable fields in directives
    - reject newline, carriage return, spaces, and shell meta characters
      in StrictStringDataValue
    - CVE-2026-11386
  * SECURITY UPDATE: Symlink attack
    - reject symlink log files in user-controlled directory trees during
      pro collect-logs
    - restrict pro collect-logs generated support archive permission to
      root only
    - CVE-2026-12391

 -- Eduardo Barretto <email address hidden> Mon, 06 Jul 2026 15:37:04 +0200
Source diff to previous version
CVE-2026-9494 An information disclosure vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). The client validates Ubuntu Pro APT
CVE-2026-11386 An input validation and injection vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). The client constructs APT so
CVE-2026-12391 An insecure symlink following vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools) within the pro collect-logs comma

Version: 37.1ubuntu0~20.04 2025-11-24 20:07:44 UTC

  ubuntu-advantage-tools (37.1ubuntu0~20.04) focal; urgency=medium

  * Backport 37.1ubuntu0 to focal (LP: #2129712)
Source diff to previous version
2129712 [SRU] Pro Client version 37 does not run the post do-release-upgrade hook

Version: 36ubuntu0~20.04 2025-07-08 17:43:53 UTC

  ubuntu-advantage-tools (36ubuntu0~20.04) focal; urgency=medium

  * Backport 36ubuntu0 to focal (LP: #2112382)
Source diff to previous version
2112382 [SRU] ubuntu-advantage-tools (35.1 -\u003e 36) Xenial, Bionic, Focal, Jammy, Noble, Oracular, Plucky

Version: 35.1ubuntu0~20.04 2025-04-30 12:07:08 UTC

  ubuntu-advantage-tools (35.1ubuntu0~20.04) focal; urgency=medium

  * Backport 35.1ubuntu0 to focal (LP: #2106660)
Source diff to previous version
2106660 LXD auto-attach does not work without a daemon-reload

Version: 34~20.04 2024-09-19 16:07:02 UTC

  ubuntu-advantage-tools (34~20.04) focal; urgency=medium

  * Backport 34 to focal (LP: #2075543)
2075543 [SRU] ubuntu-advantage-tools (33.2 -\u003e 34) Xenial, Bionic, Focal, Jammy, Noble


About   -   Send Feedback to @ubuntu_updates