Package "ubuntu-advantage-pro"

Name:	ubuntu-advantage-pro
Description:	transitional dummy package for ubuntu-pro-auto-attach
Latest version:	37.2ubuntu~22.04.1
Release:	jammy (22.04)
Level:	updates
Repository:	universe
Head package:	ubuntu-advantage-tools
Homepage:	https://ubuntu.com/advantage

Links

Raw Package Information

All versions of this package

Bug fixes

List of files in package

Repository home page

Download "ubuntu-advantage-pro"

All arch deb package

APT INSTALL

Other versions of "ubuntu-advantage-pro" in Jammy

Repository	Area	Version
base	universe	27.7~22.04.1
security	universe	37.2ubuntu~22.04.1
proposed	universe	38ubuntu0~22.04

Changelog

Version: 37.2ubuntu~22.04.1 2026-07-17 18:08:19 UTC

ubuntu-advantage-tools (37.2ubuntu~22.04.1) jammy-security; urgency=medium * SECURITY UPDATE: Information disclosure - Remove credentials out of argv into apt's own auth.conf.d facility. - CVE-2026-9494 * SECURITY UPDATE: Improper input validation - enforce StrictStringDataValue to applicable fields in directives - reject newline, carriage return, spaces, and shell meta characters in StrictStringDataValue - CVE-2026-11386 * SECURITY UPDATE: Symlink attack - reject symlink log files in user-controlled directory trees during pro collect-logs - restrict pro collect-logs generated support archive permission to root only - CVE-2026-12391 -- Eduardo Barretto <email address hidden> Mon, 06 Jul 2026 15:36:19 +0200

Source diff to previous version

CVE-2026-9494	An information disclosure vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). The client validates Ubuntu Pro APT
CVE-2026-11386	An input validation and injection vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). The client constructs APT so
CVE-2026-12391	An insecure symlink following vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools) within the pro collect-logs comma

Version: 37.2ubuntu~22.04 2026-04-27 09:08:18 UTC

ubuntu-advantage-tools (37.2ubuntu~22.04) jammy; urgency=medium * d/apparmor/ubuntu_pro_esm_cache.jinja2: fix "DENIED" messages when devicetree exists (LP: #2131292) -- Renan Rodrigo <email address hidden> Tue, 07 Apr 2026 15:24:25 -0300

Source diff to previous version

2131292

[SRU] esm_cache.py causes apparmor DENIED audit messages when trying to access devicetree

Version: 37.1ubuntu0~22.04 2025-11-24 20:07:53 UTC

ubuntu-advantage-tools (37.1ubuntu0~22.04) jammy; urgency=medium * Backport 37.1ubuntu0 to jammy (LP: #2129712)

Source diff to previous version

2129712

[SRU] Pro Client version 37 does not run the post do-release-upgrade hook

Version: 36ubuntu0~22.04 2025-07-08 20:30:47 UTC

ubuntu-advantage-tools (36ubuntu0~22.04) jammy; urgency=medium * Backport 36ubuntu0 to jammy (LP: #2112382)

Source diff to previous version

2112382