UbuntuUpdates.org

Package "debian-goodies"

Name: debian-goodies

Description:

Small toolbox-style utilities for Debian systems

Latest version: 0.88.1ubuntu1.2
Release: mantic (23.10)
Level: updates
Repository: main

Links


Download "debian-goodies"


Other versions of "debian-goodies" in Mantic

Repository Area Version
base main 0.88.1ubuntu1
security main 0.88.1ubuntu1.2

Changelog

Version: 0.88.1ubuntu1.2 2024-03-25 18:07:04 UTC

  debian-goodies (0.88.1ubuntu1.2) mantic-security; urgency=medium

  * SECURITY UPDATE: Arbitrary code execution
    - 495eaafa94d2b4cbee4eed01cd78238e311d096b fix shell injection
      via crafted .deb in debmany/debmany.
    - CVE-2023-27635

 -- Leonidas Da Silva Barbosa <email address hidden> Wed, 20 Mar 2024 11:20:50 -0300

CVE-2023-27635 debmany in debian-goodies 0.88.1 allows attackers to execute arbitrary shell commands (because of an eval call) via a crafted .deb file. (The path is



About   -   Send Feedback to @ubuntu_updates