Package "ubuntu-advantage-tools"
| Name: |
ubuntu-advantage-tools
|
Description: |
This package is just an umbrella for a group of other packages,
it has no description.
Description samples from packages in group:
- Management tools for Ubuntu Pro
- Translations for Ubuntu Pro Client
|
| Latest version: |
37.2ubuntu0.1 |
| Release: |
resolute (26.04) |
| Level: |
updates |
| Repository: |
main |
Links
Other versions of "ubuntu-advantage-tools" in Resolute
Packages in group
Deleted packages are displayed in grey.
Changelog
|
ubuntu-advantage-tools (37.2ubuntu0.1) resolute-security; urgency=medium
* SECURITY UPDATE: Information disclosure
- Remove credentials out of argv into apt's own auth.conf.d facility.
- CVE-2026-9494
* SECURITY UPDATE: Improper input validation
- enforce StrictStringDataValue to applicable fields in directives
- reject newline, carriage return, spaces, and shell meta characters
in StrictStringDataValue
- CVE-2026-11386
* SECURITY UPDATE: Symlink attack
- reject symlink log files in user-controlled directory trees during
pro collect-logs
- restrict pro collect-logs generated support archive permission to
root only
- CVE-2026-12391
-- Eduardo Barretto <email address hidden> Mon, 06 Jul 2026 11:33:39 +0200
|
| CVE-2026-9494 |
An information disclosure vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). The client validates Ubuntu Pro APT |
| CVE-2026-11386 |
An input validation and injection vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). The client constructs APT so |
| CVE-2026-12391 |
An insecure symlink following vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools) within the pro collect-logs comma |
|
About
-
Send Feedback to @ubuntu_updates
