UbuntuUpdates.org

Package "ubuntu-pro-client"

Name: ubuntu-pro-client

Description:

Management tools for Ubuntu Pro
Latest version: 37.2ubuntu0.1
Release: resolute (26.04)
Level: updates
Repository: main
Head package: ubuntu-advantage-tools
Homepage: https://canonical-ubuntu-pro-client.readthedocs-hosted.com/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "ubuntu-pro-client"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "ubuntu-pro-client" in Resolute

Repository Area Version
base main 37.2ubuntu
security main 37.2ubuntu0.1

Changelog

Version: 37.2ubuntu0.1 2026-07-17 19:08:07 UTC

  ubuntu-advantage-tools (37.2ubuntu0.1) resolute-security; urgency=medium

  * SECURITY UPDATE: Information disclosure
    - Remove credentials out of argv into apt's own auth.conf.d facility.
    - CVE-2026-9494
  * SECURITY UPDATE: Improper input validation
    - enforce StrictStringDataValue to applicable fields in directives
    - reject newline, carriage return, spaces, and shell meta characters
      in StrictStringDataValue
    - CVE-2026-11386
  * SECURITY UPDATE: Symlink attack
    - reject symlink log files in user-controlled directory trees during
      pro collect-logs
    - restrict pro collect-logs generated support archive permission to
      root only
    - CVE-2026-12391

 -- Eduardo Barretto <email address hidden> Mon, 06 Jul 2026 11:33:39 +0200
CVE-2026-9494 An information disclosure vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). The client validates Ubuntu Pro APT
CVE-2026-11386 An input validation and injection vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). The client constructs APT so
CVE-2026-12391 An insecure symlink following vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools) within the pro collect-logs comma


About   -   Send Feedback to @ubuntu_updates