UbuntuUpdates.org

Package "aptdaemon"

Name: aptdaemon

Description:

transaction based package management service
Latest version: 1.1.1+bzr982-0ubuntu14.5
Release: xenial (16.04)
Level: updates
Repository: main
Homepage: https://launchpad.net/aptdaemon

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "aptdaemon"

All arch deb package
APT INSTALL

Other versions of "aptdaemon" in Xenial

Repository Area Version
base main 1.1.1+bzr982-0ubuntu14
base universe 1.1.1+bzr982-0ubuntu14
security universe 1.1.1+bzr982-0ubuntu14.5
security main 1.1.1+bzr982-0ubuntu14.5
updates universe 1.1.1+bzr982-0ubuntu14.5
PPA: Kubuntu-ppa Backports 1.1.1+bzr982-0ubuntu16~ubuntu16.04~ppa1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.1.1+bzr982-0ubuntu14.5 2020-12-08 19:07:11 UTC

  aptdaemon (1.1.1+bzr982-0ubuntu14.5) xenial-security; urgency=medium

  * SECURITY UPDATE: info disclosure via transaction properties
    (LP: #1899513)
    - debian/patches/CVE-2020-16128.patch: drop privileges when doing file
      checks in aptdaemon/core.py, aptdaemon/worker/aptworker.py,
      aptdaemon/utils.py.
    - CVE-2020-16128
  * SECURITY UPDATE: policykit checks are too late (LP: #1899193)
    - debian/patches/CVE-2020-27349.patch: check PolicyKit before
      simulating local install in aptdaemon/core.py.
    - CVE-2020-27349

 -- Marc Deslauriers <email address hidden> Wed, 02 Dec 2020 07:44:28 -0500
Source diff to previous version
CVE-2020-16128 RESERVED
CVE-2020-27349 RESERVED

Version: 1.1.1+bzr982-0ubuntu14.4 2020-09-24 15:06:19 UTC

  aptdaemon (1.1.1+bzr982-0ubuntu14.4) xenial-security; urgency=medium

  * SECURITY UPDATE: information disclosure via locale (LP: #1888235)
    - debian/patches/CVE-2020-15703.patch: reject locales with full paths
      in aptdaemon/core.py.
    - CVE-2020-15703

 -- Marc Deslauriers <email address hidden> Wed, 23 Sep 2020 07:28:34 -0400
Source diff to previous version
1888235 Improper Input Validation vulnerability in Locale property of a transaction leading to Information Disclosure
CVE-2020-15703 RESERVED

Version: 1.1.1+bzr982-0ubuntu14.3 2020-05-28 13:06:47 UTC

  aptdaemon (1.1.1+bzr982-0ubuntu14.3) xenial; urgency=medium

  * Update crash handler to use the changed apport function. (LP: #1700810)

 -- Brian Murray <email address hidden> Tue, 12 May 2020 11:12:46 -0700
Source diff to previous version
1700810 aptdaemon's crash.py file is not working

Version: 1.1.1+bzr982-0ubuntu14.2 2020-01-22 20:07:06 UTC

  aptdaemon (1.1.1+bzr982-0ubuntu14.2) xenial-security; urgency=medium

  * Fix compatibility with python-apt security update (LP: #1858973)

 -- Marc Deslauriers <email address hidden> Wed, 15 Jan 2020 14:37:59 -0500
Source diff to previous version

Version: 1.1.1+bzr982-0ubuntu14.1 2019-07-15 09:06:17 UTC

  aptdaemon (1.1.1+bzr982-0ubuntu14.1) xenial; urgency=medium

  * Various locking fixes (LP: #1831981)
    - Implement frontend locking (incl. fixup from 0ubuntu24)
    - Adjust locking order to match APT
    - Use reverse order for unlocking
  * Test suite fixes:
    - Fix failing tests
    - Make failing tests fail the build again
    - debian/tests/control: Depend on gir1.2-vte-2.91, not gir1.2-vte-2.90

 -- Julian Andres Klode <email address hidden> Wed, 03 Jul 2019 12:39:38 +0200
1831981 aptdaemon frontend locking, locking fixes


About   -   Send Feedback to @ubuntu_updates