• Aptdaemon vulnerability

    From bugz_ubuntu@21:4/110 to Ubuntu Users on Thursday, September 24, 2020 12:10:02
    aptdaemon vulnerability

    A security issue affects these releases of Ubuntu and its
    derivatives:

    * Ubuntu 20.04 LTS
    * Ubuntu 18.04 LTS
    * Ubuntu 16.04 LTS

    Summary

    Aptdaemon could be made to expose sensitive information.

    Software Description

    * aptdaemon - transaction based package management service

    Details

    Vaisha Bernard discovered that Aptdaemon incorrectly handled the
    Locale property. A local attacker could use this issue to test for
    the presence of local files.

    Update instructions

    The problem can be corrected by updating your system to the
    following package versions:

    Ubuntu 20.04 LTS
    aptdaemon - 1.1.1+bzr982-0ubuntu32.2

    Ubuntu 18.04 LTS
    aptdaemon - 1.1.1+bzr982-0ubuntu19.4

    Ubuntu 16.04 LTS
    aptdaemon - 1.1.1+bzr982-0ubuntu14.4

    To update your system, please follow these instructions:
    https://wiki.ubuntu.com/Security/Upgrades.

    After a standard system update you need to reboot your computer to
    make all the necessary changes.

    References

    * CVE-2020-15703

    --- Mystic BBS v1.12 A46 (Linux/64)
    * Origin: BZ&BZ BBS (21:4/110)