[ubuntu/bionic-security] ubuntu-advantage-tools 37.1ubuntu0~18.04.1 (Accepted)

[Eduardo Barretto]

ubuntu-advantage-tools (37.1ubuntu0~18.04.1) bionic-security; urgency=medium

  * SECURITY UPDATE: Information disclosure
    - Remove credentials out of argv into apt's own auth.conf.d facility.
    - CVE-2026-9494
  * SECURITY UPDATE: Improper input validation
    - enforce StrictStringDataValue to applicable fields in directives
    - reject newline, carriage return, spaces, and shell meta characters
      in StrictStringDataValue
    - CVE-2026-11386
  * SECURITY UPDATE: Symlink attack
    - reject symlink log files in user-controlled directory trees during
      pro collect-logs
    - restrict pro collect-logs generated support archive permission to
      root only
    - CVE-2026-12391

Date: 2026-07-07 16:40:20.236515+00:00
Changed-By: Eduardo Barretto <eduardo.barretto at canonical.com>
https://launchpad.net/ubuntu/+source/ubuntu-advantage-tools/37.1ubuntu0~18.04.1
-------------- next part --------------
Sorry, changesfile not available.