UbuntuUpdates.org

Package "ubuntu-advantage-desktop-daemon"

Name: ubuntu-advantage-desktop-daemon

Description:

Daemon to allow access to ubuntu-advantage via D-Bus
Latest version: 1.10.ubuntu0.20.04.1
Release: focal (20.04)
Level: security
Repository: main
Homepage: https://github.com/canonical/ubuntu-advantage-desktop-daemon

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "ubuntu-advantage-desktop-daemon"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "ubuntu-advantage-desktop-daemon" in Focal

Repository Area Version
updates main 1.10.ubuntu0.20.04.1

Changelog

Version: 1.10.ubuntu0.20.04.1 2024-10-11 02:07:14 UTC

  ubuntu-advantage-desktop-daemon (1.10.ubuntu0.20.04.1) focal-security; urgency=medium

  * SECURITY UPDATE: Pro client is called with attach parameter in plain text,
    allowing for potentially leak of private information. (LP: #2068944)
    - debian/patches/CVE-2024-6388.patch: Use a temporary file with 400
      permissions instead.
      https://github.com/canonical/ubuntu-advantage-desktop-daemon/pull/24/
    - CVE-2024-6388

 -- Chris Kim <email address hidden> Fri, 04 Oct 2024 16:27:20 -0700
2068944 ubuntu-advantage-desktop-daemon (pro client in general) may expose the pro token to other users
CVE-2024-6388 Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passing the tok


About   -   Send Feedback to @ubuntu_updates