UbuntuUpdates.org

Package "less"

Name: less

Description:

pager program similar to more
Latest version: 551-1ubuntu0.3
Release: focal (20.04)
Level: updates
Repository: main
Homepage: http://www.greenwoodsoftware.com/less/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "less"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "less" in Focal

Repository Area Version
base main 551-1
security main 551-1ubuntu0.3

Changelog

Version: 551-1ubuntu0.3 2024-04-29 13:06:55 UTC

  less (551-1ubuntu0.3) focal-security; urgency=medium

  * SECURITY UPDATE: Arbitrary command execution
    - debian/patches/CVE-2024-32487.patch: Fix bug when viewing a file
      whose name contains a newline.
    - CVE-2024-32487

 -- Fabian Toepfer <email address hidden> Sun, 28 Apr 2024 13:42:44 +0200
Source diff to previous version
CVE-2024-32487 less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation

Version: 551-1ubuntu0.2 2024-02-27 20:06:52 UTC

  less (551-1ubuntu0.2) focal-security; urgency=medium

  * SECURITY UPDATE: Unsafe call and Possibly arbitrary code execution
    - debian/patches/CVE-2022-48624.patch: add shell-quote
      the filename when invoking LESSCLOSE in filename.c.
    - CVE-2022-48624

 -- Leonidas Da Silva Barbosa <email address hidden> Tue, 20 Feb 2024 09:00:07 -0300
Source diff to previous version
CVE-2022-48624 close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.

Version: 551-1ubuntu0.1 2020-07-16 10:06:39 UTC

  less (551-1ubuntu0.1) focal; urgency=medium

  * On upgrade from packages that shipped less in both /bin and /usr/bin,
    call update-alternatives in preinst, such that after unpacking,
    /usr/bin/pager remains operational. This should resolve dpkg failing
    to invoke pager by dpkg. LP: #1874953

 -- Brian Murray <email address hidden> Wed, 01 Jul 2020 16:25:13 -0700


About   -   Send Feedback to @ubuntu_updates