UbuntuUpdates.org

Package "ubuntu-advantage-desktop-daemon"

Name: ubuntu-advantage-desktop-daemon

Description:

Daemon to allow access to ubuntu-advantage via D-Bus

Latest version: 1.10.ubuntu0.20.04.1
Release: focal (20.04)
Level: updates
Repository: main
Homepage: https://github.com/canonical/ubuntu-advantage-desktop-daemon

Links


Download "ubuntu-advantage-desktop-daemon"


Other versions of "ubuntu-advantage-desktop-daemon" in Focal

Repository Area Version
security main 1.10.ubuntu0.20.04.1

Changelog

Version: 1.10.ubuntu0.20.04.1 2024-10-11 03:07:10 UTC

  ubuntu-advantage-desktop-daemon (1.10.ubuntu0.20.04.1) focal-security; urgency=medium

  * SECURITY UPDATE: Pro client is called with attach parameter in plain text,
    allowing for potentially leak of private information. (LP: #2068944)
    - debian/patches/CVE-2024-6388.patch: Use a temporary file with 400
      permissions instead.
      https://github.com/canonical/ubuntu-advantage-desktop-daemon/pull/24/
    - CVE-2024-6388

 -- Chris Kim <email address hidden> Fri, 04 Oct 2024 16:27:20 -0700

Source diff to previous version
2068944 ubuntu-advantage-desktop-daemon (pro client in general) may expose the pro token to other users
CVE-2024-6388 Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passing the tok

Version: 1.10~20.04.1 2023-02-06 15:15:46 UTC

  ubuntu-advantage-desktop-daemon (1.10~20.04.1) focal; urgency=medium

  * Backport the ubuntu-advantage-desktop-daemon service to 20.04
    (lp: #1980781)

 -- Sebastien Bacher <email address hidden> Tue, 20 Sep 2022 18:27:07 +0200

1980781 SRU of ubuntu-advantage-desktop-daemon to older series



About   -   Send Feedback to @ubuntu_updates