UbuntuUpdates.org

Package "less"

Name: less

Description:

pager program similar to more
Latest version: 590-2ubuntu2.1
Release: noble (24.04)
Level: security
Repository: main
Homepage: http://www.greenwoodsoftware.com/less/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "less"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "less" in Noble

Repository Area Version
base main 590-2ubuntu2
updates main 590-2ubuntu2.1

Changelog

Version: 590-2ubuntu2.1 2024-04-29 12:07:03 UTC

  less (590-2ubuntu2.1) noble-security; urgency=medium

  * SECURITY UPDATE: Arbitrary command execution
    - debian/patches/CVE-2024-32487.patch: Fix bug when viewing a file
      whose name contains a newline.
    - CVE-2024-32487

 -- Fabian Toepfer <email address hidden> Sun, 28 Apr 2024 13:44:40 +0200
CVE-2024-32487 less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation


About   -   Send Feedback to @ubuntu_updates