Public bug reported: Please upgrade gui-ufw to 15.04.4 in vivid,.
CHANGELOG: + 15.04.4 - Fix: Migrate commands to subprocess > Fixing shell injection (LP: #1412554) - Fix: Allow import profile with English language (LP: #1416631) - Removed executable flag in config files (mask 600, not 700) - Updated translations + 15.04.3 - Properly fix: Shell Command Injection (LP: #1410839) + 15.04.2 - Fix: Shell Injection in the IP & Ports values. + 15.04.1 - Fix: Shell Command Injection (LP: #1410839) - Fix: Not allow one interface over the same interface (LP: #1402220) - Fix: Not allow Both Protocol with a range of ports (LP: #1402232) - Updated languages EXPLANATION OF NEW UPSTREAM RELEASE (and -proposed): As you can see in the changelog, this new upstream release is mostly a bug fixes release (some of them are important), other changes are only translations updates. I uploaded a copy of this package to my PPA (gui-ufw 15.04.4-0ubuntu0.1~devfil2) to prove that it actually builds. Upstream (Marcos) is very active in our community and followed and fixed all bugs in an amazing way asking for tests and so on. This package should have been already uploaded before release, upstream wrote me several email, but I missed them, sorry Marcos and sorry community, my fault. @Marcos, can I please ask you to provide security issues patches (one for issue, keep them minimal only needed changes) for 14.10, 14.04 and 12.04 (if affected) so I can create packages and get them uploaded through security team? Thank you. ** Affects: gui-ufw (Ubuntu) Importance: Undecided Status: New ** Affects: gui-ufw (Ubuntu Vivid) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1462092 Title: [SRU] Please upgrade gui-ufw to 15.04.4 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gui-ufw/+bug/1462092/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs