ubuntu-advantage-tools (37.1ubuntu0~16.04.1) xenial-security; urgency=medium
* SECURITY UPDATE: Information disclosure
- Remove credentials out of argv into apt's own auth.conf.d facility.
- CVE-2026-9494
* SECURITY UPDATE: Improper input validation
- enforce StrictStringDataValue to applicable fields in directives
- reject newline, carriage return, spaces, and shell meta characters
in StrictStringDataValue
- CVE-2026-11386
* SECURITY UPDATE: Symlink attack
- reject symlink log files in user-controlled directory trees during
pro collect-logs
- restrict pro collect-logs generated support archive permission to
root only
- CVE-2026-12391
Date: 2026-07-07 16:40:28.138837+00:00
Changed-By: Eduardo Barretto <[email protected]>
Signed-By: Ubuntu Archive Robot <[email protected]>
https://launchpad.net/ubuntu/+source/ubuntu-advantage-tools/37.1ubuntu0~16.04.1
Sorry, changesfile not available.
--
Xenial-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/xenial-changes
