Format: 1.8 Date: Wed, 02 Dec 2020 07:42:52 -0500 Source: aptdaemon Binary: aptdaemon aptdaemon-data python3-aptdaemon python3-aptdaemon.gtk3widgets python3-aptdaemon.test Architecture: all amd64_translations Version: 1.1.1+bzr982-0ubuntu32.3 Distribution: focal Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: aptdaemon - transaction based package management service aptdaemon-data - data files for clients python3-aptdaemon - Python 3 module for the server and client of aptdaemon python3-aptdaemon.gtk3widgets - Python 3 GTK+ 3 widgets to run an aptdaemon client python3-aptdaemon.test - Test environment for aptdaemon clients Launchpad-Bugs-Fixed: 1899193 1899513 Changes: aptdaemon (1.1.1+bzr982-0ubuntu32.3) focal-security; urgency=medium . * SECURITY UPDATE: info disclosure via transaction properties (LP: #1899513) - debian/patches/CVE-2020-16128.patch: drop privileges when doing file checks in aptdaemon/core.py, aptdaemon/worker/aptworker.py, aptdaemon/utils.py. - CVE-2020-16128 * SECURITY UPDATE: policykit checks are too late (LP: #1899193) - debian/patches/CVE-2020-27349.patch: check PolicyKit before simulating local install in aptdaemon/core.py. - CVE-2020-27349 Checksums-Sha1: 0aadb8469e0eaa64099a3dff2396d2b7a4fa958c 159708 aptdaemon-data_1.1.1+bzr982-0ubuntu32.3_all.deb 2bf9ad9dba6e2916c7eba1fb211a865b6afece89 12768 aptdaemon_1.1.1+bzr982-0ubuntu32.3_all.deb 5fd056bfe79cc0545c6dc937820883c85aca74e3 14769 aptdaemon_1.1.1+bzr982-0ubuntu32.3_amd64.buildinfo 35562b712d3f559a0d89968de90cb71f3534386b 1383864 aptdaemon_1.1.1+bzr982-0ubuntu32.3_amd64_translations.tar.gz 55409b93f4cefeb06cff7d4a4d35bb7a3cba627b 13064 python3-aptdaemon.gtk3widgets_1.1.1+bzr982-0ubuntu32.3_all.deb 701d4df1d69dcfa59d88d9f598e7095277668610 84820 python3-aptdaemon.test_1.1.1+bzr982-0ubuntu32.3_all.deb 833c0dbfe7f21059078132089676dfceb6e5347c 76444 python3-aptdaemon_1.1.1+bzr982-0ubuntu32.3_all.deb Checksums-Sha256: 744ea9a7b9407cf6f3e0db24d0a64404c97cf4e4d1330b5d6f4ae7f6609a9c8d 159708 aptdaemon-data_1.1.1+bzr982-0ubuntu32.3_all.deb 95c21b7f49d1463a693f9f23b331342e82e53c25a5bac90673beb7501a8e3557 12768 aptdaemon_1.1.1+bzr982-0ubuntu32.3_all.deb ccd7a79ced24b8a6024dd70ce503a0a5c80fee94e757fca985762ef946e25ee6 14769 aptdaemon_1.1.1+bzr982-0ubuntu32.3_amd64.buildinfo 3d8c1225186066a2178d3602ef1f05ddf65e6659361dfbce266f7e2ff6f85b24 1383864 aptdaemon_1.1.1+bzr982-0ubuntu32.3_amd64_translations.tar.gz 14f397ec5045f1fe97bf3c6916e0a3b8bc7551e25b9bb4ec48a4b38e27e18a4a 13064 python3-aptdaemon.gtk3widgets_1.1.1+bzr982-0ubuntu32.3_all.deb 131de5a33c6186824708397b0e18a16bdbadf39e928f6c2f79b2eb3517f5b391 84820 python3-aptdaemon.test_1.1.1+bzr982-0ubuntu32.3_all.deb cb0e64e239ebf1b58fe10e93bccb8c0067c9e7c51c0c0463bd04cdbdb889d916 76444 python3-aptdaemon_1.1.1+bzr982-0ubuntu32.3_all.deb Files: 3de2fbf192d9174504e2bd4a9470bf86 159708 admin extra aptdaemon-data_1.1.1+bzr982-0ubuntu32.3_all.deb 6a4509e1660e0f26a9bf895654c2ba8c 12768 admin extra aptdaemon_1.1.1+bzr982-0ubuntu32.3_all.deb 5038e21031f64c19e5cf280cf308b645 14769 admin extra aptdaemon_1.1.1+bzr982-0ubuntu32.3_amd64.buildinfo 3fcd780d0148365ca14ed50d8a0fc2a0 1383864 raw-translations - aptdaemon_1.1.1+bzr982-0ubuntu32.3_amd64_translations.tar.gz d589e131bbb48f95d272dd8d01298db2 13064 python extra python3-aptdaemon.gtk3widgets_1.1.1+bzr982-0ubuntu32.3_all.deb dde03e0214b991021666f336851a80c1 84820 python extra python3-aptdaemon.test_1.1.1+bzr982-0ubuntu32.3_all.deb 1caaaa484177cbe917570e69106215e3 76444 python extra python3-aptdaemon_1.1.1+bzr982-0ubuntu32.3_all.deb Original-Maintainer: Julian Andres Klode