--===============8697627800446661356==
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature";
 boundary="EVF5PPMfhYS0aIcm"
Content-Disposition: inline


--EVF5PPMfhYS0aIcm
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

==========================================================================
Ubuntu Security Notice USN-4667-2
January 11, 2021

apt vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 14.04 ESM

Summary:

APT could be made to crash or stop responding if it opened a specially
crafted file.

Software Description:
- apt: Advanced front-end for dpkg

Details:

USN-4667-1 fixed a vulnerability in APT. This update provides
the corresponding update for Ubuntu 14.04 ESM.

Original advisory details:

 Kevin Backhouse discovered that APT incorrectly handled certain packages.
 A local attacker could possibly use this issue to cause APT to crash or
 stop responding, resulting in a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 ESM:
  apt                             1.0.1ubuntu2.24+esm3

In general, a standard system update will make all the necessary changes.

References:
  https://usn.ubuntu.com/4667-2
  https://usn.ubuntu.com/4667-1
  CVE-2020-27350

--EVF5PPMfhYS0aIcm
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=TyQ/
-----END PGP SIGNATURE-----

--EVF5PPMfhYS0aIcm--


--===============8697627800446661356==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

-- 
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce