| Package | Affected versions | Patched versions |
|---|---|---|
| ubuntu software properties | = 0.75.10= 0.75.10.1= 0.75.10.2= 0.75.4= 0.75.5= 0.75.6= 0.75.7= 0.75.8= 0.75.9= 0.80= 0.80.2= 0.80.3= 0.80.4= 0.80.5= 0.80.6= 0.80.7= 0.80.8= 0.80.9= 0.80.9.1= 0.81= 0.81.1= 0.81.10= 0.81.11= 0.81.13= 0.81.13.1= 0.81.13.2= 0.81.13.3= 0.81.13.4= 0.81.2= 0.81.3= 0.81.4= 0.81.5= 0.81.6= 0.81.7= 0.81.8= 0.81.9= 0.82= 0.82.2= 0.82.3= 0.82.4= 0.82.5= 0.82.6= 0.82.7= 0.82.7.1= 0.82.7.2= 0.92= 0.92.2= 0.92.3= 0.92.4= 0.92.5= 0.92.6= 0.92.7 |
The apt-add-repository tool in Ubuntu Software Properties 0.75.x before 0.75.10.3, 0.80.x before 0.80.9.2, 0.81.x before 0.81.13.5, 0.82.x before 0.82.7.3, and 0.92.x before 0.92.8 does not properly check PPA GPG keys imported from a keyserver, which allows remote attackers to install arbitrary package repository GPG keys via a man-in-the-middle (MITM) attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free