Software-properties (Canonical) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2020-12-02. Vendor: Canonical.

CVEs of Software-properties

• CVE-2012-0955 - CVSS 7.4 (high), 2020-12-02: software-properties was vulnerable to a person-in-the-middle attack due to incorrect TLS certificate validation in softwareproperties/ppa.py.…
• CVE-2011-4407 - CVSS 4.3 (medium), 2014-05-14: ppa.py in Software Properties before 0.81.13.3 does not validate the server certificate when downloading PPA GPG key fingerprints, which allows…