CLSA-2026-1785489136
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1785489136.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1785489136
- Upstream
CVE (3)
- CVE-2026-11386
- CVE-2026-12391
- CVE-2026-9494
- Published
- 2026-07-31T09:12:32Z
- Modified
- 2026-10-26T09:31:47Z
- Summary
- Fix CVE(s): CVE-2026-11386, CVE-2026-12391, CVE-2026-9494
- Details
-
- SECURITY UPDATE: Pro bearer token exposed via apt-helper command line
- Write APT credentials to a temporary 0600 auth file and pass a credential-free URL to apt-helper, instead of embedding the token in the download-file URL argument where it leaked to local users via /proc//cmdline. Source tarball re-packed with the fix (3.0 native).
- cve-2026-9494
- SECURITY UPDATE: APT source injection via crafted contract-server response
- validate contract directives (aptURL, suites, additionalPackages) to reject newline/CR/NUL/space characters, preventing injection of attacker-controlled lines into root-owned apt sources and the apt-get install invocation. Source tarball re-packed with the fix (3.0 native).
- cve-2026-11386
- SECURITY UPDATE: symlink file disclosure in "pro collect-logs"
- Skip symlinked user log files and create the diagnostic archive exclusively (x:gz) with a root-only umask so an existing output file or symlink is not followed or overwritten. Source tarball re-packed with the fix (3.0 native).
- cve-2026-12391
- SECURITY UPDATE: Pro bearer token exposed via apt-helper command line
- References