Ubuntu alert USN-8079-1 (less)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8079-1] less vulnerability
Date:
             
 
Fri, 06 Mar 2026 00:07:37 +0000
Message-ID:
             
 
<E1vyIjB-0007hL-TP@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-8079-1
March 05, 2026

less vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 14.04 LTS

Summary:

less could be made to crash or run arbitrary commands if it received
crafted input.

Software Description:
- less: pager program similar to more

Details:

It was discovered that less incorrectly handled certain file names. An
attacker could possibly use this issue to cause a denial of service or
execute arbitrary commands.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 LTS
  less                            458-2ubuntu0.1~esm2
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8079-1
  CVE-2022-48624


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=q0sD
-----END PGP SIGNATURE-----