[Bug 947108] Re: InRelease security issue

[Launchpad Bug Tracker]

** Branch linked: lp:ubuntu/oneiric-security/apt

** Branch linked: lp:ubuntu/natty-security/apt

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to apt in Ubuntu.
https://bugs.launchpad.net/bugs/947108

Title:
  InRelease security issue

Status in “apt” package in Ubuntu:
  Confirmed
Status in “apt” source package in Natty:
  Fix Released
Status in “apt” source package in Oneiric:
  Fix Released
Status in “apt” source package in Precise:
  Confirmed

Bug description:
  There is a security issue in the InRelease code that allows a MITM attack. I prepare a debdiff for natty+ with the fix. 
  Ubuntu is not directly affected as we do not use the InRelease file but any of our users who does in a repository can
  be attacked.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/947108/+subscriptions