[ubuntu/lucid-security] apt_0.7.25.3ubuntu9.9_sparc_translations.tar.gz, apt_0.7.25.3ubuntu9.9_armel_translations.tar.gz, apt_0.7.25.3ubuntu9.9_powerpc_translations.tar.gz, apt_0.7.25.3ubuntu9.9_i386_translations.tar.gz, apt, apt_0.7.25.3ubuntu9.9_ia64_translations.tar.gz, apt_0.7.25.3ubuntu9.9_amd64_translations.tar.gz 0.7.25.3ubuntu9.9 (Accepted)

Marc Deslauriers marc.deslauriers at ubuntu.com
Mon Nov 28 15:07:20 UTC 2011


apt (0.7.25.3ubuntu9.9) lucid-security; urgency=low

  * SECURITY UPDATE: sensitive information disclosure via incorrect
    hostname validation (LP: #868353)
    - methods/https.cc: properly set CURLOPT_SSL_VERIFYHOST.
    - CVE-2011-3634
  * SECURITY UPDATE: Restore apt-ket net-update functionality (LP: #857472)
    - cmdline/apt-key: improve key validation.

Date: Tue, 22 Nov 2011 13:56:02 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/lucid/+source/apt/0.7.25.3ubuntu9.9
-------------- next part --------------
Format: 1.8
Date: Tue, 22 Nov 2011 13:56:02 -0500
Source: apt
Binary: apt apt-doc libapt-pkg-dev libapt-pkg-doc apt-utils apt-transport-https
Architecture: source
Version: 0.7.25.3ubuntu9.9
Distribution: lucid-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 apt        - Advanced front-end for dpkg
 apt-doc    - Documentation for APT
 apt-transport-https - APT https transport
 apt-utils  - APT utility programs
 libapt-pkg-dev - Development files for APT's libapt-pkg and libapt-inst
 libapt-pkg-doc - Documentation for APT development
Launchpad-Bugs-Fixed: 857472 868353
Changes: 
 apt (0.7.25.3ubuntu9.9) lucid-security; urgency=low
 .
   * SECURITY UPDATE: sensitive information disclosure via incorrect
     hostname validation (LP: #868353)
     - methods/https.cc: properly set CURLOPT_SSL_VERIFYHOST.
     - CVE-2011-3634
   * SECURITY UPDATE: Restore apt-ket net-update functionality (LP: #857472)
     - cmdline/apt-key: improve key validation.
Checksums-Sha1: 
 f9a1472f2fe18e5406252c22722b1dae68352ab7 1994 apt_0.7.25.3ubuntu9.9.dsc
 14a2dcb1a09f86099ab85eb979aac157cecd6767 2747489 apt_0.7.25.3ubuntu9.9.tar.gz
Checksums-Sha256: 
 83ed0a5a883865cd9ed147ad6b838a350e8c538dbf90d4900e1d8ac26aa8ae3f 1994 apt_0.7.25.3ubuntu9.9.dsc
 ae12a3f5ce347667b6c2f870ca9c505f6ba24f864a0b9c3768a0420affad0d07 2747489 apt_0.7.25.3ubuntu9.9.tar.gz
Files: 
 de49ce12a0977c488de0fbc35eac4f7d 1994 admin important apt_0.7.25.3ubuntu9.9.dsc
 4bd688977e0baf427b4d377681629e01 2747489 admin important apt_0.7.25.3ubuntu9.9.tar.gz
Original-Maintainer: APT Development Team <deity at lists.debian.org>


More information about the Lucid-changes mailing list