[ubuntu/oneiric-security] apt 0.8.16~exp5ubuntu13.7 (Accepted)

Marc Deslauriers marc.deslauriers at canonical.com
Thu Mar 14 13:26:18 UTC 2013


apt (0.8.16~exp5ubuntu13.7) oneiric-security; urgency=low

  * SECURITY UPDATE: InRelease verification bypass
    - CVE-2013-1051

  [ David Kalnischk ]
  [ Michael Vogt ]
  * apt-pkg/deb/debmetaindex.cc,
    test/integration/test-bug-595691-empty-and-broken-archive-files,
    test/integration/test-releasefile-verification:
    - disable InRelease downloading until the verification issue is
      fixed, thanks to Ansgar Burchardt for finding the flaw

Date: 2013-03-13 21:25:11.940951+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/oneiric/+source/apt/0.8.16~exp5ubuntu13.7
-------------- next part --------------
Sorry, changesfile not available.


More information about the Oneiric-changes mailing list