UbuntuUpdates.org

Package "apt"

Name: apt

Description:

commandline package manager
Latest version: 2.8.4ubuntu0.1
Release: noble (24.04)
Level: security
Repository: main

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "apt"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "apt" in Noble

Repository Area Version
base universe 2.7.14build2
base main 2.7.14build2
security universe 2.8.4ubuntu0.1
updates main 2.8.3
updates universe 2.8.3

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2.8.4ubuntu0.1 2026-11-04 20:08:02 UTC

apt (2.8.4ubuntu0.1) noble-security; urgency=medium

  * SECURITY UPDATE: Download verification bypass
    - methods/*.cc: Open target files exclusively
    - CVE-2026-109518
  * SECURITY UPDATE: Out-of-bounds accesses
    - deb: guard against unsigned underflow when trimming control newlines
    - gpgv: don't advance past the null terminator in PushEntryWithKeyID
    - debDebFileParser: reject .deb without a Version field
    - srvrec: reject res_query answers bigger than our buffer
    - tagfile: fix unbounded backward scan in Fill()'s trailing-newline check
  * Memory exhaustion during download
    - Move "Tried to start delayed item [���], but failed" to debugging
     (Closes: #1111554)
  * Test suite reliability:
    - test: Limit valgrind to 1024 open files

 -- Julian Andres Klode Mon, 02 Nov 2026 13:55:21 +0100
1111554 apt - daily job spams "Tried to start delayed item […], but failed"


About   -   Send Feedback to @ubuntu_updates