UbuntuUpdates.org

Package "apt"

Name: apt

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • transitional package for https support
Latest version: 2.8.4ubuntu0.1
Release: noble (24.04)
Level: security
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "apt" in Noble

Repository Area Version
base universe 2.7.14build2
base main 2.7.14build2
security main 2.8.4ubuntu0.1
updates main 2.8.3
updates universe 2.8.3

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2.8.4ubuntu0.1 2026-11-04 20:08:19 UTC

apt (2.8.4ubuntu0.1) noble-security; urgency=medium

  * SECURITY UPDATE: Download verification bypass
    - methods/*.cc: Open target files exclusively
    - CVE-2026-109518
  * SECURITY UPDATE: Out-of-bounds accesses
    - deb: guard against unsigned underflow when trimming control newlines
    - gpgv: don't advance past the null terminator in PushEntryWithKeyID
    - debDebFileParser: reject .deb without a Version field
    - srvrec: reject res_query answers bigger than our buffer
    - tagfile: fix unbounded backward scan in Fill()'s trailing-newline check
  * Memory exhaustion during download
    - Move "Tried to start delayed item [���], but failed" to debugging
     (Closes: #1111554)
  * Test suite reliability:
    - test: Limit valgrind to 1024 open files

 -- Julian Andres Klode Mon, 02 Nov 2026 13:55:21 +0100
1111554 apt - daily job spams "Tried to start delayed item […], but failed"


About   -   Send Feedback to @ubuntu_updates