UbuntuUpdates.org

Package "apt"

Name: apt

Description:

commandline package manager

Latest version: 1.0.1ubuntu2.19
Release: trusty (14.04)
Level: security
Repository: main

Links


Download "apt"


Other versions of "apt" in Trusty

Repository Area Version
base main 1.0.1ubuntu2
updates main 1.0.1ubuntu2.24

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.0.1ubuntu2.3 2014-09-16 17:07:08 UTC

  apt (1.0.1ubuntu2.3) trusty-security; urgency=low

  * SECURITY UPDATE:
    - incorrect invalidating of unauthenticated data (CVE-2014-0488)
    - incorect verification of 304 reply (CVE-2014-0487)
    - incorrect verification of Acquire::Gzip indexes (CVE-2014-0489)
 -- Michael Vogt <email address hidden> Mon, 15 Sep 2014 08:23:35 +0200

Source diff to previous version

Version: 1.0.1ubuntu2.1 2014-06-17 19:06:51 UTC

  apt (1.0.1ubuntu2.1) trusty-security; urgency=low

  * SECURITY UPDATE: incorrect apt-get source validation (LP: #1329274)
    - warn if not authenticated in apt-private/private-download.*,
      cmdline/apt-get.cc, added regression test to
      test/integration/test-apt-get-source-authenticated.
    - CVE-2014-0478
 -- Michael Vogt <email address hidden> Thu, 12 Jun 2014 13:57:38 +0200

1329274 apt-get source fails to warn on unauthenticated packages
CVE-2014-0478 apt: source packages not verified



About   -   Send Feedback to @ubuntu_updates