Ubuntu Security Notice USN-1477-1

newsbot

newsbot

RSS Feed
Ubuntu Security Notice 1477-1 - Georgi Guninski discovered that APT did not properly validate imported keyrings via apt-key net-update. USN-1475-1 added additional verification for imported keyrings, but it was insufficient. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could potentially be used to install altered packages. This update corrects the issue by disabling the net-update option completely. A future update will re-enable the option with corrected verification.

Weiterlesen...
 

Ähnliche Themen

Ubuntu Security Notice USN-1475-1

Ubuntu Security Notice USN-1628-1

Ubuntu Security Notice USN-1666-1

Ubuntu Security Notice USN-1634-1

Ubuntu Security Notice USN-1683-1

Zurück
Oben