Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

apt: incorrect signature validation

Package(s):

apt

CVE #(s):

CVE-2011-1829

Created:

July 13, 2011

Updated:

July 13, 2011

Description:

The apt utility does not correctly check GPG signatures, enabling a man-in-the-middle attacker to force the installation of malicious packages.

Alerts:

Ubuntu

2011-07-13

(Log in to post comments)