diff -Nru apt-0.8.16~exp12ubuntu10.20.1/cmdline/apt-get.cc apt-0.8.16~exp12ubuntu10.21/cmdline/apt-get.cc --- apt-0.8.16~exp12ubuntu10.20.1/cmdline/apt-get.cc 2014-09-15 14:00:40.000000000 +0200 +++ apt-0.8.16~exp12ubuntu10.21/cmdline/apt-get.cc 2014-10-08 10:36:12.000000000 +0200 @@ -3244,7 +3244,7 @@ { string changelogfile; if (downOnly == false) - changelogfile.append(tmpname).append("changelog"); + changelogfile.append(tmpname).append("/changelog"); else changelogfile.append(Ver.ParentPkg().Name()).append(".changelog"); if (DownloadChangelog(Cache, Fetcher, Ver, changelogfile) && downOnly == false) diff -Nru apt-0.8.16~exp12ubuntu10.20.1/debian/changelog apt-0.8.16~exp12ubuntu10.21/debian/changelog --- apt-0.8.16~exp12ubuntu10.20.1/debian/changelog 2014-09-23 09:12:39.000000000 +0200 +++ apt-0.8.16~exp12ubuntu10.21/debian/changelog 2014-10-08 10:35:58.000000000 +0200 @@ -1,3 +1,11 @@ +apt (0.8.16~exp12ubuntu10.21) precise-security; urgency=low + + * SECURITY UPDATE: + - cmdline/apt-get.cc: fix insecure tempfile handling in + apt-get changelog (CVE-2014-7206). Thanks to Guillem Jover + + -- Michael Vogt Wed, 08 Oct 2014 10:35:46 +0200 + apt (0.8.16~exp12ubuntu10.20.1) precise-security; urgency=low * SECURITY UPDATE: