Improper verification of updated key via apt-key net-update
Bug #856489 reported by
Jamie Strandboge
This bug affects 3 people
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
apt (Ubuntu) |
Fix Released
|
Critical
|
Marc Deslauriers | ||
Hardy |
Fix Released
|
Critical
|
Marc Deslauriers | ||
Lucid |
Fix Released
|
Critical
|
Marc Deslauriers | ||
Maverick |
Fix Released
|
Critical
|
Marc Deslauriers | ||
Natty |
Fix Released
|
Critical
|
Marc Deslauriers | ||
Oneiric |
Fix Released
|
Critical
|
Marc Deslauriers |
Bug Description
As reported on full-disclosure:
http://
CVE request here:
http://
CVE References
description: | updated |
Changed in apt (Ubuntu Hardy): | |
status: | New → In Progress |
importance: | Undecided → Critical |
assignee: | nobody → Marc Deslauriers (mdeslaur) |
Changed in apt (Ubuntu Oneiric): | |
status: | Fix Committed → Fix Released |
security vulnerability: | yes → no |
visibility: | public → private |
security vulnerability: | no → yes |
visibility: | private → public |
Changed in apt (Ubuntu): | |
assignee: | Marc Deslauriers (mdeslaur) → jakeford18 (jake-ford-18) |
Changed in apt (Ubuntu): | |
assignee: | jakeford18 (jake-ford-18) → Marc Deslauriers (mdeslaur) |
To post a comment you must log in.
Marc is working on a temporary fix until the real fix is prepared.