Comment 7 for bug 722228

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package aptdaemon - 0.31+bzr506-0ubuntu6.1

---------------
aptdaemon (0.31+bzr506-0ubuntu6.1) maverick-security; urgency=low

  * SECURITY UPDATE: Unprivileged arbitrary file disclosure (LP: #722228)
    - debian/patches/11_fix_lp722228.patch: only allow alternative
      sources.list files inside the sources.list.d directory in
      aptdaemon/worker.py. Add test to aptdaemon/test/test_lp722228.py.
    - CVE-2011-0725
  * This update does NOT include the changes from 0.31+bzr506-0ubuntu6 that
    was in -proposed.
 -- Marc Deslauriers <email address hidden> Tue, 22 Feb 2011 08:06:34 -0500