Skip to content
OpenAdvisories
Unscored DLA-0005-1 2 CVEs

apt - security update

Published Jun 12, 2014 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 apt 0.8.10.3+squeeze2

Vulnerabilities 2

  • Unscored —

    methods/https.cc in apt before 0.8.11 accepts connections when the certificate host name fails validation and Verify-Ho…

  • Unscored —

    APT before 1.0.4 does not properly validate source packages, which allows man-in-the-middle attackers to download and i…