Skip to content
OpenAdvisories
Unscored DLA-53-1 3 CVEs

apt - security update

Published Sep 16, 2014 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 apt 0.8.10.3+squeeze3

Vulnerabilities 3

  • Unscored —

    APT before 1.0.9 does not verify downloaded files if they have been modified as indicated using the If-Modified-Since h…

  • Unscored —

    APT before 1.0.9 does not "invalidate repository data" when moving from an unauthenticated to authenticated state, whic…

  • Unscored —

    APT before 1.0.9, when the Acquire::GzipIndexes option is enabled, does not validate checksums, which allows remote att…