Skip to content
OpenAdvisories
Unscored DSA-3025-1 4 CVEs

apt - security update

Published Sep 16, 2014 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 apt 0.9.7.9+deb7u3

Vulnerabilities 4

  • Unscored —

    APT before 1.0.9 does not verify downloaded files if they have been modified as indicated using the If-Modified-Since h…

  • Unscored —

    APT before 1.0.9 does not "invalidate repository data" when moving from an unauthenticated to authenticated state, whic…

  • Unscored —

    APT before 1.0.9, when the Acquire::GzipIndexes option is enabled, does not validate checksums, which allows remote att…

  • Unscored —

    The apt-get download command in APT before 1.0.9 does not properly validate signatures for packages, which allows remot…