Summary
It was discovered that unattended-upgrades incorrectly performed
authentication checks in certain configurations. If a remote attacker were
able to perform a machine-in-the-middle attack, this flaw could potentially be
used to install altered packages.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | unattended-upgrades | 0.82.1ubuntu2.3 |
Vulnerabilities 1
-
Unscored —
unattended-upgrades before 0.86.1 does not properly authenticate packages when the (1) force-confold or (2) force-confn…
References
-
report
https://ubuntu.com/security/CVE-2015-1330