Skip to content
OpenAdvisories
Unscored USN-2746-1 1 CVE

simplestreams vulnerability

Published Sep 24, 2015 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Simple Streams did not properly perform gpg
verification in some situations. A remote attacker could use this to
perform a machine-in-the-middle attack and inject malicious content into
the stream.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS simplestreams 0.1.0~bzr341-0ubuntu2.2

Vulnerabilities 1

  • Unscored —
    CVE-2015-1337

    Simple Streams (simplestreams) does not properly verify the GPG signatures of disk image files, which allows remote mir…

    simplestreams Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2015-1337