Skip to content
OpenAdvisories
Unscored USN-2746-2 0 CVEs

simplestreams regression

Published Sep 25, 2015 · Updated Feb 10, 2026

Summary

USN-2746-1 fixed a vulnerability in Simple Streams. The update caused a
regression preventing MAAS from downloading PXE images. This update fixes
the problem.

We apologize for the inconvenience.

Original advisory details:

It was discovered that Simple Streams did not properly perform gpg
verification in some situations. A remote attacker could use this to
perform a machine-in-the-middle attack and inject malicious content into
the stream.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS simplestreams 0.1.0~bzr341-0ubuntu2.3

References

  • report
    https://launchpad.net/bugs/1499749