Summary
It was discovered that APT incorrectly handled the mirror method
(mirror://). If a remote attacker were able to perform a machine-in-the-middle
attack, this flaw could potentially be used to install altered packages in
environments configured to use mirror:// entries.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | apt | 1.6.3ubuntu0.1 |
Vulnerabilities 1
-
Unscored —
The mirror:// method implementation in Advanced Package Tool (APT) 1.6.x before 1.6.4 and 1.7.x before 1.7.0~alpha3 mis…
References
-
report
https://ubuntu.com/security/CVE-2018-0501