Debian/apt: unknown
APT before 0.8.15.2 does not properly validate inline GPG signatures, which allows man-in-the-middle attackers to install modified packages via vectors involving lack of an initial clearsigned message
Action: Upgrade apt to 0.8.15.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.8.15.2 | - |
Fixed versions
| 0.8.15.2 |
Sources
published · modified · JSON