Debian/apt: unknown
methods/https.cc in apt before 0.8.11 accepts connections when the certificate host name fails validation and Verify-Host is enabled, which allows man-in-the-middle attackers to obtain repository cred
Action: Upgrade apt to 0.8.11 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.8.11 | - |
Fixed versions
| 0.8.11 |
Sources
published · modified · JSON