Debian/python-apt: medium 4.7
Python-apt doesn't check if hashes are signed in `Version.fetch_binary()` and `Version.fetch_source()` of apt/package.py or in `_fetch_archives()` of apt/cache.py in version 1.9.3ubuntu2 and earlier.
Action: Upgrade python-apt to 1.8.5 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.8.5 | - |
Fixed versions
| 1.8.5 |
Sources
published · modified · JSON