Stay Secure with the Latest Linux Advisories

security advisorypackage updatesoftware fix

Ubuntu 14.04 LTS USN-2348-1 Critical: APT Issues and Patches

Several security issues were fixed in APT.. =========================================================================Ubuntu Security Notice USN-2348-1 September 16, 2014 apt vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 14.04 LTS - Ubuntu 12.04 LTS - Ubuntu 10.04 LTS Summary: Several security issues were fixed in APT. Software Description: - apt: Advanced front-end for dpkg Details: It was discovered that APT did not re-verify downloaded files when the If-Modified-Since wasn't met. (CVE-2014-0487) It was discovered that APT did not invalidate repository data when it switched from an unauthenticated to an authenticated state. (CVE-2014-0488) It was discovered that the APT Acquire::GzipIndexes option caused APT to skip checksum validation. This issue only applied to Ubuntu 12.04 LTS and Ubuntu 14.04 LTS, and was not enabled by default. (CVE-2014-0489) It was discovered that APT did not correctly validate signatures when downloading source packages using the download command. This issue only applied to Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2014-0490) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 14.04 LTS: apt 1.0.1ubuntu2.3 Ubuntu 12.04 LTS: apt 0.8.16~exp12ubuntu10.19 Ubuntu 10.04 LTS: apt 0.7.25.3ubuntu9.16 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-2348-1 CVE-2014-0487, CVE-2014-0488, CVE-2014-0489, CVE-2014-0490 Package Information: https://launchpad.net/ubuntu/+source/apt/1.0.1ubuntu2.3 https://launchpad.net/ubuntu/+source/apt/0.8.16~exp12ubuntu10.19 https://launchpad.net/ubuntu/+source/apt/0.7.25.3ubuntu9.16 . Debian Security Alert DSA-4932-1addresses flaws in the APT package affecting multiple stable branches. Protect your environment today.. APT Vulnerabilities, Ubuntu Security, Package Management, Software Update, Security Notification. . Severity: Critical. LinuxSecurity.com Team

Sep 16, 2014 •Critical Ubuntu