Stay Secure with the Latest Linux Advisories

security advisorycriticalUbuntu

Ubuntu 14.04 LTS USN-2246-1 Critical: APT Altered Packages Issue

An attacker could trick APT into installing altered source packages.. =========================================================================Ubuntu Security Notice USN-2246-1 June 17, 2014 apt vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 14.04 LTS - Ubuntu 13.10 - Ubuntu 12.04 LTS - Ubuntu 10.04 LTS Summary: An attacker could trick APT into installing altered source packages. Software Description: - apt: Advanced front-end for dpkg Details: Jakub Wilk discovered that APT did not correctly validate signatures when downloading source packages. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could potentially be used to install altered source packages. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 14.04 LTS: apt 1.0.1ubuntu2.1 Ubuntu 13.10: apt 0.9.9.1~ubuntu3.2 Ubuntu 12.04 LTS: apt 0.8.16~exp12ubuntu10.17 Ubuntu 10.04 LTS: apt 0.7.25.3ubuntu9.15 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-2246-1 CVE-2014-0478 Package Information: https://launchpad.net/ubuntu/+source/apt/1.0.1ubuntu2.1 https://launchpad.net/ubuntu/+source/apt/0.9.9.1~ubuntu3.2 https://launchpad.net/ubuntu/+source/apt/0.8.16~exp12ubuntu10.17 https://launchpad.net/ubuntu/+source/apt/0.7.25.3ubuntu9.15 . Ubuntu has a serious APT security flaw that could enable hackers to inject tampered packages via a man-in-the-middle strategy. Discover additional details.. APT Security Flaw, Ubuntu Package Update, Attack Vector. . Severity: Critical. LinuxSecurity.com Team

Jun 17, 2014 •Critical Ubuntu