Stay Secure with the Latest Linux Advisories

security advisorycriticalUbuntu

Ubuntu 11.10 & 11.04 Advisory USN-1385-1 Critical: APT Installation Flaw

An attacker could trick APT into installing altered packages.. =========================================================================Ubuntu Security Notice USN-1385-1 March 06, 2012 apt vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 11.10 - Ubuntu 11.04 Summary: An attacker could trick APT into installing altered packages. Software Description: - apt: Advanced front-end for dpkg Details: Simon Ruderich discovered that APT incorrectly handled repositories that use InRelease files. The default Ubuntu repositories do not use InRelease files, so this issue only affected third-party repositories. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could potentially be used to install altered packages. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 11.10: apt 0.8.16~exp5ubuntu13.2 Ubuntu 11.04: apt 0.8.13.2ubuntu4.4 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-1385-1 CVE-2012-0214 Package Information: https://launchpad.net/ubuntu/+source/apt/0.8.16~exp5ubuntu13.2 https://launchpad.net/ubuntu/+source/apt/0.8.13.2ubuntu4.4 . Ubuntu Security Notice USN-1385-2 addresses a vulnerability in the APT package management system that permits tampering with installed software.. APT Vulnerability, Ubuntu Security, Package Management, Installation Flaw. . Severity: Critical. LinuxSecurity.com Team

Mar 06, 2012 •Critical Ubuntu