[Bug 857472] Re: net-update verifcation checking insecure

[Launchpad Bug Tracker]

This bug was fixed in the package apt - 0.8.16~exp5ubuntu13

---------------
apt (0.8.16~exp5ubuntu13) oneiric; urgency=low

  [ Adam Conrad ]
  * On armel, call update-apt-xapian-index with '-u' to keep the CPU
    and I/O usage low.  We would do this on all arches, but there's a
    regression risk here, but that's better than killing slow systems.

  [ Michael Vogt ]
  * cmdline/apt-key:
    - fix apt-key net-update, thanks to Marc Deslauriers and
      Adam Conrad for the code review (LP: #857472)
 -- Michael Vogt <michael.vogt at ubuntu.com>   Thu, 06 Oct 2011 16:14:41 +0200

** Changed in: apt (Ubuntu Oneiric)
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to apt in Ubuntu.
https://bugs.launchpad.net/bugs/857472

Title:
  net-update verifcation checking insecure

Status in “apt” package in Ubuntu:
  Fix Released
Status in “apt” source package in Oneiric:
  Fix Released

Bug description:
  From:
  http://seclists.org/fulldisclosure/2011/Sep/222

  its easy to bypass the verification checking in apt-key net-update.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/857472/+subscriptions