[Bug 756317] Re: Captive portals may corrupt apt package lists

Roberto D'Auria 756317 at bugs.launchpad.net
Thu Mar 20 17:28:57 UTC 2014


As I said in a duplicate bug, I think this is a serious issue both from
a user viewpoint (i've seen people switching back to Windows due to this
bug, since a "normal" user doesn't know how to fix this) and a security
viewpoint. The captive portal owner could easily insert a malicious
repository into the APT configuration.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to apt in Ubuntu.
https://bugs.launchpad.net/bugs/756317

Title:
  Captive portals may corrupt apt package lists

Status in “apt” package in Ubuntu:
  Confirmed
Status in “apt” package in Debian:
  New

Bug description:
  I have an adsl modem which returns an html page if the adsl link is
  broken. This page ends as the content of the apt cache files stored in
  /var/lib/apt/lists, which breaks apt.

  The only way to make apt work again is to delete all the files stored
  in /var/lib/apt/lists.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/756317/+subscriptions



More information about the foundations-bugs mailing list