CVE-2018-0501: Improper Verification of Cryptographic Signature

The mirror:// method implementation in Advanced Package Tool APT 1.6.x before 1.6.4 and 1.7.x before 1.7.0alpha3 mishandles gpg signature verification for the InRelease file of a fallback mirror, aka mirrorfail...

PT-2014-2204

Name of the Vulnerable Software and Affected Versions Advanced Package Tool APT versions 0.8.11 through 0.8.15.10 Advanced Package Tool APT versions 0.8.16 before 0.8.16exp13 Description The issue allows man-in-the-middle attackers to install arbitrary packages by preventing a user from downloadi...

CVE-2012-0214: Undefined Security Weakness

The pkgAcqMetaClearSig::Failed method in apt-pkg/acquire-item.cc in Advanced Package Tool APT 0.8.11 through 0.8.15.10 and 0.8.16 before 0.8.16exp13, when updating from repositories that use InRelease files, allows man-in-the-middle attackers to install arbitrary packages by preventing a user fro...