Boletines de Vulnerabilidades

DSA-3025 apt - security update


Información sobre el sistema

   
Software afectado Debian

Descripción

It was discovered that APT, the high level package manager, does notproperly invalidate unauthenticated data(CVE-2014-0488), performsincorrect verification of 304 replies(CVE-2014-0487), does not performthe checksum check when the Acquire::GzipIndexes option is used(CVE-2014-0489) and does not properly perform validation for binarypackages downloaded by the apt-get download command(CVE-2014-0490).

More info:

https://www.debian.org/security/2014/dsa-3025

Identificadores estándar

Propiedad Valor
CVE CVE-2014-0487 ,CVE-2014-0488 ,CVE-2014-0489 ,CVE-2014-0490 and DSA-3025.

Histórico de versiones

Versión Comentario Data
1.0 Advisory issued 2014-09-17
Ministerio de Defensa
CNI
CCN
CCN-CERT