Vulnerability Bulletins |
DSA-4371 apt - security update |
|
| Affected software | Debian |
|
Max Justicz discovered a vulnerability in APT, the high level package manager.The code handling HTTP redirects in the HTTP transport method doesnt properlysanitize fields transmitted over the wire. This vulnerability could be used byan attacker located as a man-in-the-middle between APT and a mirror to injectmalicous content in the HTTP connection. This content could then be recognizedas a valid package by APT and used later for code execution with rootprivileges on the target machine. More info: https://www.debian.org/security/2019/dsa-4371 |
|