CVE Request -- apt

[Jamie Strandboge <jamie () canonical com>]

apt-key in Ubuntu is not verifying the key correctly when it is fetched
via 'apt-key net-update'. This was reported here:

http://seclists.org/fulldisclosure/2011/Sep/221

and tracked here:
https://launchpad.net/bugs/856489

Based on the man page, Debian should not be affected. Derivatives of
Ubuntu probably are.

-- 
Jamie Strandboge             | http://www.canonical.com

Attachment: signature.asc
Description: This is a digitally signed message part