Re: CVE Request -- apt

[Josh Bressers <bressers () redhat com>]

Please use CVE-2011-3374.

Thanks.

-- 
    JB


----- Original Message -----
> apt-key in Ubuntu is not verifying the key correctly when it is
> fetched
> via 'apt-key net-update'. This was reported here:
>
> http://seclists.org/fulldisclosure/2011/Sep/221
>
> and tracked here:
> https://launchpad.net/bugs/856489
>
> Based on the man page, Debian should not be affected. Derivatives of
> Ubuntu probably are.
>
> --
> Jamie Strandboge             | http://www.canonical.com