This bug was fixed in the package unattended-upgrades - 0.86.1
---
unattended-upgrades (0.86.1) unstable; urgency=medium
* fix missing package authentication check for apt
configurations that force-{confold,confnew} (CVE-2015-1330)
LP: #1466380
-- Michael Vogt
** Information type changed from Private Security to Public Security
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to unattended-upgrades in
Ubuntu.
https://bugs.launchpad.net/bugs/1466380
Title:
No authentication check if
** Tags added: patch
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to unattended-upgrades in
Ubuntu.
https://bugs.launchpad.net/bugs/1466380
Title:
No authentication check if DPkg::Options::, --force-confold is set
in apt
3 matches
Mail list logo