This would seem to be a simple false positive in snort, not a problem with APT.
According to this page http://www.w3.org/Protocols/rfc2616/rfc2616-sec3.html#sec3.8 That is a perfectly acceptable user-agent string. Marking Confirmed, as this has been seen by multiple users. Marking as Medium, as this is going to affect pretty much anybody using snort on Ubuntu, thought it does have the workaround of disabling the rule. Changing apt to snort, as this is not a problem with apt, but rather a problem with snort's rules that could cause other false positives. The APT-HTTP/1.3 User-Agent string is still in apt 0.8.3: ./methods/http.cc: "Debian APT-HTTP/1.3 ("VERSION")") + "\r\n\r\n"; ** Package changed: apt (Ubuntu) => snort (Ubuntu) ** Changed in: snort (Ubuntu) Importance: Undecided => Medium ** Changed in: snort (Ubuntu) Status: New => Confirmed -- apt-get update causes "WEB-MISC Invalid HTTP Version String" warning in Snort https://bugs.launchpad.net/bugs/258155 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
