USN-1666-1: Aptdaemon vulnerability

Releases

• Ubuntu 12.04
• Ubuntu 11.10

Packages

• aptdaemon - transaction based package management service

Details

It was discovered that Aptdaemon incorrectly validated PPA GPG keys when
importing from a keyserver. If a remote attacker were able to perform a
machine-in-the-middle attack, this flaw could be exploited to install altered
package repository GPG keys.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 12.04

• aptdaemon - 0.43+bzr805-0ubuntu7

Ubuntu 11.10

• aptdaemon - 0.43+bzr697-0ubuntu1.3

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

• CVE-2012-0962