Oval Definition:oval:org.mitre.oval:def:13689
Revision Date:2014-06-30Version:22
Title:USN-762-1 -- apt vulnerabilities
Description:Alexandre Martani discovered that the APT daily cron script did not check the return code of the date command. If a machine is configured for automatic updates and is in a time zone where DST occurs at midnight, under certain circumstances automatic updates might not be applied and could become permanently disabled. Michael Casadevall discovered that APT did not properly verify repositories signed with a revoked or expired key. If a repository were signed with only an expired or revoked key and the signature was otherwise valid, APT would consider the repository valid
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2009-1300
USN-762-1
USN-762-1
Platform(s):Ubuntu 6.06
Ubuntu 8.04
Ubuntu 8.10
Product(s):apt
Definition Synopsis
  • Release section
  • Ubuntu 8.04 is installed
  • AND Architecture section
  • Architecture independent section
  • Installed architecture is all
  • AND Packages section
  • libapt-pkg-doc DPKG is earlier than 0.7.9ubuntu17.2
  • OR apt-doc DPKG is earlier than 0.7.9ubuntu17.2
  • OR Architecture depended section
  • Supported architectures section
  • Installed architecture is amd64
  • OR Installed architecture is i386
  • OR Installed architecture is powerpc
  • OR Installed architecture is sparc
  • OR Installed architecture is lpia
  • AND Packages section
  • apt-utils DPKG is earlier than 0.7.9ubuntu17.2
  • OR apt-transport-https DPKG is earlier than 0.7.9ubuntu17.2
  • OR libapt-pkg-dev DPKG is earlier than 0.7.9ubuntu17.2
  • OR apt DPKG is earlier than 0.7.9ubuntu17.2
  • OR Release section
  • Ubuntu 6.06 is installed
  • AND Architecture section
  • Architecture independent section
  • Installed architecture is all
  • AND Packages section
  • libapt-pkg-doc DPKG is earlier than 0.6.43.3ubuntu3.1
  • OR apt-doc DPKG is earlier than 0.6.43.3ubuntu3.1
  • OR Architecture depended section
  • Supported architectures section
  • Installed architecture is sparc
  • OR Installed architecture is powerpc
  • OR Installed architecture is amd64
  • OR Installed architecture is i386
  • AND Packages section
  • apt-utils DPKG is earlier than 0.6.43.3ubuntu3.1
  • OR libapt-pkg-dev DPKG is earlier than 0.6.43.3ubuntu3.1
  • OR apt DPKG is earlier than 0.6.43.3ubuntu3.1
  • OR Release section
  • Ubuntu 8.10 is installed
  • AND Architecture section
  • Architecture independent section
  • Installed architecture is all
  • AND Packages section
  • libapt-pkg-doc DPKG is earlier than 0.7.14ubuntu6.1
  • OR apt-doc DPKG is earlier than 0.7.14ubuntu6.1
  • OR Architecture depended section
  • Supported architectures section
  • Installed architecture is amd64
  • OR Installed architecture is i386
  • OR Installed architecture is powerpc
  • OR Installed architecture is sparc
  • OR Installed architecture is lpia
  • AND Packages section
  • apt-utils DPKG is earlier than 0.7.14ubuntu6.1
  • OR apt-transport-https DPKG is earlier than 0.7.14ubuntu6.1
  • OR libapt-pkg-dev DPKG is earlier than 0.7.14ubuntu6.1
  • OR apt DPKG is earlier than 0.7.14ubuntu6.1
  • BACK