https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-03T15:25:38.080323+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2014-0478 CVE-2014-0478 2026-10-03T15:25:38.112539+00:00

APT before 1.0.4 does not properly validate source packages, which allows man-in-the-middle attackers to download and install Trojan horse packages by removing the Release signature.

 https://db.gcve.eu/vuln/usn-2246-1 USN-2246-1 — apt vulnerability 2026-10-03T15:25:38.112620+00:00

Affected: Ubuntu:14.04:LTS: apt

Jakub Wilk discovered that APT did not correctly validate signatures when downloading source packages. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could potentially be used to install altered source packages.