https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 15:25:37 +0000 https://db.gcve.eu/vuln/cve-2018-0501 <p><strong>Affected:</strong> APT 1.6.x before 1.6.4 and 1.7.x before 1.7.0~alpha3</p> <p>The mirror:// method implementation in Advanced Package Tool (APT) 1.6.x before 1.6.4 and 1.7.x before 1.7.0~alpha3 mishandles gpg signature verification for the InRelease file of a fallback mirror, aka mirrorfail.</p> <p><strong>Affected:</strong> APT 1.6.x before 1.6.4 and 1.7.x before 1.7.0~alpha3</p> <p>The mirror:// method implementation in Advanced Package Tool (APT) 1.6.x before 1.6.4 and 1.7.x before 1.7.0~alpha3 mishandles gpg signature verification for the InRelease file of a fallback mirror, aka mirrorfail.</p> https://db.gcve.eu/vuln/cve-2018-0501 https://db.gcve.eu/vuln/usn-3746-1 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: apt</p> <p>It was discovered that APT incorrectly handled the mirror method (mirror://). If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could potentially be used to install altered packages in environments configured to use mirror:// entries.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: apt</p> <p>It was discovered that APT incorrectly handled the mirror method (mirror://). If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could potentially be used to install altered packages in environments configured to use mirror:// entries.</p> https://db.gcve.eu/vuln/usn-3746-1