Advanced Package Tool CVE-2014-0489

The apt package in Debian jessie before 1.0.9.8.4, in Debian unstable before 1.4~beta2, in Ubuntu 14.04 LTS before 1.0.1

Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to co

APT before 1.0.4 does not properly validate source packages, which allows man-in-the-middle attackers to download and in

The apt-get download command in APT before 1.0.9 does not properly validate signatures for packages, which allows remote

APT before 1.0.9 does not verify downloaded files if they have been modified as indicated using the If-Modified-Since he

Buffer overflow in the HTTP transport code in apt-get in APT 1.0.1 and earlier allows man-in-the-middle attackers to cau

APT before 1.0.9 does not "invalidate repository data" when moving from an unauthenticated to authenticated state, which

The mirror:// method implementation in Advanced Package Tool (APT) 1.6.x before 1.6.4 and 1.7.x before 1.7.0~alpha3 mish

APT had several integer overflows and underflows while parsing .deb packages, aka GHSL-2020-168 GHSL-2020-169, in files

apt 0.8.16, 0.9.7, and possibly other versions does not properly handle InRelease files, which allows man-in-the-middle

The pkgAcqMetaClearSig::Failed method in apt-pkg/acquire-item.cc in Advanced Package Tool (APT) 0.8.11 through 0.8.15.10

The changelog command in Apt before 1.0.9.2 allows local users to write to arbitrary files via a symlink attack on the c