|
|
@@ -1,3 +1,12 @@
|
|
|
+apt (1.0.9) unstable; urgency=high
|
|
|
+
|
|
|
+ * SECURITY UPDATE:
|
|
|
+ - incorrect invalidating of unauthenticated data (CVE-2014-0488)
|
|
|
+ - incorect verification of 304 reply (CVE-2014-0487)
|
|
|
+ - incorrect verification of Acquire::Gzip indexes (CVE-2014-0489)
|
|
|
+
|
|
|
+ -- Michael Vogt <mvo@debian.org> Mon, 15 Sep 2014 08:34:46 +0200
|
|
|
+
|
|
|
apt (1.0.8) unstable; urgency=medium
|
|
|
|
|
|
[ Holger Wansing ]
|