Chong Lu
6a30031708
apt: fix for CVE-2014-0478
...
APT before 1.0.4 does not properly validate source packages, which allows
man-in-the-middle attackers to download and install Trojan horse packages
by removing the Release signature.
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0478
(From OE-Core rev: 3dd692fcf2b0c11731b3f30abdf2b1878458a898)
Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com>
Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-09-30 14:10:34 +01:00
..
2014-09-30 14:10:34 +01:00
2014-08-15 18:21:49 +01:00
2014-08-25 10:26:00 +01:00
2014-05-02 20:46:59 +01:00
2014-07-25 15:33:58 +01:00
2014-05-02 20:46:59 +01:00
2014-08-28 15:12:44 +01:00
2014-07-17 12:28:50 +01:00
2014-01-14 11:33:52 +00:00
2014-03-02 17:25:28 +00:00
2014-05-28 08:19:30 +01:00
2014-02-17 15:28:59 +00:00
2014-07-19 00:09:01 +01:00
2014-04-25 17:19:19 +01:00
2014-05-11 12:27:21 +01:00
2014-03-19 14:42:43 +00:00
2014-03-19 14:42:43 +00:00
2014-07-16 10:20:50 +01:00
2014-06-17 10:23:53 +01:00
2014-09-10 15:38:55 +01:00
2014-07-03 17:41:17 +01:00
2014-08-23 23:01:57 +01:00
2014-07-16 10:20:50 +01:00
2014-09-22 13:04:21 +01:00
2014-09-16 22:14:12 +01:00
2014-09-10 11:33:26 +01:00
2014-09-29 12:12:45 +01:00
2014-06-01 14:29:29 +01:00
2014-08-23 23:02:00 +01:00
2014-08-02 09:26:16 +01:00
2014-09-16 22:14:06 +01:00
2014-02-28 14:01:16 +00:00
2014-08-28 15:12:44 +01:00
2014-08-11 11:01:50 +01:00
2014-03-17 14:01:41 +00:00
2014-02-17 15:28:59 +00:00
2014-08-23 09:26:10 +01:00
2014-08-23 09:26:10 +01:00
2014-05-13 19:32:05 +01:00
2014-05-02 20:46:59 +01:00
2014-05-02 20:46:59 +01:00
2014-02-28 14:01:16 +00:00
2014-04-23 11:43:28 +01:00
2014-05-08 13:00:32 +01:00
2014-04-23 11:43:28 +01:00
2014-05-02 20:46:59 +01:00
2014-07-17 12:28:50 +01:00
2014-03-19 14:42:43 +00:00
2014-08-23 23:01:59 +01:00
2014-08-02 09:26:17 +01:00
2014-09-22 13:04:22 +01:00
2014-04-25 17:19:19 +01:00
2014-08-28 15:12:42 +01:00
2014-08-23 09:26:10 +01:00
2014-09-22 13:04:23 +01:00
2014-07-17 12:28:49 +01:00
2014-02-02 22:37:40 +00:00
2014-08-15 18:21:49 +01:00
2014-07-19 00:18:21 +01:00
2014-09-22 13:04:22 +01:00
2014-09-10 15:38:55 +01:00
2014-08-28 15:12:44 +01:00
2014-08-11 10:53:05 +01:00
2014-09-03 16:00:28 +01:00
2014-09-16 22:14:09 +01:00
2014-09-03 11:09:07 +01:00
2014-03-19 14:42:43 +00:00
2014-08-15 18:21:51 +01:00
2014-08-23 09:26:12 +01:00
2014-07-19 00:08:58 +01:00
2014-08-23 09:26:11 +01:00
2014-07-03 17:41:16 +01:00
2014-08-28 15:12:44 +01:00
2014-02-20 14:28:13 +00:00
2014-04-10 17:35:15 +01:00
2014-09-10 11:33:25 +01:00
2014-08-23 09:26:10 +01:00
2014-03-31 23:04:35 +01:00