CVE:CVE-2011-1829
CNNVD:CNNVD-201107-177
APT 0.8.15.2之前版本没有正确验证内联GPG签名。攻击者可借助与缺少首字母clearsigned消息的向量安装已修改的包并在易受攻击的计算机上执行任意代码。
solution:Upgrade debian advanced_package_tool to a higher version than 0.8.15.2,and avoid the version (,0.8.15.2); Upgrade canonical ubuntu_linux to a higher version than 11.04,and avoid the version 11.04