This bug was fixed in the package apt - 1.0.1ubuntu2.1
--------------- apt (1.0.1ubuntu2.1) trusty-security; urgency=low
* SECURITY UPDATE: incorrect apt-get source validation (LP: #1329274) - warn if not authenticated in apt-private/private-download.*, cmdline/apt-get.cc, added regression test to test/integration/test-apt-get-source-authenticated. - CVE-2014-0478 -- Michael Vogt <email address hidden> Thu, 12 Jun 2014 13:57:38 +0200
This bug was fixed in the package apt - 1.0.1ubuntu2.1
---------------
apt (1.0.1ubuntu2.1) trusty-security; urgency=low
* SECURITY UPDATE: incorrect apt-get source validation (LP: #1329274) private- download. *, apt-get. cc, added regression test to integration/ test-apt- get-source- authenticated.
- warn if not authenticated in apt-private/
cmdline/
test/
- CVE-2014-0478
-- Michael Vogt <email address hidden> Thu, 12 Jun 2014 13:57:38 +0200