| Package | Affected versions | Patched versions |
|---|---|---|
| advanced package tool | = 1.0.3= 1.0.5= 1.0.7 |
APT before 1.0.9, when the Acquire::GzipIndexes option is enabled, does not validate checksums, which allows remote attackers to execute arbitrary code via a crafted package.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free