| Package | Affected versions | Patched versions |
|---|---|---|
| advanced package tool | = 1.0.3= 1.0.4= 1.0.5= 1.0.6= 1.0.7≤ 1.0.8 |
The apt-get download command in APT before 1.0.9 does not properly validate signatures for packages, which allows remote attackers to execute arbitrary code via a crafted package.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free