critical10.0
CVE-2009-1300
apt 0.7.20 does not check when the date command returns an "invalid date" error, which can prevent apt from loading security updates in time zones for which DS…
Impact
apt 0.7.20 does not check when the date command returns an "invalid date" error, which can prevent apt from loading security updates in time zones for which DST occurs at midnight.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Debian | Advanced Package Tool | Version 0.7.20 |
Weakness classification
References
- NVD record
- CVE.org record
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=523213
- http://secunia.com/advisories/34829
- http://secunia.com/advisories/34832
- http://secunia.com/advisories/34874
- http://www.debian.org/security/2009/dsa-1779
- http://www.openwall.com/lists/oss-security/2009/04/08/11
- https://bugs.launchpad.net/ubuntu/+source/coreutils/+bug/354793
- https://usn.ubuntu.com/762-1/
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=523213
- http://secunia.com/advisories/34829
- http://secunia.com/advisories/34832
- http://secunia.com/advisories/34874
- http://www.debian.org/security/2009/dsa-1779
- http://www.openwall.com/lists/oss-security/2009/04/08/11
- https://bugs.launchpad.net/ubuntu/+source/coreutils/+bug/354793
- https://usn.ubuntu.com/762-1/