Re: APT vulnerability [DSA 4371-1] discussion

From	Yves-Alexis Perez <corsac@debian.org>
Newsgroups	linux.debian.security
Subject	Re: APT vulnerability [DSA 4371-1] discussion
Date	2019-03-01 13:40 +0100
Message-ID	<xwPCi-1EH-7@gated-at.bofh.it> (permalink)
References	<xsZTz-5Ds-3@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Mon, 2019-02-18 at 20:51 +0000, Brian Milliron wrote:
> I have not seen any discussion of what appears to be a very serious
> problem in Apt's security architecture.

Hi,

you might want to look at the APT development list archives. I myself asked
some questions about APT hardening in architecture, see thread at 
https://lists.debian.org/deity/2019/01/msg00049.html.

Regards,
- -- 
Yves-Alexis
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEE8vi34Qgfo83x35gF3rYcyPpXRFsFAlx5J1cACgkQ3rYcyPpX
RFt6oggAh4rBfpqSY8Lll5SKhDCCrkEkAF3bVgz95QPqSKPdvdhqTGPkMvr2ghze
sqlOsCY9fJTZ3sJaq+3c7VKTsspVZo8VnEnH79dfkzhVCk48b1xY05LNJdc/oMro
4Ni1Q08uAQb1HZNhAjysAXIxEN8vomj8vX+QLU7TQOb0mOZkEwarrDWD5IRWVgqg
/3KgKaC0EF0As9GLZdUrJxoMX2AO3BkF0nDPefh0FdpUssTWRH/553+R35jlm14f
UQVULkWD0Cp09kIAwopUxg/CiMqcZRkyKrzE1NGmEaacueMtcxrWrYCb4EEMHTCu
7A6/G5wmm4TY7VQawXfRCYUPmbFKRg==
=Ca4u
-----END PGP SIGNATURE-----

Back to linux.debian.security | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

APT vulnerability [DSA 4371-1] discussion Brian Milliron <lists@ecrsecurity.com> - 2019-02-18 23:50 +0100
  Re: APT vulnerability [DSA 4371-1] discussion Yves-Alexis Perez <corsac@debian.org> - 2019-03-01 13:40 +0100

csiph-web