CVE-2012-0954

Name of the Vulnerable Software and Affected Versions APT versions 0.7.x through 0.7.24 APT versions 0.8.x through 0.8.15

Description The issue allows remote attackers to install altered packages via a man-in-the-middle (MITM) attack, because it relies on GnuPG argument order and does not check GPG subkeys when using the apt-key net-update to import keyrings.

Recommendations For APT versions 0.7.x through 0.7.24, update to version 0.7.25 or later. For APT versions 0.8.x through 0.8.15, update to version 0.8.16 or later.