CVE-2009-1300 Information

Description

apt 0.7.20 does not check when the date command returns an \invalid date\ error which can prevent apt from loading security updates in time zones for which DST occurs at midnight.

Reference

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=523213 http://secunia.com/advisories/34829 http://secunia.com/advisories/34832 http://secunia.com/advisories/34874 http://www.debian.org/security/2009/dsa-1779 http://www.openwall.com/lists/oss-security/2009/04/08/11 https://bugs.launchpad.net/ubuntu/+source/coreutils/+bug/354793 https://usn.ubuntu.com/762-1/

Share on: