CVE-2009-1300

Alexandre Martani discovered that the APT daily cron script did not check the return code of the date command If a machine is configured for automatic updates and is in a time zone where DST occurs at midnight, under certain circumstances automatic updates might not be applied and could become permanently disabled (CVE-2009-1300) ...

Debian Bug report logs - #523213 /etc/crondaily/apt does not check return code of date Package: apt; Maintainer for apt is APT Development Team <deity@listsdebianorg>; Source for apt is src:apt (PTS, buildd, popcon) Reported by: Jamie Strandboge <jamie@ubuntucom> Date: Wed, 8 Apr 2009 22:42:01 UTC Severity: gra ...

Debian Bug report logs - #433091 ignores expiry of archive keys Package: apt; Maintainer for apt is APT Development Team <deity@listsdebianorg>; Source for apt is src:apt (PTS, buildd, popcon) Reported by: martin f krafft <madduck@debianorg> Date: Sat, 14 Jul 2007 11:30:01 UTC Severity: important Tags: security ...

Two vulnerabilities have been discovered in APT, the well-known dpkg frontend The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-1300 In time zones where daylight savings time occurs at midnight, the apt crondaily script fails, stopping new security updates from being applied automatically C ...