USN-3156-2: APT regression
USN-3156-2: APT regression Ubuntu Security Notice USN-3156-2 16th December, 2016 apt regression A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 16.10 Summary USN-3156-1 introduced a regression in unattended-upgrades that may require manual intervention to repair. Software description apt – Advanced front-end for dpkg Details USN-3156-1 fixed vulnerabilities in APT. It also caused a bug inunattended-upgrades on that may require manual intervention to repair. Users on Ubuntu 16.10 should run the following commands at aterminal: sudo dpkg –configure –pendingsudo apt-get -f install This update fixes the problem. We apologize for the inconvenience. Original advisory details: Jann Horn discovered that APT incorrectly handled InRelease files. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could potentially be used to install altered packages. Update instructions The problem can be corrected by updating your system to [ more… ]