GPGv Security Flaw in APT Package Manager by Debian

CVE-2009-1358

Summary

APT prior to version 0.7.21 fails to accurately check error codes from gpgv, leading to a scenario where the package manager wrongly considers a repository valid. This could enable remote adversaries to deceive APT into installing repositories that maliciously alter system files or compromise security integrity, particularly when the associated signing key has been revoked or is outdated.

References