merge previous upload
authorMichael Vogt <mvo@ubuntu.com>
Tue, 16 Sep 2014 18:51:19 +0000 (20:51 +0200)
committerMichael Vogt <mvo@ubuntu.com>
Tue, 16 Sep 2014 18:51:19 +0000 (20:51 +0200)
debian/changelog

index bf7cd0f..885aaa7 100644 (file)
@@ -1,3 +1,12 @@
+apt (1.0.9) unstable; urgency=high
+
+  * SECURITY UPDATE:
+    - incorrect invalidating of unauthenticated data (CVE-2014-0488)
+    - incorect verification of 304 reply (CVE-2014-0487)
+    - incorrect verification of Acquire::Gzip indexes (CVE-2014-0489)
+
+ -- Michael Vogt <mvo@debian.org>  Mon, 15 Sep 2014 08:34:46 +0200
+
 apt (1.0.8) unstable; urgency=medium
 
   [ Holger Wansing ]