Debian Apt vulnerabilities

• debian apt APT RCE via hard link reuse CVE-2026-109518 Public exploitFix available 7.7 HighNovember 4, 2026
• canonical apt, debian advanced package tool, netapp solidfire baseboard management controller firmware +2 more apt integer wraparound CVE-2020-27350 Fix available 5.7 MediumDecember 9, 2020
• debian apt, canonical ubuntu linux, debian linux +1 more +3 more Missing input validation in the ar/tar implementations of APT before version 2.1.2 could result... CVE-2020-3810 Fix available 5.5 MediumMay 12, 2020
• canonical python-apt python-apt downloads from untrusted sources CVE-2019-15796 Fix available 4.7 MediumJanuary 20, 2020
• canonical python-apt python-apt uses MD5 for validation CVE-2019-15795 Fix available 4.7 MediumJanuary 20, 2020
• apt, debian advanced package tool, linux +2 more It was found that apt-key in apt, all versions, do not correctly validate gpg keys with the... CVE-2011-3374 3.7 LowNovember 25, 2019
• debian apt, advanced package tool +1 more The changelog command in Apt before 1.0.9.2 allows local users to write to arbitrary files via a... CVE-2014-7206 Fix available 3.6 LowOctober 8, 2014
• debian apt-cacher Cross-site scripting (XSS) vulnerability in job.cc in apt-cacher-ng 0.7.26 allows remote... CVE-2014-4510 Fix available 4.3 MediumOctober 6, 2014
• debian apt, canonical ubuntu linux, debian advanced package tool +2 more apt 0.8.16, 0.9.7, and possibly other versions does not properly handle InRelease files, which... CVE-2013-1051 Fix available 4.3 MediumMarch 21, 2013
• debian apt, advanced package tool +1 more Apt 0.8.16~exp5ubuntu13.x before 0.8.16~exp5ubuntu13.6, 0.8.16~exp12ubuntu10.x before 0.8.16... CVE-2012-0961 Fix available 2.1 LowDecember 26, 2012
• debian apt, advanced package tool +1 more apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes... CVE-2009-1358 Fix available 10.0 HighApril 6, 2009
• debian aptlinex The GUI for aptlinex before 0.91 does not sufficiently warn the user of potentially dangerous... CVE-2008-1902 5.0 MediumApril 21, 2008
• debian aptlinex aptlinex before 0.91 allows local users to overwrite arbitrary files via a symlink attack on the... CVE-2008-1901 7.2 HighApril 21, 2008
• debian apt-listchanges Untrusted search path vulnerability in apt-listchanges.py in apt-listchanges before 2.82 allows... CVE-2008-0302 Fix available 7.2 HighJanuary 17, 2008
• debian apt-cacher Unknown vulnerability in apt-cacher in Debian 3.1, related to "missing input sanitising," allows... CVE-2005-1854 Fix available 7.5 HighAugust 3, 2005
• debian apt-setup apt-setup in Debian GNU/Linux installs the apt.conf file with insecure permissions, which allows... CVE-2005-2214 4.6 MediumJuly 11, 2005