News for hackers. Stuff that matters.

A comment on HTTP redirect vulnerability in apt package manager.

Re:HTTP redirect vulnerability in apt package manager by est31 on Tuesday January 22, 2019 @09:08AM (#18968304)
Weren't PGP signatures supposed to ensure integrity? How is this being bypassed?
[ Parent | on HN ]
Re:HTTP redirect vulnerability in apt package manager by detaro on Tuesday January 22, 2019 @09:12AM (#18968324)
The attack can inject fake hashes into the process, so it can pretend the file has the correct checksum: https://justi.cz/security/2019/01/22/apt-rce.html
[ Parent | on HN ]
Re:HTTP redirect vulnerability in apt package manager by jwilk on Tuesday January 22, 2019 @01:26PM (#18970808)
Discussed on HN:

https://news.ycombinator.com/item?id=18968370

[ Parent | on HN ]