Approved changes feed: RSS · Atom

cpe:2.3:a:debian:advanced_package_tool:1.7.0:alpha2:*:*:*:*:*:*

part: a version: 1.7.0 update: alpha2

VendorDebian (4199fb5b-36f6-5ceb-83d5-855460345e36)
ProductAdvanced Package Tool (54c1cf6d-fa55-5c38-8fb8-da09d2686f2f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/apt purl2cpe 2026-06-01 10:17:13.627439
pkg:deb/ubuntu/apt purl2cpe 2026-06-01 10:17:13.627441
pkg:debian/apt-team/apt purl2cpe 2026-06-01 10:17:13.627440
pkg:github/debian/apt purl2cpe 2026-06-01 10:17:13.627443

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-0501 vulnerable 2026-06-08 05:10:23.987005 Details available
The mirror:// method implementation in Advanced Package Tool (APT) 1.6.x before 1.6.4 and 1.7.x before 1.7.0~alpha3 mishandles gpg signature verification for the InRelease file of a fallback mirror, aka mirrorfail.
Published: 2018-08-21T00:00:00.000Z
Updated: 2024-08-05T03:28:10.583Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.