CVE-2014-7206
Publication date 8 October 2014
Last updated 23 September 2025
Ubuntu priority
Description
The changelog command in Apt before 1.0.9.2 allows local users to write to arbitrary files via a symlink attack on the changelog file.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| apt | 14.04 LTS trusty |
Fixed in 1.0.1ubuntu2.5
|
Notes
References
Related Ubuntu Security Notices (USN)
- USN-2370-1
- APT vulnerability
- 8 October 2014