CVE-2013-1051: Canonical Ubuntu Linux

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

apt 0.8.16, 0.9.7, and possibly other versions does not properly handle InRelease files, which allows man-in-the-middle attackers to modify packages before installation via unknown vectors, possibly related to integrity checking and the use of third-party repositories.

Affected products

• Canonical Ubuntu Linux: version 11.10 only; version 12.04 only; version 12.10 only
• Debian Advanced Package Tool: version 0.8.16 only
• Debian Apt: version 0.9.7 only

Published 2013-03-21. Last modified 2026-06-16.