CVE ID:	CVE-2009-1358
Description:	apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories.
Test IDs:	1.3.6.1.4.1.25623.1.0.63932
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2009-1358 BugTraq ID: 34630 http://www.securityfocus.com/bid/34630 Debian Security Information: DSA-1779 (Google Search) http://www.debian.org/security/2009/dsa-1779 http://secunia.com/advisories/34829 http://secunia.com/advisories/34832 http://secunia.com/advisories/34874 https://usn.ubuntu.com/762-1/ XForce ISS Database: apt-aptget-gpgv-security-bypass(50086) https://exchange.xforce.ibmcloud.com/vulnerabilities/50086