Ubuntu Security Notice 2246-1 - Jakub Wilk discovered that APT did not correctly validate signatures when downloading source packages. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could potentially be used to install altered source packages.
02149d90e10050b8b15bd3bf795cc65698917322da68d3c7a2d6fb0cd74529c6