Debian Linux Security Advisory 3297-1 - It was discovered that unattended-upgrades, a script for automatic installation of security upgrades, did not properly authenticate downloaded packages when the force-confold or force-confnew dpkg options were enabled via the DPkg::Options::* apt configuration.
592353727e99b36bc11ff7fa2a1deaee71c2dfafbe59ccc20cf3e9636b24d375