Hacker News Reader

I can't seem to find a link to the patch - I'd like to take a look at the fix. Anyone know where I could find it?

Here's a diff between apt-0.9.7.9+deb7u4 and apt-0.9.7.9+deb7u5, obtained via `apt-get source`:

You can see the change from a fixed-length buffer to a std::string.

This is apt's Git repo, but the commit hasn't landed there yet: https://anonscm.debian.org/cgit/apt/apt.git/

For example, you can see the change in cdrom: handling code as mentioned in the security notice.

That doesn't contain the buffer overflow fix. You can tell from the diff of the changelog that the fix is already there.