"For example, even though known flaws exist in an older version
of OpenSSL for Debian, the list of flawed files is still correctly
signed. This means an illicit mirror — a deliberately tainted
archive of the files, set up to communicate with package managers
— can be created and used for distribution.>
Some of the products that appear on this site are from companies from which QuinStreet receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. QuinStreet does not include all companies or all types of products available in the marketplace.