-
3909860...
by
Jamie Strandboge
on 2012-06-15
-
Import patches-unapplied version 0.7.9ubuntu17.6 to ubuntu/hardy-security
Imported using git-ubuntu import.
Changelog parent: 3096247ddc0175ec7dad88ae922adeef337eb919
New changelog entries:
* SECURITY UPDATE: Disable apt-key net-update for now, as validation
code is still insecure
- cmdline/apt-key: exit 1 immediately in net_update()
- CVE-2012-0954
- LP: #1013639
-
3096247...
by
Jamie Strandboge
on 2012-06-14
-
Import patches-unapplied version 0.7.9ubuntu17.5 to ubuntu/hardy-security
Imported using git-ubuntu import.
Changelog parent: e189595dec2605144e8208dc78305db22e0548a4
New changelog entries:
* adjust apt-key to ensure no collisions on subkeys too. Patch thanks to
Marc Deslauriers. (LP: #1013128)
-
e189595...
by
Marc Deslauriers
on 2011-11-22
-
Import patches-unapplied version 0.7.9ubuntu17.4 to ubuntu/hardy-security
Imported using git-ubuntu import.
Changelog parent: 6e0746893b31f49950b723f41cd8894d737e759c
New changelog entries:
* SECURITY UPDATE: Restore apt-ket net-update functionality (LP: #857472)
- cmdline/apt-key: improve key validation.
-
6e07468...
by
Marc Deslauriers
on 2011-09-22
-
Import patches-unapplied version 0.7.9ubuntu17.3 to ubuntu/hardy-security
Imported using git-ubuntu import.
Changelog parent: b96dd371d6b22d04d320339283a3eb65f77adb5b
New changelog entries:
* SECURITY UPDATE: Disable apt-key net-update for now, as validation
code is insecure. (LP: #856489)
- cmdline/apt-key: exit immediately out of net_update().
- CVE number pending
-
b96dd37...
by
Jamie Strandboge
on 2009-04-17
-
Import patches-unapplied version 0.7.9ubuntu17.2 to ubuntu/hardy-security
Imported using git-ubuntu import.
Changelog parent: ca389ce5a6f0cce50a429cdbc3e985eb3f97e938
New changelog entries:
* SECURITY UPDATE: honor expired and revoked key signatures
- adjust methods/gpgv.cc to mark a signature as valid only if GOODSIG
is set by gpgv
- CVE-XXXX-XXXX
- Patch from Michael Vogt
* SECURITY UPDATE: ensure automatic updates are not permanently disabled
in certain situations when the timezone's DST starts at midnight
- adjust debian/apt.cron.daily to check the return code of date
- CVE-XXXX-XXXX
-
ca389ce...
by
Michael Vogt
on 2008-10-27
-
Import patches-unapplied version 0.7.9ubuntu17.1 to ubuntu/hardy-proposed
Imported using git-ubuntu import.
Changelog parent: cb476ab4c21d3d8d5ce96c97ba11b8aad672b4d5
New changelog entries:
* apt-pkg/indexcopy.cc:
- support having CDs with no Packages file (just a Packages.gz)
by not forcing a verification on non-existing files
(LP: #255545)
-
cb476ab...
by
Michael Vogt
on 2008-04-22
-
Import patches-unapplied version 0.7.9ubuntu17 to ubuntu/hardy
Imported using git-ubuntu import.
Changelog parent: fcd3a09c503291b33e12e215be53552674f68c00
New changelog entries:
* apt-pkg/acquire-item.cc:
- fix signaure removal on transient network failures
(thanks to Scott James Remnant)
-
fcd3a09...
by
Michael Vogt
on 2008-04-08
-
Import patches-unapplied version 0.7.9ubuntu16 to ubuntu/hardy
Imported using git-ubuntu import.
Changelog parent: 9e4e8cd117f022d368975a54b56371ff4a3e2f99
New changelog entries:
* cmdline/apt-key:
- only check against master-keys in net-update to not break
custom CDs (thanks to Colin Watson)
-
9e4e8cd...
by
Michael Vogt
on 2008-03-13
-
Import patches-unapplied version 0.7.9ubuntu15 to ubuntu/hardy
Imported using git-ubuntu import.
Changelog parent: c4c0855a47c6c6864585319ef0db6289e3a0e684
New changelog entries:
* cmdline/apt-get.cc:
- do two passes when installing tasks, first ignoring dependencies,
then resolving them and run the problemResolver at the end
so that it can correct any missing dependencies. This should
fix livecd building for kubuntu (thanks to Jonathan Riddell
for reporting the problem)
-
c4c0855...
by
Michael Vogt
on 2008-03-11
-
Import patches-unapplied version 0.7.9ubuntu14 to ubuntu/hardy
Imported using git-ubuntu import.
Changelog parent: 70ed2499fa1d8a35ee79ea8499a792894a73b726
New changelog entries:
* cmdline/apt-get.cc:
- fix incorrect help output for -f (LP: #57487)
- run the problemResolver after a task was installed
so that it can correct any missing dependencies
* typo fixes (LP: #107960)
