~ubuntu-branches/ubuntu/hardy/apt/hardy-security : changes

~ubuntu-branches/ubuntu/hardy/apt/hardy-security » Changes to cmdline/apt-key from revision 81

From Revision 81

Rev	Summary	Authors	Tags	Date
81	* SECURITY UPDATE: Disable apt-key net-update for now, as va... * SECURITY UPDATE: Disable apt-key net-update for now, as validation code is still insecure - cmdline/apt-key: exit 1 immediately in net_update() - CVE-2012-0954 - LP: #1013639	Jamie Strandboge	0.7.9ubuntu17.6	12 years ago
80	adjust apt-key to ensure no collisions on subkeys too. Patch... adjust apt-key to ensure no collisions on subkeys too. Patch thanks to Marc Deslauriers. (LP: #1013128)	Jamie Strandboge	0.7.9ubuntu17.5	12 years ago
79	* SECURITY UPDATE: Restore apt-ket net-update functionality ... * SECURITY UPDATE: Restore apt-ket net-update functionality (LP: #857472) - cmdline/apt-key: improve key validation.	Marc Deslauriers	0.7.9ubuntu17.4	12 years ago
78	* SECURITY UPDATE: Disable apt-key net-update for now, as va... * SECURITY UPDATE: Disable apt-key net-update for now, as validation code is insecure. (LP: #856489) - cmdline/apt-key: exit immediately out of net_update(). - CVE number pending	Marc Deslauriers	0.7.9ubuntu17.3	12 years ago
75	* cmdline/apt-key: * cmdline/apt-key: - only check against master-keys in net-update to not break custom CDs (thanks to Colin Watson)	Michael Vogt	0.7.9ubuntu16	16 years ago
69	* cmdline/apt-key: * cmdline/apt-key: - add "net-update" command that fetches the ubuntu-archive-keyring.gpg and add keys from it that are signed by the ubuntu-master-keyring.gpg (apt-archive-key-signatures spec) * debian/apt.cron.daily: - add apt-key net-update to the nightly cron job	Michael Vogt	0.7.9ubuntu10	16 years ago
66	* methods/connect.cc: * methods/connect.cc: - remember hosts with Resolve failures or connect Timeouts see https://wiki.ubuntu.com/NetworklessInstallationFixes * cmdlines/apt-key: - fix bug in the new apt-key update code that imports only keys signed with the master key (thanks to cjwatson)	Michael Vogt	0.7.9ubuntu7	16 years ago
65	* cmdline/apt-key: * cmdline/apt-key: - add support for a master-keyring that contains signing keys that can be used to sign the archive signing keys. This should make key-rollover easier. * apt-pkg/deb/dpkgpm.cc: - merged patch from Kees Cook to fix anoying upper-case display on amd64 in sbuild * apt-pkg/algorithms.cc: - add APT::Update::Post-Invoke-Success script slot - Make the breaks handling use the kill list. This means, that a Breaks: Pkg (<< version) may put Pkg onto the remove list. * apt-pkg/deb/dpkgpm.cc: - add APT::Apport::MaxReports to limit the maximum number of reports generated in a single run (default to 3) * apt-pkg/deb/debmetaindex.cc: - add missing "Release" file uri when apt-get update --print-uris is run	Michael Vogt	0.7.9ubuntu6	16 years ago
61	[ Otavio Salvador ] [ Otavio Salvador ] * Applied patch from Aurelien Jarno <aurel32@debian.org> to fix building with newest dpkg-shlibdeps changing the packaging building order and a patch from Robert Millan <rmh@aybabtu.com> to fix parallel building, closes: #452862. * Applied patch from Alexander Winston <alexander.winston@comcast.net> to use 'min' as symbol for minute, closes: #219034. * Applied patch from Amos Waterland <apw@us.ibm.com> to allow apt to work properly in initramfs, closes: #448316. * Applied patch from Robert Millan <rmh@aybabtu.com> to make apt-key and apt-get to ignore time conflicts, closes: #451328. * Applied patch from Peter Eisentraut <peter_e@gmx.net> to fix a grammatical error ("manual installed" -> "manually installed"), closes: #438136. * Fix cron.daily job to not call fail if apt isn't installed, closes: #443286. [ Daniel Burrows ] * apt-pkg/contrib/configuration.cc: - if RootDir is set, then FindFile and FindDir will return paths relative to the directory stored in RootDir, closes: #456457. [ Christian Perrier ] * Fix wording for "After unpacking...". Thans to Michael Gilbert for the patch. Closes: #260825 [ Program translations ] - Vietnamese updated. Closes: #453774 - Japanese updated. Closes: #456909 - French updated. [ Michael Vogt ] * apt-pkg/packagemanager.{cc,h}: - propergate the Immediate flag to make hitting the "E: Internal Error, Could not perform immediate configuration (2)" harder. (LP: #179247) * debian/apt.conf.daily: - print warning if the cache can not be locked (closes: #454561), thanks to Bastian Kleineidam * debian/control: - build against libdb-dev (instead of libdb4.4-dev)	Michael Vogt	0.7.9ubuntu2	16 years ago
60	* merged from http://bzr.debian.org/apt/apt/debian-sid/, rem... * merged from http://bzr.debian.org/apt/apt/debian-sid/, remaining changes: - mirror download method (pending merge with debian) - no pdiff download by default (unsuitable for ubuntu) - no recommends-by-default yet - add "Original-Maintainer" field to tagfile - show warning on apt-get source if the package is maintained in a VCS (pedinging merge with debian) - use ubuntu-archive keyring instead of debians one - support metapackages section for autoremoval - debian maintainer field change - send ubuntu string in user-agent * Changes from the debian-sid bzr branch (but not uploaded to debian yet): [ Otavio Salvador ] * Applied patch from Mike O'Connor <stew@vireo.org> to add a manpage to apt-mark, closes: #430207. * Applied patch from Andrei Popescu <andreimpopescu@gmail.com> to add a note about some frontends in apt.8 manpage, closes: #438545. * Applied patch from Aurelien Jarno <aurel32@debian.org> to avoid CPU getting crazy when /dev/null is redirected to stdin (which breaks buildds), closes: #452858. * Applied patch from Aurelien Jarno <aurel32@debian.org> to fix building with newest dpkg-shlibdeps changing the packaging building order, closes: #452862. [ Program translations ] - Basque updated. Closes: #453088 [ Michael Vogt ] * debian/rules - fix https install location * methods/gpgv.cc: - remove cruft code that caused timestamp/I-M-S issues * ftparchive/contents.cc: - fix error output * methods/mirror.{cc,h}: - only update mirror list on IndexFile updates * apt-pkg/acquire-item.{cc,h}: - make the authentication download code more robust against servers/proxies with broken If-Range implementations [ Chris Cheney ] * ftparchive/contents.cc: - support lzma data members * ftparchive/multicompress.cc: - support lzma output	Michael Vogt	0.7.9ubuntu1	16 years ago
38	* apt-pkg/deb/dpkgpm.cc: * apt-pkg/deb/dpkgpm.cc: - apport integration added, this means that a apport report is written on dpkg failures * cmdline/apt-get.cc: - merged http://people.ubuntu.com/~mvo/bzr/apt/xs-vcs-bzr/ this will warn when Vcs- headers are found on apt-get source (Fixes LP:#115959) * merged from debian/unstable, remaining changes: - maintainer field changed - merged the apt--mirror branch http://people.ubuntu.com/~mvo/bzr/apt/apt--mirror/ - apport reporting on package install/upgrade/remove failure - support for "Originial-Maintainer" field - merged apt--xs-vcs-bzr branch (http://people.ubuntu.com/~mvo/bzr/apt/xs-vcs-bzr/) - use ubuntu archive keyring by default - debian/apt.conf.autoremove + install recommands for section "metapackages" + do not mark direct dependencies of "metapackages" as autoremoved	Michael Vogt	0.7.2ubuntu1	17 years ago
2	* Merge apt--mvo--0 (incorporates 0.6.34ubuntu1): * Merge apt--mvo--0 (incorporates 0.6.34ubuntu1): - Implement MaxSize and MaxAge in apt.cron.daily, to prevent the cache from growing too large (Ubuntu #6761) - some comments about the pkgAcqMetaSig::Custom600Headers() added - use gpg --with-colons - commented the ftp no_proxy unseting in methods/ftp.cc - added support for "Acquire::gpgv::options" in methods/gpgv.cc * Merge bubulle@debian.org--2005/apt--main--0 - Make capitalization more consistent - Un-fuzzy translations resulting from capitalization changes - Italian translation update	Matt Zimmerman	0.6.35	19 years ago