~ubuntu-branches/ubuntu/lucid/apt/lucid-security : changes

~ubuntu-branches/ubuntu/lucid/apt/lucid-security » Changes from revision 111

From Revision 111 to 92

Rev	Summary	Authors	Tags	Date
111	* SECURITY UPDATE: * SECURITY UPDATE: - fix potential buffer overflow, thanks to the Google Security Team (CVE-2014-6273) * Fix regression from the previous upload when file:/// sources are used and those are on a different partition than the apt state directory (LP: #1371058) * Fix regression when Dir::state::lists is set to a relative path * Fix regression when cdrom: sources got rewriten by apt-cdrom add	Michael Vogt	0.7.25.3ubuntu9.17.1	9 years ago
110	* SECURITY UPDATE: * SECURITY UPDATE: - incorrect invalidating of unauthenticated data (CVE-2014-0488) - incorect verification of 304 reply (CVE-2014-0487)	Michael Vogt	0.7.25.3ubuntu9.16	9 years ago
109	* SECURITY UPDATE: incorrect apt-get source validation (LP: ... * SECURITY UPDATE: incorrect apt-get source validation (LP: #1329274) - warn if not authenticated in cmdline/apt-get.cc. - CVE-2014-0478	Michael Vogt	0.7.25.3ubuntu9.15	9 years ago
108	* SECURITY UPDATE: Disable apt-key net-update for now, as va... * SECURITY UPDATE: Disable apt-key net-update for now, as validation code is still insecure - cmdline/apt-key: exit 1 immediately in net_update() - CVE-2012-0954 - LP: #1013639	Jamie Strandboge	0.7.25.3ubuntu9.13	11 years ago
107	adjust apt-key to ensure no collisions on subkeys too. Patch... adjust apt-key to ensure no collisions on subkeys too. Patch thanks to Marc Deslauriers. (LP: #1013128)	Jamie Strandboge	0.7.25.3ubuntu9.12	11 years ago
106	* SECURITY UPDATE: sensitive information disclosure via inco... * SECURITY UPDATE: sensitive information disclosure via incorrect hostname validation (LP: #868353) - methods/https.cc: properly set CURLOPT_SSL_VERIFYHOST. - CVE-2011-3634 * SECURITY UPDATE: Restore apt-ket net-update functionality (LP: #857472) - cmdline/apt-key: improve key validation.	Marc Deslauriers	0.7.25.3ubuntu9.9	12 years ago
105	* SECURITY UPDATE: Disable apt-key net-update for now, as va... * SECURITY UPDATE: Disable apt-key net-update for now, as validation code is insecure. (LP: #856489) - cmdline/apt-key: exit immediately out of net_update(). - CVE number pending	Marc Deslauriers	0.7.25.3ubuntu9.7	12 years ago
104	Cherry pick fixes from the lp:~mvo/apt/mvo branch: Cherry pick fixes from the lp:~mvo/apt/mvo branch: [ Evan Dandrea ] * Remember hosts with general failures for https://wiki.ubuntu.com/NetworklessInstallationFixes (LP: #556831). [ Michael Vogt ] * improve debug output for Debug::pkgPackageManager	Michael Vogt	0.7.25.3ubuntu7	14 years ago
103	* cmdline/apt-get.cc: * cmdline/apt-get.cc: - fix crash when pkg.VersionList() is empty (LP: #556056)	Michael Vogt	0.7.25.3ubuntu6	14 years ago
102	[ David Kalnischkies ] [ David Kalnischkies ] * cmdline/apt-get.cc: - try version match in FindSrc first exact than fuzzy (LP: #551178) [ Jean-Baptiste Lallement ] * apt-pkg/contrib/strutl.cc: - always escape '%' (LP: #130289) (Closes: #500560) - unescape '%' sequence only if followed by 2 hex digit - username/password are urlencoded in proxy string (RFC 3986)	Michael Vogt	0.7.25.3ubuntu5	14 years ago
101	[ David Kalnischkies ] [ David Kalnischkies ] * apt-pkg/deb/debversion.cc: - consider absent of debian revision equivalent to 0 (Closes: #573592) LP: #540228 * cmdline/apt-get.cc, apt-pkg/cdrom.cc: - fix memory leaks in error conditions in DoSource() * apt-pkg/deb/dpkgpm.cc: - fix error message construction in OpenLog()	Michael Vogt	0.7.25.3ubuntu4	14 years ago
100	* apt-pkg/indexfile.cc: * apt-pkg/indexfile.cc: - remove "cs" from languages that need the full langcode when downloading translations (thanks to Steve Langasek)	Michael Vogt	0.7.25.3ubuntu3	14 years ago
99	[ Michael Vogt ] [ Michael Vogt ] * abicheck/ - add new abitest tester using the ABI Compliance Checker from http://ispras.linuxfoundation.org/index.php/ABI_compliance_checker * debian/apt.conf.autoremove: - add "oldlibs" to the APT::Never-MarkAuto-Sections as its used for transitional packages * apt-pkg/deb/dpkgpm.cc: - fix backgrounding when dpkg runs (closes: #486222) * cmdline/apt-mark: - show error on incorrect aguments (LP: #517917), thanks to Torsten Spindler * cmdline/apt-get.cc: - if apt-get source foo=version or foo/distro can not be found, error out (LP: #502641) * apt-pkg/indexfile.cc: - deal correctly with three letter langcodes (LP: #391409) * debian/apt.cron.daily: - do not look into admin users gconf anymore for the http proxy the user now needs to use the "Apply system-wide" UI in the gnome-control-center to set it * debian/apt.postinst: - add set_apt_proxy_from_gconf() and run that once on upgrade if there is no proxy configured already system-wide (LP: #432631) From that point on gnome-control-center will have to warn if the user makes changes to the proxy settings and does not apply them system wide [ Robert Collins ] * Change the package index Info methods to allow apt-cache policy to be useful when using several different archives on the same host. (Closes: #329814, LP: #22354)	Michael Vogt	0.7.25.3ubuntu2	14 years ago
98	[ Michael Vogt ] [ Michael Vogt ] * merged with the debian-sid branch [ Ivan Masár ] * Slovak translation update. Closes: #568294	Michael Vogt	0.7.25.3ubuntu1	14 years ago
97	* cmdline/apt-cdrom.cc: * cmdline/apt-cdrom.cc: - make Acquire::cdrom::AutoDetect default, this can be turned off with "--no-auto-detect" * methods/http.cc: - add cache-control headers even if no cache is given to allow adding options for intercepting proxies	Michael Vogt	0.7.25ubuntu4	14 years ago
96	* cmdline/apt-get.cc: * cmdline/apt-get.cc: - fix apt-get source pkg=version regression (closes: #561971) * apt-pkg/contrib/cdromutl.cc: - fix UnmountCdrom() fails, give it a bit more time and try the umount again * apt-pkg/cdrom.cc: - fix crash in pkgUdevCdromDevices * methods/cdrom.cc: - fixes in multi cdrom setup code - add new "Acquire::cdrom::AutoDetect" variable that enables/disables the dlopen of libudev for automatic cdrom detection * cmdline/apt-cdrom.cc: - add new --auto-detect option that uses libudev to figure out the cdrom/mount-point	Michael Vogt	0.7.25ubuntu3	14 years ago
95	Change history branch so that it does not break the Change history branch so that it does not break the apt ABI for the pkgPackageManager interface	Michael Vogt	0.7.25ubuntu2	14 years ago
94	* Merged from the mvo branch * Merged from the mvo branch * merged from the lp:~mvo/apt/history branch	Michael Vogt	0.7.25ubuntu1	14 years ago
93	[ Michael Vogt ] [ Michael Vogt ] * apt-pkg/deb/dpkgpm.cc: - include df -l output in the apport log as well (thanks to tjaalton) * apt-pkg/packagemanager.cc: - add output about pre-depends configuring when debug::pkgPackageManager is used * methods/https.cc: - fix incorrect use of CURLOPT_TIMEOUT, closes: #497983, LP: #354972 thanks to Brian Thomason for the patch * merge lp:~mvo/apt/netrc branch, this adds support for a /etc/apt/auth.conf that can be used to store username/passwords in a "netrc" style file (with the extension that it supports "/" in a machine definition). Based on the maemo git branch. [ Brian Murray ] * apt-pkg/depcache.cc, apt-pkg/indexcopy.cc: - typo fix (LP: #462328)	Michael Vogt	0.7.24ubuntu1	14 years ago
92	[ Michael Vogt ] [ Michael Vogt ] * debian/control: - fix Vcr-Bzr header [ Kees Cook ] * debian/apt.cron.daily: - fix quotes for use with "eval", thanks to Lars Ljung (LP: #449535).	Michael Vogt	0.7.23.1ubuntu2	14 years ago

Older »