-
Committer:
Package Import Robot
-
Author(s):
Marc Deslauriers, David Kalnischk, Michael Vogt
-
Date:
2013-03-13 11:32:35 UTC
-
Revision ID:
package-import@ubuntu.com-20130313113235-dprc1n6pmdw04u7x
Tags: 0.8.16~exp5ubuntu13.7
* SECURITY UPDATE: InRelease verification bypass
- CVE-2013-1051
[ David Kalnischk ]
[ Michael Vogt ]
* apt-pkg/deb/debmetaindex.cc,
test/integration/test-bug-595691-empty-and-broken-archive-files,
test/integration/test-releasefile-verification:
- disable InRelease downloading until the verification issue is
fixed, thanks to Ansgar Burchardt for finding the flaw