git.saurik.com Git - apt.git/commit

]> git.saurik.com Git - apt.git/commit

author	David Kalnischkies <kalnischkies@gmail.com>
	Mon, 6 Jun 2011 19:29:16 +0000 (21:29 +0200)
committer	David Kalnischkies <kalnischkies@gmail.com>
	Mon, 6 Jun 2011 19:29:16 +0000 (21:29 +0200)
commit	2e3c9d6452e69dcb5c83732fbda27b747bc997f4
tree	bc5e845c507f605f956964e45519ed4e73d7d341	tree \| snapshot
parent	89a1aa5dd55a3469c92720c7fcb90779f90b61f0	commit \| diff

* apt-pkg/indexcopy.cc:
  - Verify that the first line of an InRelease file is a PGP header
    for a signed message. Otherwise a man-in-the-middle can prefix
    a valid InRelease file with his own data! (CVE-2011-1829)

apt-pkg/indexcopy.cc		diff \| blob \| blame \| history
debian/changelog		diff \| blob \| blame \| history
methods/gpgv.cc		diff \| blob \| blame \| history
test/integration/test-ubuntu-bug-784473-InRelease-one-message-only	[new file with mode: 0755]	blob

APT (for Cydia)

RSS Atom