]> git.saurik.com Git - apt.git/commitdiff
* SECURITY UPDATE: InRelease verification bypass 0.9.7.8
authorMichael Vogt <egon@debian-devbox>
Thu, 14 Mar 2013 13:26:43 +0000 (14:26 +0100)
committerMichael Vogt <egon@debian-devbox>
Thu, 14 Mar 2013 13:26:43 +0000 (14:26 +0100)
  - CVE-2013-1051

* apt-pkg/deb/debmetaindex.cc,
  test/integration/test-bug-595691-empty-and-broken-archive-files,
  test/integration/test-releasefile-verification:
  - disable InRelease downloading until the verification issue is
    fixed, thanks to Ansgar Burchardt for finding the flaw


No differences found