* test/integration/test-hashsum-verification:

  - add regression test for hashsum verification
* apt-pkg/acquire-item.cc:
  - if no Release.gpg file is found, still load the hashes for
    verification (closes: #636314) and add test

diff --git a/apt-pkg/acquire-item.cc b/apt-pkg/acquire-item.cc
index ebd8d5a12344ade6a4e980b6fd833bccf6c15c15..7eb5920e0c1d4935f0c8a70862d195595f5e1e63 100644 (file)
--- a/apt-pkg/acquire-item.cc
+++ b/apt-pkg/acquire-item.cc
@@ -1258,7 +1258,7 @@ void pkgAcqMetaIndex::Done(string Message,unsigned long Size,string Hash, /*{{{*
       if (SigFile == "")
       {
          // There was no signature file, so we are finished.  Download
-         // the indexes and do hashsum verification
+         // the indexes and do only hashsum verification
          MetaIndexParser->Load(DestFile);
          QueueIndexes(true);
       }

diff --git a/debian/changelog b/debian/changelog
index f162e20f47341dccf6462ec471f3bb1b10f7614f..489960912fc3e04416ed6dcb8e0f0e776783009c 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,4 +1,4 @@
-apt (0.8.15.6) unstable; urgency=low
+apt (0.8.15.5.6) UNRELEASED; urgency=low
 
   * apt-pkg/contrib/fileutl.{cc,h}:
     - add GetModificationTime() helper
@@ -11,6 +11,7 @@ apt (0.8.15.6) unstable; urgency=low
     - use ref-to-ptr semantic in NewDepends() to ensure that the   
       libapt does not segfault if the cache is remapped in between
       (LP: #812862)
+    - fix crash when P.Arch() was used but the cache got remapped
   * test/integration/test-hashsum-verification:
     - add regression test for hashsum verification
   * apt-pkg/acquire-item.cc: