|
|
@@ -1,18 +1,4 @@
|
|
|
-apt (0.9.7.8) unstable; urgency=criticial
|
|
|
-
|
|
|
- * SECURITY UPDATE: InRelease verification bypass
|
|
|
- - CVE-2013-1051
|
|
|
-
|
|
|
- [ David Kalnischk ]
|
|
|
- * apt-pkg/deb/debmetaindex.cc,
|
|
|
- test/integration/test-bug-595691-empty-and-broken-archive-files,
|
|
|
- test/integration/test-releasefile-verification:
|
|
|
- - disable InRelease downloading until the verification issue is
|
|
|
- fixed, thanks to Ansgar Burchardt for finding the flaw
|
|
|
-
|
|
|
- -- Michael Vogt <mvo@debian.org> Thu, 14 Mar 2013 07:47:36 +0100
|
|
|
-
|
|
|
-apt (0.9.7.8~exp3) UNRELEASEDexperimental; urgency=low
|
|
|
+apt (0.9.7.9~exp1) experimental; urgency=low
|
|
|
|
|
|
[ Niels Thykier ]
|
|
|
* test/libapt/assert.h, test/libapt/run-tests:
|
|
|
@@ -40,7 +26,21 @@ apt (0.9.7.8~exp3) UNRELEASEDexperimental; urgency=low
|
|
|
- this will require rebuilds of the clients as this used to
|
|
|
be a inline function
|
|
|
|
|
|
- -- Michael Vogt <mvo@debian.org> Sun, 17 Mar 2013 19:46:23 +0100
|
|
|
+ -- Michael Vogt <mvo@debian.org> Fri, 22 Mar 2013 21:53:15 +0100
|
|
|
+
|
|
|
+apt (0.9.7.8) unstable; urgency=criticial
|
|
|
+
|
|
|
+ * SECURITY UPDATE: InRelease verification bypass
|
|
|
+ - CVE-2013-1051
|
|
|
+
|
|
|
+ [ David Kalnischk ]
|
|
|
+ * apt-pkg/deb/debmetaindex.cc,
|
|
|
+ test/integration/test-bug-595691-empty-and-broken-archive-files,
|
|
|
+ test/integration/test-releasefile-verification:
|
|
|
+ - disable InRelease downloading until the verification issue is
|
|
|
+ fixed, thanks to Ansgar Burchardt for finding the flaw
|
|
|
+
|
|
|
+ -- Michael Vogt <mvo@debian.org> Thu, 14 Mar 2013 07:47:36 +0100
|
|
|
|
|
|
apt (0.9.7.8~exp2) experimental; urgency=low
|
|
|
|