apt/methods, branch 1.0.9.4 Debians commandline package manager https://git.kalnischkies.de/apt/atom?h=1.0.9.4 2014-10-08T09:35:48Z methods/rsh.cc: replace strcat with std::string 2014-10-08T09:35:48Z Michael Vogt mvo@ubuntu.com 2014-10-08T09:35:48Z urn:sha1:180b693262d71381d650d10c3f95a5a70553f40f Instead of using strcat use a C++ std::string to avoid overflowing this buffer. Thanks to David Garfield Closes: #76442 generalize Acquire::GzipIndex 2014-09-21T08:18:03Z Michael Vogt mvo@debian.org 2014-09-21T08:18:03Z urn:sha1:b0f4b486e6850c5f98520ccf19da71d0ed748ae4 Fix regression when copy: is used for a relative path 2014-09-19T14:41:55Z Michael Vogt mvo@ubuntu.com 2014-09-19T14:41:55Z urn:sha1:9da539c5aff025aab99537be1c75e8c6a853fd83 When we do a ReverifyAfterIMS() we use the copy: method to verify the hashes again. If the user uses -o Dir=./something/relative this fails because we use the URI class in copy.cc that strips away the leading relative part. By not using URI this is fixed. Closes: #762160 SECURITY UPDATE for CVE-2014-{0488,0487,0489} 2014-09-16T18:39:13Z Michael Vogt mvo@ubuntu.com 2014-09-16T18:23:43Z urn:sha1:ca7fd76c2f30c100dcf1c12e717ce397cccd690b incorrect invalidating of unauthenticated data (CVE-2014-0488) incorect verification of 304 reply (CVE-2014-0487) incorrect verification of Acquire::Gzip indexes (CVE-2014-0489) Improve Debug::Acquire::http debug output 2014-09-05T14:24:32Z Michael Vogt mvo@ubuntu.com 2014-09-05T14:24:32Z urn:sha1:9622b2111095c3fc705ec0615d27fe403e18c3b8 Prefix all answers with the URL that the answer is for. This helps when debugging and pipeline is enabled. Make Proxy-Auto-Detect check for each host 2014-09-02T14:02:37Z Michael Vogt mvo@ubuntu.com 2014-09-02T13:50:19Z urn:sha1:c6ee61eab54edf6cc3fbe118d304d72a860e1451 When doing Acquire::http{,s}::Proxy-Auto-Detect, run the auto-detect command for each host instead of only once. This should make using "proxy" from libproxy-tools feasible which can then be used for PAC style or other proxy configurations. Closes: #759264 methods/http.cc: use Req.str() in debug output 2014-06-24T13:45:09Z Michael Vogt mvo@debian.org 2014-06-24T13:45:09Z urn:sha1:7b734b09f6bd9356e4622aee64bd2e5e43554570 enforce LFS for partial files in https range requests 2014-04-26T07:51:05Z David Kalnischkies david@kalnischkies.de 2014-04-24T08:49:41Z urn:sha1:062074cb519aa05110d24936d95747c59cc0ffc1 build http request in a stringstream 2014-04-26T07:51:05Z David Kalnischkies david@kalnischkies.de 2014-04-24T08:20:45Z urn:sha1:b123b0ba77936a82d7964bebf01693acf94cae1f beside reducing code a bit, it avoids oddball problems while building the string and doesn't trigger static analyse warnings. add a config option to switch uncompress methods to compress 2014-03-13T12:58:47Z David Kalnischkies david@kalnischkies.de 2014-03-12T13:24:41Z urn:sha1:0ec6b98b24939100a6d4c333abe5bc62a4455f9f Not very useful in the normal operation of work, but handy for tests. Git-Dch: Ignore