summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* merged lp:~mvo/apt/fix-inrelease5Michael Vogt2013-04-0273-4629/+5336
|\
| * merge stuff from donkultMichael Vogt2013-03-2619-246/+705
| |\
| | * support dash-escaped text in clearsigned files as implementations areDavid Kalnischkies2013-03-192-14/+12
| | | | | | | | | | | | | | | | | | | | | | | | free to escape all lines (we have no lines in our files which need to be escaped as these would be invalid fieldnames) and while ExecGPGV would detect dash-escaped text as invalid (as its not expected in messages with detached signatures) it would be possible to "comment" lines in (signed) dsc files which are only parsed but not verified
| | * use FileFd instead of int fds to tidy up the interface a bitDavid Kalnischkies2013-03-192-62/+53
| | |
| | * * apt-pkg/deb/debindexfile.cc,David Kalnischkies2013-03-188-76/+23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | apt-pkg/deb/deblistparser.cc: - use OpenMaybeClearSignedFile to be free from detecting and skipping clearsigning metadata in dsc and Release files We can't write a "clean" file to disk as not all acquire methods copy Release files before checking them (e.g. cdrom), so this reverts recombining, but uses the method we use for dsc files also in the two places we deal with Release files
| | * - add method to open (maybe) clearsigned files transparentlyDavid Kalnischkies2013-03-185-63/+135
| | | | | | | | | | | | | | | * ftparchive/writer.cc: - use OpenMaybeClearSignedFile to be free from detecting and skipping clearsigning metadata in dsc files
| | * rename testcase to mention CVE number, make the code more consistent withDavid Kalnischkies2013-03-182-80/+61
| | | | | | | | | | | | the rest and add some more tests (by fixing commented ones)
| | * ensure that we fclose/unlink/free in the new gpg-code as soon as possibleDavid Kalnischkies2013-03-161-5/+22
| | |
| | * add testcase and update changelogMichael Vogt2013-03-162-0/+85
| | |
| | * merged from davids bundleMichael Vogt2013-03-1612-171/+539
| |/|
| | * - if ExecGPGV deals with a clear-signed file it will split this fileDavid Kalnischkies2013-03-155-58/+337
| | | | | | | | | | | | | | | | | | | | | | | | into data and signatures, pass it to gpgv for verification and recombines it after that in a known-good way without unsigned blocks and whitespaces resulting usually in more or less the same file as before, but later code can be sure about the format * apt-pkg/deb/debmetaindex.cc: - reenable InRelease by default
| | * split out a method to strip whitespaces only on the right sideMichael Vogt2013-03-152-1/+8
| | |
| | * * apt-pkg/acquire-item.cc:David Kalnischkies2013-03-152-10/+19
| | | | | | | | | | | | - keep the last good InRelease file around just as we do it with Release.gpg in case the new one we download isn't good for us
| | * don't close stdout/stderr if it is also the statusfdDavid Kalnischkies2013-03-152-10/+12
| | |
| | * * apt-pkg/contrib/gpgv.cc:David Kalnischkies2013-03-155-27/+44
| | | | | | | | | | | | - ExecGPGV is a method which should never return, so mark it as such and fix the inconsistency of returning in error cases
| | * * apt-pkg/indexcopy.cc:David Kalnischkies2013-03-157-135/+189
| |/ | | | | - rename RunGPGV to ExecGPGV and move it to apt-pkg/contrib/gpgv.cc
* | po/{ca,cs,ru}.po: fix merge artifacts harderMichael Vogt2013-04-023-30/+0
| |
* | * doc/apt.conf.5.xml:Michael Vogt2013-03-252-0/+14
| | | | | | - document Acquire::ForceIPv{4,6}
* | * methods/connect.cc:Michael Vogt2013-03-252-2/+6
| | | | | | - use Errno() instead of strerror(), thanks to David Kalnischk
* | merge patches from daniel to fix merge artifact and test failureMichael Vogt2013-03-256-3/+37
| |
* | merge patch from Daniel HartwigMichael Vogt2013-03-252-1/+6
| |
* | * Update all PO files and apt-all.potbubulle@debian.org2013-03-242-9/+15
| | | | | | * French translation completed (Christian Perrier)
* | Update POT and PO filesbubulle@debian.org2013-03-2443-1588/+2245
| |
* | releasing version 0.9.7.9~exp1Michael Vogt2013-03-223-3/+3
| |
* | prepare uploadMichael Vogt2013-03-221-16/+16
| |
* | merged lp:~mvo/apt/fix-tagfile-hashMichael Vogt2013-03-225-4/+81
|\ \
| * | test/libapt/tagfile_test.cc: add missing "unistd.h" (thanks to Niels Thykier)Michael Vogt2013-03-181-0/+1
| | |
| * | fix pkgTagSection::Exists() and add testMichael Vogt2013-03-184-4/+75
| |/
* | merged the debian-wheezy branchMichael Vogt2013-03-2250-3667/+3749
|\|
| * * SECURITY UPDATE: InRelease verification bypassMichael Vogt2013-03-1451-3988/+4108
| | | | | | | | | | | | | | | | | | - CVE-2013-1051 * apt-pkg/deb/debmetaindex.cc, test/integration/test-bug-595691-empty-and-broken-archive-files, test/integration/test-releasefile-verification: - disable InRelease downloading until the verification issue is fixed, thanks to Ansgar Burchardt for finding the flaw
* | add new config options "Acquire::ForceIPv4" and Michael Vogt2013-03-222-0/+13
| | | | | | | | "Acquire::ForceIPv6" to allow focing one or the other (closes: #611891)
* | Turkish (Mert Dirik). Closes: #703526bubulle@debian.org2013-03-222-0/+3497
| |
* | merge patch from Colin to fix error message from getaddrinfo() (#703603)Michael Vogt2013-03-212-0/+8
| |
* | apt-pkg/edsp.cc: do not use stderr in WriteSolution at allMichael Vogt2013-03-201-3/+0
| |
* | apt-pkg/edsp.cc: do not spam stderr in WriteSolutionMichael Vogt2013-03-201-0/+2
| |
* | test/integration/framework: use EXIT_CODE to be consistent with the ↵Michael Vogt2013-03-181-5/+5
| | | | | | | | run-tests code
* | report failures via exit and ensure we don't overflowMichael Vogt2013-03-182-4/+10
| |
* | * test/integration/framework:Michael Vogt2013-03-182-2/+12
| | | | | | - continue after test failure but preserve exit status
* | * test/libapt/assert.h, test/libapt/run-tests:Michael Vogt2013-03-173-1/+18
| | | | | | - exit with status 1 on test failure
* | releasing version 0.9.7.8~exp2Michael Vogt2013-03-011-2/+2
| |
* | merged lp:~mvo/apt/hash-orderMichael Vogt2013-03-013-2/+4
|\ \
| * | add changelogMichael Vogt2013-03-011-0/+1
| | |
| * | ensure sha512 is really used when available (thanks to Tyler Hicks )Michael Vogt2013-01-142-2/+2
| | |
* | | include two missing patches to really fix bug #696225, thanks toMichael Vogt2013-03-015-1/+38
| | | | | | | | | Guillem Jover
* | | releasing version 0.9.7.8~exp1Michael Vogt2013-03-011-2/+2
| | |
* | | merged lp:~donkult/apt/sidMichael Vogt2013-03-013-0/+140
|\ \ \
| * | | * apt-pkg/depcache.cc:David Kalnischkies2013-02-243-0/+140
|/ / / | | | | | | | | | - prefer to install packages which have an already installed M-A:same sibling while choosing providers (LP: #1130419)
* | | Japanese (Kenshi Muto). Closes: #699783bubulle@debian.org2013-02-052-6/+9
| | |
* | | * apt-pkg/indexrecords.cc:Michael Vogt2013-01-242-2/+5
| | | | | | | | | - support '\r' in the Release file
* | | quote plus in filenames to work around a bug in the S3 serverMichael Vogt2013-01-242-1/+7
|/ / | | | | (LP: #1003633)
generated by cgit v1.2.3-70-g09d2 (git 2.46.0) at 2024-11-02 00:32:02 +0000