summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* fix a bunch of cppcheck "(warning) Member variable '<#>' is notDavid Kalnischkies2012-03-0419-36/+44
| | | | initialized in the constructor." messages (no functional change)
* handle a SIGINT in all modes as a break after the currently runningDavid Kalnischkies2012-03-042-4/+7
| | | dpkg transaction instead of ignoring it completely
* * apt-pkg/acquire-item.cc:David Kalnischkies2012-03-042-1/+13
| | | | | | | | | | | | | | | | | | | | | - remove 'old' InRelease file if we can't get a new one before proceeding with Release.gpg to avoid the false impression of a still trusted repository by a (still present) old InRelease file. Thanks to Simon Ruderich for reporting this issue! (CVE-2012-0214) Effected are all versions >= 0.8.11 Possible attack summary: - Attacker needs to find a user which has run at least one successful 'apt-get update' against an archive providing InRelease files. - Create a Packages file with his preferred content. - Attacker then prevents the download of InRelease, Release and Release.gpg (alternatively he creates a valid Release file and sends this, the other two files need to be missing either way). - User updates against this, getting the modified Packages file without any indication of being unsigned (beside the "Ign InRelease" and "Ign Release.gpg" in the output of 'apt-get update'). => deb files from this source are considered 'trusted' (and therefore the user isn't asked for an additional confirmation before install)
* testcase for CVE-2012-0214Simon Ruderich2012-03-031-0/+29
|
* * apt-pkg/packagemanager.cc:David Kalnischkies2012-03-033-13/+65
| | | | - do not try to a void a breaks if the broken package pre-depends on the breaker, but let dpkg auto-deconfigure it
* allow msgtest to be used with only one parameterDavid Kalnischkies2012-03-031-1/+2
|
* show in the debug output if we are looping in the avoid breaksDavid Kalnischkies2012-03-031-1/+6
|
* eanup the ordering-code avoiding a break (no function change)David Kalnischkies2012-03-031-28/+23
|
* fix the string in the testcasesDavid Kalnischkies2012-02-271-3/+3
|
* * cmdline/apt-cache.cc:David Kalnischkies2012-02-252-2/+4
| | | - correct --pre-depends option by using dash consistently (LP: #940837)
* improve 'error' message for packages which are only referencedDavid Kalnischkies2012-02-183-6/+43
| | | e.g. in a Depends line and are now requested for removal
* * cmdline/apt-get.cc:David Kalnischkies2012-02-183-2/+87
| | | | - if a package can't be removed as it is not installed, suggest to the user an (installed) multiarch silbing with 'Did you mean?'
* use pdiff for Translation-* files if available (Closes: #657902)David Kalnischkies2012-02-182-2/+8
| | | | Beware: pdiffs for Translation-* are only acquired if their availability is advertised in the Release file.
* * apt-pkg/acquire-item.cc:David Kalnischkies2012-02-186-84/+39
| | | | | | | | | | | | | | | - drop support for i18n/Index file (introduced in 0.8.11) and use the Release file instead to get the Translations (Closes: #649314) * ftparchive/writer.cc: - add 'Translation-*' to the default patterns i18n/Index was never used outside debian - and even here it isn't used consistently as only 'main' has such a file. As the Release file now includes the Translation-* files we therefore drop support for i18n/Index. A version supporting it was never part of a debian release and still supporting it would mean that we get 99% of the time a 404 as response to the request anyway and confuse archive maintainers who want to provide all files APT tries to acquire.
* ensure that the cache-directories are really directories beforeDavid Kalnischkies2012-02-181-2/+2
| | | | trying to get a list of included files from them
* * apt-pkg/indexrecords.cc:David Kalnischkies2012-02-182-2/+7
| | | - do not create empty Entries as a sideeffect of Lookup()
* * apt-pkg/cachefile.cc:David Kalnischkies2012-02-114-1/+112
| | | - clean up lost atomic cachefiles with 'clean' (Closes: #650513)
* just in case: correct the header-guard for https to not match httpDavid Kalnischkies2012-02-111-2/+2
|
* remove the arbitrary MAXLEN limit for response lines (Closes: #658346)David Kalnischkies2012-02-114-10/+3
|
* save the universe by not printing messages about apport if a packageDavid Kalnischkies2012-02-112-1/+9
| | | with this name is not installed (Closes: #619646)
* fix the hold-testcase as it has problems with 'foreign' operationsDavid Kalnischkies2012-02-115-83/+18
|
* correctly ignore already (un)hold packagesDavid Kalnischkies2012-02-113-4/+14
|
* * cmdline/apt-mark.cc:David Kalnischkies2012-02-102-18/+115
| | | - detect if dpkg has multiarch support before calling --set-selections
* Fix the testcases to work with and configure dpkg correctly in aDavid Kalnischkies2012-02-102-23/+64
| | | | | | | | | multi-arch environment It's not a complete and the "fixed" test is fixed more like a hack as we have communication problems with dpkg if dpkg and APT disagree on the interpretation of the native architecture, see also: http://lists.debian.org/debian-dpkg/2012/02/msg00051.html
* ensure that architectures are not added multiple timesDavid Kalnischkies2012-02-102-2/+5
|
* call dpkg --assert-multi-arch with execvp instead of execvDavid Kalnischkies2012-02-093-4/+5
|
* rework previous patch to avoid changing the inline codeMichael Vogt2012-02-032-4/+6
|
* * apt-pkg/contrib/fileutl.h:Michael Vogt2012-02-032-1/+6
|\ | | | | - fix compat with FileFd::OpenDescriptor() in ReadOnlyGzip mode
| * * apt-pkg/contrib/fileutl.h:Michael Vogt2012-02-032-1/+6
| | | | | | - fix compat with FileFd::OpenDescriptor() in ReadOnlyGzip mode
* | Fix IndexCopy::CopyPackages and TranslationsCopy::CopyTranslations toMichael Vogt2012-01-312-2/+4
| | | | | | handle compressed files again (LP: #924182, closes: #658096)
* | merged from lp:~mvo/apt/mvoMichael Vogt2012-01-312-2/+41
|\|
| * * apt-pkg/deb/dpkgpm.cc:Michael Vogt2012-01-302-2/+41
| | | | | | | | - fix crash when a package is in removed but residual config state (LP: #923807)
| * merged from donkultMichael Vogt2012-01-3032-1646/+2281
| |\
* | \ merged from lp:~donkult/apt/experimental/Michael Vogt2012-01-3115-84/+409
|\ \ \ | | |/ | |/|
| * | * apt-pkg/aptconfiguration.cc:David Kalnischkies2012-01-302-9/+60
| | | | | | | | | - chroot if needed before calling dpkg --print-foreign-architectures
| * | * methods/http{s,}.cc:David Kalnischkies2012-01-303-2/+31
| | | | | | | | | | | | | | | - if a file without an extension is requested send an 'Accept: text/*' header to avoid that the server chooses unsupported compressed files in a content-negotation attempt (Closes: #657560)
| * | * apt-pkg/contrib/configuration.cc:David Kalnischkies2012-01-303-3/+20
| | | | | | | | | | | | | | | - do not stop parent transversal in FindDir if the value is empty See http://lists.debian.org/deity/2012/01/msg00053.html , too.
| * | * apt-pkg/depcache.cc:David Kalnischkies2012-01-293-12/+60
| | | | | | | | | | | | - if a M-A:same package is marked for reinstall, mark all it's installed silbings for reinstallation as well (LP: #859188)
| * | * apt-pkg/algorithms.cc:Colin Watson2012-01-293-17/+19
| | | | | | | | | | | | | | | - use a signed int instead of short for score calculation as upgrades become so big now that it can overflow (Closes: #657732, LP: #917173)
| * | add the testcase i wrote for revno 2209.1.2, to ensure that breaks onDavid Kalnischkies2012-01-291-0/+56
| | | | | | | | | | | | not-installed versions are ignored while searching for breakage loops
| * | add a very simple testcases for the previous commited fix forDavid Kalnischkies2012-01-291-0/+51
| | | | | | | | | | | | Breaks handling in algorithms.cc by Colin Watson
| * | * apt-pkg/algorithms.cc:Colin Watson2012-01-292-3/+7
| | | | | | | | | | | | | | | - don't break out of the main-resolver loop for Breaks to deal with all of them in a single iteration (Closes: #657695, LP: #922485)
| * | * cmdline/apt-get.cc:Steve Langasek2012-01-293-28/+78
| | | | | | | | | | | | | | | - for cross-build-dependencies M-A: none should be DEB_HOST_ARCH, not DEB_BUILD_ARCH (Closes: #646288)
| * | ensure that dpkg binary doesn't have the chroot-directory prefixedDavid Kalnischkies2012-01-292-2/+13
| | |
| * | * apt-pkg/deb/dpkgpm.cc:David Kalnischkies2012-01-292-17/+23
|/ / | | | | - chroot if needed before dpkg --assert-multi-arch
* | releasing version 0.8.16~exp12Michael Vogt2012-01-241-1/+1
| |
* | merged from bzr+ssh://bazaar.launchpad.net/~donkult/apt/experimental/Michael Vogt2012-01-2010-36/+79
|\ \
| * | * test/libapt/run-tests:David Kalnischkies2012-01-202-4/+5
| | | | | | | | | | | | - hurd doesn't have dmesg yet and we don't really need it either, so use with $0 a more stable data source for hashsumming
| * | * test/libapt/globalerror_test.cc:Pino Toscano2012-01-202-3/+11
| | | | | | | | | | | | | | | - errno 0 has a different strerror on hurd, so generate the expected message dynamically instead of hardcoding 'Success' (Closes: #656530)
| * | fix a few esoteric cppcheck errors/warnings/infosDavid Kalnischkies2012-01-204-5/+17
| | |
generated by cgit v1.2.3-70-g09d2 (git 2.46.0) at 2024-11-05 05:50:24 +0000