Age | Commit message (Collapse) | Author |
|
- Strip only :any and :native if MultiArch should be stripped as it is
save to ignore them in non-MultiArch contexts but if the dependency
is a specific architecture (and not the native) do not strip
|
|
- ensure that native architecture is if not specified otherwise the
first architecture in the Architectures vector
|
|
|
|
- emit an error on unknown APT::Default-Release value (Closes: #407511)
|
|
|
|
- apply madison typofix from John Feuerstein, thanks! (Closes: #633455)
|
|
- use a tmpfile instead of /etc/apt/secring.gpg (Closes: #632596)
* debian/apt.postinst:
- remove /etc/apt/secring.gpg if it is an empty file
|
|
- change default of APT::AutoRemove::SuggestsImportant to true
|
|
|
|
|
|
code (LP: #784473)
|
|
- use CndSet in pkgInitConfig (Closes: #629617)
|
|
- restore all important dependencies for garbage packages (LP: #806274)
|
|
- document APT::Architectures list (Closes: #612102)
|
|
- document available [options] for sources.list entries (Closes: 632441)
|
|
|
|
- fallback to memory if file is not writeable even if access()
told us the opposite before (e.g. in fakeroot 1.16) (Closes: #630591)
|
|
|
|
|
|
- create doxygen directory to avoid depending on magic (Closes: #628799)
* cmdline/apt-key:
- explicitly state that net-update is not supported if no url is set
- require to be root for add, rm, update and net-update
- clarify update vs. net-update in different distros (Closes: #632043)
* debian/apt.symbols:
- forgot 'mips' in the list for all architecture dependent symbols
- comment out gcc-4.5 specific symbols as gcc-4.6 is now default
- the symbol for PrintStatus() is architecture dependent
* apt-pkg/policy.cc:
- do not segfault in pinning if a package with this name doesn't exist.
Thanks to Ferdinand Thommes for the report!
- Defaults is a vector of Pin not of PkgPin
- ensure that only the first specific stanza for a package is used
- save all stanzas which had no effect in Unmatched
- allow package:architecure in Package:
|
|
|
|
- save all stanzas which had no effect in Unmatched
|
|
|
|
- do not segfault in pinning if a package with this name doesn't exist.
Thanks to Ferdinand Thommes for the report!
|
|
|
|
|
|
- forgot 'mips' in the list for all architecture dependent symbols
|
|
|
|
|
|
- explicitly state that net-update is not supported if no url is set
|
|
- create doxygen directory to avoid depending on magic (Closes: #628799)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
- set permissions of term.log to root.adm and 644 (LP: #404724)
|
|
|
|
|
|
|
|
- include all known languages when building the apt cache
(LP: #794907)
|
|
asking for a suitable mirror
|
|
- ignore lines starting with "#" in the mirror file
- ignore non http urls in the mirrors
|
|
|
|
- Verify that the first line of an InRelease file is a PGP header
for a signed message. Otherwise a man-in-the-middle can prefix
a valid InRelease file with his own data! (CVE-2011-1829)
|
|
|
|
(Closes: #195301)
This commit deals with the following cases:
- First section of index file (Packages,Sources,Translation) without Package field
- Signed release files without GPG data (NODATA)
- i18n/Index files without hash sums
Handling unsigned Release files is more complicated, and the example code
using indexRecords is disabled as it can reject correct Release files
without hashes. How we can reliably check unsigned Release files is
another question, and not urgent anyway, as it should have no
dramatic effect (we could check that it is a valid RFC-822 section,
but that's a bit too long to write)
|