Age | Commit message (Collapse) | Author |
|
|
|
incorrect invalidating of unauthenticated data (CVE-2014-0488)
incorect verification of 304 reply (CVE-2014-0487)
incorrect verification of Acquire::Gzip indexes (CVE-2014-0489)
|
|
Compressing files in 4 different styles eats test-time for no practical
gain if we don't test them explicitly, so default to just building 'gz'
compressed files as it is the simplest compression algorithm supported
Git-Dch: Ignore
|
|
|
|
invalid in most cases anyway
|
|
- if no Release.gpg file is found, still load the hashes for
verification (closes: #636314) and add test
|
|
- add regression test for hashsum verification
|