Age | Commit message (Collapse) | Author | |
---|---|---|---|
2012-03-06 | * apt-pkg/acquire-item.cc: | Michael Vogt | |
- remove 'old' InRelease file if we can't get a new one before proceeding with Release.gpg to avoid the false impression of a still trusted repository by a (still present) old InRelease file. Thanks to Simon Ruderich for reporting this issue! (CVE-2012-0214) | |||
2011-08-22 | remove the caches in 'apt-get update', too, as they will be | David Kalnischkies | |
invalid in most cases anyway | |||
2011-01-20 | - try downloading clearsigned InRelease before trying Release.gpg | David Kalnischkies | |
* apt-pkg/deb/deblistparser.cc: - rewrite LoadReleaseInfo to cope with clearsigned Releasefiles |