summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2014-11-28Japanese program translation updateKenshi Muto1-26/+24
Closes: 763033
2014-11-28Turkish program translation updateMert Dirik1-91/+88
Closes: 763379
2014-11-28Czech program translation updateMiroslav Kure1-10/+10
Closes: 764055
2014-11-28Chinese (simplified) program translation updateZhou Mo1-147/+203
Closes: 766170
2014-11-28French program translation updateJulien Patriarca1-1791/+1547
Closes: 766755
2014-11-28Dutch program translation updateFrans Spiesschaert1-418/+498
Closes: 771039
2014-11-10change codenames to jessie as stable POV in docsDavid Kalnischkies1-4/+4
2014-11-10reenable support for -s (and co) in apt-get sourceDavid Kalnischkies2-1/+5
The conversion to accept only relevant options for commands has forgotten another one, so adding it again even through the usecase might very well be equally good served by --print-uris. Closes: 742578
2014-11-10allow options between command and -- on commandlineDavid Kalnischkies3-10/+81
This used to work before we implemented a stricter commandline parser and e.g. the dd-schroot-cmd command constructs commandlines like this. Reported-By: Helmut Grohne
2014-11-10deprecate the Section member from package structDavid Kalnischkies4-4/+18
A version belongs to a section and has hence a section member of its own. A package on the other hand can have multiple versions from different sections. This was "solved" by using the section which was parsed first as order of sources.list defines, but that is obviously a horribly unpredictable thing. Users are way better of with the Section() as returned by the version they are dealing with. It is likely the same for all versions of a package, but in the few cases it isn't, it is important (like packages moving from main/* to contrib/* or into oldlibs …). Backport of 7a66977 which actually instantly removes the member.
2014-11-10use 'best' hash for source authenticationDavid Kalnischkies7-60/+445
Collect all hashes we can get from the source record and put them into a HashStringList so that 'apt-get source' can use it instead of using always the MD5sum. We therefore also deprecate the MD5 struct member in favor of the list. While at it, the parsing of the Files is enhanced so that records which miss "Files" (aka MD5 checksums) are still searched for other checksums as they include just as much data, just not with a nice and catchy name. This is a cherry-pick of 1262d35 with some dirty tricks to preserve ABI. LP: 1098738
2014-11-10add a simple container for HashStringsDavid Kalnischkies4-27/+247
APT supports more than just one HashString and even allows to enforce the usage of a specific hash. This class is intended to help with storage and passing around of the HashStrings. The cherry-pick here the un-const-ification of HashType() compared to f4c3850ea335545e297504941dc8c7a8f1c83358. The point of this commit is adding infrastructure for the next one. All by itself, it just adds new symbols. Git-Dch: Ignore
2014-10-23Fix incorrect comparison between signed/unsignedMichael Vogt1-1/+1
Git-Dch: ignore
2014-10-23Use sysconf(_SC_ARG_MAX) to find the size of Dpkg::MaxArgBytesMichael Vogt1-2/+21
Instead of hardcoding Dpkg::MaxArgBytes find out about it using the sysconf(_SC_ARG_MAX) call.
2014-10-22doc/examples/configure-index: make "Dpkg::Max{Arg,ArgBytes} match realityMichael Vogt1-2/+2
Git-Dch: ignore
2014-10-15releasing package apt version 1.0.9.31.0.9.3Michael Vogt1-0/+16
2014-10-15don't cleanup cdrom files in apt-get updateDavid Kalnischkies2-14/+50
Regression from merging 801745284905e7962aa77a9f37a6b4e7fcdc19d0 and b0f4b486e6850c5f98520ccf19da71d0ed748ae4. While fine by itself, merged the part fixing the filename is skipped if a cdrom source is encountered, so that our list-cleanup removes what seems to be orphaned files. Closes: 765458
2014-10-08Update Status field values handlingGuillem Jover2-35/+11
Remove long obsolete (hold, hold-reinstreq, removal-failed) or just wrong (post-inst-failed vs postinst-failed) values, that have been autoconverted by dpkg at run-time to their new equivalents, so there should not be any such instance in any recent system (removal-failed since dpkg 1.1.4 in Apr 1996, hold and hold-reinstreq since dpkg 1.2.0 in May 1996). dpkg even stopped doing the mapping in 1.15.4 and 1.15.8 respectively. At the same time sort the list in the same order as they appear in the dpkg code.
2014-10-08methods/rsh.cc: replace strcat with std::stringMichael Vogt1-5/+8
Instead of using strcat use a C++ std::string to avoid overflowing this buffer. Thanks to David Garfield Closes: #76442
2014-10-08add CVE-2014-7206 to 1.0.9.2Michael Vogt1-1/+1
2014-10-06implement the updated build profile specjosch3-97/+130
2014-10-02releasing package apt version 1.0.9.21.0.9.2Michael Vogt1-0/+28
2014-10-02apt-get: Create the temporary downloaded changelog inside tmpdirGuillem Jover1-1/+1
The code is creating a secure temporary directory, but then creates the changelog alongside the tmpdir in the same base directory. This defeats the secure tmpdir creation, making the filename predictable. Inject a '/' between the tmpdir and the changelog filename.
2014-10-01debian/rules: add hardening=+allMichael Vogt1-3/+6
Because of dpkg-buildflags we already get most of the hardening features, +all adds -fPIE and ld -z now Thanks: Simon Ruderich, Markus Waldeck
2014-09-28Set STRIP_FROM_PATH for doxygenTrần Ngọc Quân1-2/+2
Signed-off-by: Trần Ngọc Quân <vnwildman@gmail.com>
2014-09-26Merge remote-tracking branch 'donkult/feature/generalize-gzipindex' into ↵Michael Vogt8-171/+216
debian/sid
2014-09-25rewrite compressed indexes test to check with all compressorsDavid Kalnischkies3-122/+135
Git-Dch: Ignore
2014-09-21Ensure that iTFRewritePackageOrder is "MD5sum" to match apt-ftparchiveMichael Vogt1-1/+1
The iTFRewritePackageOrder is used in indexcopy to copy and normalize cdrom Packages files. This change will ensure that there is no "normalization" that changes MD5sum -> MD5Sum which alters the hash of the Packages file on disk (oh the irony).
2014-09-21Fix regression for cdrom: sources from latest security updateMichael Vogt1-0/+6
Skip a reverify for cdrom: sources. The reverify step is actually harmful here because the apt-cdrom add code uses the indexcopy.cc which will "normalize" the Packages file from the cdrom when it writes it to the local disk. This leads to changing the "MD5sum" field (notice the lower case "s") on the cdrom Packages file to a "MD5Sum" field on the local file in /var/lib/apt/lists. Which of course alters the hash and makes apt fail to reverify the file.
2014-09-21generalize Acquire::GzipIndexMichael Vogt7-58/+90
2014-09-20relax grep to support newer curl output formatDavid Kalnischkies1-1/+6
Git-Dch: Ignore
2014-09-19disable timestamps in the footer of docs by doxygenJérémy Bobbio1-1/+1
The default being 'yes', but this spoils the effort of reproducible builds for no real gain. (https://wiki.debian.org/ReproducibleBuilds)
2014-09-19German program translation updateHolger Wansing1-10/+13
Closes: 762223
2014-09-19Fix regression when copy: is used for a relative pathMichael Vogt2-6/+8
When we do a ReverifyAfterIMS() we use the copy: method to verify the hashes again. If the user uses -o Dir=./something/relative this fails because we use the URI class in copy.cc that strips away the leading relative part. By not using URI this is fixed. Closes: #762160
2014-09-19test/integration/test-apt-update-file: improve testMichael Vogt2-0/+17
2014-09-18./pre-release pre-exportMichael Vogt3-3/+3
2014-09-17releasing package apt version 1.0.9.11.0.9.1Michael Vogt1-0/+6
2014-09-17Merge remote-tracking branch 'vnwildman/debian/sid' into debian/sidMichael Vogt1-5/+5
2014-09-17improve test for commit daff4aMichael Vogt2-2/+10
2014-09-17Fix regression for file:/// uris from CVE-2014-0487Michael Vogt2-12/+33
Do not run ReverifyAfterIMS() for local file URIs as this will causes apt to mess around in the file:/// uri space. This is wrong in itself, but it will also cause a incorrect verification failure when the archive and the lists directory are on different partitions as rename().
2014-09-16prepare 1.0.9.1Michael Vogt1-0/+15
2014-09-16merge previous uploadMichael Vogt1-0/+9
2014-09-16SECURITY UPDATE for CVE-2014-{0488,0487,0489}Michael Vogt7-30/+217
incorrect invalidating of unauthenticated data (CVE-2014-0488) incorect verification of 304 reply (CVE-2014-0487) incorrect verification of Acquire::Gzip indexes (CVE-2014-0489)
2014-09-14add a 'coverage' command to generate reportsDavid Kalnischkies1-4/+51
Builds, runs and generates everything needed to have a coverage report at the end for apt. The report isn't perfect as most childs apt forks do not have a regular exit and so data is never written for them, which results in e.g. most methods to have zero coverage reported. Git-Dch: Ignore
2014-09-14Turkish program translation updateMert Dirik1-8/+8
Closes: 761394
2014-09-14Updated German documentation translationChris Leick1-117/+7
2014-09-13l10n: vi.po (636t): Update program translationTrần Ngọc Quân1-5/+5
Signed-off-by: Trần Ngọc Quân <vnwildman@gmail.com>
2014-09-12Allow override of Proxy-Auto-Detect by the users configurationMichael Vogt1-0/+4
Only run the Proxy-Auto-Detect code if there is not already a host specific configuration. Closes: 759264
2014-09-09prepare 1.0.81.0.8Michael Vogt48-51371/+54855
2014-09-09debian/gbp.conf: use export-dirMichael Vogt1-0/+2
generated by cgit v1.2.3 (git 2.39.1) at 2025-04-13 20:13:45 +0000