diff options
| author | Michael Vogt <michael.vogt@ubuntu.com> | 2012-10-02 11:22:54 +0200 |
|---|---|---|
| committer | Michael Vogt <michael.vogt@ubuntu.com> | 2012-10-02 11:22:54 +0200 |
| commit | 0f4f26bfee49b84fd41b46c1920cac6e5f6761c8 (patch) | |
| tree | 9813ba930038588a580e44a9e6509c762f29a05e /debian | |
| parent | 962e6a9e929c33401ed954b861ba65edf7141837 (diff) | |
| parent | 7f97f163de6189c9a770fa5d723ddac85a2b976c (diff) | |
| download | python-apt-0f4f26bfee49b84fd41b46c1920cac6e5f6761c8.tar.gz | |
* lp:~mvo/python-apt/recv-key-lp1016643:
- Only support long (v4) keyids when downloading keys and
check the keys fingerprint before importing. This avoids
man-in-the-middle attacks (LP: #1016643)
Diffstat (limited to 'debian')
| -rw-r--r-- | debian/changelog | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/debian/changelog b/debian/changelog index b0ca3efd..66da3ea0 100644 --- a/debian/changelog +++ b/debian/changelog @@ -9,6 +9,10 @@ python-apt (0.8.8) UNRELEASED; urgency=low Thanks to "sampo555", LP: #1042916 * lp:~mvo/python-apt/fix-debfile-crash: - fix crash on missing candidates in the multiarch check + * lp:~mvo/python-apt/recv-key-lp1016643: + - Only support long (v4) keyids when downloading keys and + check the keys fingerprint before importing. This avoids + man-in-the-middle attacks (LP: #1016643) [ James Hunt ] * python/cache.cc: PkgCacheGetIsMultiArch(): Return calculated |