** Changed in: ubuntu-download-manager (Ubuntu Vivid)
Status: New => Won't Fix
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ubuntu-download-manager in
Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click p
Fixed in https://gitlab.com/ubports/development/core/lomiri-download-
manager/-/commit/df3665685da5cfb559a06016d4e0339c29b903e1 (2015), that
first appeared in version 0.9+15.10.20150723.2-0ubuntu1.
** Changed in: ubuntu-download-manager (Ubuntu)
Status: Confirmed => Fix Released
--
You re
** Summary changed:
- Indications of Anxiety Disorder and Depression
+ click packages rely upon tls for integrity and authenticity
** Description changed:
Hello, I just completed a quick review of the click source and the
unity-scope-click source and behaviours, and found some opportunities
** Changed in: ubuntu-system-settings (Ubuntu)
Status: In Progress => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely u
** Branch unlinked: lp:click/devel
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely upon tls for integrity and authenticity
Status in Canon
** Changed in: canonical-devices-system-image
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely
** Changed in: canonical-devices-system-image
Status: In Progress => Fix Committed
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely u
** Branch linked: lp:~ubuntu-branches/ubuntu/wily/ubuntu-download-
manager/wily-proposed
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely up
this seems stalled
** Changed in: canonical-devices-system-image
Milestone: ww26-2015 => ww34-2015
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click p
** Changed in: canonical-devices-system-image
Milestone: ww21-2015 => ww26-2015
** Changed in: canonical-devices-system-image
Assignee: Canonical Phone Foundations (canonical-phonedations-team) =>
John McAleely (john.mcaleely)
--
You received this bug notification because you are a mem
** Changed in: canonical-devices-system-image
Milestone: ww17-2015 => ww21-2015
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely upon tl
** Changed in: canonical-devices-system-image
Assignee: Ricardo Salveti (rsalveti) => Canonical Phone Foundations
(canonical-phonedations-team)
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bug
** Changed in: canonical-devices-system-image
Assignee: Bill Filler (bfiller) => Ricardo Salveti (rsalveti)
** Changed in: canonical-devices-system-image
Milestone: ww13-2015 => ww17-2015
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, whi
** Changed in: canonical-devices-system-image
Milestone: ww11-2015 => ww13-2015
** No longer affects: ubuntu-download-manager (Ubuntu RTM)
** No longer affects: ubuntu-system-settings (Ubuntu RTM)
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages
** Changed in: canonical-devices-system-image
Milestone: ww09-2015 => ww11-2015
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely upon tl
** Branch linked: lp:~mandel/ubuntu-download-manager/general-errors
** Branch linked: lp:~mandel/ubuntu-download-manager/general-errors-rtm
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchp
** Also affects: ubuntu-download-manager (Ubuntu)
Importance: Undecided
Status: New
** Also affects: ubuntu-download-manager (Ubuntu RTM)
Importance: Undecided
Status: New
** Changed in: ubuntu-download-manager (Ubuntu RTM)
Importance: Undecided => Critical
** Changed in:
** Changed in: canonical-devices-system-image
Milestone: ww07-2015 => ww09-2015
** Changed in: canonical-devices-system-image
Assignee: Canonical Devices Products (canonical-devices-products-team) =>
Bill Filler (bfiller)
--
You received this bug notification because you are a member o
** Changed in: canonical-devices-system-image
Status: Confirmed => In Progress
** Changed in: canonical-devices-system-image
Milestone: ww05-2015 => ww07-2015
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click i
I'm using a python script to run a fake server, you can see the
instructions in our test plan under "CHECK HASH"
https://wiki.ubuntu.com/Process/Merges/TestPlan/ubuntu-system-settings
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscri
Weird, I remember getting errors from download manager when testing the click
scope with packages in staging with broken hashes.
Perhaps something changed in download manager since we landed this in the scope
(mid august)?
Btw, is there any package in the staging store with broken hash? We can
t
I added some debug output to download_tracker.cpp, registerError is
never getting called, which is the function connected to
Download::error. I don't think ubuntu-download-manager is emitting the
error when the hash check fails.
--
You received this bug notification because you are a member of U
The fix that landed in trunk isn't quite complete, it does verify the
hash properly but doesn't handle the error signal. I'm suspecting it
isn't getting the error signal from ubuntu-download-manager.
** Changed in: ubuntu-system-settings (Ubuntu)
Status: Fix Released => In Progress
--
Yo
** Branch linked: lp:~ken-vandine/ubuntu-system-settings/rtm-check-hash
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely upon tls for integr
This bug was fixed in the package ubuntu-system-settings -
0.3+15.04.20150123-0ubuntu1
---
ubuntu-system-settings (0.3+15.04.20150123-0ubuntu1) vivid; urgency=low
[ Manuel de la Peña ]
* Add support for checksum validation. (LP: #1330770)
[ Diego Sarmentero ]
* Add support fo
** Branch linked: lp:ubuntu/vivid-proposed/ubuntu-system-settings
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely upon tls for integrity an
** Branch linked: lp:~mandel/ubuntu-system-settings/check-hash
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely upon tls for integrity and a
** Branch linked: lp:~mandel/ubuntu-download-manager/check-hash
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely upon tls for integrity and
** Also affects: ubuntu-system-settings (Ubuntu RTM)
Importance: Undecided
Status: New
** Changed in: ubuntu-system-settings (Ubuntu RTM)
Status: New => Confirmed
** Changed in: ubuntu-system-settings (Ubuntu RTM)
Importance: Undecided => Critical
** Changed in: ubuntu-system
I just noticed the open task for ubuntu-system-settings about doing a
addtional hashsum check for the download. Fwiw, click is already doing a
gpg verification before the install so corrupted/MITMed clicks will not
get installed there. Having the hash check may still be a good idea for
e.g. better
seb were you handling this one?
** Changed in: canonical-devices-system-image
Milestone: ww51-2014 => ww05-2015
** Changed in: ubuntu-system-settings (Ubuntu)
Assignee: peterstan (stasnel) => Sebastien Bacher (seb128)
** Changed in: ubuntu-system-settings (Ubuntu)
Assignee: Sebasti
** Changed in: ubuntu-system-settings (Ubuntu)
Status: In Progress => New
** Changed in: ubuntu-system-settings (Ubuntu)
Status: New => Confirmed
** Changed in: ubuntu-system-settings (Ubuntu)
Assignee: Ken VanDine (ken-vandine) => peterstan (stasnel)
--
You received this bug
** Changed in: canonical-devices-system-image
Importance: Undecided => High
** Changed in: canonical-devices-system-image
Status: New => Confirmed
** Changed in: canonical-devices-system-image
Milestone: None => r1
** Changed in: canonical-devices-system-image
Assignee: (unass
** Changed in: ubuntu-system-settings (Ubuntu)
Assignee: (unassigned) => Ken VanDine (ken-vandine)
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click p
** Changed in: ubuntu-system-settings (Ubuntu)
Assignee: Sebastien Bacher (seb128) => (unassigned)
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click p
** Changed in: ubuntu-system-settings (Ubuntu)
Assignee: Diego Sarmentero (diegosarmentero) => Sebastien Bacher (seb128)
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/133
** No longer affects: unity-scope-click
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely upon tls for integrity and authenticity
Status in
** Tags removed: touch-2014-10-23
** Tags added: ota-1
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely upon tls for integrity and authentic
** Tags removed: touch-2014-10-16
** Tags added: touch-2014-10-23
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely upon tls for integrity an
** Tags removed: touch-2014-10-09
** Tags added: touch-2014-10-16
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely upon tls for integrity an
** Branch linked: lp:~diegosarmentero/ubuntu-system-settings/check-hash
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely upon tls for integr
** Changed in: ubuntu-system-settings (Ubuntu)
Status: Triaged => In Progress
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely upon t
** Tags added: touch-2014-10-09
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely upon tls for integrity and authenticity
Status in Click Pa
I've set this to Critical, because it will affect every user doing
updates of any app.
** Changed in: ubuntu-system-settings (Ubuntu)
Importance: High => Critical
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ub
The main task in ubuntu-system-settings for this bug is about app
updates: the code doing the updates fetches the url for the click
package from a webservice, and passes that url to ubuntu-download-
manager. What's missing is fetching also the sha512 hash from the same
webservice call, and passing
I see an ubuntu-system-settings task and was wondering what it is for?
The spec
(https://wiki.ubuntu.com/SecurityTeam/Specifications/ClickPackageSigning)
says: "Configuring the system to allow installing unsigned packages
should not be exposed via the UI and only available via the command
line/adb"
This bug was fixed in the package click - 0.4.31.2
---
click (0.4.31.2) utopic; urgency=medium
[ Michael Vogt ]
* Add "click info" interface to get manifest corresponding to file in
installed package (LP: #1324853).
* Add support for click package gpg signatures (LP: #133077
** Branch linked: lp:ubuntu/utopic-proposed/click
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely upon tls for integrity and authenticity
This bug was fixed in the package unity-scope-click -
0.1.1+14.10.20140821.1-0ubuntu1
---
unity-scope-click (0.1.1+14.10.20140821.1-0ubuntu1) utopic; urgency=medium
[ Alejandro J. Cura (alecu) ]
* New upstream release.
- Display Ubuntu logo in the header of apps scope. (LP: #1
** Branch linked: lp:ubuntu/utopic-proposed/unity-scope-click
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely upon tls for integrity and au
** Changed in: unity-scope-click (Ubuntu)
Status: In Progress => Fix Committed
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely upon
Fix committed into lp:unity-scope-click/devel at revision None,
scheduled for release in unity-scope-click, milestone Unknown
** Changed in: unity-scope-click
Status: New => Fix Committed
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which
** Changed in: click-package-index
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely upon tls fo
** Changed in: software-center-agent
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely upon tls
** Branch linked: lp:~alecu/unity-scope-click/verify-sha512
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely upon tls for integrity and auth
** Changed in: unity-scope-click (Ubuntu)
Status: New => In Progress
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely upon tls for in
** Branch linked: lp:click/devel
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely upon tls for integrity and authenticity
Status in Click P
** Changed in: click (Ubuntu)
Assignee: (unassigned) => Michael Vogt (mvo)
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely upon tls fo
** Changed in: software-center-agent
Status: In Progress => Fix Committed
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely upon tls f
** Changed in: software-center-agent
Status: New => In Progress
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely upon tls for integri
** Changed in: click-package-index
Assignee: James Tait (jamestait) => (unassigned)
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely up
** Changed in: click-package-index
Status: New => Fix Committed
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely upon tls for integri
A correction to comment #8, after the latest changes in the spec:
The code doing app updates in system settings will also need to do the same
steps as the click scope:
- fetch the sha-512 hash from the package details webservice
- pass it to download manager so it can verify the download of the p
** Also affects: unity-scope-click
Importance: Undecided
Status: New
** Also affects: click-package-index
Importance: Undecided
Status: New
** Changed in: click-package-index
Assignee: (unassigned) => James Tait (jamestait)
--
You received this bug notification because
** Changed in: unity-scope-click (Ubuntu)
Importance: Undecided => High
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely upon tls for int
** Changed in: ubuntu-system-settings (Ubuntu)
Importance: Undecided => High
** Changed in: ubuntu-system-settings (Ubuntu)
Status: New => Triaged
** Changed in: ubuntu-system-settings (Ubuntu)
Assignee: (unassigned) => Diego Sarmentero (diegosarmentero)
** Tags added: rtm14
--
** Changed in: click (Ubuntu)
Status: New => In Progress
** Changed in: click (Ubuntu)
Importance: Undecided => High
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1
** Branch linked: lp:~mvo/click/debsigs-verify
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1330770
Title:
click packages rely upon tls for integrity and authenticity
Sta
68 matches
Mail list logo