On Fri, Jul 14, 2006 at 04:01:46AM +0200, Jakob Bohm wrote:
Package: apt
Version: 0.6.44.2
Severity: critical
Tags: security patch
Justification: breaks the whole system
Thanks for your bugreport and your patch. I applied the patch and I
added a test in tests/hashes.cc for the sha256 code.
On Fri, Jul 14, 2006 at 12:26:12PM +0200, Goswin von Brederlow wrote:
Jakob Bohm [EMAIL PROTECTED] writes:
To work around the breaks whole system issue, the following
transition plan is proposed:
1. Before uploading the fixed apt, temporarily reconfigure
darcs etc. to NOT include
Jakob Bohm [EMAIL PROTECTED] writes:
To work around the breaks whole system issue, the following
transition plan is proposed:
1. Before uploading the fixed apt, temporarily reconfigure
darcs etc. to NOT include SHA256 values in Packages files at
all (apt-ftparchive has an option to do
Package: apt
Version: 0.6.44.2
Severity: critical
Tags: security patch
Justification: breaks the whole system
The SHA256 checksums recently added to Packages files are wrong
due to a porting error when the sha256 implementation code was
imported from the Linux kernel sources to the apt source
4 matches
Mail list logo
