Bug#933252: apt-listbugs should use https by default, patches included

2019-07-28 Thread Francesco Poli
On Sun, 28 Jul 2019 12:23:22 + hty81z+5ruj6wk24x...@guerrillamail.com wrote: > https://lists.debian.org/debian-legal/2004/05/msg00595.html A URL without any comment is a bit laconic. What do you mean? That I should add an OpenSSL linking exception to the GPLv2-or-later license of apt-listbug

Bug#933252: apt-listbugs should use https by default, patches included

2019-07-28 Thread hty81z+5ruj6wk24x33w
https://lists.debian.org/debian-legal/2004/05/msg00595.html Sent using Guerrillamail.com Block or report abuse: https://www.guerrillamail.com//abuse/?a=GBInV1hSY7YAjx369HsdexXJA8WC1Q%3D%3D

Bug#933252: apt-listbugs should use https by default, patches included

2019-07-28 Thread hty81z+5ruj6wk24x33w
https://lists.debian.org/debian-legal/2004/05/msg00595.html Sent using Guerrillamail.com Block or report abuse: https://www.guerrillamail.com//abuse/?a=GBInV1hSY7YAjx369HsdexXJA8WC1Q%3D%3D

Bug#933252: apt-listbugs should use https by default, patches included

2019-07-28 Thread Francesco Poli
Control: notfound -1 1:2.5.1 Control: forcemerge 792639 -1 On Sun, 28 Jul 2019 07:21:29 + htxo8e+1eqk0555yr...@guerrillamail.com wrote: > Package: apt-listbugs > Version: 1:2.5.1 This is not a version of apt-listbugs: I am dropping it from the "found" list... > Severity: important > > apt

Bug#933252: apt-listbugs should use https by default, patches included

2019-07-28 Thread htxo8e+1eqk0555yrfxs
Package: apt-listbugs Version: 1:2.5.1 Severity: important apt-listbugs uses insecure http port 80 by default. It can easily be moved to https via port 443, although additional hardening against tampering should be verified later to prevent mitm attacks. lib/aptlistbugs/logic.rb appears to vali