[Bug 1329274] Re: apt-get source fails to warn on unauthenticated packages
Question: Why are --force-yes and --assume-yes not honored as they are when checking authenticity of binaries? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1329274 Title: apt-get source fails to warn on unauthenticated packages To manage notifications about this bug go to: https://bugs.launchpad.net/apt/+bug/1329274/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1329274] Re: apt-get source fails to warn on unauthenticated packages
Or at least just --force-yes. --assume-yes is not sufficient to bypass the authenticity check without a prompt. I gather there is a desire to avoid prompting. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1329274 Title: apt-get source fails to warn on unauthenticated packages To manage notifications about this bug go to: https://bugs.launchpad.net/apt/+bug/1329274/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1329274] Re: apt-get source fails to warn on unauthenticated packages
@ Forest Bond: Please file a new bug, this bug is closed. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1329274 Title: apt-get source fails to warn on unauthenticated packages To manage notifications about this bug go to: https://bugs.launchpad.net/apt/+bug/1329274/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1329274] Re: apt-get source fails to warn on unauthenticated packages
** Changed in: apt (Ubuntu Utopic) Status: In Progress = Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1329274 Title: apt-get source fails to warn on unauthenticated packages To manage notifications about this bug go to: https://bugs.launchpad.net/apt/+bug/1329274/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1329274] Re: apt-get source fails to warn on unauthenticated packages
I don't know why I land up here. The PC tells me there are updates and then it refuses to install the updates. I'm told to check my connection but my connection is solid !!! Thank you Theo -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1329274 Title: apt-get source fails to warn on unauthenticated packages To manage notifications about this bug go to: https://bugs.launchpad.net/apt/+bug/1329274/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1329274] Re: apt-get source fails to warn on unauthenticated packages
This bug was fixed in the package apt - 0.9.9.1~ubuntu3.2 --- apt (0.9.9.1~ubuntu3.2) saucy-security; urgency=low * SECURITY UPDATE: incorrect apt-get source validation (LP: #1329274) - warn if not authenticated in cmdline/apt-get.cc, added regression test to test/integration/test-apt-get-source-authenticated, test/integration/framework. - CVE-2014-0478 -- Michael Vogt michael.v...@ubuntu.com Thu, 12 Jun 2014 14:02:26 +0200 ** Changed in: apt (Ubuntu Saucy) Status: Confirmed = Fix Released ** Changed in: apt (Ubuntu Trusty) Status: Confirmed = Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1329274 Title: apt-get source fails to warn on unauthenticated packages To manage notifications about this bug go to: https://bugs.launchpad.net/apt/+bug/1329274/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1329274] Re: apt-get source fails to warn on unauthenticated packages
This bug was fixed in the package apt - 1.0.1ubuntu2.1 --- apt (1.0.1ubuntu2.1) trusty-security; urgency=low * SECURITY UPDATE: incorrect apt-get source validation (LP: #1329274) - warn if not authenticated in apt-private/private-download.*, cmdline/apt-get.cc, added regression test to test/integration/test-apt-get-source-authenticated. - CVE-2014-0478 -- Michael Vogt michael.v...@ubuntu.com Thu, 12 Jun 2014 13:57:38 +0200 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1329274 Title: apt-get source fails to warn on unauthenticated packages To manage notifications about this bug go to: https://bugs.launchpad.net/apt/+bug/1329274/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1329274] Re: apt-get source fails to warn on unauthenticated packages
This bug was fixed in the package apt - 0.8.16~exp12ubuntu10.17 --- apt (0.8.16~exp12ubuntu10.17) precise-security; urgency=low * SECURITY UPDATE: incorrect apt-get source validation (LP: #1329274) - warn if not authenticated in cmdline/apt-get.cc, added regression test to test/integration/test-apt-get-source-authenticated, test/integration/framework. - CVE-2014-0478 -- Michael Vogt michael.v...@ubuntu.com Thu, 12 Jun 2014 14:12:19 +0200 ** Changed in: apt (Ubuntu Precise) Status: Confirmed = Fix Released ** Changed in: apt (Ubuntu Lucid) Status: Confirmed = Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1329274 Title: apt-get source fails to warn on unauthenticated packages To manage notifications about this bug go to: https://bugs.launchpad.net/apt/+bug/1329274/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1329274] Re: apt-get source fails to warn on unauthenticated packages
This bug was fixed in the package apt - 0.7.25.3ubuntu9.15 --- apt (0.7.25.3ubuntu9.15) lucid-security; urgency=low * SECURITY UPDATE: incorrect apt-get source validation (LP: #1329274) - warn if not authenticated in cmdline/apt-get.cc. - CVE-2014-0478 -- Michael Vogt michael.v...@ubuntu.com Thu, 12 Jun 2014 15:10:43 +0200 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1329274 Title: apt-get source fails to warn on unauthenticated packages To manage notifications about this bug go to: https://bugs.launchpad.net/apt/+bug/1329274/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1329274] Re: apt-get source fails to warn on unauthenticated packages
** Branch linked: lp:ubuntu/lucid-security/apt ** Branch linked: lp:ubuntu/precise-security/apt ** Branch linked: lp:ubuntu/saucy-security/apt ** Branch linked: lp:ubuntu/trusty-security/apt -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1329274 Title: apt-get source fails to warn on unauthenticated packages To manage notifications about this bug go to: https://bugs.launchpad.net/apt/+bug/1329274/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1329274] Re: apt-get source fails to warn on unauthenticated packages
** Changed in: apt (Ubuntu Lucid) Assignee: (unassigned) = Marc Deslauriers (mdeslaur) ** Changed in: apt (Ubuntu Precise) Assignee: (unassigned) = Marc Deslauriers (mdeslaur) ** Changed in: apt (Ubuntu Saucy) Assignee: (unassigned) = Marc Deslauriers (mdeslaur) ** Changed in: apt (Ubuntu Trusty) Assignee: (unassigned) = Marc Deslauriers (mdeslaur) ** Changed in: apt (Ubuntu Lucid) Status: New = Confirmed ** Changed in: apt (Ubuntu Lucid) Importance: Undecided = Medium ** Changed in: apt (Ubuntu Precise) Status: New = Confirmed ** Changed in: apt (Ubuntu Precise) Importance: Undecided = Medium ** Changed in: apt (Ubuntu Saucy) Status: New = Confirmed ** Changed in: apt (Ubuntu Saucy) Importance: Undecided = Medium ** Changed in: apt (Ubuntu Trusty) Status: New = Confirmed ** Changed in: apt (Ubuntu Trusty) Importance: Undecided = Medium -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1329274 Title: apt-get source fails to warn on unauthenticated packages To manage notifications about this bug go to: https://bugs.launchpad.net/apt/+bug/1329274/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1329274] Re: apt-get source fails to warn on unauthenticated packages
** Changed in: apt Status: New = Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1329274 Title: apt-get source fails to warn on unauthenticated packages To manage notifications about this bug go to: https://bugs.launchpad.net/apt/+bug/1329274/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1329274] Re: apt-get source fails to warn on unauthenticated packages
** Changed in: apt Status: Unknown = New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1329274 Title: apt-get source fails to warn on unauthenticated packages To manage notifications about this bug go to: https://bugs.launchpad.net/apt/+bug/1329274/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1329274] Re: apt-get source fails to warn on unauthenticated packages
** Patch added: trusty debdiff https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1329274/+attachment/4130302/+files/apt_1.0.1ubuntu2.1.debdiff ** Also affects: apt (Ubuntu Saucy) Importance: Undecided Status: New ** Also affects: apt (Ubuntu Utopic) Importance: High Assignee: Michael Vogt (mvo) Status: In Progress ** Also affects: apt (Ubuntu Trusty) Importance: Undecided Status: New ** Also affects: apt (Ubuntu Lucid) Importance: Undecided Status: New ** Also affects: apt (Ubuntu Precise) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1329274 Title: apt-get source fails to warn on unauthenticated packages To manage notifications about this bug go to: https://bugs.launchpad.net/apt/+bug/1329274/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1329274] Re: apt-get source fails to warn on unauthenticated packages
** Patch added: debdiff for saucy https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1329274/+attachment/4130315/+files/apt_0.9.9.1%7Eubuntu3.2.debdiff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1329274 Title: apt-get source fails to warn on unauthenticated packages To manage notifications about this bug go to: https://bugs.launchpad.net/apt/+bug/1329274/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1329274] Re: apt-get source fails to warn on unauthenticated packages
** Patch added: diff for precise https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1329274/+attachment/4130317/+files/apt_0.8.16%257Eexp12ubuntu10.17.debdiff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1329274 Title: apt-get source fails to warn on unauthenticated packages To manage notifications about this bug go to: https://bugs.launchpad.net/apt/+bug/1329274/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1329274] Re: apt-get source fails to warn on unauthenticated packages
** Tags added: patch -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1329274 Title: apt-get source fails to warn on unauthenticated packages To manage notifications about this bug go to: https://bugs.launchpad.net/apt/+bug/1329274/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1329274] Re: apt-get source fails to warn on unauthenticated packages
** Patch added: debdiff for lucid https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1329274/+attachment/4130322/+files/apt_0.7.25.3ubuntu9.15.debdiff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1329274 Title: apt-get source fails to warn on unauthenticated packages To manage notifications about this bug go to: https://bugs.launchpad.net/apt/+bug/1329274/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1329274] Re: apt-get source fails to warn on unauthenticated packages
** Patch removed: debdiff for lucid https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1329274/+attachment/4130322/+files/apt_0.7.25.3ubuntu9.15.debdiff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1329274 Title: apt-get source fails to warn on unauthenticated packages To manage notifications about this bug go to: https://bugs.launchpad.net/apt/+bug/1329274/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1329274] Re: apt-get source fails to warn on unauthenticated packages
** Patch added: apt_0.7.25.3ubuntu9.15.debdiff https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1329274/+attachment/4130380/+files/apt_0.7.25.3ubuntu9.15.debdiff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1329274 Title: apt-get source fails to warn on unauthenticated packages To manage notifications about this bug go to: https://bugs.launchpad.net/apt/+bug/1329274/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
