Try to follow these steps:
1) add the repository http://download.tuxfamily.org/3v1deb feisty eyecandy 
(packages contained in this repository are signed but I don't have trusted the 
key for this test)
2) give the command apt-get update or Fetch Updates in Adept
3) try the command sudo apt-get install aquamarine (a package chosen randomly 
for the test). A warning is shown asking user if he want to continue the 
installation without verifying the signature. I stop the installation.
4) open Adept and mark aquamarine to install. No warnings are shown and the 
installation is completed. User can't stop it and doesn't know that he's 
installing unsigned packages.

-- 
adept manager does not check the signature of the repository
https://bugs.launchpad.net/bugs/162053
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to