[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#703034: apt unblock request



Package: release.debian.org
Severity: important
User: release.debian.org@packages.debian.org
Usertags: unblock
X-Debbugs-Cc: deity@lists.debian.org


Hello Release Team,

unblock apt 0.9.7.8


Ansgar Burchardt found a flaw in the InRelease verification code
(CVE-2013-1051) effecting apt in testing and unstable.
[stable isn't effected as it has no support for it]

As a proper fix for this will be relatively big we propose to fix this
for testing by disabling InRelease support for now.


This can be revised of course if so desired after an experimental
upload which reintroduces a fixed InRelease handling we are working on
currently.


Thanks and sorry for the inconvenience,
 The APT team (David & Michael)


Reply to: