Re: Processed: Re: Bug#319142: apt: attempts to install corrupted packages
On Thu, Jul 28, 2005 at 11:52:48PM +0200, Goswin von Brederlow wrote:
> owner@bugs.debian.org (Debian Bug Tracking System) writes:
>
> > Processing commands for control@bugs.debian.org:
> >
> >> severity 319142 wishlist
> > Bug#319142: apt: attempts to install corrupted packages
> > Severity set to `wishlist'.
>
> Why wishlist? Isn't that serious or critical since it is a security problem?
Packages in the cache are only modifiable by root, so no, it isn't.
> > Bug#250305: apt-get: should validate md5sum of debs in it's cache before installing them
> > Bug#319142: apt: attempts to install corrupted packages
> > Merged 250305 319142.
>
> (That doesn't sound like the same bug. I did run apt-get clean between
> tests to avoid cached debs to confuse the testing. Sure about this?)
I'm quite sure about this regarding network sources, yes. file: and cdrom:
are a different case, as Michael explained.
--
- mdz
Reply to: