Bug#596189: Ignores NotAutomatic: yes for flat file:/// repositories

[David Kalnischkies <kalnischkies+debian@gmail.com>]

package apt
retitle 596189 Ignores Release file if it is not signed
tag 596189 confirmed
severity 596189 important
thanks

Hi Trent W. Buck!

First of all, thanks a lot for your detailed bugreport!

2010/9/9 Trent W. Buck <trentbuck@gmail.com>:
>    sed -i 1i"NotAutomatic: yes" Release # Workaround #272557.

You might want to add '/0 Release$/ d' too to remove the self references.


> I also note that apt-get update 0.8.1 DOES NOT copy the Release file
> into /var/lib/apt/lists, whereas 0.7.25.3 does.

It is downloaded but it is left untouched in the partial subdirectory if it
has no Release.gpg to validate it, but while signing is good it shouldn't
be a requirement… i have a bit more time later to fix it hopefully.


Best regards

David Kalnischkies