Format: 1.8 Date: Mon, 05 Mar 2012 10:51:50 -0500 Source: apt Binary: apt libapt-pkg4.11 libapt-inst1.3 apt-doc libapt-pkg-dev libapt-pkg-doc apt-utils apt-transport-https Architecture: amd64 amd64_translations Version: 0.8.16~exp5ubuntu13.2 Distribution: oneiric Urgency: low Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Marc Deslauriers Description: apt - APT's commandline package manager apt-doc - Documentation for APT apt-transport-https - https download transport for APT apt-utils - APT utility programs libapt-inst1.3 - APT's deb package format runtime library libapt-pkg-dev - Development files for APT's libapt-pkg and libapt-inst libapt-pkg-doc - Documentation for APT development libapt-pkg4.11 - APT's package managment runtime library Launchpad-Bugs-Fixed: 947108 Changes: apt (0.8.16~exp5ubuntu13.2) oneiric-security; urgency=low . * SECURITY UPDATE: trust bypass via stale InRelease file (LP: #947108) - CVE-2012-0214 * This packages does _not_ contain the changes from 0.8.16~exp5ubuntu13.1 in oneiric-proposed. . [ David Kalnischkies ] * apt-pkg/acquire-item.cc: - remove 'old' InRelease file if we can't get a new one before proceeding with Release.gpg to avoid the false impression of a still trusted repository by a (still present) old InRelease file. Thanks to Simon Ruderich for reporting this issue! (CVE-2012-0214) Checksums-Sha1: f3c9d5d70a0aaccdb6ccb5f6eebc4c156f3b2063 518652 libapt-pkg4.11_0.8.16~exp5ubuntu13.2_amd64.deb f078f25089ad915848b5f7243de247ccf3528e7d 5513201 apt_0.8.16~exp5ubuntu13.2_amd64_translations.tar.gz b63caa10c6352079934a31bdb236fc0388b78998 37068 libapt-inst1.3_0.8.16~exp5ubuntu13.2_amd64.deb 0cb67c151a6f5ed7d6374787d51c6b0e78c26380 1061554 apt_0.8.16~exp5ubuntu13.2_amd64.deb 2eca2f94fed4af7c2cb643849774df8e19289176 90040 libapt-pkg-dev_0.8.16~exp5ubuntu13.2_amd64.deb fd737c5910db9674ee08cdf6a09e520f8360fb1b 189882 apt-utils_0.8.16~exp5ubuntu13.2_amd64.deb 233f7bbfb1504d7f6a5273dc24cdaa6d36131285 15778 apt-transport-https_0.8.16~exp5ubuntu13.2_amd64.deb Checksums-Sha256: 77070a302f3a827162a484219503dea74e38afbab04b62313bb3600aa865ef44 518652 libapt-pkg4.11_0.8.16~exp5ubuntu13.2_amd64.deb fac6b59fc137aadde0554eba85427bd8dcdf6fae898d6ea9ac20bd2b18c9d6a1 5513201 apt_0.8.16~exp5ubuntu13.2_amd64_translations.tar.gz 9bb087c644d8bdaf1a929375c8445e36856af212a37be70a3ba84cd1ea470005 37068 libapt-inst1.3_0.8.16~exp5ubuntu13.2_amd64.deb 8ad2860360beec67b99a091f9e50ae451a6f62c1a0c17f887828cb0ccf36d550 1061554 apt_0.8.16~exp5ubuntu13.2_amd64.deb 4975a23d7d03902921b9d8cae3fe3a604fc16f64dc4f818639e52114b77a7ad4 90040 libapt-pkg-dev_0.8.16~exp5ubuntu13.2_amd64.deb 6f4d7941a83956b56a023cc94e693faca4a3f7eebb82fad296e8e5a6cb651241 189882 apt-utils_0.8.16~exp5ubuntu13.2_amd64.deb f728707bbe05afec18b1c335f2f2d5570649c7ae1174b3cb04969a6a9763da10 15778 apt-transport-https_0.8.16~exp5ubuntu13.2_amd64.deb Files: 706709e5c3d19dfb0cf7778cf8f0f7fe 518652 admin important libapt-pkg4.11_0.8.16~exp5ubuntu13.2_amd64.deb 62d96bd409d1d748f43c79f6cf0da03c 5513201 raw-translations - apt_0.8.16~exp5ubuntu13.2_amd64_translations.tar.gz b924a1b33b607767431b4b8894fba1e7 37068 admin important libapt-inst1.3_0.8.16~exp5ubuntu13.2_amd64.deb 873f142db52f8f1b96f6ce9a8dc692e3 1061554 admin important apt_0.8.16~exp5ubuntu13.2_amd64.deb 9d604d9f8b2b7f88f6a9c4b0ab6cfe77 90040 libdevel optional libapt-pkg-dev_0.8.16~exp5ubuntu13.2_amd64.deb 0b57b051cae3a6d502c0c0f458b0733c 189882 admin important apt-utils_0.8.16~exp5ubuntu13.2_amd64.deb 2ac428f975d6654a837c150954dd15ab 15778 admin optional apt-transport-https_0.8.16~exp5ubuntu13.2_amd64.deb Original-Maintainer: APT Development Team