Package: release.debian.org Severity: important User: release.debian....@packages.debian.org Usertags: unblock X-Debbugs-Cc: de...@lists.debian.org
Hello Release Team, unblock apt 0.9.7.8 Ansgar Burchardt found a flaw in the InRelease verification code (CVE-2013-1051) effecting apt in testing and unstable. [stable isn't effected as it has no support for it] As a proper fix for this will be relatively big we propose to fix this for testing by disabling InRelease support for now. This can be revised of course if so desired after an experimental upload which reintroduces a fixed InRelease handling we are working on currently. Thanks and sorry for the inconvenience, The APT team (David & Michael) -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
