Package: update-notifier Version: 0.42.12-3 Severity: grave Tags: security Justification: works against apt-secure
Hi! The usage of update-notifier works against apt-secure: It looks like (maybe my interpretation is flawed, so don't take this guess for granted) it doesn't download the Release.gpg file. At least when update-notifier tells me that there are new packages to install, and I try to install them through e.g. aptitude I am told that the packages are being downloaded from an unsecure source. This is something that IMHO has absolutely to be fixed before the etch release because as apt-secure is something that will be explicitly mentioned in the new features and the release notes and such, it's a horror to not have it work properly with this tool. Thanks in advance for taking a look at it. Alfie -- had somebody wanted to kill (or inflict maximum damage) to the project, he couldn't have done any better than the current DPL -- Thibaut Varene <[EMAIL PROTECTED]> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]