Add hashes for Translation-$lang into the Release file
Bug #1313576 reported by
Michael Vogt
This bug affects 2 people
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Launchpad itself |
Fix Released
|
High
|
Chris Johnston |
Bug Description
The ubuntu archive Release file (e.g. http://
It could be argued that there is a small security risk here is well as a MITM could change descriptions.
The other benefit is that soon apt update should make use of the size information to provide a better estimate for the remaining download time.
Related branches
lp:~cjohnston/launchpad/1313576-release-hashes
- William Grant: Approve (code)
- Celso Providelo (community): Needs Fixing
-
Diff: 82 lines (+21/-9)2 files modifiedlib/lp/archivepublisher/publishing.py (+5/-3)
lib/lp/archivepublisher/tests/test_publisher.py (+16/-6)
tags: |
added: qa-ok removed: qa-needstesting |
Changed in launchpad: | |
status: | Fix Committed → Fix Released |
To post a comment you must log in.
We already index them in i18n/Index, and add that to Release. precise's apt relies on that deprecated index, so we probably need to keep it for <= trusty. We also need to check if tools like debmirror will cope with i18n/Index's absence, but we can probably drop it from utopic onwards.
Some history: /bugs.launchpad .net/launchpad/ +bug/572128 /bugs.debian. org/cgi- bin/bugreport. cgi?bug= 649314 /bugs.debian. org/cgi- bin/bugreport. cgi?bug= 644609
https:/
https:/
https:/