debsig-verify 0.14 source package in Ubuntu
Changelog
debsig-verify (0.14) unstable; urgency=low * Assume at least C89 and POSIX.1-2001. * Fix man page formatting. * Add references to debsigs(1) and gpg(1) to the man page. * Add missing man page .TH fields. * Use https instead of git or http in URLs. * Add new test case covering key to name id mapping. * Switch to use more of libdpkg instead of ad-hoc code: - Use path_make_temp_template(). - Switch from popen() to subproc_fork() and execlp(), to avoid shell invocation and unsafe argument passing. - Use the command module to invoke GnuPG instead of execlp(). * Do not use an absolute pathname to the GnuPG program. * Make the GnuPG program configurable through the DEBSIG_GNUPG_PROGRAM environment variable. * Fix handling of a possibly non-terminated origin ID string. * Fix a file TOCTOU issue in the XML parser. * Set umask() for mkstemp() calls. * Do not free() nor unlink() an uninitialized string. * Fix printing debug message on unmatched key IDs in getKeyID(). * Update copyright years. -- Guillem Jover <email address hidden> Sat, 13 Feb 2016 11:32:58 +0100
Upload details
- Uploaded by:
- Dpkg Mailing List
- Uploaded to:
- Sid
- Original maintainer:
- Dpkg Mailing List
- Architectures:
- any
- Section:
- admin
- Urgency:
- Low Urgency
See full publishing history Publishing
Series | Published | Component | Section | |
---|---|---|---|---|
Xenial | release | universe | admin |
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
debsig-verify_0.14.dsc | 1.6 KiB | 8ed0552527cf76f67178920fb3ab8da2dd24ae7df67ec17558150a5b34e2be1b |
debsig-verify_0.14.tar.xz | 124.2 KiB | a93346012c3602014ba28f7eb2e53ac7bd46ab78b481bb72afbb9871a2c376be |
Available diffs
- diff from 0.13 to 0.14 (26.1 KiB)
No changes file available.
Binary packages built by this source
- debsig-verify: Debian package signature verification tool
This tool inspects and verifies binary package digital signatures based
on predetermined policies, complementing repository signatures or allowing
to verify the authenticity of a package even after download when detached
from a repository.
- debsig-verify-dbgsym: debug symbols for package debsig-verify
This tool inspects and verifies binary package digital signatures based
on predetermined policies, complementing repository signatures or allowing
to verify the authenticity of a package even after download when detached
from a repository.