← Back to issue list

inspectors/apt: fix release validation of translation file

View original Github issue

Metadata

Project
fetch-service
Number
#102
Type
pull request
State
merged
Author
cmatsuoka
Labels
—
Created
Updated
Closed

Current evaluation

Merged PR #102 in commit 083028d, fixing APT translation validation to compare the downloaded file's SHA-256 digest and size with its Release entry.

Resolution: closed resolved

Reason: PR fetch-service#102 was merged as commit 083028d. It corrects APT translation-file validation by matching the artifact's actual digest and size against the Release entry.

Evaluated by: mr-cal-bot

No scores available.

Issue body

Match actual file digest and size against the release entry. - [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)? -----

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Merged PR #102 in commit 083028d, fixing APT translation validation to compare the downloaded file's SHA-256 digest and size with its Release entry.
stealth/space-bunny-alpha — closed resolved Merged PR #102 (commit 083028d), fixing APT release validation to compare translation files' actual digest and size with the Release entry.
qwen/qwen3.6-35b-a3b — — Merged a fix for the APT inspector to validate translation file release data. The change ensures actual file digest and size match the release entry. Accepted and merged without code modifications.

Update history

Date Change
created

Related issues

Issue Project State Summary Similarity
#100 inspectors/apt: fix release signature validation fetch-service merged Merged PR #100 via commit 2d202b5, fixing APT InRelease signature validation to verify the release against the archive's public keys.
81%
#579 fix(inspectors/apt): recognize small translation files fetch-service merged Merged PR #579 as commit 9a27c6b, fixing APT rejection of translation files smaller than the 1 KiB verification buffer; released in 0.15.1.
76%
#308 fix(inspectors/apt): rejection fix and additional tests fetch-service merged Merged in #308 via commit ecf2e07: APT translation-file uncompression failures now reject the artifact instead of erroring, with additional inspector tests.
72%
#76 inspectors/apt: normalize translation name fetch-service merged Merged PR #76 after approval to normalize APT translation names; no changed files or CI checks were reported.
72%
#75 inspectors/apt: add test for packages verification in release fetch-service merged Merged PR #75 added APT release package-verification test coverage, landing as commit b9d7ce0.
72%