-
python-apt (1.8.5~ubuntu0.3) disco-security; urgency=medium
* SECURITY REGRESSION: crash with ubuntu-release-upgrader (LP: #1860606)
- apt/cache.py: make allow_unauthenticated argument to
fetch_archives() optional.
-- Marc Deslauriers <email address hidden> Wed, 22 Jan 2020 16:51:48 -0500
-
python-apt (1.8.5~ubuntu0.2) disco-security; urgency=medium
* SECURITY UPDATE: Check that repository is trusted before downloading
files from it (LP: #1858973)
- apt/cache.py: Add checks to fetch_archives() and commit()
- apt/package.py: Add checks to fetch_binary() and fetch_source()
- CVE-2019-15796
* SECURITY UPDATE: Do not use MD5 for verifying downloadeds
(Closes: #944696) (#LP: #1858972)
- apt/package.py: Use all hashes when fetching packages, and
check that we have trusted hashes when downloading
- CVE-2019-15795
* To work around the new checks, the parameter allow_unauthenticated=True
can be passed to the functions. It defaults to the value of the
APT::Get::AllowUnauthenticated option.
- Bump Breaks aptdaemon (<< 1.1.1+bzr982-0ubuntu21.2), as it will have
to set that parameter after having done validation.
* Automatic changes and fixes for external regressions:
- Adjustments to test suite and CI to fix CI regressions
- Automatic mirror list update
* Backport to disco:
- Compile with -fno-lto on Ubuntu to workaround compiler bugs in disco
-- Julian Andres Klode <email address hidden> Wed, 15 Jan 2020 16:41:00 +0100
-
python-apt (1.8.4) unstable; urgency=medium
* apt.Cache: Fix (un)locking in various places
- Fix (un)locking of archives (Closes: #922416)
- Use explicit, more safe locking in update()
* Update mirror lists
-- Julian Andres Klode <email address hidden> Mon, 11 Mar 2019 12:49:18 +0100
-
python-apt (1.8.3) unstable; urgency=medium
* test_aptsources: Fix test if current distribution does not exist
-- Julian Andres Klode <email address hidden> Mon, 04 Feb 2019 12:50:31 +0100
-
python-apt (1.8.2) unstable; urgency=medium
* Add a init_defaults() method to apt_pkg.Policy
* Document what's new in 1.8
-- Julian Andres Klode <email address hidden> Fri, 01 Feb 2019 17:09:15 +0100
-
python-apt (1.8.1) unstable; urgency=medium
* python/arfile.cc: Fix FTBFS due to copying of FileFd
* Revert "debian/rules: Build with pybuild"
* Adjust typing for mypy 0.660
-- Julian Andres Klode <email address hidden> Fri, 25 Jan 2019 20:40:39 +0100
-
python-apt (1.8.0~alpha0~ubuntu2) disco; urgency=medium
* No-change rebuild to build without python3.6 support.
-- Matthias Klose <email address hidden> Sat, 03 Nov 2018 11:52:16 +0000
-
python-apt (1.8.0~alpha0~ubuntu1) disco; urgency=medium
* templates: Add Ubuntu 19.04 'Disco Dingo'
* travis: Disable CI on debian:stretch and ubuntu:bionic
-- Julian Andres Klode <email address hidden> Tue, 30 Oct 2018 13:15:24 +0100
-
python-apt (1.7.0) unstable; urgency=medium
* Fix escaping in regular expressions and ignore some pep8 warnings
* as usual; updated mirror lists
-- Julian Andres Klode <email address hidden> Wed, 10 Oct 2018 17:39:25 +0200