Format: 1.8
Date: Wed, 15 Jan 2020 17:54:15 +0100
Source: python-apt
Binary: python-apt python-apt-doc python-apt-dbg python-apt-dev python-apt-common python3-apt python3-apt-dbg
Architecture: i386 all i386_translations
Version: 0.8.3ubuntu7.5
Distribution: precise
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lgw01-amd64-035.buildd>
Changed-By: Julian Andres Klode <juliank@ubuntu.com>
Description: 
 python-apt - Python interface to libapt-pkg
 python-apt-common - Python interface to libapt-pkg (locales)
 python-apt-dbg - Python interface to libapt-pkg (debug extension)
 python-apt-dev - Python interface to libapt-pkg (development files)
 python-apt-doc - Python interface to libapt-pkg (API documentation)
 python3-apt - Python 3 interface to libapt-pkg
 python3-apt-dbg - Python 3 interface to libapt-pkg (debug extension)
Closes: 944696
Launchpad-Bugs-Fixed: 1858972 1858973
Changes: 
 python-apt (0.8.3ubuntu7.5) precise-security; urgency=medium
 .
   * SECURITY UPDATE: Check that repository is trusted before downloading
     files from it (LP: #1858973)
     - apt/cache.py: Add checks to fetch_archives() and commit()
     - apt/package.py: Add checks to fetch_binary() and fetch_source()
     - CVE-2019-15796
   * SECURITY UPDATE: Do not use MD5 for verifying downloadeds
     (Closes: #944696) (#LP: #1858972)
     - apt/package.py: Use strongest hashes when fetching packages. Packages
       without a trusted hash are still accepted.
     - CVE-2019-15795
   * To work around the new checks, the parameter allow_unauthenticated=True
     can be passed to the functions. It defaults to the value of the
     APT::Get::AllowUnauthenticated option.
     - Bump Breaks aptdaemon (<< 0.43+bzr805-0ubuntu10+esm1), as it will have
       to set that parameter after having done validation.
   * Automatic changes and fixes for external regressions:
     - Adjustments to test suite and CI to fix CI regressions
     - Automatic mirror list update
     - utils/get_debian_mirrors.py: Get data from salsa
   * Make allow_unauthenticated argument to fetch_archives() optional
     - apt/cache.py
Checksums-Sha1: 
 06a0010d7f83ed58499f5925c8e212a830c07f8d 185188 python-apt_0.8.3ubuntu7.5_i386.deb
 d560463fc50cc6224809bdba107789ef13dac10e 247416 python-apt-doc_0.8.3ubuntu7.5_all.deb
 7cca9308788880ecb324dfa7d6f9c382e7eb34c0 2281594 python-apt-dbg_0.8.3ubuntu7.5_i386.deb
 cef17f9aab6103548da08e652d2b547ea669ad41 8058 python-apt-dev_0.8.3ubuntu7.5_all.deb
 243ffb74175e25d3deb2e2c17aac3980c7cafbfc 20550 python-apt-common_0.8.3ubuntu7.5_all.deb
 cf8e6a78fb2d368f882147df063e7f1644e3317f 172056 python3-apt_0.8.3ubuntu7.5_i386.deb
 cefbdacf58643cbec47edb6308cd52693c5b8ded 2201146 python3-apt-dbg_0.8.3ubuntu7.5_i386.deb
 ba9696b26940c44f7e3051b3314e16cef32c94b5 121331 python-apt_0.8.3ubuntu7.5_i386_translations.tar.gz
Checksums-Sha256: 
 c068d4b3be5dd6620d4c6022c3358627d2dab76cd419b46c245fb7169e6e85ec 185188 python-apt_0.8.3ubuntu7.5_i386.deb
 1d572513e3e822af37d4a4c662392ff67f4a24e034f0c997eda086dc4f40059f 247416 python-apt-doc_0.8.3ubuntu7.5_all.deb
 7b202309bad443b522ae20170db7f27d7d0584969c50022c536fbb710b842261 2281594 python-apt-dbg_0.8.3ubuntu7.5_i386.deb
 abd38a1181f9f64d0287729ae415ec691c2f21ffac723348d5176f09fb8b6d2a 8058 python-apt-dev_0.8.3ubuntu7.5_all.deb
 c5590ef29a82ac5317e16bd5de348b5a72728dbc83e59a0d77f358ddf7882655 20550 python-apt-common_0.8.3ubuntu7.5_all.deb
 8743ef772c4dfe9a3f0b81bd667ce2fd6e2874ea877c64662f306f7f8daf10cf 172056 python3-apt_0.8.3ubuntu7.5_i386.deb
 137196830547388588f2dadcd7c3ccb6964b3bbd4b42ec53d59b29ffc42fdb04 2201146 python3-apt-dbg_0.8.3ubuntu7.5_i386.deb
 0c571f2a1f5f153f5be3e7aace9c46d563080464e1a0e0e7c9df250034d2b124 121331 python-apt_0.8.3ubuntu7.5_i386_translations.tar.gz
Files: 
 7420d4e6332cb27b283832dafe634302 185188 python standard python-apt_0.8.3ubuntu7.5_i386.deb
 3e5e55606b65b315aeecaa7eff4d06d6 247416 doc optional python-apt-doc_0.8.3ubuntu7.5_all.deb
 10d8b67cca52f4572c2248bcbeb98dde 2281594 debug extra python-apt-dbg_0.8.3ubuntu7.5_i386.deb
 f98fae7a13bebcab951d0206dd0f922a 8058 python optional python-apt-dev_0.8.3ubuntu7.5_all.deb
 34f680423e09f032ab0abd1e4588ce15 20550 python optional python-apt-common_0.8.3ubuntu7.5_all.deb
 56990b971f7f04805ed4498f5de949ec 172056 python optional python3-apt_0.8.3ubuntu7.5_i386.deb
 242e700730e21c3a42de9f114d35503f 2201146 debug extra python3-apt-dbg_0.8.3ubuntu7.5_i386.deb
 e1cc228e98f0b10d0ed25cf70df115d5 121331 raw-translations - python-apt_0.8.3ubuntu7.5_i386_translations.tar.gz
Original-Maintainer: APT Development Team <deity@lists.debian.org>