Change logs for apt source package in Xenial

  • apt (1.2.35) xenial; urgency=medium
    
      * Backport JSON hooks, version 0.2, to xenial (LP: #1926150). The JSON code
        files are identical to that of 2.3.2, only the integration and test cases
        needed minor adjustment to behave correctly, especially:
        - In private-install.cc, exit before showing the list of packages to
          upgrade/install/etc, in case an error is already set. This moves the
          behavior closer to bionic.
      * Backport zstd support for Launchpad zstd enablement (LP: #1926437)
      * Fix indendation of changelog message in 1.2.34 changelog.
      * Bug fixes needed for JSON hooks:
        - private-install: Handle existing errors before showing lists
        - Avoid duplicated error in `apt search`
      * Bug fixes affecting CI / autopkgtest only:
        - prepare-release: Ignore alternative build dependencies
        - tests: Do not expect requested-by if sudo was invoked by root
        - tests: Export TZ=UTC to work around test failures on non-UTC hosts
        - tests: avoid time-dependent rebuild of caches
    
     -- Julian Andres Klode <email address hidden>  Wed, 28 Apr 2021 14:55:54 +0200
  • apt (1.2.32ubuntu0.2) xenial-security; urgency=high
    
      * SECURITY UPDATE: Integer overflow in parsing (LP: #1899193)
        - apt-pkg/contrib/arfile.cc: add extra checks.
        - apt-pkg/contrib/tarfile.cc: limit tar item sizes to 128 GiB
        - apt-pkg/deb/debfile.cc: limit control file sizes to 64 MiB
        - test/*: add tests.
        - CVE-2020-27350
      * Additional hardening:
        - apt-pkg/contrib/tarfile.cc: Limit size of long names and links to 1 MiB
    
     -- Julian Andres Klode <email address hidden>  Mon, 07 Dec 2020 12:24:07 +0100
  • apt (1.2.32ubuntu0.1) xenial-security; urgency=high
    
      * SECURITY UPDATE: Out of bounds read in ar, tar implementations (LP: #1878177)
        - apt-pkg/contrib/arfile.cc: Fix out-of-bounds read in member name
        - apt-pkg/contrib/arfile.cc: Fix out-of-bounds read on unterminated
          member names in error path
        - apt-pkg/contrib/extracttar.cc: Fix out-of-bounds read on unterminated
          member names in error path
        - CVE-2020-3810
      * Add .gitlab-ci.yml for CI testing on Salsa
    
     -- Julian Andres Klode <email address hidden>  Tue, 12 May 2020 20:42:53 +0200
  • apt (1.2.32) xenial; urgency=medium
    
      * Add test case for local-only packages pinned to never
      * Prevent shutdown while running dpkg (LP: #1820886)
      * Add linux-{buildinfo,image-unsigned,source} versioned kernel pkgs
        (LP: #1821640)
    
     -- Julian Andres Klode <email address hidden>  Tue, 07 May 2019 12:57:03 +0200
  • apt (1.2.31) xenial; urgency=medium
    
      * Fix name of APT::Update::Post-Invoke-Stats (was ...Update-Post...)
      * apt.dirs: Install auth.conf.d directory (LP: #1818996)
      * Merge translations from 1.6.10 (via 1.4.y branch)
    
    apt (1.2.30) xenial; urgency=medium
    
      * merge security upload for content injection in http method (CVE-2019-3462);
        with fixed autopkgtest (LP: #1815750)
      * Introduce experimental 'never' pinning for sources (LP: #1814727)
      * Add support for /etc/apt/auth.conf.d/*.conf (netrcparts) (LP: #1811120)
      * Add a Packages-Require-Authorization Release file field (LP: #1814727)
      * NeverAutoRemove kernel meta packages (LP: #1787460)
      * doc: Set ubuntu-codename to xenial (LP: #1812696)
      * update: Provide APT::Update-Post-Invoke-Stats script hook point
        (LP: #1815760)
      * Introduce APT::Install::Pre-Invoke / Post-Invoke-Success (LP: #1815761)
    
     -- Julian Andres Klode <email address hidden>  Tue, 12 Mar 2019 14:59:01 +0100
  • apt (1.2.30) xenial; urgency=medium
    
      * merge security upload for content injection in http method (CVE-2019-3462);
        with fixed autopkgtest (LP: #1815750)
      * Introduce experimental 'never' pinning for sources (LP: #1814727)
      * Add support for /etc/apt/auth.conf.d/*.conf (netrcparts) (LP: #1811120)
      * Add a Packages-Require-Authorization Release file field (LP: #1814727)
      * NeverAutoRemove kernel meta packages (LP: #1787460)
      * doc: Set ubuntu-codename to xenial (LP: #1812696)
      * update: Provide APT::Update-Post-Invoke-Stats script hook point
        (LP: #1815760)
      * Introduce APT::Install::Pre-Invoke / Post-Invoke-Success (LP: #1815761)
    
     -- Julian Andres Klode <email address hidden>  Fri, 01 Mar 2019 10:05:40 +0100
  • apt (1.2.29ubuntu0.1) xenial-security; urgency=medium
    
      * SECURITY UPDATE: content injection in http method (CVE-2019-3462)
        (LP: #1812353)
    
     -- Julian Andres Klode <email address hidden>  Fri, 18 Jan 2019 11:54:00 +0100
  • apt (1.2.29) xenial; urgency=medium
    
      * Set DPKG_FRONTEND_LOCKED when running {pre,post}-invoke scripts.
        Some post-invoke scripts install packages, which fails because
        the environment variable is not set. This sets the variable for
        all three kinds of scripts {pre,post-}invoke and pre-install-pkgs,
        but we will only allow post-invoke at a later time.
        (LP: #1796808)
    
    apt (1.2.28) xenial; urgency=medium
    
      [ Julian Andres Klode ]
      * apt.conf.autoremove: Add linux-cloud-tools to list (LP: #1698159)
      * Add support for dpkg frontend lock (Closes: #869546) (LP: #1781169)
      * Set DPKG_FRONTEND_LOCKED as needed when doing selection changes
      * http: Stop pipeline after close only if it was not filled before
        (LP: #1794957)
      * pkgCacheFile: Only unlock in destructor if locked before (LP: #1794053)
      * Update libapt-pkg5.0 symbols for frontend locking
    
      [ David Kalnischkies ]
      * Support records larger than 32kb in 'apt show' (Closes: #905527)
        (LP: #1787120)
    
     -- Julian Andres Klode <email address hidden>  Tue, 09 Oct 2018 12:35:03 +0200
  • apt (1.2.28) xenial; urgency=medium
    
      [ Julian Andres Klode ]
      * apt.conf.autoremove: Add linux-cloud-tools to list (LP: #1698159)
      * Add support for dpkg frontend lock (Closes: #869546) (LP: #1781169)
      * Set DPKG_FRONTEND_LOCKED as needed when doing selection changes
      * http: Stop pipeline after close only if it was not filled before
        (LP: #1794957)
      * pkgCacheFile: Only unlock in destructor if locked before (LP: #1794053)
      * Update libapt-pkg5.0 symbols for frontend locking
    
      [ David Kalnischkies ]
      * Support records larger than 32kb in 'apt show' (Closes: #905527)
        (LP: #1787120)
    
     -- Julian Andres Klode <email address hidden>  Fri, 28 Sep 2018 15:18:29 +0200
  • apt (1.2.27) xenial; urgency=medium
    
      [ David Kalnischkies ]
      * don't hang if multiple sources use unavailable method (Closes: 870675)
        (LP: #1762766)
    
      [ Julian Andres Klode ]
      * Fix lock counting in debSystem (LP: #1778547)
      * apt.conf.autoremove: Catch some new Ubuntu module packages (LP: #1778551)
    
     -- Julian Andres Klode <email address hidden>  Tue, 26 Jun 2018 12:55:03 +0200
  • apt (1.2.26) xenial; urgency=medium
    
      * Revert "http: A response with Content-Length: 0 has no content"
        - broke Content-Length: 0 redirects (in xenial only) (LP: #1751225)
      * travis: Migrate to Docker to make CI work again
    
     -- Julian Andres Klode <email address hidden>  Tue, 06 Mar 2018 09:43:16 +0100
  • apt (1.2.25) xenial; urgency=medium
    
      * Microrelease covering 1.4.7 (LP: #1702326) and 1.4.8
    
      [ Robert Luberda ]
      * fix a "critical" typo in old changelog entry (Closes: 866358)
    
      [ David Kalnischkies ]
      * use port from SRV record instead of initial port
      * don't ask an uninit _system for supported archs (LP: #1613184)
    
      [ Julian Andres Klode ]
      * Reset failure reason when connection was successful
      * http: A response with Content-Length: 0 has no content
      * apt-daily: Pull in network-online.target in service, not timer
        (LP: #1716973)
    
      [ Balint Reczey ]
      * Gracefully terminate process when stopping apt-daily-upgrade (LP: #1690980)
    
     -- Julian Andres Klode <email address hidden>  Tue, 26 Sep 2017 16:14:54 +0200
  • apt (1.2.24) xenial; urgency=medium
    
      * Microrelease covering fixes of 1.4.6
      * Fix parsing of or groups in build-deps with ignored packages (LP: #1694697)
      * apt.systemd.daily: Use unattended-ugrade --download-only if available.
        Instead of passing -d, which enables a debugging mode; check if
        unattended-upgrade supports an option --download-only (which is yet
        to be implemented) and use that (Closes: #863859)
    
    apt (1.2.23) xenial; urgency=medium
    
      * Microrelease covering fixes of 1.4.4
    
      [ Alan Jenkins ]
      * apt.systemd.daily: fix error from locking code (Closes: #862567)
    
    apt (1.2.22) xenial; urgency=medium
    
      [ Julian Andres Klode ]
      * Run unattended-upgrade -d in download part
      * apt.systemd.daily: Add locking
      * Split apt-daily timer into two (LP: #1686470)
    
      [ Matt Kraai ]
      * bash-completion: Fix spelling of autoclean (Closes: #861846)
    
    apt (1.2.21) xenial; urgency=medium
    
      * Microrelease covering fixes of 1.4 and 1.4.1
    
      [ Julian Andres Klode ]
      * Ignore \.ucf-[a-z]+$ like we do for \.dpkg-[a-z]+$
      * systemd: Rework timing and add After=network-online (was LP #1615482)
    
      [ David Kalnischkies ]
      * Fix and avoid quoting in CommandLine::AsString (LP: #1672710)
    
      [ Unit 193 ]
      * apt-ftparchive: Support '.ddeb' dbgsym packages
    
     -- Julian Andres Klode <email address hidden>  Mon, 19 Jun 2017 13:58:04 +0200
  • apt (1.2.21) xenial; urgency=medium
    
      * Microrelease covering fixes of 1.4 and 1.4.1
    
      [ Julian Andres Klode ]
      * Ignore \.ucf-[a-z]+$ like we do for \.dpkg-[a-z]+$
      * systemd: Rework timing and add After=network-online (LP: #1615482)
    
      [ David Kalnischkies ]
      * Fix and avoid quoting in CommandLine::AsString (LP: #1672710)
    
      [ Unit 193 ]
      * apt-ftparchive: Support '.ddeb' dbgsym packages
    
     -- Julian Andres Klode <email address hidden>  Tue, 25 Apr 2017 21:00:06 +0200
  • apt (1.2.20) xenial; urgency=medium
    
      * Microrelease covering fixes of 1.4~rc2 (LP: #1668285)
    
      [ David Kalnischkies ]
      * don't install new deps of candidates for kept back pkgs
      * keep Release.gpg on untrusted to trusted IMS-Hit (Closes: 838779)
        (LP: #1657440)
      * reset HOME, USER(NAME), TMPDIR & SHELL in DropPrivileges (Closes: 842877)
      * add TMP/TEMP/TEMPDIR to the TMPDIR DropPrivileges dance
      * let {dsc,tar,diff}-only implicitly enable download-only
      * don't show update stats if cache generation is disabled
      * don't lock dpkg in 'apt-get clean'
      * don't lock dpkg in update commands
      * avoid validate/delete/load race in cache generation
      * remove 'old' FAILED files in the next acquire call (Closes: 846476)
      * stop rred from leaking debug messages on recovered errors (Closes: #850759)
    
      [ Paul Wise ]
      * show output as documented for APT::Periodic::Verbose 2 (Closes: 845599)
    
      [ John R. Lenton ]
      * bash-completion: Only complete understood file paths for install
        (LP: #1645815)
    
      [ Lukasz Kawczynski ]
      * Honour Acquire::ForceIPv4/6 in the https transport
    
      [ Julian Andres Klode ]
      * basehttp: Only read Content-Range on 416 and 206 responses (LP: #1657567)
      * Only merge acquire items with the same meta key (Closes: #838441)
      * Do not package names representing .dsc/.deb/... files (Closes: #854794)
      * Don't use -1 fd and AT_SYMLINK_NOFOLLOW for faccessat()
        Thanks to James Clarke for debugging these issues
    
     -- Julian Andres Klode <email address hidden>  Mon, 27 Feb 2017 15:29:18 +0100
  • apt (1.2.19) xenial; urgency=medium
    
      * https: Quote path in URL before passing it to curl (LP: #1651923)
    
     -- Julian Andres Klode <email address hidden>  Tue, 17 Jan 2017 15:48:51 +0100
  • apt (1.2.18) xenial; urgency=high
    
      * SECURITY UPDATE: gpgv: Check for errors when splitting files (CVE-2016-1252)
        Thanks to Jann Horn, Google Project Zero for reporting the issue
        (LP: #1647467)
      * gpgv: Flush the files before checking for errors
    
    apt (1.2.17) xenial; urgency=medium
    
      [ David Kalnischkies ]
      * apt-key: warn instead of fail on unreadable keyrings (LP: #1642386)
      * show apt-key warnings in apt update (Closes: 834973)
    
      [ Julian Andres Klode ]
      * test-releasefile-verification: installaptold: Clean up before run
    
    apt (1.2.16) xenial; urgency=medium
    
      [ David Kalnischkies ]
      * avoid changing the global LC_TIME for Release writing
      * use de-localed std::put_time instead rolling our own
      * accept only the expected UTC timezones in date parsing (Closes: 819697)
      * avoid std::get_time usage to sidestep libstdc++6 bug (LP: #1593583)
      * imbue datetime parsing with C.UTF-8 locale (Closes: 828011)
      * prevent C++ locale number formatting in text APIs (try 2) (Closes: 832044)
      * prevent C++ locale number formatting in text APIs (try 3) (LP: #1611010)
        (LP: #1592817)
      * imbue .diff/Index parsing with C.UTF-8 as well
    
      [ Julian Andres Klode ]
      * Use C locale instead of C.UTF-8 for protocol strings
      * Add shippable.yml for CI on Shippable
      * Revert "if the FileFd failed already following calls should fail, too"
        (LP: #1641905)
    
     -- Julian Andres Klode <email address hidden>  Thu, 08 Dec 2016 15:28:08 +0100
  • apt (1.2.15ubuntu0.2) xenial-security; urgency=high
    
      * SECURITY UPDATE: gpgv: Check for errors when splitting files (CVE-2016-1252)
        Thanks to Jann Horn, Google Project Zero for reporting the issue
        (LP: #1647467)
      * gpgv: Flush the files before checking for errors
    
     -- Julian Andres Klode <email address hidden>  Thu, 08 Dec 2016 15:28:08 +0100
  • apt (1.2.15) xenial; urgency=medium
    
      New micro release with bug fixes up to (and including) 1.3.1 (LP: #1638021)
    
      [ Julian Andres Klode ]
      * methods/ftp: Cope with weird PASV responses.
        Thanks to Lukasz Stelmach for the initial patch (Closes: #420940)
      * Fix buffer overflow in debListParser::VersionHash() (Closes: #828812)
      * cache: Bump minor version to 6
      * indextargets: Check that cache could be built before using it
        (Closes: #829651)
      * gpgv: Unlink the correct temp file in error case
      * fileutl: empty file support: Avoid fstat() on -1 fd and check result
      * Ignore SIGINT and SIGQUIT for Pre-Install hooks
      * install-progress: Call the real ::fork() in our fork() method
      * Accept --autoremove as alias for --auto-remove
      * apt-inst: debfile: Pass comp. Name to ExtractTar, not Binary
      * changelog: Respect Dir setting for local changelog getting
      * Fix segfault and out-of-bounds read in Binary fields
      * Merge translations from 1.3~rc3
      * TagFile: Fix off-by-one errors in comment stripping
      * Base256ToNum: Fix uninitialized value
      * VersionHash: Do not skip too long dependency lines
      * Do not read stderr from proxy autodetection scripts
    
      [ Nicolas Le Cam ]
      * Use the ConditionACPower feature of systemd in the apt-daily service
        (Closes: #827930)
    
      [ David Kalnischkies ]
      * close server if parsing of header field failed
      * don't do atomic overrides with failed files (Closes: 828908)
      * if reading of autobit state failed, let write fail
      * write auto-bits before calling dpkg & again after if needed
      * factor out Pkg/DepIterator prettyprinters into own header
      * protect only the latest same-source providers from autoremove
      * reinstalling local deb file is no downgrade
      * do not treat same-version local debs as downgrade
      * avoid 416 response teardown binding to null pointer
      * don't change owner/perms/times through file:// symlinks
      * report all instead of first error up the acquire chain
      * keep trying with next if connection to a SRV host failed
      * call flush on the wrapped writebuffered FileFd
      * verify hash of input file in rred
      * use proper warning for automatic pipeline disable
      * rred: truncate result file before writing to it (Closes: #831762)
      * if the FileFd failed already following calls should fail, too
      * pass --force-remove-essential to dpkg only if needed
      * allow user@host (aka: no password) in URI parsing
      * drop incorrect const attribute from DirectoryExists (LP: 1473674)
      * http(s): allow empty values for header fields (Closes: 834048)
      * don't try pipelining if server closes connections (Closes: #832113)
      * don't loop on pinning pkgs from absolute debs by regex (Closes: 835818)
      * try not to call memcpy with length 0 in hash calculations
      * abort connection on '.' target replies in SRV
    
      [ Andrew Patterson ]
      * Add kernels with "+" in the package name to APT::NeverAutoRemove
        (Closes: #830159)
    
      [ Mert Dirik ]
      * Turkish program translation update (Closes: 832039)
    
      [ Zhou Mo ]
      * zh_CN.po: update simplified chinese translation
    
     -- Julian Andres Klode <email address hidden>  Mon, 31 Oct 2016 15:29:08 +0100
  • apt (1.2.14) unstable; urgency=medium
    
      [ Julian Andres Klode ]
      * New micro release (LP: #1595177)
    
      [ Petter Reinholdtsen ]
      * Norwegian Bokmål program translation update (Closes: 827067)
    
      [ David Kalnischkies ]
      * do not error if auto-detect-proxy cmd has no output (Closes: 827713)
      * source: if download is skipped, don't try to unpack
      * ensure filesize of deb is included in the hashes list
    
      [ Dominic Benson ]
      * Reinstate caching of file hashes in apt-ftparchive (Closes: #806924)
    
     -- Julian Andres Klode <email address hidden>  Wed, 22 Jun 2016 14:54:48 +0200
  • apt (1.2.12~ubuntu16.04.1) xenial; urgency=medium
    
      * Upload 1.2.12 micro-release to Xenial (LP: #1538438, #1580952)
    
    apt (1.2.12) unstable; urgency=medium
    
      [ Patrick Cable ]
      * refactored no_proxy code to work regardless of where https proxy is set
    
      [ James McCoy ]
      * deb822: Restore support for <multivalue>-{Add,Remove}
    
      [ David Kalnischkies ]
      * don't show NO_PUBKEY warning if repo is signed by another key
        (Closes: 618445)
      * allow redirection for items without a space in the desc again
      * don't sent uninstallable rc-only versions via EDSP
      * respect user pinning in M-A:same version (un)screwing
    
      [ Julian Andres Klode ]
      * update: Run Post-Invoke-Success if not all sources failed
      * debian/gbp.conf: Set debian-branch to 1.2.y
    
      [ Frans Spiesschaert ]
      * Dutch program translation update (Closes: 823976)
    
    apt (1.2.11) unstable; urgency=medium
    
      [ David Kalnischkies ]
      * ensure transaction states are changed only once
      * stop handling items in doomed transactions.
        Thanks to Barr Detwix & Vincent Lefevre for log files (Closes: 817240)
      * do not require non-broken systems in 'upgrade'
      * detect compressed status files on extension again
      * recheck Pre-Depends satisfaction in SmartConfigure (LP: #1569099)
      * fix Alt-Filename handling of file method
      * allow uncompressed files to be empty in store again
      * silently skip acquire of empty index files
      * ensure outdated files are dropped without lists-cleanup
    
      [ Kelemen Gábor ]
      * Hungarian program translation update (Closes: 820638)
    
     -- Adam Conrad <email address hidden>  Thu, 12 May 2016 04:08:00 -0600
  • apt (1.2.10ubuntu1) xenial; urgency=medium
    
      * Recheck Pre-Depends satisfaction in SmartConfigure, to avoid unconfigured
        Pre-Depends (which dpkg later fails on). Fixes upgrade failures of
        systemd, util-linux, and other packages with Pre-Depends. Many thanks to
        David Kalnischkies for figuring out the patch and Winfried PLappert for
        testing! Patch taken from Debian git. (LP: #1560797)
    
     -- Martin Pitt <email address hidden>  Thu, 14 Apr 2016 09:05:29 +0200
  • apt (1.2.10) unstable; urgency=medium
    
      [ Zhou Mo ]
      * zh_CN.po: update simplified Chinese translation. (100%)
    
      [ Julian Andres Klode ]
      * test-apt-download-progress: Use a larger file for testing
      * Allow lowering trust level of a hash via config
    
      [ Michael Vogt ]
      * Use systemd.timer instead of a cron job (Closes: #600262, #709675, #663290)
        (LP: #246381, #727685)
    
      [ David Kalnischkies ]
      * use buffered writing for InRelease splitting
    
      [ Takuma Yamada ]
      * Japanese program translation update (Closes: 819938)
    
     -- Michael Vogt <email address hidden>  Tue, 05 Apr 2016 20:23:47 +0200
  • apt (1.2.9) unstable; urgency=high
    
      [ David Kalnischkies ]
      * drop confusing comma from no strong hash message
    
      [ Julian Andres Klode ]
      * Do not mark packages for keep that we want to remove (LP: #1562402)
        (This fixes some upgrades involving renames where the old package
         is removed)
    
     -- Julian Andres Klode <email address hidden>  Sun, 27 Mar 2016 01:26:51 +0100
  • apt (1.2.8) unstable; urgency=medium
    
      [ Michael Vogt ]
      * Get accurate progress reporting in apt update again
    
      [ Julian Andres Klode ]
      * Report non-transient errors as errors, not as warnings
      * methods/gpgv: Rewrite error handling and message.
        Thanks to Ron Lee for wording suggestions
      * Use descriptive URIs in 104 Warning messages
      * cachefile: Only set members that were initialized successfully
        (Closes: #818628)
      * Update symbols file
    
      [ David Kalnischkies ]
      * do not strip epochs from state version strings (Closes: 818162)
      * properly check for "all good sigs are weak" (Closes: 818910)
      * handle gpgv's weak-digests ERRSIG
    
      [ Zhou Mo ]
      * zh_CN.po: update simplified Chinese translation. (Closes: #818639)
    
      [ Takuma Yamada ]
      * Japanese manpage translation update (Closes: 818950)
    
     -- Julian Andres Klode <email address hidden>  Thu, 24 Mar 2016 19:31:24 +0100
  • apt (1.2.7) unstable; urgency=medium
    
      "Caesar is dead"
    
      [ Frans Spiesschaert ]
      * Dutch program translation update (Closes: 817060)
      * Dutch manpages translation update (Closes: 817062)
    
      [ Julian Andres Klode ]
      * Use native architecture instead of amd64 for build-dep-purge test
      * Do not consider SHA1 usable
      * Test that SHA1-only .diff/Index files are not used
      * test: Use SHA512 digests for GPG, reject SHA1-based signatures
      * methods/gpgv: Reject weak digest algorithms
      * apt-pkg/acquire-worker.cc: Introduce 104 Warning message
      * methods/gpgv: Warn about SHA1 (and RIPEMD-160)
    
      [ David Kalnischkies ]
      * require $(HASH)-Download field in .diff/Index files
      * flush line-clearing on progress stop before post-invoke (Closes: 793672)
      * enforce verify of filesize in 'apt-get source'
    
      [ Manuel "Venturi" Porras Peralta ]
      * Spanish apt-mark translation fix (Closes: 817999)
    
      [ Zhou Mo ]
      * zh_CN.po: fix translation bug. (Closes: #818177)
    
      [ Michael Vogt ]
      * Fix bug where the problemresolve can put a pkg into a heisenstate
        (LP: #1550741)
    
     -- Julian Andres Klode <email address hidden>  Tue, 15 Mar 2016 19:20:18 +0100
  • apt (1.2.6) unstable; urgency=high
    
      [ Veres Lajos ]
      * Fix several typos
    
      [ Julian Andres Klode ]
      * apt-pkg/algorithms.cc: Avoid stack buffer overflow in KillList
        (Closes: #701069)
      * urgency=high because this fixes a stack overflow and the last
        upload fixed several segfaults and has not migrated yet either.
    
     -- Julian Andres Klode <email address hidden>  Mon, 07 Mar 2016 19:49:38 +0100
  • apt (1.2.5) unstable; urgency=medium
    
      [ Daniel Kahn Gillmor ]
      * apt-key del should correctly handle keyids prefixed with 0x
    
      [ David Kalnischkies ]
      * support APT::Get::Build-Dep-Automatic again in build-dep
      * add test for apt-key 0xKEY and use parameter expansion.
        Thanks to James McCoy for the suggestion. (Closes: 816691)
      * do not move not-failed pdiff-patches into CWD on failure (Closes: #816837)
      * get group again after potential remap in Source: parse.
        Thanks to Francesco Poli and Marc Haber for testdata. (Closes: 812251)
    
      [ Colin Watson ]
      * Fix lzma write support to handle "try again" case (Closes: #751688)
    
      [ Julian Andres Klode ]
      * Prevent double remapping of iterators and string views
      * debian/control: Set Standards-Version to 3.9.7
    
     -- Julian Andres Klode <email address hidden>  Sun, 06 Mar 2016 19:47:45 +0100
  • apt (1.2.4) unstable; urgency=medium
    
      [ David Kalnischkies ]
      * use local changelog from /usr/share/doc if possible
      * always download changelogs into /tmp first
      * pass versioned provides to external solvers in EDSP
    
      [ Julian Andres Klode ]
      * Fix maintscript to properly remove 20changelog (Closes: #814754)
      * Fix crash with empty architecture list (LP: #1549819)
      * Add missing numeric includes in files using std::accumulate()
    
     -- Julian Andres Klode <email address hidden>  Sat, 27 Feb 2016 14:02:47 +0100
  • apt (1.2.3) unstable; urgency=high
    
      [ Julian Andres Klode ]
      * Set seekpos to 0 after reopening files in Seek() (Closes: #812994, #813000)
    
      [ David Kalnischkies ]
      * get dpkg lock in build-dep if cache was invalid again (Closes: 814139)
    
     -- Julian Andres Klode <email address hidden>  Wed, 10 Feb 2016 18:02:20 +0100
  • apt (1.2.2) unstable; urgency=medium
    
      [ David Kalnischkies ]
      * always create pkg at the time pkg:arch is created
      * reimplement build-dep via apts normal resolver
        (Closes: #137560, #444930, #489911, #583914, #728317, #812173)
      * parse version correctly from binary Source field (Closes: 812492)
      * get sources for packages in multiple releases again (Closes: 812497)
      * only warn about missing/invalid Date field for now (Closes: 809329)
      * support <libc>-<kernel>-<cpu> in architecture specs.
        Thanks to Bálint Réczey for initial patch (Closes: #812212)
      * avoid building dependency tree in 'source' command
    
      [ Stefan Bühler ]
      * fix "Mismatched free() / delete / delete []" in simple_buffer
    
      [ Julian Andres Klode ]
      * Do not buffer writes larger than the buffer if possible
      * Drop the g++ build-dep, transition is done
      * NEWS: Prefix the keep deb option with Binary::apt:: (Closes: #812111)
      * rred: If there were I/O errors, fail
      * Correctly report write errors when flushing buffered writer
      * test: Fix apt-key tests to work with current gpg 2.1
    
      [ Manuel "Venturi" Porras Peralta ]
      * Spanish program translation update (Closes: 813467)
    
      [ Adrian Wielgosik ]
      * Try avoiding loading long package description
      * Avoid temporary strings in SubstVar.
    
      [ Fredrik Fornwall ]
      * edspsystem.cc: include <stdlib.h> for mkdtemp (Closes: #807367)
    
     -- Julian Andres Klode <email address hidden>  Thu, 04 Feb 2016 22:50:43 +0100
  • apt (1.2.1) unstable; urgency=high
    
      [ Zhou Mo ]
      * po: update zh_CN programs translation
    
      [ Julian Andres Klode ]
      * Remap StringView instances pointing into the cache (Closes: #812251)
    
      [ Michael Vogt ]
      * Log calling SUDO_USER or PKEXEC_UID in history.log.
        Thanks to Thomas Reusch
    
     -- Julian Andres Klode <email address hidden>  Mon, 25 Jan 2016 18:03:50 +0100
  • apt (1.2) unstable; urgency=medium
    
      [ Julian Andres Klode ]
      * Do not break apt-file (<< 3.0~exp1~), 2.X works fine
      * Version the build-depends on liblz4-dev to >= 0.0~r126
      * search: Handle packages without description (Closes: #810622)
      * Only enable pipelining if server is HTTP/1.1 (Closes: #810796)
    
      [ Mattia Rizzolo ]
      * Sort the list of sources to be built and linked (Closes: #810509)
    
      [ Michael Vogt ]
      * Do not show multiple identical apt-cache showsrc entries (Closes: #734922)
    
      [ David Kalnischkies ]
      * evaluate sourceslist-list-format entity in vendors sources.list.
        Thanks to Niels Thykier for reporting on IRC
      * update symbols file
      * fix M-A:foreign provides creation for unknown archs
      * revert file-hash based action-merging in acquire (Closes: 810046)
      * return correct position in APT::StringView::(r)find
    
      [ Zhou Mo ]
      * po: update simplified chinese programs translation
    
     -- Julian Andres Klode <email address hidden>  Fri, 15 Jan 2016 19:52:19 +0100
  • apt (1.1.10) unstable; urgency=medium
    
      [ David Kalnischkies ]
      * deal with empty values properly in deb822 parser (Closes: 808102)
    
      [ Beatrice Torracca ]
      * fix 3 typos/omissions in apt.conf(5) (Closes: 809160)
    
      [ Julian Andres Klode ]
      * BufferedWriter: flushing: Check for written < size instead of <=
      * aptconfiguration: Set default compression level to 6
      * BufferedFileFdPrivate: Make InternalFlush() save against errors
      * Switch to DJB hashing and use prime number as table size
      * Turn tolower_ascii() and isspace_ascii() into inline functions
      * Fix test case that was broken by switch of hash function
      * pkgTagSection::Scan: Fix read of uninitialized value
      * pkgCacheGenerator: Allow passing down an already created cache
      * Add support for calculating hashes over the entire cache
      * Do not sync the cache file
    
     -- Julian Andres Klode <email address hidden>  Wed, 30 Dec 2015 00:40:53 +0100
  • apt (1.1.9) unstable; urgency=medium
    
      Highlights: buffered rred writes and slightly faster cache generation (~10%)
    
      [ Julian Andres Klode ]
      * Introduce isspace_ascii() for use by parsers
      * Convert most callers of isspace() to isspace_ascii()
      * pkgcachegen: Use std::unordered_map instead of std::map
      * debListParser: ParseDepends: Only query native arch if needed
      * debListParser: Do not validate Description-md5 for correctness twice
      * ParseDepends: Mark branches for build-dep parsing as unlikely
      * rred: Only call pkgInitConfig() in test mode
      * FileFdPrivate: Add getter and setter for fields
      * FildFd: Introduce a Flush() function and call it from Close()
      * FileFd: Add a buffered writing mode
      * rred: Use buffered writes
      * pkgcachegen.h: Hack around unordered_map not existing before C++11
      * doc/acquire-additional-files.txt: Mention apt-helper cat-file
    
      [ Niels Thykier ]
      * Hex2Digit: Do not use isxdigit()
    
      [ David Kalnischkies ]
      * allow repositories to forbid arch:all for specific index targets
    
     -- Julian Andres Klode <email address hidden>  Sun, 27 Dec 2015 19:16:36 +0100
  • apt (1.1.8) unstable; urgency=medium
    
      * apt-helper: Add a cat-file command for concatening files
      * Change InternalReadLine to always use buffer.read() return value
    
     -- Julian Andres Klode <email address hidden>  Sat, 26 Dec 2015 23:23:02 +0100
  • apt (1.1.7) unstable; urgency=medium
    
      The real "speed up rred for uncompressed files" release
    
      * Use a hardcoded buffer size of 4096 to fix performance
      * rred: Allow passing files as arguments for compressor testing
      * Get rid of memmove() in our read buffering
    
     -- Julian Andres Klode <email address hidden>  Sat, 26 Dec 2015 19:10:14 +0100
  • apt (1.1.6) unstable; urgency=medium
    
      Merry Christmas from the APT Team
    
      [ Pino Toscano ]
      * Fix FileUtlTest.GetTempDir failure when run as root (Closes: #808383)
      * CopyFile: fix BufSize to a sane value (Closes: #808381)
      * CopyFile: avoid failing on EOF on some systems (Closes: #808381)
    
      [ Julian Andres Klode ]
      * Do nothing in FileFd::Write() if Size is 0 (Closes: #808381)
    
      [ David Kalnischkies ]
      * avoid evaluating shell in paths used in apt-key
      * avoid triggering gpg2 migration in apt-key
      * follow dpkg and xz and use CRC64 for xz compression
      * parse xz-compression level from configuration
      * implement a buffer system for FileFd::ReadLine (Closes: 808579)
      * ensure we got a lock in clean operation (Closes: 808561)
    
     -- Julian Andres Klode <email address hidden>  Thu, 24 Dec 2015 17:01:49 +0100
  • apt (1.1.5) unstable; urgency=medium
    
      [ Julian Andres Klode ]
      * Do not swap required and important in pkgCache::Priority()
        Thanks to Manuel A. Fernandez Montecelo for discovering this
        (Closes: #807523)
      * Convert package names from Packages files to lower case (Closes: #807012)
      * test framework: Correctly generate new paths in noopchroot
      * debian/apt.auto-removal.sh: Adjust -dbg exclusion for multi-arch
      * pkgcache: Make hash arch-independent using fixed size integer
      * test-apt-download-progress: Run the https test multiple times
    
      [ David Kalnischkies ]
      * update symbols files to 1.1.4 state of affairs
      * parse .diff/Index hashes in reverse order
      * redirect which stderr to /dev/null for consistency (Closes: 807373)
      * show a more descriptive error for weak Release files (Closes: 806459)
      * support regex and co in 'apt-cache policy $pkg' again (Closes: 807870)
      * non-existing directories don't need to be cleaned (Closes: 807477)
    
      [ Seo Sanghyeon ]
      * fix incorrect Korean translation of "manually" and "automatically"
    
      [ Andreas Metzler ]
      * mention APT::AutoRemove::{Recommends,Suggests}Important option
        (Closes: 807413)
    
     -- Julian Andres Klode <email address hidden>  Mon, 14 Dec 2015 16:56:11 +0100
  • apt (1.1.4) unstable; urgency=medium
    
      [ Julian Andres Klode ]
      * defaults.mak: Set LC_COLLATE=C.UTF-8 for reproducible sort order
      * Avoid overflow when summing up file sizes
    
      [ David Kalnischkies ]
      * add a apt breaks (apt-utils << 1.1.3) for partial-upgrades (Closes: 806765)
      * require explicit paths to dsc/control as we do for deb files
        (Closes: 806693)
      * use @CHANGEPATH@ as placeholder in changelog URI templates
      * replace "which" with "command -v" for portability.
        Thanks to Mingye Wang for the suggestion. (Closes: 807144)
      * replace run-parts with find|sort to avoid debianutils usage
      * part revert, part redo 'which' replacement.
        Thanks to Jakub Wilk for pointing out #747320
    
      [ Fredrik Fornwall ]
      * apt-helper.cc: include <stdlib.h> for atoi (Closes: 807031)
    
     -- Julian Andres Klode <email address hidden>  Mon, 07 Dec 2015 15:31:31 +0100
  • apt (1.1.3) unstable; urgency=medium
    
      [ David Kalnischkies ]
      * use function pointers instead of weak symbols for cmdline parsing
      * accept ../ on the cmdline as start for a deb file as well
      * add apt-utils Depends apt (= ${binary:Version})
    
      [ Andreas Cadhalpun ]
      * do not override exact targetrelease matches with lesser matches
        (Closes: 746412)
    
     -- Michael Vogt <email address hidden>  Mon, 30 Nov 2015 08:49:40 +0100
  • apt (1.0.10.2ubuntu1) wily; urgency=medium
    
      * merged from debian/sid (LP: #1486061)
      * this fixes a subtle ABI difference between debian and ubuntu
      * add breaks for rdepends to ensure smooth wily->wily transtition
        for the ABI fix. this can be dropped post-wily
    
    apt (1.0.10.2) unstable; urgency=high
    
      * Do not parse Status fields from remote sources
    
    apt (1.0.10.1) unstable; urgency=medium
    
      * hide first pdiff merge failure debug message (Closes: 793444)
      * mark again deps of pkgs in APT::Never-MarkAuto-Sections as manual.
        Thanks to Raphaël Hertzog and Adam Conrad for detailed reports and
        initial patches (Closes: 793360) (LP: #1479207)
      * explicitly build-dep on g++ (>= 4:5.2) for gcc5 transition
    
    apt (1.0.10) unstable; urgency=medium
    
      [ Zhou Mo ]
      * po: update zh_CN translation slightly
      * po: Update Simplified Chinese programs translation
    
      [ Mert Dirik ]
      * Turkish translation update for apt (Closes: #789491)
    
      [ Yuri Kozlov ]
      * Russian program translation update (Closes: 789709)
    
      [ Milo Casagrande ]
      * Italian program translation update (Closes: 782122)
    
      [ Beatrice Torracca ]
      * Italian manpage translation update (Closes: 776702)
    
      [ Julian Andres Klode ]
      * ExecFork: Use /proc/self/fd to determine which files to close
        (Closes: #764204)
    
      [ Michael Vogt ]
      * Prepare new 1.0.10 release with gcc5 abi transition
    
      [ David Kalnischkies ]
      * stop depending on copy-on-write for std::string
      * bump next-abi check above gcc5-abi bump
      * update symbols file to use gcc5 abi mangling
    
     -- Michael Vogt <email address hidden>  Mon, 05 Oct 2015 16:20:37 +0200