-
aptdaemon (1.1.1+bzr982-0ubuntu14.5) xenial-security; urgency=medium
* SECURITY UPDATE: info disclosure via transaction properties
(LP: #1899513)
- debian/patches/CVE-2020-16128.patch: drop privileges when doing file
checks in aptdaemon/core.py, aptdaemon/worker/aptworker.py,
aptdaemon/utils.py.
- CVE-2020-16128
* SECURITY UPDATE: policykit checks are too late (LP: #1899193)
- debian/patches/CVE-2020-27349.patch: check PolicyKit before
simulating local install in aptdaemon/core.py.
- CVE-2020-27349
-- Marc Deslauriers <email address hidden> Wed, 02 Dec 2020 07:44:28 -0500
-
aptdaemon (1.1.1+bzr982-0ubuntu14.4) xenial-security; urgency=medium
* SECURITY UPDATE: information disclosure via locale (LP: #1888235)
- debian/patches/CVE-2020-15703.patch: reject locales with full paths
in aptdaemon/core.py.
- CVE-2020-15703
-- Marc Deslauriers <email address hidden> Wed, 23 Sep 2020 07:28:34 -0400
-
aptdaemon (1.1.1+bzr982-0ubuntu14.3) xenial; urgency=medium
* Update crash handler to use the changed apport function. (LP: #1700810)
-- Brian Murray <email address hidden> Tue, 12 May 2020 11:12:46 -0700
-
aptdaemon (1.1.1+bzr982-0ubuntu14.2) xenial-security; urgency=medium
* Fix compatibility with python-apt security update (LP: #1858973)
-- Marc Deslauriers <email address hidden> Wed, 15 Jan 2020 14:37:59 -0500
-
aptdaemon (1.1.1+bzr982-0ubuntu14.1) xenial; urgency=medium
* Various locking fixes (LP: #1831981)
- Implement frontend locking (incl. fixup from 0ubuntu24)
- Adjust locking order to match APT
- Use reverse order for unlocking
* Test suite fixes:
- Fix failing tests
- Make failing tests fail the build again
- debian/tests/control: Depend on gir1.2-vte-2.91, not gir1.2-vte-2.90
-- Julian Andres Klode <email address hidden> Wed, 03 Jul 2019 12:39:38 +0200
-
aptdaemon (1.1.1+bzr982-0ubuntu14) wily; urgency=medium
* debian/patches/lp1439769-aptdaemon-autoinstall.patch: Display the flag
name in the error message, not the package name.
-- Brian Murray <email address hidden> Mon, 12 Oct 2015 09:02:44 -0700
