Format: 1.8 Date: Thu, 30 Mar 2017 14:48:57 +0200 Source: apt Binary: apt libapt-pkg5.0 libapt-inst2.0 apt-doc libapt-pkg-dev libapt-pkg-doc apt-utils apt-transport-https Architecture: source Version: 1.4~rc2~ubuntu16.04.1~c42.ppa1 Distribution: xenial Urgency: high Maintainer: APT Development Team Changed-By: H.-Dirk Schmitt Description: apt - commandline package manager apt-doc - documentation for APT apt-transport-https - https download transport for APT apt-utils - package management related utility programs libapt-inst2.0 - deb package format runtime library libapt-pkg-dev - development files for APT's libapt-pkg and libapt-inst libapt-pkg-doc - documentation for APT development libapt-pkg5.0 - package management runtime library Closes: 272557 420940 440057 465572 618445 623443 626599 644610 709092 724744 744934 748936 767891 806924 808367 813786 819697 820861 823746 823918 823976 824456 824503 824702 824926 825216 825396 825742 826043 826291 826944 827067 827364 827713 827758 827930 828011 828812 828908 829232 829651 830159 831762 832039 832044 832113 832593 832614 833674 834048 834642 834767 834973 835094 835195 835818 836220 837395 838441 838731 838779 840552 840757 841763 841874 842877 844724 845599 845775 845969 846476 846514 848721 849235 850759 852460 853761 853762 854794 Launchpad-Bugs-Fixed: 1522675 1522988 1573547 1581985 1607283 1616909 1645815 1647467 1651923 1657567 Changes: apt (1.4~rc2~ubuntu16.04.1~c42.ppa1) xenial; urgency=medium . * No-change backport to xenial . apt (1.4~rc2) unstable; urgency=medium . [ David Kalnischkies ] * add Auto-Built-Package to tagfile-order * don't test with "too early for 32bit" years . [ Julian Andres Klode ] * Do not lowercase package names representing .dsc/.deb/... files (Closes: #854794) * shippable: Perform CI on Debian stretch instead of Ubuntu xenial * Don't use -1 fd and AT_SYMLINK_NOFOLLOW for faccessat() Thanks to James Clarke for debugging these issues * CMake: Install statvfs.h to include/sys, not just include/ * debian: Generate debian/copyright during clean . apt (1.4~rc1) unstable; urgency=medium . [ David Kalnischkies ] * don't show update stats if cache generation is disabled * don't lock dpkg in 'apt-get clean' * don't lock dpkg in update commands * avoid validate/delete/load race in cache generation * fix 'install --no-download' mode * remove 'old' FAILED files in the next acquire call (Closes: 846476) * stop rred from leaking debug messages on recovered errors (Closes: #850759) * make the moo reproducible. Thanks to Chris Lamb for initial patch and guru meditation (Closes: #848721) * update release mappings in documentation * avoid malloc if option whitelist is disabled (default) . [ Julian Andres Klode ] * basehttp: Only read Content-Range on 416 and 206 responses (LP: #1657567) * test suite: Do not exit 0 in trap for QUIT * Only merge acquire items with the same meta key (Closes: #838441) . [ Zhou Mo ] * po: update Simplified Chinese program translation . [ Jean-Pierre Giraud ] * French manpages translation update (Closes: 852460) . [ victory ] * Japanese manpages & program translation update . [ Frans Spiesschaert ] * Dutch program translation update (Closes: #853761) * Dutch manpage translation update (Closes: #853762) . apt (1.4~beta4) unstable; urgency=medium . * Read dpkg tables to handle architecture wildcards. Thanks to James Clarke for the initial patch (Closes: #748936) * https: Quote path in URL before passing it to curl (LP: #1651923) * Update symbols file for changes in 1.3.1, 1.4~beta{1,3,4} . apt (1.4~beta3) unstable; urgency=medium . [ Lukasz Kawczynski ] * Honour Acquire::ForceIPv4/6 in the https transport . [ David Kalnischkies ] * reword "Can't drop priv" warning message (Closes: #813786) (LP: #1522675) * let {dsc,tar,diff}-only implicitly enable download-only * remove needless fork() in apt-get source * default to --no-check for dpkg-source call (Closes: 724744) * warn if clearsigned file has ignored content parts * ensure generation of valid EDSP error stanzas * add --indep-only for build-dep command (Closes: #845775) * allow default build-essentials to be overridden * expand -f to --fix-broken in error messages. Thanks to Kristian Glass for initial patch! (Closes: #709092) * separating state variables regarding server/request (Closes: #440057) * fix minimum pkgs option for dpkg --recursive usage * allow warning generation for non-whitelisted options . [ Oriol Debian ] * Catalan program translation update (Closes: #846514) . [ Frans Spiesschaert ] * Dutch manpages translation update (Closes: #849235) . [ Niels Thykier ] * ParseDepends: Support passing the desired architecture (Closes: #845969) . apt (1.4~beta2) unstable; urgency=high . [ John R. Lenton ] * bash-completion: Only complete understood file paths for install (LP: #1645815) . [ Julian Andres Klode ] * SECURITY UPDATE: gpgv: Check for errors when splitting files (CVE-2016-1252) Thanks to Jann Horn, Google Project Zero for reporting the issue (LP: #1647467) * gpgv: Flush the files before checking for errors . apt (1.4~beta1) unstable; urgency=medium . [ Chris Leick ] * Updated German documentation translation * fix three typos in sources & manpages * German translation proof read by Helge Kreutzmann . [ Frans Spiesschaert ] * Dutch program translation update (Closes: #840552) * Dutch manpages translation update (Closes: #840757) . [ David Kalnischkies ] * don't install new deps of candidates for kept back pkgs * keep Release.gpg on untrusted to trusted IMS-Hit (Closes: 838779) * fix testcase expecting incorrect remove log from dpkg * reset HOME, USER(NAME), TMPDIR & SHELL in DropPrivileges (Closes: 842877) * show the conflicting distribution warning again (Closes: 841874) * rename Checksum-FileSize to Filesize in hashsum mismatch * improve SOCKS error messages for http slightly * support 'apt build-dep .' (aka: without /) * add TMP/TEMP/TEMPDIR to the TMPDIR DropPrivileges dance * http: skip connection cleanup if we close it anyhow * add hidden config to set packages as Essential/Important. Thanks to Anthony Towns for initial patch (Closes: 767891) * don't warn if untransformed distribution matches. Thanks to Lukas Anzinger for initial patch (Closes: 644610) * show distribution mismatch for changed codenames * react to trig-pend only if we have nothing else to do * correct cross & disappear progress detection * improve arch-unqualified dpkg-progress parsing * don't perform implicit crossgrades involving M-A:same * do not configure unconfigured to be removed packages * skip unconfigure for unconfigured to-be removed pkgs * report apt-key errors via status-fd messages (LP: #1522988) * add apt-key support for armored GPG key files (*.asc) * document which keyring formats are supported by apt-key (Closes: 844724) * get pdiff files from the same mirror as the index * follow the googletest merge in build-depends . [ Michael Vogt ] * Do not (re)start "apt-daily.system" Thanks to Alexandre Detiste (Closes: #841763) . [ Johannes Schauer ] * add support for Build-Depends/Conflicts-Arch (Closes: #837395) . [ Edgar Fuß ] * http: clear content before reporting the failure (Closes: #465572) . [ James Clarke ] * apt-ftparchive: Support NotAutomatic and ButAutomaticUpgrades fields (Closes: #272557) . [ Julian Andres Klode ] * TagSection: Split AlphaIndexes into AlphaIndexes and BetaIndexes * TagSection: Extract Find() methods taking Pos instead of Key * Squashed 'triehash/' content from commit 16f59e1 * TagSection: Introduce functions for looking up by key ids * debListParser: Convert to use pkgTagSection::Key-based lookup * Bump the cache major version for non-backportable changes * Introduce tolower_ascii_unsafe() and use it for hashing * Optimize VersionHash() to not need temporary copy of input * Compare size before data when ordering cache bucket entries * debListParser: Micro-optimize AvailableDescriptionLanguages() * Do not use MD5SumValue for Description_md5() * gpgv: Untrust SHA1, RIPE-MD/160, but allow downgrading to weak . [ Paul Wise ] * show output as documented for APT::Periodic::Verbose 2 (Closes: 845599) . apt (1.3.1) unstable; urgency=medium . [ Julian Andres Klode ] * Do not read stderr from proxy autodetection scripts * travis: Move codecov from after_success to after_script . [ victory ] * Japanese manpages translation update . [ Mert Dirik ] * Turkish program translation update (Closes: #838731) . apt (1.3) unstable; urgency=medium . [ David Kalnischkies ] * abort connection on '.' target replies in SRV * edsp: try 2 to read responses even if writing failed . [ Julian Andres Klode ] * test: Always install dpkg into our tests, regardless of MA * CMake: Add coverage build type * Coverage: Do not print messages from gcov * VersionHash: Do not skip too long dependency lines . apt (1.3~rc4) unstable; urgency=medium . [ Julian Andres Klode ] * Fix segfault and out-of-bounds read in Binary fields * TagFile: Fix off-by-one errors in comment stripping * Base256ToNum: Fix uninitialized value * test-apt-cdrom: Fix for gnupg 2.1.15 * CMake: test/libapt: Use a prebuilt GTest library if available * CMake: apt-pkg: Use correct ICONV_INCLUDE_DIRS variable * acquire: Use priority queues and a 3 stage pipeline design => faster updates with better progress reporting * debian: Move bugscript to old location for overlayfs xdev issue * debian: Pass -O to make to get readable build logs . [ David Kalnischkies ] * try not to call memcpy with length 0 in hash calculations * re-add apt breaks/replaces apt-utils (<< 1.3~exp2~) (Closes: #836220) * support long keyid and fingerprint in gpgv's GOODSIG . apt (1.3~rc3) unstable; urgency=medium . [ Julian Andres Klode ] * Ignore SIGINT and SIGQUIT for Pre-Install hooks This basically fixes Bug #832593, as long as your /bin/sh is not dash, as dash is evil. * prepare-release: Use equivs and gdebi-core for travis deps * install-progress: Call the real ::fork() in our fork() method * Packaging cleanup: - debian: Install etc/apt if present (e.g., on Ubuntu) - tests/control: Handle the gpg1/gpg2 mess a bit better - debian: Make better use of the tree installed by CMake - debian: Switch to debhelper 10 - debian: Add more lintian overrides - debian: Drop outdated stuff - debian: Run wrap-and-sort - Add new symbols to symbols file * Build system fixes, including: - CMake: Translations: Don't rebuild .mo for line number changes - CMake: Translations: Pass --previous to msgmerge. Thanks to Guillem Jover for the suggestion. - CMake: Do not add po/ if USE_NLS is OFF - CMake: Install config and logging directories - CMake: Translations: Build byproduct before output - CMake: Add Large File Support (Closes: #834767) * Several portability fixes (full test suite passes on FreeBSD), including: - CMake: Discover docbook stylesheet in other locations - Add missing includes and external definitions - Use C locale instead of C.UTF-8 for protocol strings - Make directory paths configurable - Lower-case uname -r output in kernel autoremove helper - Make root group configurable via ROOT_GROUP * Accept --autoremove as alias for --auto-remove * apt-inst: debfile: Pass comp. Name to ExtractTar, not Binary * changelog: Respect Dir setting for local changelog getting * init: Add Dir::Bin::planners default entry * Switch documentation from httpredir.d.o to deb.d.o . [ Zhou Mo ] * zh_CN.po: update simplified Chinese translation . [ David Kalnischkies ] * do dpkg --configure before --remove/--purge --pending (Closes: 835094) * prevent C++ locale number formatting in text APIs (try 3) (LP: 1611010) * do fail on weakhash/loop earlier in acquire (Closes: 835195) * do not restore selections for already purged packages * apt-key: warn instead of fail on unreadable keyrings * show apt-key warnings in apt update (Closes: 834973) * treat .ddeb files like .deb, especially for dpkg (LP: #1616909) * randomize acquire order for same type index files * don't loop on pinning pkgs from absolute debs by regex (Closes: 835818) . apt (1.3~rc2) unstable; urgency=medium . [ Julian Andres Klode ] * debian/NEWS: Get rid of 1.3~pre3+cmake1 entry. Thanks to Axel Beckert for reporting * CMake: Use COPYONLY instead of @ONLY * fileutl: empty file support: Avoid fstat() on -1 fd and check result * Change anonscm.d.o links to /git/apt/apt.git and https . [ David Kalnischkies ] * don't perform intinsecure downgrade protection * forbid insecure repositories by default expect in apt-get (Closes: 808367) * source: if download is skipped, don't try to unpack * better error message for insufficient hashsums (Closes: 827758) * add [weak] tag to hash errors to indicate insufficiency * ensure filesize of deb is included in the hashes list * add insecure (and weak) allow-options for sources.list . [ Dominic Benson ] * Reinstate caching of file hashes in apt-ftparchive (Closes: #806924) . [ Zhou Mo ] * zh_CN.po: update simplified chinese translation . apt (1.3~exp2) experimental; urgency=medium . [ Johannes 'josch' Schauer ] * edsp: document unique package identifiers . [ David Kalnischkies ] * edsp: warn if unexpected stanzas appear in the solution * show globalerrors before asking for confirmation * show final solution in --no-download --fix-missing mode * document --no- as --show-upgraded is the default (Closes: 824456) * fail instead of segfault on unreadable config files (Closes: 824503) * convert EDSP to be based on FileFd instead of FILE* * edsp: dump: support dumping into compressed file * edsp: add Forbid-{New-Install,Remove} and Upgrade-All * update symbols file * no-change bump of Standards-Version to 3.9.8 * override lintian on doxygens embedded-javascript-library * fix and document on the fly compressor config * prevent C++ locale number formatting in text APIs (Closes: #825396) * accept only the expected UTC timezones in date parsing (Closes: 819697) * avoid changing the global LC_TIME for Release writing * use de-localed std::put_time instead rolling our own * use std::locale::global instead of setlocale * look into the right textdomain for apt-utils again * try to detect sudo spawned root-shell in prefixing (Closes: 825742) * ignore std::locale exception on non-existent "" locale * apt-key: change to / before find to satisfy its CWD needs. Thanks to Samuel Thibault for 'finding' the culprit! (Closes: 826043) * edsp: use an ID mapping for the internal solver * edsp: use a stanza based interface for solution writing * edsp: optionally store a compressed copy of the last scenario * move 'dump' solver from apt-utils to apt package * edsp: if internal is used, keep this decision * edsp: if logging is requested, do it for internal, too * edsp: drop privileges before executing solvers * don't explicitly configure the last round of packages * drop Dpkg::MaxArgs in favor of Dpkg::MaxArgsBytes * do not hang on piped input in PipedFileFdPrivate * don't leak an FD in lz4 (de)compression * don't leak EDSP solver output fd * don't leak FD in AutoProxyDetect command return parsing . [ Julian Andres Klode ] * Provide complete apt bash completion. Thanks to Elias Fröhner and Svyatoslav Gryaznov for the initial work (LP: #1573547) * apt.systemd.daily: Put opening brace of check_power on extra line (LP: #1581985) * Add conflicting Signed-By values to error message * Normalize Signed-By values by removing trailing commas everywhere * Pass -fvisibility-inlines-hidden to g++ . [ Zhou Mo ] * zh_CN.po: update simplified Chinese translation. . [ Yuri Kozlov ] * Russian program translation update (Closes: 824702) . [ Takuma Yamada ] * Japanese program translation update (Closes: 826291) . apt (1.3~exp1) experimental; urgency=medium . [ David Kalnischkies ] * make random acquire queues work less random * add dep11 files to default Release patterns * don't ask server if we have entire file in partial/ * properly format multiline error messages * format multiline errors properly in acquire progress * show more details for "Hash Sum mismatch" errors * show more details for "Writing more data" errors, too * use the same redirection mirror for all index files * edsp: ask policy engine for the pin of the version directly * give rc-status packages a pin of -1 * respect user pinning in M-A:same version (un)screwing * deprecate confusing Pkg.CandVersion() method * factor out Pkg/DepIterator prettyprinters into own header * gpgv: use EXPKEYSIG instead of KEYEXPIRED * gpgv: handle expired sig as worthless * don't show NO_PUBKEY warning if repo is signed by another key (Closes: 618445) * support multiple fingerprints in signed-by * support Signed-By in Release files as a sort of HPKP * bugscript: include all configuration fragment files (Closes: 820861) * move gnupg|gnupg2 from apt Depends to Recommends * warn if apt-key is run unconditionally in maintainerscript * remove 100-levels config nesting limit * let DPKG_COLORS default to our APT::Color setting * allow redirection for items without a space in the desc again * delay progress until Release files are downloaded * download arch:all also for NATIVE_ARCHITECTURE indextargets * implement Fallback-Of for IndexTargets * implement Identifier field for IndexTargets * gpgv: show always webportal error on NODATA (Closes: 823746) * don't sent uninstallable rc-only versions via EDSP * edsp: support generic and solver-specific configs (Closes: 823918) . [ Julian Andres Klode ] * policy: Get rid of old (pre-1.1) GetCandidateVer algorithm * private-show: Get rid of old policy support code * ftparchive: Support writing Signed-By fields * Strip trailing commas for created signed-by fingerprint lists * update: Run Post-Invoke-Success if not all sources failed . [ Patrick Cable ] * refactored no_proxy code to work regardless of where https proxy is set . [ James McCoy ] * deb822: Restore support for -{Add,Remove} . [ Zhou Mo ] * zh_TW.po: remove several fuzzy tags after review . [ Adrian Wielgosik ] * Don't copy strings in Startswith, Endswith * Speed up GetLocalitySortedVersionSet. . [ Frans Spiesschaert ] * Dutch program translation update (Closes: 823976) Checksums-Sha1: d7f926c526b3e762a7d41f0e2e0031edd78d1fcb 1868 apt_1.4~rc2~ubuntu16.04.1~c42.ppa1.dsc ad2b023c2b4f14779d381ce4470549577eeb5933 2080488 apt_1.4~rc2~ubuntu16.04.1~c42.ppa1.tar.xz Checksums-Sha256: 1f0924db7a2202ebca389e14e8512a01e317358e4a0d3216ff01df11c57d7329 1868 apt_1.4~rc2~ubuntu16.04.1~c42.ppa1.dsc a4725b409660b0f32b501b6fef5f7c6c0828207006327dde8b65bd36b3471e5e 2080488 apt_1.4~rc2~ubuntu16.04.1~c42.ppa1.tar.xz Files: add00b7533f21e57174719e94440bd95 1868 admin important apt_1.4~rc2~ubuntu16.04.1~c42.ppa1.dsc a0dc85e29064940b5d545f9706f9cc95 2080488 admin important apt_1.4~rc2~ubuntu16.04.1~c42.ppa1.tar.xz