From 3d8888c70266f612d1f427a112cc1e2155c19584 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Sun, 7 Apr 2024 11:00:48 +0200 Subject: Adding debian version 2.6.1. Signed-off-by: Daniel Baumann --- debian/NEWS | 279 + debian/apt-daily-upgrade.service | 12 + debian/apt-daily-upgrade.timer | 11 + debian/apt-daily.service | 11 + debian/apt-daily.timer | 10 + debian/apt-doc.doc-base.guide | 13 + debian/apt-doc.doc-base.offline | 13 + debian/apt-doc.docs | 6 + debian/apt-doc.install | 1 + debian/apt-utils.examples | 1 + debian/apt-utils.install | 6 + debian/apt-utils.manpages | 6 + debian/apt.apt-compat.cron.daily | 55 + debian/apt.bug-script | 29 + debian/apt.conf.autoremove | 32 + debian/apt.dirs | 3 + debian/apt.docs | 1 + debian/apt.examples | 1 + debian/apt.install | 20 + debian/apt.lintian-overrides | 10 + debian/apt.logrotate | 16 + debian/apt.maintscript | 4 + debian/apt.manpages | 26 + debian/apt.postinst | 15 + debian/apt.postrm | 22 + debian/apt.systemd.daily | 538 ++ debian/changelog | 12450 +++++++++++++++++++++++++++++ debian/control | 159 + debian/copyright | 155 + debian/gbp.conf | 10 + debian/libapt-pkg-dev.install | 3 + debian/libapt-pkg-doc.doc-base.design | 14 + debian/libapt-pkg-doc.doc-base.dpkg-tech | 13 + debian/libapt-pkg-doc.doc-base.files | 14 + debian/libapt-pkg-doc.doc-base.method | 14 + debian/libapt-pkg-doc.docs | 2 + debian/libapt-pkg-doc.install | 1 + debian/libapt-pkg-doc.lintian-overrides | 1 + debian/libapt-pkg6.0.install | 2 + debian/libapt-pkg6.0.symbols | 1378 ++++ debian/rules | 61 + debian/source/format | 1 + debian/tests/control | 11 + debian/tests/pkg-config-test | 32 + debian/tests/run-tests | 37 + 45 files changed, 15499 insertions(+) create mode 100644 debian/NEWS create mode 100644 debian/apt-daily-upgrade.service create mode 100644 debian/apt-daily-upgrade.timer create mode 100644 debian/apt-daily.service create mode 100644 debian/apt-daily.timer create mode 100644 debian/apt-doc.doc-base.guide create mode 100644 debian/apt-doc.doc-base.offline create mode 100644 debian/apt-doc.docs create mode 100644 debian/apt-doc.install create mode 100644 debian/apt-utils.examples create mode 100644 debian/apt-utils.install create mode 100644 debian/apt-utils.manpages create mode 100644 debian/apt.apt-compat.cron.daily create mode 100755 debian/apt.bug-script create mode 100644 debian/apt.conf.autoremove create mode 100644 debian/apt.dirs create mode 100644 debian/apt.docs create mode 100644 debian/apt.examples create mode 100644 debian/apt.install create mode 100644 debian/apt.lintian-overrides create mode 100644 debian/apt.logrotate create mode 100644 debian/apt.maintscript create mode 100644 debian/apt.manpages create mode 100755 debian/apt.postinst create mode 100755 debian/apt.postrm create mode 100755 debian/apt.systemd.daily create mode 100644 debian/changelog create mode 100644 debian/control create mode 100644 debian/copyright create mode 100644 debian/gbp.conf create mode 100644 debian/libapt-pkg-dev.install create mode 100644 debian/libapt-pkg-doc.doc-base.design create mode 100644 debian/libapt-pkg-doc.doc-base.dpkg-tech create mode 100644 debian/libapt-pkg-doc.doc-base.files create mode 100644 debian/libapt-pkg-doc.doc-base.method create mode 100644 debian/libapt-pkg-doc.docs create mode 100644 debian/libapt-pkg-doc.install create mode 100644 debian/libapt-pkg-doc.lintian-overrides create mode 100644 debian/libapt-pkg6.0.install create mode 100644 debian/libapt-pkg6.0.symbols create mode 100755 debian/rules create mode 100644 debian/source/format create mode 100644 debian/tests/control create mode 100644 debian/tests/pkg-config-test create mode 100644 debian/tests/run-tests diff --git a/debian/NEWS b/debian/NEWS new file mode 100644 index 0000000..4edfd43 --- /dev/null +++ b/debian/NEWS @@ -0,0 +1,279 @@ +apt (2.5.2) unstable; urgency=medium + + Installing or upgrading a binary package now upgrades other binaries from + the same source package if they have the same candidate version. You can + disable this by setting `APT::Get::Upgrade-By-Source-Package` to `false`. + + -- Julian Andres Klode Sun, 24 Jul 2022 15:45:15 +0200 + +apt (2.4.0) unstable; urgency=medium + + GPG verification now first tries only the trusted.gpg.d keys, before + then falling back to the legacy trusted.gpg keyring and issuing a + warning to migrate keys if verification succeeded in the fallback. + + -- Julian Andres Klode Tue, 22 Feb 2022 20:01:00 +0100 + +apt (2.3.12) unstable; urgency=medium + + The solver will no longer try to remove Essential or Protected packages, + any dependency problem that would need such a solution will have to be + resolved manually. + + The "Yes, do as I say" prompt for removing essential packages has been + replaced by an error message. The appropriate command-line option needs + to be used instead. + + Thank you to Linus Tech Tips and System76 for bringing this issue + to our attention. + + -- Julian Andres Klode Wed, 17 Nov 2021 18:26:40 +0100 + +apt (2.1.16) unstable; urgency=medium + + Automatically remove unused kernels on apt {dist,full}-upgrade. To revert + to previous behavior, set APT::Get::AutomaticRemove::Kernels to false or + pass --no-auto-remove to the command. apt-get remains unchanged. + + Packages files can now set the Phased-Update-Percentage field to restrict + update rollout to a specified percentage of machines. Previously, this has + only been available to users of Ubuntu's update-manager tool. See + apt_preferences(5) for details and how to configure multiple systems to get + the same updates. Phased updates are disabled in chroots for now to not + break buildd-style setups. + + -- Julian Andres Klode Fri, 08 Jan 2021 22:01:50 +0100 + +apt (1.9.11) experimental; urgency=medium + + apt(8) now waits for the lock indefinitely if connected to a tty, or + for 120 seconds if not. + + -- Julian Andres Klode Wed, 26 Feb 2020 20:30:33 +0100 + +apt (1.9.6) experimental; urgency=medium + + apt(8) no longer treats package names passed as regular expressions or fnmatch + expressions, requiring the use of patterns (apt-patterns(5)) to perform complex + searches. For ease of use, regular expressions starting with ^ or ending with + $ continue to work. + + This fixes the problem where e.g. g++ could mean either "the package g++" + or, if there is no g++ package, "all packages containing g". This change + will propagate to apt-* after the release of Debian bullseye. + + -- Julian Andres Klode Wed, 15 Jan 2020 21:45:18 +0100 + +apt (1.9.5) unstable; urgency=medium + + Credentials in apt_auth.conf(5) now only apply to https and tor+https + sources to avoid them being leaked over plaintext (Closes: #945911). To + opt-in to http, add http:// before the hostname. Note that this will transmit + credentials in plain text, which you do not want on devices that could be + operating in an untrusted network. + + -- Julian Andres Klode Mon, 02 Dec 2019 11:45:52 +0100 + +apt (1.8.0~alpha3) unstable; urgency=medium + + The PATH for running dpkg is now configured by the option DPkg::Path, + and defaults to "/usr/sbin:/usr/bin:/sbin:/bin". Previous behavior of + not changing PATH may be restored by setting the option to an empty string. + + Support for /etc/apt/auth.conf.d/ has been added, see apt_auth.conf(5). + + -- Julian Andres Klode Tue, 18 Dec 2018 15:02:11 +0100 + +apt (1.6~rc1) unstable; urgency=medium + + Seccomp sandboxing has been turned off by default for now. If it works + for you, you are encouraged to re-enable it by setting APT::Sandbox::Seccomp + to true. + + -- Julian Andres Klode Fri, 06 Apr 2018 14:14:29 +0200 + +apt (1.6~beta1) unstable; urgency=medium + + APT now verifies that the date of Release files is not in the future. By + default, it may be 10 seconds in the future to allow for some clock drift. + + Two new configuration options can be used to tweak the behavior: + Acquire::Check-Date + Acquire::Max-DateFuture + + These can be overridden in sources.list entries using the check-date + and date-future-max options. Note that disabling check-date also + disables checks on valid-until: It is considered to mean that your + machine's time is not reliable. + + -- Julian Andres Klode Mon, 26 Feb 2018 13:14:13 +0100 + +apt (1.6~alpha1) unstable; urgency=medium + + All methods provided by apt except for cdrom, gpgv, and rsh now + use seccomp-BPF sandboxing to restrict the list of allowed system + calls, and trap all others with a SIGSYS signal. Three options + can be used to configure this further: + + APT::Sandbox::Seccomp is a boolean to turn it on/off + APT::Sandbox::Seccomp::Trap is a list of names of more syscalls to trap + APT::Sandbox::Seccomp::Allow is a list of names of more syscalls to allow + + Also, sandboxing is now enabled for the mirror method. + + -- Julian Andres Klode Mon, 23 Oct 2017 01:58:18 +0200 + +apt (1.5~beta1) unstable; urgency=medium + + [ New HTTPS method ] + The default http method now supports HTTPS itself, including encrypted proxies + and connecting to HTTPS sites via HTTPS proxies; and the apt-transport-https + package only provides a "curl+https" method now as a fallback, but will be + removed shortly. If TLS support is unwanted, it can be disabled overall by + setting the option Acquire::AllowTLS to "false". + + As for backwards compatibility, the options IssuerCert and SslForceVersion + are not supported anymore, and any specified certificate files must be in the + PEM format (curl might have allowed DER files as well). + + [ Changes to unauthenticated repositories ] + The security exception for apt-get to only raise warnings if it encounters + unauthenticated repositories in the "update" command is gone now, so that it + will raise errors just like apt and all other apt-based front-ends do since + at least apt version 1.3. + + It is possible (but STRONGLY ADVISED AGAINST) to revert to the previous + behaviour of apt-get by setting the option + Binary::apt-get::Acquire::AllowInsecureRepositories "true"; + See apt-secure(8) manpage for configuration details. + + [ Release Info Changes ] + If values like Origin, Label, and Codename change in a Release file, + update fails, or asks a user (if interactive). Various + --allow-releaseinfo-change are provided for non-interactive use. + + -- Julian Andres Klode Mon, 03 Jul 2017 15:09:23 +0200 + +apt (1.4.2) unstable; urgency=medium + + If periodic updates and unattended upgrades are enabled, the start of + periodic updates are now distributed over 24 hour intervals (as in 1.2 + to 1.4), whereas starting unattended-upgrade has been restricted to a + time between 6 and 7 am. This only affects systems using systemd, other + systems still use the classical hourly cron job. + + -- Julian Andres Klode Thu, 04 May 2017 22:54:02 +0200 + +apt (1.4~beta1) unstable; urgency=medium + + Support for GPG signatures using the SHA1 or RIPE-MD/160 hash + algorithms has been disabled. Repositories using Release files + signed in such a way will stop working. This change has been made + due to security considerations, especially with regards to possible + further breakthroughs in SHA1 breaking during the lifetime + of this APT release series. + + It is possible (but STRONGLY ADVISED AGAINST) to revert to the previous + behaviour by setting the options + APT::Hashes::SHA1::Weak "yes"; + APT::Hashes::RIPE-MD/160::Weak "yes"; + Note that setting these options only affects the verification of the overall + repository signature. + + -- Julian Andres Klode Fri, 25 Nov 2016 13:19:32 +0100 + +apt (1.2~exp1) experimental; urgency=medium + + [ Automatic removal of debs after install ] + After packages are successfully installed by apt(8), + the corresponding .deb package files will be + removed from the /var/cache/apt/archives cache directory. + + This can be changed by setting the apt configuration option + "Binary::apt::APT::Keep-Downloaded-Packages" to "true". E.g: + + # echo 'Binary::apt::APT::Keep-Downloaded-Packages "true";' \ + > /etc/apt/apt.conf.d/01keep-debs + + Please note that the behavior of apt-get is unchanged. The + downloaded debs will be kept in the cache directory after they + are installed. To enable the behavior for other tools, you can set + "APT::Keep-Downloaded-Packages" to false. + + [ Compressed indices ] + If you use Acquire::gzipIndexes, or any other compressed index targets, + those will now be compressed with the fastest supported algorithm, + currently lz4. + + -- Michael Vogt Tue, 05 Jan 2016 19:22:16 +0100 + +apt (1.1~exp9) experimental; urgency=medium + + A new algorithm for pinning has been implemented, it now assigns a + pin priority to a version instead of assigning a pin to a package. + + This might break existing corner cases of pinning, if they use multiple + pins involving the same package name or patterns matching the same + package name, but should overall lead to pinning that actually works + as intended and documented. + + -- Julian Andres Klode Mon, 17 Aug 2015 14:45:17 +0200 + +apt (0.8.11) unstable; urgency=low + + * apt-get install pkg/experimental will now not only switch the + candidate of package pkg to the version from the release experimental + but also of all dependencies of pkg if the current candidate can't + satisfy a versioned dependency. + + -- David Kalnischkies Fri, 03 Dec 2010 14:09:12 +0100 + +apt (0.7.26~exp3) experimental; urgency=low + + * apt-ftparchive now reads the standard configuration files in + /etc/apt/apt.conf and /etc/apt/apt.conf.d. + + -- Julian Andres Klode Fri, 26 Mar 2010 15:34:16 +0100 + +apt (0.7.24) unstable; urgency=low + + * Already included in the last version but now with better documentation + is the possibility to add/prefer different compression types while + downloading archive information, which can decrease the time needed for + update on slow machines. See apt.conf (5) manpage for details. + * APT manages his manpage translations now with po4a, thanks to Nicolas + François and Kurasawa Nozomu, who also provide the ja translation. + Thanks to Christian Perrier we have already a fr translation and + a few more are hopefully added in the near future. + * This version also introduces some _experimental_ configuration options + to make more aggressive use of dpkg's triggers. If you want to help + testing these _experimental_ options see apt.conf (5) manpage. + + -- David Kalnischkies Thu, 24 Sep 2009 15:13:16 +0200 + +apt (0.7.23) unstable; urgency=low + + * Code that determines which proxy to use was changed. Now + 'Acquire::{http,ftp}::Proxy[::]' options have the highest priority, + and '{http,ftp}_proxy' environment variables are used only if options + mentioned above are not specified. + + -- Eugene V. Lyubimkin Thu, 19 Aug 2009 11:26:16 +0200 + +apt (0.6.44) unstable; urgency=low + + * apt-ftparchive --db now uses Berkeley DB_BTREE instead of DB_HASH. + If you use a database created by an older version of apt, delete + it and allow it to be recreated the next time. + + -- Michael Vogt Wed, 26 Apr 2006 12:57:53 +0200 + +apt (0.5.25) unstable; urgency=low + + * apt-ftparchive --db now uses Berkeley DB version 4.2. If used with a + database created by an older version of apt, an attempt will be made + to upgrade the database, but this may not work in all cases. If your + database is not automatically upgraded, delete it and allow it to be + recreated the next time. + + -- Matt Zimmerman Sat, 8 May 2004 12:38:07 -0700 diff --git a/debian/apt-daily-upgrade.service b/debian/apt-daily-upgrade.service new file mode 100644 index 0000000..37a2499 --- /dev/null +++ b/debian/apt-daily-upgrade.service @@ -0,0 +1,12 @@ +[Unit] +Description=Daily apt upgrade and clean activities +Documentation=man:apt(8) +ConditionACPower=true +After=apt-daily.service network.target network-online.target systemd-networkd.service NetworkManager.service connman.service + +[Service] +Type=oneshot +ExecStartPre=-/usr/lib/apt/apt-helper wait-online +ExecStart=/usr/lib/apt/apt.systemd.daily install +KillMode=process +TimeoutStopSec=900 diff --git a/debian/apt-daily-upgrade.timer b/debian/apt-daily-upgrade.timer new file mode 100644 index 0000000..79caf3b --- /dev/null +++ b/debian/apt-daily-upgrade.timer @@ -0,0 +1,11 @@ +[Unit] +Description=Daily apt upgrade and clean activities +After=apt-daily.timer + +[Timer] +OnCalendar=*-*-* 6:00 +RandomizedDelaySec=60m +Persistent=true + +[Install] +WantedBy=timers.target diff --git a/debian/apt-daily.service b/debian/apt-daily.service new file mode 100644 index 0000000..f060487 --- /dev/null +++ b/debian/apt-daily.service @@ -0,0 +1,11 @@ +[Unit] +Description=Daily apt download activities +Documentation=man:apt(8) +ConditionACPower=true +After=network.target network-online.target systemd-networkd.service NetworkManager.service connman.service + +[Service] +Type=oneshot +ExecStartPre=-/usr/lib/apt/apt-helper wait-online +ExecStart=/usr/lib/apt/apt.systemd.daily update + diff --git a/debian/apt-daily.timer b/debian/apt-daily.timer new file mode 100644 index 0000000..3b57962 --- /dev/null +++ b/debian/apt-daily.timer @@ -0,0 +1,10 @@ +[Unit] +Description=Daily apt download activities + +[Timer] +OnCalendar=*-*-* 6,18:00 +RandomizedDelaySec=12h +Persistent=true + +[Install] +WantedBy=timers.target diff --git a/debian/apt-doc.doc-base.guide b/debian/apt-doc.doc-base.guide new file mode 100644 index 0000000..b40d68d --- /dev/null +++ b/debian/apt-doc.doc-base.guide @@ -0,0 +1,13 @@ +Document: apt-user-guide +Title: APT User's Guide +Author: Jason Gunthorpe +Abstract: The APT User's Guide provides an overview of how to use the + APT package manager, and provides a detailed look at the apt-get tool. +Section: Debian + +Format: html +Index: /usr/share/doc/apt-doc/guide.html/index.html +Files: /usr/share/doc/apt-doc/guide.html/*.html + +Format: text +Files: /usr/share/doc/apt-doc/guide.text.gz diff --git a/debian/apt-doc.doc-base.offline b/debian/apt-doc.doc-base.offline new file mode 100644 index 0000000..f67ec73 --- /dev/null +++ b/debian/apt-doc.doc-base.offline @@ -0,0 +1,13 @@ +Document: apt-offline-usage-guide +Title: APT Offline Usage Guide +Author: Jason Gunthorpe +Abstract: The APT Offline Usage Guide provides detailed instructions and + examples of how to use APT on an unconnected computer. +Section: Debian + +Format: html +Index: /usr/share/doc/apt-doc/offline.html/index.html +Files: /usr/share/doc/apt-doc/offline.html/*.html + +Format: text +Files: /usr/share/doc/apt-doc/offline.text.gz diff --git a/debian/apt-doc.docs b/debian/apt-doc.docs new file mode 100644 index 0000000..2134da0 --- /dev/null +++ b/debian/apt-doc.docs @@ -0,0 +1,6 @@ +doc/acquire-additional-files.md +doc/external-dependency-solver-protocol.md +doc/external-installation-planner-protocol.md +doc/json-hooks-protocol.md +doc/progress-reporting.md +doc/srv-records-support.md diff --git a/debian/apt-doc.install b/debian/apt-doc.install new file mode 100644 index 0000000..be5e871 --- /dev/null +++ b/debian/apt-doc.install @@ -0,0 +1 @@ +usr/share/doc/apt-doc diff --git a/debian/apt-utils.examples b/debian/apt-utils.examples new file mode 100644 index 0000000..b66de3c --- /dev/null +++ b/debian/apt-utils.examples @@ -0,0 +1 @@ +usr/share/doc/apt-utils/examples/* diff --git a/debian/apt-utils.install b/debian/apt-utils.install new file mode 100644 index 0000000..9b304e5 --- /dev/null +++ b/debian/apt-utils.install @@ -0,0 +1,6 @@ +usr/bin/apt-extracttemplates +usr/bin/apt-ftparchive +usr/bin/apt-sortpkgs +usr/lib/apt/planners/ +usr/lib/apt/solvers/ +usr/share/locale/*/*/apt-utils.mo diff --git a/debian/apt-utils.manpages b/debian/apt-utils.manpages new file mode 100644 index 0000000..c61b908 --- /dev/null +++ b/debian/apt-utils.manpages @@ -0,0 +1,6 @@ +usr/share/man/*/*/apt-extracttemplates.* +usr/share/man/*/*/apt-ftparchive.* +usr/share/man/*/*/apt-sortpkgs.* +usr/share/man/*/apt-extracttemplates.* +usr/share/man/*/apt-ftparchive.* +usr/share/man/*/apt-sortpkgs.* diff --git a/debian/apt.apt-compat.cron.daily b/debian/apt.apt-compat.cron.daily new file mode 100644 index 0000000..bde3237 --- /dev/null +++ b/debian/apt.apt-compat.cron.daily @@ -0,0 +1,55 @@ +#!/bin/sh + +set -e + +# Systemd systems use a systemd timer unit which is preferable to +# run. We want to randomize the apt update and unattended-upgrade +# runs as much as possible to avoid hitting the mirrors all at the +# same time. The systemd time is better at this than the fixed +# cron.daily time +if [ -d /run/systemd/system ]; then + exit 0 +fi + +check_power() +{ + # laptop check, on_ac_power returns: + # 0 (true) System is on main power + # 1 (false) System is not on main power + # 255 (false) Power status could not be determined + # Desktop systems always return 255 it seems + if command -v on_ac_power >/dev/null; then + if on_ac_power; then + : + elif [ $? -eq 1 ]; then + return 1 + fi + fi + return 0 +} + +# sleep for a random interval of time (default 30min) +# (some code taken from cron-apt, thanks) +random_sleep() +{ + RandomSleep=1800 + eval $(apt-config shell RandomSleep APT::Periodic::RandomSleep) + if [ $RandomSleep -eq 0 ]; then + return + fi + if [ -z "$RANDOM" ] ; then + # A fix for shells that do not have this bash feature. + RANDOM=$(( $(dd if=/dev/urandom bs=2 count=1 2> /dev/null | cksum | cut -d' ' -f1) % 32767 )) + fi + TIME=$(($RANDOM % $RandomSleep)) + sleep $TIME +} + +# delay the job execution by a random amount of time +random_sleep + +# ensure we don't do this on battery +check_power || exit 0 + +# run daily job +exec /usr/lib/apt/apt.systemd.daily diff --git a/debian/apt.bug-script b/debian/apt.bug-script new file mode 100755 index 0000000..c322b72 --- /dev/null +++ b/debian/apt.bug-script @@ -0,0 +1,29 @@ +#!/bin/bash +set -e + +cat <&3 + apt-config dump >&3 2>&1 +fi + +for config in /etc/apt/preferences /etc/apt/preferences.d/* /etc/apt/sources.list /etc/apt/sources.list.d/* ; do + if [ -f "$config" ]; then + yesno "May I include your $config configuration file? [Y/n] " yep + if [ "$REPLY" = "yep" ]; then + printf "\n-- %s --\n\n" "$config" >&3 + cat "$config" >&3 + else + printf "\n-- (%s present, but not submitted) --\n\n" "$config" >&3 + fi + else + printf "\n-- (no %s present) --\n\n" "$config" >&3 + fi +done diff --git a/debian/apt.conf.autoremove b/debian/apt.conf.autoremove new file mode 100644 index 0000000..10438e8 --- /dev/null +++ b/debian/apt.conf.autoremove @@ -0,0 +1,32 @@ +APT +{ + NeverAutoRemove + { + "^firmware-linux.*"; + "^linux-firmware$"; + "^linux-image-[a-z0-9]*$"; + "^linux-image-[a-z0-9]*-[a-z0-9]*$"; + }; + + VersionedKernelPackages + { + # kernels + "linux-.*"; + "kfreebsd-.*"; + "gnumach-.*"; + # (out-of-tree) modules + ".*-modules"; + ".*-kernel"; + }; + + Never-MarkAuto-Sections + { + "metapackages"; + "tasks"; + }; + + Move-Autobit-Sections + { + "oldlibs"; + }; +}; diff --git a/debian/apt.dirs b/debian/apt.dirs new file mode 100644 index 0000000..3e1f9e1 --- /dev/null +++ b/debian/apt.dirs @@ -0,0 +1,3 @@ +etc/kernel/postinst.d +usr/share/bug/apt +etc/apt/keyrings diff --git a/debian/apt.docs b/debian/apt.docs new file mode 100644 index 0000000..b43bf86 --- /dev/null +++ b/debian/apt.docs @@ -0,0 +1 @@ +README.md diff --git a/debian/apt.examples b/debian/apt.examples new file mode 100644 index 0000000..3e15bdd --- /dev/null +++ b/debian/apt.examples @@ -0,0 +1 @@ +usr/share/doc/apt/examples/* diff --git a/debian/apt.install b/debian/apt.install new file mode 100644 index 0000000..e3a911a --- /dev/null +++ b/debian/apt.install @@ -0,0 +1,20 @@ +debian/*.service /lib/systemd/system/ +debian/*.timer /lib/systemd/system/ +debian/apt.systemd.daily usr/lib/apt +etc/apt/ +usr/bin/apt +usr/bin/apt-cache +usr/bin/apt-cdrom +usr/bin/apt-config +usr/bin/apt-get +usr/bin/apt-key +usr/bin/apt-mark +usr/lib/*/libapt-private.so* +usr/lib/apt/apt-helper +usr/lib/apt/methods/ +usr/lib/apt/planners/dump +usr/lib/apt/solvers/dump +usr/lib/dpkg/methods/apt/ +usr/share/bash-completion/completions/ +usr/share/locale/*/*/apt.mo +var/ diff --git a/debian/apt.lintian-overrides b/debian/apt.lintian-overrides new file mode 100644 index 0000000..1e36ba5 --- /dev/null +++ b/debian/apt.lintian-overrides @@ -0,0 +1,10 @@ +# the private library is for internal sharing only +apt: package-name-doesnt-match-sonames +apt: exit-in-shared-library [usr/lib*/libapt-private.so.0.0.0] +# we are implementing our own fallback and it is a minor usecase only +apt: missing-depends-on-sensible-utils sensible-pager [usr/lib*/libapt-private.so.0.0.0] +# these man pages document usage/config for things called via apt +apt: spare-manual-page [usr/share/man*/man1/apt-transport-http.1.gz] +apt: spare-manual-page [usr/share/man*/man1/apt-transport-https.1.gz] +apt: spare-manual-page [usr/share/man*/man1/apt-transport-mirror.1.gz] +apt: spare-manual-page [usr/share/man*/man8/apt-secure.8.gz] diff --git a/debian/apt.logrotate b/debian/apt.logrotate new file mode 100644 index 0000000..9a6e5d1 --- /dev/null +++ b/debian/apt.logrotate @@ -0,0 +1,16 @@ +/var/log/apt/term.log { + rotate 12 + monthly + compress + missingok + notifempty +} + +/var/log/apt/history.log { + rotate 12 + monthly + compress + missingok + notifempty +} + diff --git a/debian/apt.maintscript b/debian/apt.maintscript new file mode 100644 index 0000000..f37a9e2 --- /dev/null +++ b/debian/apt.maintscript @@ -0,0 +1,4 @@ +rm_conffile /etc/apt/apt.conf.d/20changelog 1.2.4~ +# we use a systemd timer unit now +rm_conffile /etc/cron.daily/apt 1.2.10~ +rm_conffile /etc/kernel/postinst.d/apt-auto-removal 2.4.5~ diff --git a/debian/apt.manpages b/debian/apt.manpages new file mode 100644 index 0000000..80dbabd --- /dev/null +++ b/debian/apt.manpages @@ -0,0 +1,26 @@ +usr/share/man/*/*/apt-cache.* +usr/share/man/*/*/apt-cdrom.* +usr/share/man/*/*/apt-config.* +usr/share/man/*/*/apt-get.* +usr/share/man/*/*/apt-key.* +usr/share/man/*/*/apt-mark.* +usr/share/man/*/*/apt-secure.* +usr/share/man/*/*/apt-patterns.* +usr/share/man/*/*/apt.* +usr/share/man/*/*/apt_preferences.* +usr/share/man/*/*/apt_auth.* +usr/share/man/*/*/apt-transport-*.* +usr/share/man/*/*/sources.list.* +usr/share/man/*/apt-cache.* +usr/share/man/*/apt-cdrom.* +usr/share/man/*/apt-config.* +usr/share/man/*/apt-get.* +usr/share/man/*/apt-key.* +usr/share/man/*/apt-mark.* +usr/share/man/*/apt-secure.* +usr/share/man/*/apt-patterns.* +usr/share/man/*/apt.* +usr/share/man/*/apt_preferences.* +usr/share/man/*/apt_auth.* +usr/share/man/*/apt-transport-*.* +usr/share/man/*/sources.list.* diff --git a/debian/apt.postinst b/debian/apt.postinst new file mode 100755 index 0000000..54a0770 --- /dev/null +++ b/debian/apt.postinst @@ -0,0 +1,15 @@ +#! /bin/sh +set -e + +if [ "$1" = 'configure' ] && [ -z "$DPKG_ROOT" ] && ! getent passwd _apt >/dev/null; then + # add unprivileged user for the apt methods + adduser --force-badname --system --home /nonexistent \ + --no-create-home --quiet _apt || true +fi + +if [ "$1" = "configure" ] && [ -n "$2" ] && dpkg --compare-versions -- "$2" le-nl "2.4.5~"; then + rm -f /etc/apt/apt.conf.d/01autoremove-kernels +fi + + +#DEBHELPER# diff --git a/debian/apt.postrm b/debian/apt.postrm new file mode 100755 index 0000000..ae1e18d --- /dev/null +++ b/debian/apt.postrm @@ -0,0 +1,22 @@ +#! /bin/sh + +# apt postrm +# Copyright (C) 1998, Ben Gertzfield + +# This program is free software; you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation; either version 2 of the License, or +# (at your option) any later version. + +set -e + +#DEBHELPER# + +case "$1" in + remove) + ;; + purge) + rm -rf /var/cache/apt + rm -rf /var/lib/apt +esac + diff --git a/debian/apt.systemd.daily b/debian/apt.systemd.daily new file mode 100755 index 0000000..a258dd2 --- /dev/null +++ b/debian/apt.systemd.daily @@ -0,0 +1,538 @@ +#!/bin/sh +#set -e +# +# This file understands the following apt configuration variables: +# Values here are the default. +# Create /etc/apt/apt.conf.d/10periodic file to set your preference. +# +# All of the n-days interval options also accept the suffixes +# s for seconds, m for minutes, h for hours, d for days or +# the "always" value to do the action for every job run, +# which can be used with systemd OnCalendar overrides to +# define custom schedules for the apt update/upgrade jobs. +# +# Dir "/"; +# - RootDir for all configuration files +# +# Dir::Cache "var/cache/apt/"; +# - Set apt package cache directory +# +# Dir::Cache::Archives "archives/"; +# - Set package archive directory +# +# APT::Periodic::Enable "1"; +# - Enable the update/upgrade script (0=disable) +# +# APT::Periodic::BackupArchiveInterval "0"; +# - Backup after n-days if archive contents changed.(0=disable) +# +# APT::Periodic::BackupLevel "3"; +# - Backup level.(0=disable), 1 is invalid. +# +# Dir::Cache::Backup "backup/"; +# - Set periodic package backup directory +# +# APT::Archives::MaxAge "0"; (old, deprecated) +# APT::Periodic::MaxAge "0"; (new) +# - Set maximum allowed age of a cache package file. If a cache +# package file is older it is deleted (0=disable) +# +# APT::Archives::MinAge "2"; (old, deprecated) +# APT::Periodic::MinAge "2"; (new) +# - Set minimum age of a package file. If a file is younger it +# will not be deleted (0=disable). Useful to prevent races +# and to keep backups of the packages for emergency. +# +# APT::Archives::MaxSize "0"; (old, deprecated) +# APT::Periodic::MaxSize "0"; (new) +# - Set maximum size of the cache in MB (0=disable). If the cache +# is bigger, cached package files are deleted until the size +# requirement is met (the oldest packages will be deleted +# first). +# +# APT::Periodic::Update-Package-Lists "0"; +# - Do "apt-get update" automatically every n-days (0=disable) +# +# APT::Periodic::Download-Upgradeable-Packages "0"; +# - Do "apt-get upgrade --download-only" every n-days (0=disable) +# +# APT::Periodic::Download-Upgradeable-Packages-Debdelta "1"; +# - Use debdelta-upgrade to download updates if available (0=disable) +# +# APT::Periodic::Unattended-Upgrade "0"; +# - Run the "unattended-upgrade" security upgrade script +# every n-days (0=disabled) +# Requires the package "unattended-upgrades" and will write +# a log in /var/log/unattended-upgrades +# +# APT::Periodic::AutocleanInterval "0"; +# - Do "apt-get autoclean" every n-days (0=disable) +# +# APT::Periodic::CleanInterval "0"; +# - Do "apt-get clean" every n-days (0=disable) +# +# APT::Periodic::Verbose "0"; +# - Send report mail to root +# 0: no report (or null string) +# 1: progress report (actually any string) +# 2: + command outputs (remove -qq, remove 2>/dev/null, add -d) +# 3: + trace on +# + +check_stamp() +{ + stamp="$1" + interval="$2" + + if [ "$interval" = always ]; then + debug_echo "check_stamp: ignoring time stamp file, interval set to always" + # treat as enough time has passed + return 0 + fi + + if [ "$interval" = 0 ]; then + debug_echo "check_stamp: interval=0" + # treat as no time has passed + return 1 + fi + + if [ ! -f "$stamp" ]; then + debug_echo "check_stamp: missing time stamp file: $stamp." + # treat as enough time has passed + return 0 + fi + + # compare midnight today to midnight the day the stamp was updated + stamp_file="$stamp" + stamp=$(date --date="$(date -r "$stamp_file" --iso-8601)" +%s 2>/dev/null) + if [ "$?" != "0" ]; then + # Due to some timezones returning 'invalid date' for midnight on + # certain dates (e.g. America/Sao_Paulo), if date returns with error + # remove the stamp file and return 0. See coreutils bug: + # http://lists.gnu.org/archive/html/bug-coreutils/2007-09/msg00176.html + rm -f "$stamp_file" + return 0 + fi + + now=$(date --date="$(date --iso-8601)" +%s 2>/dev/null) + if [ "$?" != "0" ]; then + # As above, due to some timezones returning 'invalid date' for midnight + # on certain dates (e.g. America/Sao_Paulo), if date returns with error + # return 0. + return 0 + fi + + delta=$((now-stamp)) + + # Calculate the interval in seconds depending on the unit specified + if [ "${interval%s}" != "$interval" ] ; then + interval="${interval%s}" + elif [ "${interval%m}" != "$interval" ] ; then + interval="${interval%m}" + interval=$((interval*60)) + elif [ "${interval%h}" != "$interval" ] ; then + interval="${interval%h}" + interval=$((interval*60*60)) + else + interval="${interval%d}" + interval=$((interval*60*60*24)) + fi + + debug_echo "check_stamp: interval=$interval, now=$now, stamp=$stamp, delta=$delta (sec)" + + # remove timestamps a day (or more) in the future and force re-check + if [ "$stamp" -gt $((now+86400)) ]; then + echo "WARNING: file $stamp_file has a timestamp in the future: $stamp" + rm -f "$stamp_file" + return 0 + fi + + if [ $delta -ge $interval ]; then + return 0 + fi + + return 1 +} + +update_stamp() +{ + stamp="$1" + touch "$stamp" +} + +# we check here if autoclean was enough sizewise +check_size_constraints() +{ + MaxAge=0 + eval $(apt-config shell MaxAge APT::Archives::MaxAge) + eval $(apt-config shell MaxAge APT::Periodic::MaxAge) + + MinAge=2 + eval $(apt-config shell MinAge APT::Archives::MinAge) + eval $(apt-config shell MinAge APT::Periodic::MinAge) + + MaxSize=0 + eval $(apt-config shell MaxSize APT::Archives::MaxSize) + eval $(apt-config shell MaxSize APT::Periodic::MaxSize) + + Cache="/var/cache/apt/archives/" + eval $(apt-config shell Cache Dir::Cache::archives/d) + + # sanity check + if [ -z "$Cache" ]; then + echo "empty Dir::Cache::archives, exiting" + exit + fi + + # check age + if [ ! $MaxAge -eq 0 ] && [ ! $MinAge -eq 0 ]; then + debug_echo "aged: ctime <$MaxAge and mtime <$MaxAge and ctime>$MinAge and mtime>$MinAge" + find $Cache -name "*.deb" \( -mtime +$MaxAge -and -ctime +$MaxAge \) -and -not \( -mtime -$MinAge -or -ctime -$MinAge \) -print0 | xargs -r -0 rm -f + elif [ ! $MaxAge -eq 0 ]; then + debug_echo "aged: ctime <$MaxAge and mtime <$MaxAge only" + find $Cache -name "*.deb" -ctime +$MaxAge -and -mtime +$MaxAge -print0 | xargs -r -0 rm -f + else + debug_echo "skip aging since MaxAge is 0" + fi + + # check size + if [ ! $MaxSize -eq 0 ]; then + # maxSize is in MB + MaxSize=$((MaxSize*1024)) + + #get current time + now=$(date --date="$(date --iso-8601)" +%s) + MinAge=$((MinAge*24*60*60)) + + # reverse-sort by mtime + for file in $(ls -rt $Cache/*.deb 2>/dev/null); do + du=$(du -s $Cache) + size=${du%%/*} + # check if the cache is small enough + if [ $size -lt $MaxSize ]; then + debug_echo "end remove by archive size: size=$size < $MaxSize" + break + fi + + # check for MinAge of the file + if [ $MinAge -ne 0 ]; then + # check both ctime and mtime + mtime=$(stat -c %Y "$file") + ctime=$(stat -c %Z "$file") + if [ "$mtime" -gt "$ctime" ]; then + delta=$((now-mtime)) + else + delta=$((now-ctime)) + fi + if [ $delta -le $MinAge ]; then + debug_echo "skip remove by archive size: $file, delta=$delta < $MinAge" + break + else + # delete oldest file + debug_echo "remove by archive size: $file, delta=$delta >= $MinAge (sec), size=$size >= $MaxSize" + rm -f "$file" + fi + fi + done + fi +} + +# deal with the Apt::Periodic::BackupArchiveInterval +do_cache_backup() +{ + BackupArchiveInterval="$1" + if [ "$BackupArchiveInterval" = always ]; then + : + elif [ "$BackupArchiveInterval" = 0 ]; then + return + fi + + # Set default values and normalize + CacheDir="/var/cache/apt" + eval $(apt-config shell CacheDir Dir::Cache/d) + CacheDir=${CacheDir%/} + if [ -z "$CacheDir" ]; then + debug_echo "practically empty Dir::Cache, exiting" + return 0 + fi + + Cache="${CacheDir}/archives/" + eval $(apt-config shell Cache Dir::Cache::Archives/d) + if [ -z "$Cache" ]; then + debug_echo "practically empty Dir::Cache::archives, exiting" + return 0 + fi + + BackupLevel=3 + eval $(apt-config shell BackupLevel APT::Periodic::BackupLevel) + if [ $BackupLevel -le 1 ]; then + BackupLevel=2 ; + fi + + Back="${CacheDir}/backup/" + eval $(apt-config shell Back Dir::Cache::Backup/d) + if [ -z "$Back" ]; then + echo "practically empty Dir::Cache::Backup, exiting" 1>&2 + return + fi + + CacheArchive="$(basename "${Cache}")" + test -n "${CacheArchive}" || CacheArchive="archives" + BackX="${Back}${CacheArchive}/" + for x in $(seq 0 1 $((BackupLevel-1))); do + eval "Back${x}=${Back}${x}/" + done + + # backup after n-days if archive contents changed. + # (This uses hardlink to save disk space) + BACKUP_ARCHIVE_STAMP=/var/lib/apt/periodic/backup-archive-stamp + if check_stamp $BACKUP_ARCHIVE_STAMP "$BackupArchiveInterval"; then + if [ $({ (cd $Cache 2>/dev/null; find . -name "*.deb"); (cd $Back0 2>/dev/null;find . -name "*.deb") ;}| sort|uniq -u|wc -l) -ne 0 ]; then + mkdir -p $Back + rm -rf $Back$((BackupLevel-1)) + for y in $(seq $((BackupLevel-1)) -1 1); do + eval BackY=${Back}$y + eval BackZ=${Back}$((y-1)) + if [ -e $BackZ ]; then + mv -f $BackZ $BackY ; + fi + done + cp -la $Cache $Back ; mv -f $BackX $Back0 + update_stamp $BACKUP_ARCHIVE_STAMP + debug_echo "backup with hardlinks. (success)" + else + debug_echo "skip backup since same content." + fi + else + debug_echo "skip backup since too new." + fi +} + +debug_echo() +{ + # Display message if $VERBOSE >= 1 + if [ "$VERBOSE" -ge 1 ]; then + echo "$1" 1>&2 + fi +} + +# ------------------------ main ---------------------------- +if [ "$1" = "lock_is_held" ]; then + shift +else + # Maintain a lock on fd 3, so we can't run the script twice at the same + # time. + eval $(apt-config shell StateDir Dir::State/d) + exec 3>${StateDir}/daily_lock + if ! flock -w 3600 3; then + echo "E: Could not acquire lock" >&2 + exit 1 + fi + + # We hold the lock. Rerun this script as a child process, which + # can run without propagating an extra fd to all of its children. + "$0" lock_is_held "$@" 3>&- + exit $? +fi + +if test -r /var/lib/apt/extended_states; then + # Backup the 7 last versions of APT's extended_states file + # shameless copy from dpkg cron + if cd /var/backups ; then + if ! cmp -s apt.extended_states.0 /var/lib/apt/extended_states; then + cp -p /var/lib/apt/extended_states apt.extended_states + savelog -c 7 apt.extended_states >/dev/null + fi + fi +fi + +# check apt-config existence +if ! command -v apt-config >/dev/null; then + exit 0 +fi + +# check if the user really wants to do something +AutoAptEnable=1 # default is yes +eval $(apt-config shell AutoAptEnable APT::Periodic::Enable) + +if [ $AutoAptEnable -eq 0 ]; then + exit 0 +fi + +# Set VERBOSE mode from apt-config (or inherit from environment) +VERBOSE=0 +eval $(apt-config shell VERBOSE APT::Periodic::Verbose) +debug_echo "verbose level $VERBOSE" +if [ "$VERBOSE" -le 1 ]; then + # quiet for 0/1 + XSTDOUT=">/dev/null" + XSTDERR="2>/dev/null" + XAPTOPT="-qq" + XUUPOPT="" +else + XSTDOUT="" + XSTDERR="" + XAPTOPT="" + XUUPOPT="-d" +fi +if [ "$VERBOSE" -ge 3 ]; then + # trace output + set -x +fi + +# check if we can lock the cache and if the cache is clean +if command -v apt-get >/dev/null && ! eval apt-get check $XAPTOPT $XSTDERR ; then + debug_echo "error encountered in cron job with \"apt-get check\"." + exit 0 +fi + +# Global current time in seconds since 1970-01-01 00:00:00 UTC +now=$(date +%s) + +# Support old Archive for compatibility. +# Document only Periodic for all controlling parameters of this script. + +UpdateInterval=0 +eval $(apt-config shell UpdateInterval APT::Periodic::Update-Package-Lists) + +DownloadUpgradeableInterval=0 +eval $(apt-config shell DownloadUpgradeableInterval APT::Periodic::Download-Upgradeable-Packages) + +UnattendedUpgradeInterval=0 +eval $(apt-config shell UnattendedUpgradeInterval APT::Periodic::Unattended-Upgrade) + +AutocleanInterval=0 +eval $(apt-config shell AutocleanInterval APT::Periodic::AutocleanInterval) + +CleanInterval=0 +eval $(apt-config shell CleanInterval APT::Periodic::CleanInterval) + +BackupArchiveInterval=0 +eval $(apt-config shell BackupArchiveInterval APT::Periodic::BackupArchiveInterval) + +Debdelta=1 +eval $(apt-config shell Debdelta APT::Periodic::Download-Upgradeable-Packages-Debdelta) + +# check if we actually have to do anything that requires locking the cache +if [ $UpdateInterval = always ] || + [ $DownloadUpgradeableInterval = always ] || + [ $UnattendedUpgradeInterval = always ] || + [ $BackupArchiveInterval = always ] || + [ $AutocleanInterval = always ] || + [ $CleanInterval = always ] ; then + : +elif [ $UpdateInterval = 0 ] && + [ $DownloadUpgradeableInterval = 0 ] && + [ $UnattendedUpgradeInterval = 0 ] && + [ $BackupArchiveInterval = 0 ] && + [ $AutocleanInterval = 0 ] && + [ $CleanInterval = 0 ] ; then + + # check cache size + check_size_constraints + + exit 0 +fi + +if [ "$1" = "update" ] || [ -z "$1" ] ; then + # deal with BackupArchiveInterval + do_cache_backup $BackupArchiveInterval + + # include default system language so that "apt-get update" will + # fetch the right translated package descriptions + if [ -r /etc/default/locale ]; then + . /etc/default/locale + export LANG LANGUAGE LC_MESSAGES LC_ALL + fi + + # update package lists + UPDATED=0 + UPDATE_STAMP=/var/lib/apt/periodic/update-stamp + if check_stamp $UPDATE_STAMP $UpdateInterval; then + if eval apt-get $XAPTOPT -y update $XSTDERR; then + debug_echo "download updated metadata (success)." + update_stamp $UPDATE_STAMP + UPDATED=1 + else + debug_echo "download updated metadata (error)" + fi + else + debug_echo "download updated metadata (not run)." + fi + + # download all upgradeable packages (if it is requested) + DOWNLOAD_UPGRADEABLE_STAMP=/var/lib/apt/periodic/download-upgradeable-stamp + if [ $UPDATED -eq 1 ] && check_stamp $DOWNLOAD_UPGRADEABLE_STAMP $DownloadUpgradeableInterval; then + if [ $Debdelta -eq 1 ]; then + debdelta-upgrade >/dev/null 2>&1 || true + fi + if eval apt-get $XAPTOPT -y -d dist-upgrade $XSTDERR; then + update_stamp $DOWNLOAD_UPGRADEABLE_STAMP + debug_echo "download upgradable (success)" + else + debug_echo "download upgradable (error)" + fi + else + debug_echo "download upgradable (not run)" + fi + + if command -v unattended-upgrade >/dev/null && env LC_ALL=C.UTF-8 unattended-upgrade --help | grep -q download-only && check_stamp $DOWNLOAD_UPGRADEABLE_STAMP $UnattendedUpgradeInterval; then + if unattended-upgrade --download-only $XUUPOPT; then + update_stamp $DOWNLOAD_UPGRADEABLE_STAMP + debug_echo "unattended-upgrade -d (success)" + else + debug_echo "unattended-upgrade -d (error)" + fi + else + debug_echo "unattended-upgrade -d (not run)" + fi +fi + +if [ "$1" = "install" ] || [ -z "$1" ] ; then + # auto upgrade all upgradeable packages + UPGRADE_STAMP=/var/lib/apt/periodic/upgrade-stamp + if command -v unattended-upgrade >/dev/null && check_stamp $UPGRADE_STAMP $UnattendedUpgradeInterval; then + if unattended-upgrade $XUUPOPT; then + update_stamp $UPGRADE_STAMP + debug_echo "unattended-upgrade (success)" + else + debug_echo "unattended-upgrade (error)" + fi + else + debug_echo "unattended-upgrade (not run)" + fi + + # clean package archive + CLEAN_STAMP=/var/lib/apt/periodic/clean-stamp + if check_stamp $CLEAN_STAMP $CleanInterval; then + if eval apt-get $XAPTOPT -y clean $XSTDERR; then + debug_echo "clean (success)." + update_stamp $CLEAN_STAMP + else + debug_echo "clean (error)" + fi + else + debug_echo "clean (not run)" + fi + + # autoclean package archive + AUTOCLEAN_STAMP=/var/lib/apt/periodic/autoclean-stamp + if check_stamp $AUTOCLEAN_STAMP $AutocleanInterval; then + if eval apt-get $XAPTOPT -y autoclean $XSTDERR; then + debug_echo "autoclean (success)." + update_stamp $AUTOCLEAN_STAMP + else + debug_echo "autoclean (error)" + fi + else + debug_echo "autoclean (not run)" + fi + + # check cache size + check_size_constraints +fi + +# +# vim: set sts=4 ai : +# + diff --git a/debian/changelog b/debian/changelog new file mode 100644 index 0000000..5961148 --- /dev/null +++ b/debian/changelog @@ -0,0 +1,12450 @@ +apt (2.6.1) unstable; urgency=medium + + * Restore adduser dependency for bookworm. + This caused some regressions to late in the bookworm cycle. To keep + upgrade paths (which will have adduser installed) the same, we drop + the base-password alternative rather than requiring both dependencies, + as that could change resolving or ordering bugs. (Closes: #1035654) + * Point gitlab-ci and gbp to bookworm/2.6.y + + -- Julian Andres Klode Thu, 25 May 2023 16:11:37 +0200 + +apt (2.6.0) unstable; urgency=medium + + * The "unhappy bookworm" release. Too many changes needed to clarify + licensing. + + [ Cyril Brulebois ] + * Teach apt-cdrom's scoring system about non-free-firmware (Closes: #1029751) + + [ David Kalnischkies ] + * More support for non-free-firmware + - Have values in Section config trees refer to them in all components + - Add non-free-firmware component in documentation + - Suggest using non-free-firmware in update for Debian + * other bookworm regressions: + - Bump codenames in docs in preparation for Debian 12 + - Detect trimmed changelogs and pick online instead (Closes: #1024457) + * Do not store trusted=yes Release file unconditionally + + [ Miroslav Kure ] + * Czech program translation update (Closes: #1031008) + + [ Bastian Germann ] + * machine-readable version of COPYING (Closes: #1019273), initial version + + [ Julian Andres Klode ] + * Update lintian override info format in d/apt.lintian-overrides + * Further work on machine-readable COPYING file and the source code comments + to address licensing inadequacies: + - Address statements of public domain + - po/nb.po: Relicensing GPL-2.0 -> GPL-2.0+. Thanks Petter for chasing + down the copyright holders and getting agreement. + - COPYING: Group by license + - Address translation licensing concerns + - COPYING: Address RunScripts() + - We do not believe rsh was supposed to exclude GPL-3 + This unfortunately creates a bit of churn, but updating the COPYING file + without addressing the actual licensing issues would not have solved the + bug. + + -- Julian Andres Klode Mon, 06 Mar 2023 13:26:39 +0100 + +apt (2.5.6) unstable; urgency=medium + + [ MichaIng ] + * Document --allow-insecure-repositories + + [ Helge Kreutzmann ] + * German program translation update (Closes: #1029280) + + [ David Kalnischkies ] + * Build with and fix warnings of gcc-13 (Closes: #1030592) + + -- Julian Andres Klode Wed, 08 Feb 2023 17:07:38 +0100 + +apt (2.5.5) unstable; urgency=medium + + [ David Kalnischkies ] + * Do not document path to be repeatable in apt-ftparchive cmds + + [ Julian Andres Klode ] + * gitlab-ci: Install adduser + * make ?installed pattern match installed version only when narrowed + * apt-patterns(7): Grouping with () and or using | are supported + + [ Egon Willighagen ] + * Typo fix + + [ Camiel Vletter ] + * improve `--help` text for cmdline `apt autoremove` + + [ Frans Spiesschaert ] + * Dutch manpages translation update (Closes: #1023456, #1025843) + + [ Алексей Шилин ] + * Add 'tasks' section to default APT::Never-MarkAuto-Sections list + + -- Julian Andres Klode Tue, 17 Jan 2023 16:33:38 +0100 + +apt (2.5.4) unstable; urgency=medium + + [ David Kalnischkies ] + * Report failures back from debSystem::AddStatusFiles + * Avoid dealing with a fake dpkg stanza in the tests + * Allow apt to run if no dpkg/status file exists + + [ Johannes Schauer Marin Rodrigues ] + * since base-passwd 3.6.1 the _apt user is in the default /etc/passwd + + [ Boyuan Yang ] + * po/zh_CN.po: Update translation for apt/2.5.3 + + [ quazgar ] + * Documentation for autopurge command + + [ Julian Andres Klode ] + * Actually delete temporary apt-key.*.asc helper files (LP: #1995247) + + -- Julian Andres Klode Mon, 31 Oct 2022 12:11:04 +0100 + +apt (2.5.3) unstable; urgency=medium + + [ Povilas Kanapickas ] + * doc: Explain that apt-get download ensures package authenticity + + [ David Kalnischkies ] + * Keep color disabled if APT::Color was set to false + * Don't reuse filename for in-tree builds of apt + * Respect users pkg order on `apt install` for resolving + + [ Hideki Yamane ] + * Fix typo in Japanese program translation + + [ lancethepants ] + * porting (musl): + - apt-pkg/contrib/fileutl.h Explicitly include sys/stat.h + + [ Khem Raj ] + * porting (clang15): + - typecast time_t and suseconds_t from std::chrono + - interactive-helper: Undefine _FORTIFY_SOURCE + + [ Julian Andres Klode ] + * edsp: Add support for phased updates (test in LP#1990586) + * Check state of dependency, not depender in dependency keep back + (LP: #1990684) + * full-upgrade: Mark phased upgrades for keep before anything else + (LP: #1990586) + + -- Julian Andres Klode Wed, 28 Sep 2022 17:16:41 +0200 + +apt (2.5.2) unstable; urgency=medium + + [ Julian Andres Klode ] + * Mark broken reverse depends for upgrade (LP: #1974196) + * Upgrade all binaries in a source package + + [ Michael Vogt ] + * apt-pkg: (re)export pkgTagSection::Key to fix FTBFS in python-apt + (Closes: #1011678) + + -- Julian Andres Klode Sun, 24 Jul 2022 17:57:24 +0200 + +apt (2.5.1) unstable; urgency=medium + + [ Américo Monteiro ] + * Portuguese manpages translation update (Closes: #1011315) + + [ Ronan Desplanques ] + * Fix integer underflow in flExtension + + [ Roberto C. Sánchez ] + * Some minor tweaks of spelling/grammar for better readability. + + [ Tianon Gravi ] + * Switch from "security.d.o" to "deb.d.o" (matching bullseye release notes) + + [ Julian Andres Klode ] + * (Temporarily) Rewrite phased updates using a keep-back approach + (LP: #1979244) + * policy: Do not override negative pins with 1 due to phasing (LP: #1978125) + + -- Julian Andres Klode Thu, 30 Jun 2022 13:27:30 +0200 + +apt (2.5.0) unstable; urgency=medium + + [ Helmut Grohne ] + * Avoid use of deprecated std::iterator (twice) (Closes: #1008036) + + [ David Kalnischkies ] + * Document tagfile-keys.h as internal to apt + * Drop support for long obsoleted Suggests alias: Optional + * Do not order long obsoleted fields anymore + * Stop parsing undocumented unknown EDSP field APT-Hash + * Avoid .c_str() on strings feed into pkgTagSection::FindS + * Use pkgTagSection::Key in more places in src:apt + * Parse Checksum fields via pkgTagSection::Key, too + * Avoid building all docs in nodoc build profile + * Add pkg.apt.nodoxygen build profile + * Use build-dep & satisfy for our CI dependency resolution + * Mark pkg-config-test autopkgtest as superficial + * Avoid building inside the source dir in autopkgtest + * Link interactive helpers against system libapt for autopkgtest + * Remove unused public zlib include from libapt fileutl.h + * Run ./prepare-release post-build checks in Gitlab CI + * Do not build documentation twice in CI + * Ignore stty failures in testcases + * Include our config.h in all C++ files to avoid ODR violations + * Ship our README.md in apt package + + [ Frans Spiesschaert ] + * Dutch program translation update (Closes: #1010029) + * Dutch manpages translation update (Closes: #1010030) + + [ Troy Varney ] + * Fix mirror method dequeuing incorrect items + + [ Julian Andres Klode ] + * Do not accept arguments for apt-cache dotty, xvcg. + These commands do not actually interpret the same + arguments as depends, or any own ones for that matter. + * tests: Add g++ dependency to pkg-config test + + [ Vagrant Cascadian ] + * Pass -DCMAKE_BUILD_RPATH_USE_ORIGIN=ON via dh_auto_configure override + (Closes: #1009796) + * Add support for "nodoc" build profile (Closes: #1009797) + + -- Julian Andres Klode Tue, 17 May 2022 18:50:45 +0200 + +apt (2.4.5) unstable; urgency=medium + + * Only protect two kernels, not last installed one (LP: #1968154) + * Fix segfault in CacheSetHelperAPTGet::tryVirtualPackage() + + -- Julian Andres Klode Fri, 08 Apr 2022 12:22:23 +0200 + +apt (2.4.4) unstable; urgency=medium + + [ David Kalnischkies ] + * Recognize Static-Built-Using and order it below Built-Using + (Closes: #1008759) + + -- Julian Andres Klode Fri, 01 Apr 2022 18:47:31 +0200 + +apt (2.4.3) unstable; urgency=medium + + [ Guillem Jover ] + * Update .mailmap + + [ David Kalnischkies ] + * Fix build failure with gcc-12 due to missing include (Closes: #1008036) + * Avoid using unqualified make_pair potentially triggering ftbfs + + -- Julian Andres Klode Mon, 21 Mar 2022 09:20:41 +0100 + +apt (2.4.2) unstable; urgency=medium + + [ Frans Spiesschaert ] + * Dutch manpages translation update (Closes: #1005781) + + [ David Kalnischkies ] + * Revert "bugscript: switch from bash to POSIX shell" (Closes: #1007121) + + [ Helge Kreutzmann ] + * German program translation update (Closes: #1007128) + + -- Julian Andres Klode Thu, 17 Mar 2022 09:17:27 +0100 + +apt (2.4.1) unstable; urgency=medium + + [ Paul Wise ] + * Document the APT::Periodic interval suffixes and "always" value + + [ Julian Andres Klode ] + * gpgv: Fix legacy fallback on unavailable keys + * gpgv: Use Valid instead of Good to determine fallback + + -- Julian Andres Klode Mon, 07 Mar 2022 14:06:10 +0100 + +apt (2.4.0) unstable; urgency=medium + + [ Jörn-Thorben Hinz ] + * Provide the same bash-completions for autopurge as for autoremove + * Provide bash-completions for reinstall (same as for install) + (Closes: #930295) + * Don’t bash-complete package names before the command word + + [ Boyuan Yang ] + * Simplified Chinese program translation update (Closes: #1004931) + + [ David Kalnischkies ] + * Allow --solver apt to work on apt satisfy + + [ Julian Andres Klode ] + * Install an empty /etc/apt/keyrings directory. + This directory is intended to provide an alternative to + /usr/share/keyrings for placing keys used with signed-by. + * Warn if the legacy trusted.gpg keyring is used for verification + + [ Paul Wise ] + * bugscript: switch to POSIX shell, quoting, other improvements + + [ Croydon ] + * Readme: Default branch is now main + + [ Johannes Schauer Marin Rodrigues ] + * doc/apt-key.8.xml: document alternatives to apt-key add (Closes: #1002820) + + -- Julian Andres Klode Tue, 22 Feb 2022 20:00:46 +0100 + +apt (2.3.15) unstable; urgency=medium + + [ Arnaud Rebillout ] + * Fix incorrect type when parsing Size (int to unsigned long long) + (Closes: #1004064) + + [ Julian Andres Klode ] + * Add a --full mode to apt show + + [ Ville Skyttä ] + * Fix "was already not hold" message grammar + + [ Jörn-Thorben Hinz ] + * Also bash-complete .deb filenames after `apt install` for paths starting with ~ + * Bash-complete either package name or .deb filename for `apt install` + * Start bash-completing .deb file paths after the first . passed in an argument to `apt install` + * Provide bash-completion of .dsc filenames for `apt build-dep` + (Closes: #985899) + * Don’t fail bash-completion for `apt` when the nounset option is set + * bash-completion: Don’t misidentify short options as commands to `apt` + + -- Julian Andres Klode Tue, 01 Feb 2022 18:04:58 +0100 + +apt (2.3.14) unstable; urgency=medium + + [ Helge Kreutzmann ] + * German program translation update (Closes: #1000537) + + [ Walter Lozano ] + * Use short options for cmp + + [ Ville Skyttä ] + * Spelling fixes + + [ Zhang Boyang ] + * Fix incorrect SIGWINCH handling (Closes: #852757) + + [ Johannes Schauer Marin Rodrigues ] + * add pattern to select packages by codename (closes: #1002646) + * test/integration/test-policy-pinning: test listing multiple package in Package: field + * doc/apt_preferences.5.xml: document Package field syntax + + [ Frans Spiesschaert ] + * Dutch program translation update (Closes: #1002476) + + [ Julian Andres Klode ] + * Introduce and use isalpha_ascii() in debversion rather than isalpha() + + -- Julian Andres Klode Thu, 06 Jan 2022 20:57:39 +0100 + +apt (2.3.13) unstable; urgency=medium + + [ Alexander Kanavin ] + * apt-pkg/contrib/srvrec.h: Explicitly include sys/types.h + + [ Américo Monteiro ] + * Portuguese manpages translation update (Closes: #1000424) + + [ David Kalnischkies ] + * Support more than exact release matches in 'source' (Closes: #998444) + + [ Cameron Katri ] + * basehttp: Rename HaveContent's Tristate + + -- Julian Andres Klode Wed, 24 Nov 2021 16:24:21 +0100 + +apt (2.3.12) unstable; urgency=medium + + [ Ville Skyttä ] + * Use `command -v` instead of `which` + * bash completion: use `grep -E` instead of `egrep` + + [ Victor Westerhuis ] + * Don't print every inline PGP key in Signed-By + + [ Frans Spiesschaert ] + * Dutch manpages translation update (Closes: #998830) + + [ Julian Andres Klode ] + * Require argument to remove essential packages, do not prompt + * Do not remove Essential/Protected due to dependencies. + Thanks to Ariadne Conill for the inspiration + + -- Julian Andres Klode Wed, 17 Nov 2021 18:26:57 +0100 + +apt (2.3.11) unstable; urgency=medium + + [ David Kalnischkies ] + * Allow version selection to match versioned self-provides + * Allow =version and /release selector on virtual packages + + [ Johannes Schauer Marin Rodrigues ] + * apt-pkg/deb/dpkgpm.cc: make DPkg::Chroot-Directory work under fakechroot + + [ Julian Andres Klode ] + * Respect NO_COLOR environment variable + * Invalidate cached architecture list when building cache. + Fixes a regression in python-apt where switching the architectures + in the config between cache invocations regressed. + + -- Julian Andres Klode Thu, 21 Oct 2021 12:20:24 +0200 + +apt (2.3.10) unstable; urgency=medium + + [ Julian Andres Klode ] + * basehttp: Turn HaveContent into a TriState + * Set haveContent to FALSE on `Content-Length: 0` (Closes: #990281) + * Add support for embedding PGP keys into Signed-By in deb822 sources + + [ David Kalnischkies ] + * All pkgCaches are MultiArch caches + * Do not strip M-A for native build-dep resolution + * Do not make provides of M-A:allowed implicit M-A:foreign + * Barbarian M-A:allowed don't satisfy :any deps of other archs + * Streamline access to barbarian architecture functionality + * Read and work with canonical file-URIs from sources.lists + * Use https config on https proxies for http servers (Closes: #990555) + * Add AllowRange option to disable HTTP Range usage + * Disable HTTP Range usage if varnish < 6.4 is involved + * Use exact If-Range match in our test webserver + + [ Johannes Schauer Marin Rodrigues ] + * add pattern to select packages by priority (closes: #989558) + + -- Julian Andres Klode Mon, 18 Oct 2021 16:35:21 +0200 + +apt (2.3.9) unstable; urgency=medium + + [ Frans Spiesschaert ] + * Dutch manpages translation update (Closes: #992352) + + [ David Kalnischkies ] + * Fix infinite recursions in MarkPackage and improve recursions in general + - Inhibit autoremove calculation in apt-mark and apt show + - Don't venture too deeply in AutoRemovers MarkPackage + - Stop autoremover from endlessly exploring cyclic providers (Closes: #992993) + - Increase recursion limits from 100 to 3000 + + [ Julian Andres Klode ] + * Improve error handling of cycling delayed queues + + -- Julian Andres Klode Tue, 07 Sep 2021 17:25:44 +0200 + +apt (2.3.8) unstable; urgency=medium + + * Upload to unstable + * Bump to C++17 + + -- Julian Andres Klode Sat, 14 Aug 2021 23:51:55 +0200 + +apt (2.3.7) experimental; urgency=medium + + [ David Kalnischkies ] + * Use full item description in broken repo error + * Store size from volatile sources for already installed versions + * Restore dpkg::chroot-directory functionality + + [ Dillon Brock ] + * apt.conf(5): indicate # is also used for comments (LP: #1309658) + + [ Julian Andres Klode ] + * Check sources.list could be parsed before adding volatile files + (Closes: #990518) + * pkgAcqIndex::CommonFailed: Set StatIdle before calling Init() + * Implement exponential backoff between retries + - acquire: Automatically reduce select() timeout as needed + - Properly convert PulseInterval to timeval + - Add support for a maximum delay and testing of delay + - tests (retry-downloads): Avoid delay in second test + + -- Julian Andres Klode Thu, 29 Jul 2021 16:59:39 +0200 + +apt (2.3.6) experimental; urgency=medium + + [ David Kalnischkies ] + * URI encode Filename field of Packages files (again) + * Do not use filename of local sources in 'apt download' + * No URL decode and quoting support for Files in Sources + + -- Julian Andres Klode Wed, 09 Jun 2021 13:41:20 +0200 + +apt (2.3.5) experimental; urgency=medium + + * policy: Apply phasing to uninstalled packages too (LP: #1925745) + + -- Julian Andres Klode Mon, 17 May 2021 11:43:23 +0200 + +apt (2.3.4) experimental; urgency=medium + + [ Khem Raj ] + * srvrec: Keep support for older resolver + + [ Julian Andres Klode ] + * Turn TLS handshake issues into transient errors (LP: #1928100) + + -- Julian Andres Klode Wed, 12 May 2021 18:04:33 +0200 + +apt (2.3.3) experimental; urgency=medium + + [ David Kalnischkies ] + * Allow superfluous commas in build-dependency lines + * Mark only provides from protected versioned kernel packages + * Count uninstallable packages in "not upgraded" (Closes: #981535) + * Reexplore providers of marked packages if some didn't satisfy before + * Call MarkAndSweep only manually in apt-get for autoremove + * Store versioned kernel package detectors in d-pointer + + [ Brian Murray ] + * Fix a typo in json-hooks-protocol.md + + [ Julian Andres Klode ] + * Temporarily Revert "2.3-only: Warn that the 0.1 protocol is deprecated" + + -- Julian Andres Klode Thu, 29 Apr 2021 10:43:19 +0200 + +apt (2.3.2) experimental; urgency=medium + + * Remove inversed comment for AllowUnsizedPackages + * Automatically retry failed downloads 3 times. + Enable the Acquire::Retries option by default, set to 3. + This will help with slightly unreliable networking; future + work is needed for adding backoff and SRV/IP rotation. (LP: #1876035) + * Require dpkg >= 1.20.8 and make more use of --auto-deconfigure now that + no longer needs forcing for essential/protected: + - Support deconfiguring Essential packages + - Do not pass --force-remove-protected with --auto-deconfigure + * JSON hook bug fixes: + - json: Escape strings using \u escape sequences, add test + - json: Actually pop states + - json: Encode NULL strings as null + - json: Flush standard file descriptors before calling hooks + - test/json: Make the test hook more reliable + * JSON hooks 0.2: + - json: Add origins fields to version + - upgrade: Add JSON hook support (AptCli::Hooks::Upgrade) + - json: Add `package-list` and `statistics` install hooks + - json: Hook protocol 0.2 (added upgrade,downgrade,reinstall modes) + - 2.3-only: Warn that the 0.1 protocol is deprecated + * Avoid infinite loop on EOF on media change prompt + + -- Julian Andres Klode Fri, 23 Apr 2021 18:23:15 +0200 + +apt (2.3.1) experimental; urgency=medium + + [ David Kalnischkies ] + * Replace macro and manual management with lambda and RAII: + - Replace multi-statement macro with lambda + - Use RAII to clean up tmp dir for dpkg recursive install + - Handle multi-arch pkgnames for dpkg call via RAII + - Merge the three RAII vectors managing args lifetime + * Harden test for no new acquires after transaction abort (Closes: #984966) + + [ Julian Andres Klode ] + * Check for and discard expected warning from MaybeAddAuth + * Fix downloads of unsized files that are largest in pipeline (LP: #1921626) + * Error on packages without a Size field (option Acquire::AllowUnsizedPackages) + * debian/gbp.conf: HEAD branch is main now + + [ Cameron Katri ] + * add vendor information for Procursus + + -- Julian Andres Klode Tue, 13 Apr 2021 17:23:49 +0200 + +apt (2.3.0) experimental; urgency=medium + + [ David Kalnischkies ] + * Deal with rred shortcomings around empty patch files (LP: #1918112) + - Allow merging with empty pdiff patches + - Rename pdiff merge patches only after they are all downloaded + - Start pdiff patching from the last possible starting point + - Ensure all index files sent custom tags to the methods + + -- Julian Andres Klode Mon, 08 Mar 2021 11:50:31 +0100 + +apt (2.2.1) unstable; urgency=medium + + [ Julian Andres Klode ] + * Do not require force-loopbreak on Protected packages (Closes: #983014) + * Branch of as 2.2.y for bullseye + * configuration: Add missing #include + * Remove .travis.yml, we are using GitLab CI these days + * RunScripts: Do not reset SIGQUIT and SIGINT to SIG_DFL (LP: #1898026) + * regression fix: do require force-loopbreak for Conflicts + + [ Алексей Шилин ] + * Russian translation update (Closes: #983348) + + -- Julian Andres Klode Mon, 01 Mar 2021 22:27:55 +0100 + +apt (2.2.0) unstable; urgency=medium + + * The "Happy soft freeze" release + * Do not make DefaultRootSetFunc2 public symbol + * kernels: Avoid std::regex for escaping '.' and '+' + * symbols: Remove spurious package line, add kernel autoremoval helper + + -- Julian Andres Klode Thu, 18 Feb 2021 20:35:09 +0100 + +apt (2.1.20) unstable; urgency=medium + + * CI: Run test as user on i386 + * Fix test suite regression from StrToNum fixes. The tests started failing + on 32-bit because the values were actually out of range, but we did not + test errno before the last version, so it was not treated as an error. + + -- Julian Andres Klode Wed, 10 Feb 2021 00:03:05 +0100 + +apt (2.1.19) unstable; urgency=medium + + [ Helge Kreutzmann ] + * German program translation update (Closes: #979848) + + [ Youfu Zhang ] + * dpkg: fix passing readonly /dev/null fd as stdout/stderr + + [ Diederik de Haas ] + * Fix apt-acquire-additional-files entity's location. + + [ Wolfgang Schweer ] + * vendor: Adjust Debian -security codename + + [ Julian Andres Klode ] + * Include all translations when building the cache (LP: #1907850) + + [ David Kalnischkies ] + * Various patches uplifted from unfinished fuzzer branches + - Use 500 MB memory limit for xz/lzma decoding + - Guess compressor only if no AR nember with exact name exists + - Free XXH3 state to avoid leak in cache hashing + - Fail ConfigDir reading if directory listing failed + - Retire and deprecate _strtabexpand + - Fix incorrect base64 encoding due to int promotion + - Don't parse \x and \0 past the end in DeEscapeString + - Remove Word size limit from ParseQuote and CWord + - Forbid negative values in unsigned StrToNum explicitly + - Avoid overstepping bounds in config file parsing + - Show 'Done' always for 'Building dependency tree' + - Avoid undefined pointer arithmetic while growing mmap + - Use error reporting instead of assert in rred patching + - Replace PrintStatus with SendMessage usage + - Ensure HTTP status code text has sensible content + - Limit on first patch size only for server-merged patches + - Use size of the old cache as APT::Cache-Start default + - Remove spurious periods on progress strings in po/de.po + + [ Frans Spiesschaert ] + * Dutch program translation update (Closes: #981885) + * Dutch manpages translation update (Closes: #981883) + + -- Julian Andres Klode Tue, 09 Feb 2021 10:41:53 +0100 + +apt (2.1.18) unstable; urgency=high + + * pkgcachegen: Avoid write to old cache for Version::Extra (Closes: #980037) + * Adjust apt-mark test for dpkg 1.20.7 + + -- Julian Andres Klode Wed, 13 Jan 2021 17:37:30 +0100 + +apt (2.1.17) unstable; urgency=medium + + [ Américo Monteiro ] + * Portuguese manpages translation update (Closes: #979725) + + [ Julian Andres Klode ] + * kernels: Fix std::out_of_range if no kernels to protect + * Call ischroot with -t + + -- Julian Andres Klode Mon, 11 Jan 2021 12:10:32 +0100 + +apt (2.1.16) unstable; urgency=medium + + [ Faidon Liambotis ] + * Various fixes to http and connect method + - basehttp: also consider Access when a Server's URI + - connect: convert a C-style string to std::string + - connect: use ServiceNameOrPort, not Port, as the cache key + + [ Julian Andres Klode ] + * patterns: Add dependency patterns ?depends, ?conflicts, etc. + Note that the -broken- variants are not implemented yet. + * Rewrite of the kernel autoremoval code: + - Determine autoremovable kernels at run-time (LP: #1615381), this fixes the + issue where apt could consider a running kernel autoremovable + - Automatically remove unused kernels on apt {full,dist}-upgrade. + This helps ensuring that we don't run out of /boot space. + - Only keep up to 3 (not 4) kernels. + Ubuntu boot partitions were sized for 3 kernels, not 4. + * Bump codenames to bullseye/hirsute and adjust -security codename for + bullseye (Closes: #969932) + * Ignore failures from immediate configuration. This does not change the + actual installation ordering - we never passed the return code to the + caller and installation went underway anyway if it could be ordered at a + later stage, this just removes spurious after-the-fact errors. + (Closes: #973305, #188161, #211075, #649588) (LP: #1871268) + * Add support for Phased-Update-Percentage, previously used only by + update-manager. + * Implement update --error-on=any so that scripts can reliably check for + transient failures as well. (Closes: #594813) + + [ Demi M. Obenour ] + * test/integration/framework: Be compatible with Bash + + [ Vangelis Skarmoutsos ] + * Greek program translation update + + -- Julian Andres Klode Fri, 08 Jan 2021 21:49:15 +0100 + +apt (2.1.15) unstable; urgency=medium + + [ Julian Andres Klode ] + * Unroll pkgCache::sHash 8 time, break up dependency + * Do not require libxxhash-dev for including pkgcachegen.h (Closes: #978171) + + [ David Kalnischkies ] + * Proper URI encoding for config requests to our test webserver + * Keep URIs encoded in the acquire system + * Implement encoded URI handling in all methods + * Don't re-encode encoded URIs in pkgAcqFile + + [ Helge Kreutzmann ] + * German program translation update (Closes: #977938) + + -- Julian Andres Klode Sun, 27 Dec 2020 09:53:07 +0100 + +apt (2.1.14) unstable; urgency=medium + + * test: fixup for hash table size increase (changed output order) + * Use XXH3 for cache, hash table hashing + + -- Julian Andres Klode Tue, 15 Dec 2020 14:07:36 +0100 + +apt (2.1.13) unstable; urgency=medium + + [ Debian Janitor ] + * Apply multi-arch hints. + + apt-doc, libapt-pkg-doc: Add Multi-Arch: foreign. + + [ Jordi Mallach ] + * Fix typo in Catalan translation. + + [ David Kalnischkies ] + * Prepare rred binary for external usage + * Support reading compressed patches in rred direct call modes + * Support compressed output from rred similar to apt-helper cat-file + + [ Julian Andres Klode ] + * gitignore: Add /build and /obj-* build dirs + * gitignore: Add .*.swp files + * HexDigest: Silence -Wstringop-overflow + * patterns: Terminate short pattern by ~ and ! + * SECURITY UPDATE: Integer overflow in parsing (LP: #1899193) + - apt-pkg/contrib/arfile.cc: add extra checks. + - apt-pkg/contrib/tarfile.cc: limit tar item sizes to 128 GiB + - apt-pkg/deb/debfile.cc: limit control file sizes to 64 MiB + - test/*: add tests. + - CVE-2020-27350 + * Additional hardening: + - apt-pkg/contrib/tarfile.cc: Limit size of long names and links to 1 MiB + * Raise APT::Cache-HashtableSize to 196613 + + -- Julian Andres Klode Thu, 10 Dec 2020 15:40:27 +0100 + +apt (2.1.12) unstable; urgency=medium + + [ Julian Andres Klode ] + * pkgnames: Correctly set the default for AllNames to false (LP: #1876495) + * pkgnames: Do not exclude virtual packages with --all-names + * Remove expired domain that became nsfw from debian/changelog + * Do not immediately configure m-a: same packages in lockstep (LP: #1871268) + + [ Américo Monteiro ] + * Portuguese manpages translation update (Closes: #968414) + + [ David Kalnischkies ] + * Rename CMake find_package helpers to avoid developer warnings + * Install translated apt-patterns(7) man pages + * Remove ancient versions support from apts postinst + * Update libapt-pkg6.0 symbols file + * Refresh lintian-overrides of apt and libapt-pkg-doc + + -- Julian Andres Klode Mon, 23 Nov 2020 17:52:37 +0100 + +apt (2.1.11) unstable; urgency=medium + + [ JCGoran ] + * Fix "extended_states" typo in apt-mark(8) (Closes: #969086) + + [ Julian Andres Klode ] + * doc: Bump Ubuntu release from focal to groovy + * Do not produce late error if immediate configuration fails, just warn + (Closes: #953260, #972552) (LP: #1871268) + + [ Frans Spiesschaert ] + * Dutch manpages translation update (Closes: #970037) + + -- Julian Andres Klode Wed, 21 Oct 2020 11:53:18 +0200 + +apt (2.1.10) unstable; urgency=medium + + * Default Acquire::AllowReleaseInfoChange::Suite to "true" (Closes: #931566) + * acquire: Do not hide _error messages in Fail() + * Further improvements to HTTP method (Closes: #968220, verified against + that server and the Canonical infra where it blocked buildds) + - Do not use non-blocking local I/O - they don't do anything anyway, + and we can't really use non-blocking I/O here because we need to be able + to flush it. + - Restore successful exits from Die() and rewrite Die() in a more + comprehensible way, after careful code path analysis + - http: Fully flush local file both before/after server read, avoiding + both partial flush before sending requests to the server, as well as + preventing leftover data before receiving from the server, which cause + data left in the buffer. + + -- Julian Andres Klode Tue, 11 Aug 2020 14:28:07 +0200 + +apt (2.1.9) unstable; urgency=medium + + [ Julian Andres Klode ] + * http: Fix infinite loop on read errors + * basehttp: Correctly handle non-transient failure from RunData() + * Do not retry on failure to fetch (Closes: #968163) + + [ Aleix Vidal i Gaya ] + * updated catalan translations + + -- Julian Andres Klode Mon, 10 Aug 2020 14:16:23 +0200 + +apt (2.1.8) unstable; urgency=medium + + [ Julian Andres Klode ] + * Fully deprecate apt-key, schedule removal for Q2/2022 + * apt-key: Allow depending on gpg instead of gnupg + * Removal of racist terminology, except for two cases that still need consensus + * Various fixes to http code: + - http: Always Close() the connection in Die() + - http: Die(): Merge flushing code from Flush() + - http: Only return false for EOF if we actually did not read anything + - http: Die(): Do not flush the buffer, error out instead + - http: Finish copying data from server to file before sending stuff to server + - http: On select timeout, error out directly, do not call Die() + - http: Redesign reading of pending data + - http: Always write to the file if there's something to write; this fixes + a regression from removing the buffer flushing code + Overall, there's hope this Closes: #959518. It reproduced a bit, but eventually + snapshot.d.o ratelimiting kicked in and broke the test case. + + [ Nicolas Schier ] + * Support marking all newly installed packages as automatically installed + + -- Julian Andres Klode Tue, 04 Aug 2020 12:41:28 +0200 + +apt (2.1.7) unstable; urgency=medium + + [ David Kalnischkies ] + * Do not hardcode (wrong) group and mode in setup warning (Closes: #962310) + * Do not sent our filename-provides trick to EDSP solvers (Closes: #962741) + * Tell EDSP solvers about all installed pkgs ignoring arch + * Deduplicate EDSP Provides line of M-A:foreign packages + * Delay removals due to Conflicts until Depends are resolved + * Filter out impossible solutions for protected propagation + * Add dependency points in the resolver also to providers + * Reorder config check before checking systemd for non-interactive http + * Reorder config check before result looping for SRV parsing debug + * Fix test due to display change in ls (coreutils 8.32) + * Detect pkg-config-dpkghook failure in tests to avoid fallback (Closes: #964475) + + [ Américo Monteiro ] + * Portuguese manpages translation update (Closes: #962483) + + [ Julian Andres Klode ] + * Replace some magic 64*1024 with APT_BUFFER_SIZE + * Add basic support for the Protected field + + [ Sergio Oller Moreno ] + * Minor Catalan grammar typo + + [ Frans Spiesschaert ] + * Dutch program translation update (Closes: #963008) + + -- Julian Andres Klode Wed, 08 Jul 2020 09:38:35 +0200 + +apt (2.1.6) unstable; urgency=medium + + [ David Kalnischkies ] + * Fix small memory leak in MethodConfig + * Consider protected packages for removal if they are marked as such + * Consider if a fix is successful before claiming it is + * Allow 20 instead of 10 loops for pkgProblemResolver + * Deal with duplicates in the solution space of a dep + + -- Julian Andres Klode Wed, 03 Jun 2020 18:25:22 +0200 + +apt (2.1.5) unstable; urgency=medium + + [ David Kalnischkies ] + * Reset candidate version explicitly for internal state-keeping + (Closes: #961266) + * Known-bad candidate versions are not an upgrade option + * Keep status number if candidate is discarded for kept back display + * Allow pkgDepCache to be asked to check internal consistency + * Don't update candidate provides map if the same as current + * Ensure EDSP doesn't use a dangling architecture string + * Allow FMV SSE4.2 detection to succeed on clang + * Mark PatternTreeParser::Node destructor as virtual + + [ Frans Spiesschaert ] + * Dutch manpages translation update (Closes: #961431) + + -- Julian Andres Klode Tue, 26 May 2020 12:19:40 +0200 + +apt (2.1.4) unstable; urgency=medium + + [ David Kalnischkies ] + * Check satisfiability for versioned provides, not providing version + + -- Julian Andres Klode Tue, 19 May 2020 11:28:59 +0200 + +apt (2.1.3) unstable; urgency=medium + + [ David Kalnischkies ] + * Prefer use of O_TMPFILE in GetTempFile if available + * Allow prefix to be a complete filename for GetTempFile + * Properly handle interrupted write() call in ExtractTar + * Skip reading data from tar members if nobody will look at it + * Keep going if a dep is bad for user requests to improve errors + * Support negative dependencies in VCI::FromDependency + * Deal with protected solution providers first + * Propagate protected to already satisfied conflicts (Closes: #960705) + * Propagate protected to already satisfied dependencies + * Recognize propagated protected in pkgProblemResolver + + [ Julian Andres Klode ] + * private-search: Only use V.TranslatedDescription() if good (LP: #1877987) + + -- Julian Andres Klode Mon, 18 May 2020 22:23:27 +0200 + +apt (2.1.2) unstable; urgency=critical + + [ Julian Andres Klode ] + * SECURITY UPDATE: Out of bounds read in ar, tar implementations (LP: #1878177) + - apt-pkg/contrib/arfile.cc: Fix out-of-bounds read in member name + - apt-pkg/contrib/arfile.cc: Fix out-of-bounds read on unterminated + member names in error path + - apt-pkg/contrib/extracttar.cc: Fix out-of-bounds read on unterminated + member names in error path + - CVE-2020-3810 + + [ Frans Spiesschaert ] + * Dutch program translation update (Closes: #960186) + + -- Julian Andres Klode Wed, 13 May 2020 22:04:47 +0200 + +apt (2.1.1) unstable; urgency=medium + + [ David Kalnischkies ] + * Allow aptitude to MarkInstall broken packages via FromUser + * Drop nowrap from po4a --porefs as it is no longer supported + * Use "po4a --porefs file" instead of undocumented compat noline + + [ Artur Grącki ] + * Fix typo in Polish translation of --help messages + + -- Julian Andres Klode Fri, 08 May 2020 18:02:53 +0200 + +apt (2.1.0) unstable; urgency=medium + + [ Frans Spiesschaert ] + * Dutch manpages translation update (Closes: #956313) + + [ David Kalnischkies ] + * Refactor MarkInstall fixing various or-group handling issues + - Discard impossible candidate versions also for non-installed + - Explore or-groups for Recommends further than first + - Refactor and reorder MarkInstall code + - Discard candidate if its dependencies can't be satisfied + - Split up MarkInstall into private helper methods + - Fail earlier on impossible Conflicts in MarkInstall + - Propagate Protected flag to single-option dependencies + - Prefer upgrading installed orgroup members + - Protect a package while resolving in MarkInstall + + [ Julian Andres Klode ] + * Reinstate * wildcards (Closes: #953531) (LP: #1872200) + * apt list: Fix behavior of regex vs fnmatch vs wildcards + + -- Julian Andres Klode Mon, 04 May 2020 15:58:24 +0200 + +apt (2.0.2) unstable; urgency=medium + + [ Boyuan Yang ] + * Simplified Chinese program translation update (Closes: #955023) + + [ Frans Spiesschaert ] + * Dutch program translation update (Closes: #955505) + + [ Marco Ippolito ] + * Fix gramma in apt(8): "by append(+ing) a" (Closes: #955412) + + [ Chris Leick ] + * German manpage translation update + * Fix "string match{ing,es}" and whitespace typo in apt-patterns(7) + + [ Julian Andres Klode ] + * test/integration/apt.pem: Regenerate with SHA2 hashes to make the + test work with stricter gnutls in Ubuntu which rejects SHA1 + * ubuntu: http: Add non-interactive to user agent if run by systemd + (LP: #1825000) + + -- Julian Andres Klode Thu, 09 Apr 2020 12:21:07 +0200 + +apt (2.0.1) unstable; urgency=medium + + [ David Kalnischkies ] + * Don't crash pattern matching sections if pkg has no section + * Parse last line in deb file correctly by adding a newline + + [ Julian Andres Klode ] + * apt-helper: Add analyze-pattern helper + * Add color highlighting to E:/W:/N: prefixes (Closes: #953527) + + [ Алексей Шилин ] + * Russian program translation update (Closes: #953804) + + -- Julian Andres Klode Tue, 24 Mar 2020 11:53:30 +0100 + +apt (2.0.0) unstable; urgency=medium + + * Upload to unstable - Happy APT 2.0 day! + * GetLock: No strerror if it's just another process holding the lock + * Show absolute time while waiting for lock instead of %, rework message + + -- Julian Andres Klode Sat, 07 Mar 2020 21:19:53 +0100 + +apt (1.9.12) experimental; urgency=medium + + * pkgcache: Add operator bool() to map_pointer + * (temporarily) unhide pkgDPkgPM again to have python-apt compile + + -- Julian Andres Klode Thu, 27 Feb 2020 15:06:56 +0100 + +apt (1.9.11) experimental; urgency=medium + + [ Tomáš Janoušek ] + * bash completion: Add autopurge command + + [ Tris Emmy Wilson ] + * apt-mark: don't lie about successful marks + + [ Julian Andres Klode ] + * apt(8): Wait for lock (Closes: #754103) + * policy: Implement pinning by source package (Closes: #166032) + * Initialize libgcrypt on first use (Closes: #949074) + * Fix various compiler warnings + * Bump ABI to 6.0; update symbols file; cleanup ABI: + - Merge various function overloads together + - Make stuff that should be virtual virtual + - Default to hidden visibility + * Code removals: + - Use a 32-bit djb VersionHash instead of CRC-16 + - Remove CRC-16 implementation + * Hardening: + - tagfile: Check if memchr() returned null before using + - tagfile: Check out-of-bounds access to Tags vector + * Cache improvements: + - Type safe cache: Replace map_pointer_t with map_pointer + - Extensibility: Add d-pointers to groups, packages, versions, and files + - Prepare for package hashtable removal: Swap locations of hashtables + + [ Nis Martensen ] + * apt-pkg/srcrecords.cc: 'source' means 'deb-src' in error message + + [ David Kalnischkies ] + * Parse records including empty tag names correctly + + -- Julian Andres Klode Wed, 26 Feb 2020 21:29:48 +0100 + +apt (1.9.10) experimental; urgency=medium + + [ David Kalnischkies ] + * Fix remaining usec vs sec time-delta calculation typos. + Thanks to Trent W. Buck for initial patch (Closes: #950776) + + [ Julian Andres Klode ] + * seccomp: Allow time64 variants (>402,<415) of allowed syscalls + (Closes: #951012) + * debian/control: Bump libseccomp-dev Build-Depends to >= 2.4.2 + * seccomp: Allow recvmmsg_time64() and futex_time64() + * policy: Add SetPriority() methods + * Revert "Add a Packages-Require-Authorization Release file field" + + [ Michael Vogt ] + * doc: remove "WIP" from apt.8.xml + + -- Julian Andres Klode Tue, 18 Feb 2020 12:32:42 +0100 + +apt (1.9.9) experimental; urgency=medium + + * Widen regular expressions for versioned kernel packages (LP: #1607845) + * Implement short patterns (patterns starting with ~) + + -- Julian Andres Klode Tue, 04 Feb 2020 17:42:21 +0100 + +apt (1.9.8) experimental; urgency=medium + + * pkgcache.cc: Mix PACKAGE_VERSION into the cache hash + * mmap: Do not look for empty pool unless we need to + * apt-verbatim.ent: Update ubuntu-codename from disco to focal + * NewGroup: Create GrpIterator after allocation (fix segfault) + + -- Julian Andres Klode Mon, 27 Jan 2020 13:25:52 +0100 + +apt (1.9.7) experimental; urgency=medium + + * Trim trailing whitespace (thanks lintian-brush) + * NewProvidesAllArch: Check if group is empty before using it. + This caused automake-1.16 to not be provided by automake anymore, + because apt wanted to add provides to packages in an empty automake-1.16 + group. LP: #1859952 + * Fix debian-rules-uses-deprecated-systemd-override. + We accidentally managed to restart apt-daily{,-upgrade}.service + again because our dh_systemd_start override was being ignored + since we switched to debhelper 12. Override dh_installsystemd + instead. + + -- Julian Andres Klode Thu, 16 Jan 2020 12:13:50 +0100 + +apt (1.9.6) experimental; urgency=medium + + [ Julian Andres Klode ] + * gitlab-ci: Do not do coverage + * gitlab-ci: Use ccache + * satisfy: Fix segmentation fault when called with empty argument + * Add support for GTest 1.9, do not fail silently if its missing + * gtests: Fix netrc parser test regression from https-only changes + * Macro cleanup: + - Avoid #define _error, use anonymous C++ struct instead (Closes: #948338) + - Rename _count() macro to APT_ARRAY_SIZE() + - Remove various unused macros like MAX/MIN/ABS/APT_CONST + - Only define likely/unlikely if APT_COMPILING_APT set + * Performance: Avoid extra out-of-cache hash table deduplication for + package names, this saved about 10-16% on gencaches in memory + * acquire: Move queue startup after calling log's Start(), fixes abort() + calls in python-apt + * hashes: Use Libgcrypt for hashing purposes + - Raise buffer size for Hashes::AddFD() from 4 KiB to 64 KiB + - Convert users of {MD5,SHA1,SHA256,SHA512}Summation to use Hashes + - Deprecate the Summation classes and mark them for removal + - Remove includes of (md5|sha1|sha2).h headers + * netrc: Add warning when ignoring entries for unencrypted protocols + * apt(8): Disable regular expressions and fnmatch + + [ David Kalnischkies ] + * Drop g++ build-dependency to help crossbuilding (Closes: #948201) + + [ Denis Mosolov ] + * Fix typo in README.md + + -- Julian Andres Klode Wed, 15 Jan 2020 23:06:49 +0100 + +apt (1.9.5) experimental; urgency=medium + + [ Julian Andres Klode ] + * Parse 'show' arguments for the 'info' alias as well (LP: #1843812) + * patterns: Add base class for regular expression matching + * patterns: Add ?version + * patterns: Add ?source-name and ?source-version + * patterns: Add ?archive + * patterns: Add ?origin + * patterns: Add ?any-version + * patterns: Implement ?narrow(...), as ?any-version(?and(...)) + * patterns: Add ?all-versions + * patterns: Add ?section + * netrc: Restrict auth.conf entries to https by default (Closes: #945911) + + [ Anatoly Borodin ] + * README.md: fix dead anonscm link + + [ Алексей Шилин ] + * Search in all available description translations (Closes: #490000) + * strutl: Add APT::String::DisplayLength() function + * Fix progress bar width for multibyte charsets + + [ Chris Leick ] + * German manpage translation update + + [ David Kalnischkies ] + * Use correct filename on IMS-hit reverify for indices + * Remove failed trusted signature instead of index on IMS hit + + [ Anthony Papillon ] + * Fix a mistake in man french translation + + -- Julian Andres Klode Mon, 02 Dec 2019 18:17:56 +0100 + +apt (1.9.4) experimental; urgency=medium + + * CMake: Pass -Werror=return-type to gcc + * CMake: Produce a fatal error if triehash could not be found + * apt.systemd.daily: Do not numerically check if intervals equal 0 + (LP: #1840995) + * srvrec: Use re-entrant resolver functions + * Pass --abort-after=1 to dpkg when using --force-depends (Closes: #935910) + (LP: #1844634) + * Fix use of GTest to adjust for GTest 1.9 + + -- Julian Andres Klode Thu, 19 Sep 2019 11:13:47 +0200 + +apt (1.9.3) experimental; urgency=medium + + * Fix segfault in pkgAcquire::Enqueue() with Acquire::Queue-Mode=access + (LP: #1839714) + * test: Use valgrind to ensure Acquire::Queue-Mode=access does not crash + * Add initial support for package patterns (patterns on versions WIP) + + -- Julian Andres Klode Mon, 19 Aug 2019 16:21:20 +0200 + +apt (1.9.2) experimental; urgency=medium + + [ Julian Andres Klode ] + * Improve locking messaging - pid and name, "do not remove lock file" + + [ Lynn Cyrin ] + * Change a pronoun in the readme from `he` to `they` + + [ David Kalnischkies ] + * Distribute host-less work based on backlog of the queues + * Show details about the package with bad Provides + * Apply various suggestions by cppcheck + + -- Julian Andres Klode Mon, 05 Aug 2019 21:26:10 +0200 + +apt (1.9.1) experimental; urgency=medium + + * RFC1123StrToTime: Accept const std::string& as first argument + * Fix pkg-config-test autopkgtest + + -- Julian Andres Klode Thu, 20 Jun 2019 17:53:14 +0200 + +apt (1.9.0) experimental; urgency=medium + + [ Julian Andres Klode ] + * CMakeLists.txt: Bump C++ standard version to C++14 + * debian: Update to debhelper-compat (= 12) + * debian/rules: Do not use dh_install --list-missing (dh 12 porting) + * Remove all the deprecated bits, merge various function prototypes together + * prepare-release: Add merge-translations command + * Use system-provided triehash + * CI: Use unstable for now, as we need triehash package + * Tighten dependencies from apt and apt-utils on libs + * Add test case for local-only packages pinned to never + * acq: worker: Move CurrentSize, TotalSize, ResumePoint to CurrentItem + * apt-helper: Support multiple hashes for a file + * Add 'explicit' to most single argument constructors + * Get rid of pkgExtract and pkgFLCache + * Merge libapt-inst into libapt-pkg + * Use debDebFile to get control file instead of dpkg-deb + * prepare-release: Add bump-abi command + * Change soname to libapt-pkg.so.5.90 + * CMake: Enforce "override" use on overridden methods + * debmetaindex: Use isspace_ascii() variant to normalize Signed-By + * README.md: Quote -j as code with backticks + * apt-mark: Add hidden showheld alias for showhold + * Mnor wording improvements in documentation + * Make APT::StringView public, replace std::string with it in various places + * Introduce apt satisfy and apt-get satisfy (Closes: #275379) + * Run unifdef -DAPT_{8,9,10,15}_CLEANER_HEADERS + * Adjust code for missing includes, and using std::string + * Bump cache MajorVersion to 16 + + [ Corentin Noël ] + * Add pkg-config files for the apt-pkg and apt-inst libraries + (Closes: #439121) + + [ Simon McVittie ] + * vendor/getinfo: Iterate through vendors in lexicographic order + (Closes: #924662) + * vendor/getinfo: Don't assume that Ubuntu is the last vendor + (Closes: #924662) + + [ Martin Michlmayr ] + * Perform minor copy-editing on the docs + + [ Ivan Krylov ] + * Mark apt-transport-https as M-A:foreign (Closes: #905141) + + [ David Kalnischkies ] + * Don't limit cpu-limited queues to at most 10 + + [ Stephen Kitt ] + * apt-cache: only show solutions if displayed + + [ Brian Murray ] + * Do not include squashfs file systems in df output. (LP: #1756595) + + [ Simon Körner ] + * http: Fix Host header in proxied https connections + + -- Julian Andres Klode Mon, 17 Jun 2019 11:36:56 +0200 + +apt (1.8.2) unstable; urgency=medium + + [ Alwin Henseler ] + * Flip /: in documented default value of DPkg::Path (Closes: #917986) + + [ TilmanK ] + * Fix typo in German manpage translation + + [ Américo Monteiro ] + * Portuguese manpages translation update (Closes: #926614) + + [ Jean-Pierre Giraud ] + * French manpages translation update (Closes: #929290) + + [ Michael Zhivich ] + * methods: https: handle requests for TLS re-handshake (LP: #1829861) + + [ Julian Andres Klode ] + * Unlock dpkg locks in reverse locking order (LP: #1829860) + + -- Julian Andres Klode Tue, 28 May 2019 16:40:29 +0200 + +apt (1.8.1) unstable; urgency=medium + + * Add test case for local-only packages pinned to never + * Prevent shutdown while running dpkg (LP: #1820886) + * Add linux-{buildinfo,image-unsigned,source} versioned kernel pkgs + (LP: #1821640) + + -- Julian Andres Klode Mon, 06 May 2019 10:41:52 +0200 + +apt (1.8.0) unstable; urgency=medium + + [ David Kalnischkies ] + * Add explicit message for unsupported binary signature (Closes: #921685) + + [ Milo Casagrande ] + * [l10n] Update Italian translation + + [ Julian Andres Klode ] + * Fix name of APT::Update::Post-Invoke-Stats (was ...Update-Post...) + * CMake: Install auth.conf.d directory (LP: #1818996) + + [ Frans Spiesschaert ] + * Dutch program translation update (Closes: #923728) + * Dutch manpages translation update (Closes: #923834) + + -- Julian Andres Klode Fri, 08 Mar 2019 09:41:20 +0100 + +apt (1.8.0~rc4) unstable; urgency=medium + + * update: Provide APT::Update-Post-Invoke-Stats script hook point + (LP: #1815760) + * Introduce APT::Install::Pre-Invoke / Post-Invoke-Success (LP: #1815761) + + -- Julian Andres Klode Tue, 26 Feb 2019 08:32:01 +0100 + +apt (1.8.0~rc3) unstable; urgency=medium + + [ Julian Andres Klode ] + * aptmethod.h: Do not have gcc warning about ignoring write() result + * Fix issues in previous two debian/changelog entries + * json-hooks-protocol: The "pin" field is optional + * debian/gbp.conf: Set debian-branch to 1.8.y + * Install translated apt_auth and apt-transport-* manpages + + [ Алексей Шилин ] + * Russian program translation update. + Thanks to Vladimir Zhbanov (Closes: #921830) + + [ Jakub Wilk ] + * Fix various typos in the documentation + + [ Frans Spiesschaert ] + * Dutch program translation update (Closes: #921934) + * Dutch manpages translation update (Closes: #921941) + + -- Julian Andres Klode Mon, 11 Feb 2019 09:33:46 +0100 + +apt (1.8.0~rc2) unstable; urgency=medium + + * Correctly handle feature detection for sse4.2 and crc32 + + -- Julian Andres Klode Mon, 04 Feb 2019 18:15:07 +0100 + +apt (1.8.0~rc1) unstable; urgency=medium + + [ David Kalnischkies ] + * Fail instead of warn for unsigned lines in InRelease + * Fail on non-signature lines in Release.gpg + * Merge and reuse tmp file handling across the board + * Explicitly remove the whitespaces defined by RFC + * Refuse files with lines unexpectedly starting with a dash + * Drop buffered writing from clearsigned message extraction + * Step over empty sections in TagFiles with comments + (Closes: #920317, #921037) + + [ Josh Triplett ] + * Add a "reinstall" command as an alias for "install --reinstall". + + [ Michael Vogt ] + * private-json-hooks.cc: deal with EPIPE (LP: #1814543) + + [ Julian Andres Klode ] + * Verify data being sent by methods in SendMessage() + * Disable deprecated methods (ftp, rsh, ssh) by default + * Introduce experimental 'never' pinning for sources + * Add a Packages-Require-Authorization Release file field + * gpgv: Use buffered writes for splitting clearsigned files + * Detect function multiversioning and sse4.2/crc32, enables i386 + * Use std::to_string() for HashStringList::FileSize() getter + + [ Алексей Шилин ] + * Russian program translation update (Closes: #921011) + + [ Baptiste Jammet ] + * French program translation update (Closes: #921008) + + -- Julian Andres Klode Mon, 04 Feb 2019 15:32:27 +0100 + +apt (1.8.0~beta1) unstable; urgency=medium + + [ anatoly techtonik ] + * README.md: Document that apt is also included + * apt.cc: Add "apt info" alias for muscle memory + + [ Jean-Pierre Giraud ] + * French manpages translation update (Closes: #915952) + + [ Frans Spiesschaert ] + * Dutch manpages translation update (Closes: #916358) + + [ Julian Andres Klode ] + * cache hash: Use sse4.2 CRC32c on x86-64 where available + * configuration: Compare size first during lookup + * debListParser: Avoid native arch lookup in ParseDepends + * hash32: Tighten to multiversion to x86-64 ELF and use uint32_t + * apt-mark: Introduce minimize-manual + * doc/apt-verbatim.ent: Point ubuntu-codename to disco (LP: #1812696) + * CI: Use debian:buster as test base image + * doc/apt-verbatim.ent: Debian buster is stable + * SECURITY UPDATE: content injection in http method (CVE-2019-3462) + (LP: #1812353) + * debian/control: Drop libcurl4-gnutls-dev build dependency + + [ Mo Zhou ] + * zh_CN.po: Update Simplified Chinese programs translation. + + [ Khem Raj ] + * Remove `register` keyword + + [ Vasya Novikov ] + * bash completion: add keys + + [ David Kalnischkies ] + * Communicate back which key(s) were used for signing + + -- Julian Andres Klode Wed, 23 Jan 2019 16:49:34 +0100 + +apt (1.8.0~alpha3.1) unstable; urgency=emergency + + * SECURITY UPDATE: content injection in http method (CVE-2019-3462) + (LP: #1812353) + + -- Julian Andres Klode Tue, 22 Jan 2019 19:52:38 +0100 + +apt (1.8.0~alpha3) unstable; urgency=medium + + [ Manuel A. Fernandez Montecelo ] + * Remove "Ultimedia" config for Acquire::Changelogs + * Remove "Tanglu" config for Acquire::Changelogs and as vendor + + [ Julian Andres Klode ] + * Adjust libapt-pkg Breaks aptitude to << 0.8.9 + * Print useful error on "apt changelog" without arguments + * test-pdiff-usage: make transaction failure test case more robust + * Provide a "autopurge" shortcut. + Thanks to Michael Vogt for the initial work + * Override FileFd copy constructor to prevent copying + * Add support for /etc/apt/auth.conf.d/*.conf (netrcparts) + * Set PATH=/usr/sbin:/usr/bin:/sbin:/bin when running dpkg + + [ David Kalnischkies ] + * Allow setting Referer header for http method + * Use quoted tagnames in config dumps + + [ Алексей Шилин ] + * Russian program translation update (Closes: #914096) + + [ Balint Reczey ] + * Set LC_ALL=C.UTF-8 for unattended-upgrades environment when parsing its --help + (LP: #1806076) + + [ Milo Casagrande ] + * [l10n] Update Italian translation + + -- Julian Andres Klode Tue, 18 Dec 2018 15:02:11 +0100 + +apt (1.8.0~alpha2) unstable; urgency=medium + + * Revert "http: Fix handling of server connection closure" + This reverts commit fb3f36593563d09a8d1727cc7c6deb0b49823ca2. It + caused downloads to hang on long-lived connections on certain + servers. + * Drop debian/source/options, not needed anymore + + -- Julian Andres Klode Tue, 13 Nov 2018 10:31:49 +0100 + +apt (1.8.0~alpha1) unstable; urgency=medium + + [ Damyan Ivanov ] + * apt-get.8: mention --only-source in 'source' and 'build-dep' description + + [ David Kalnischkies ] + * Support subkeys properly in Signed-By options + * Support multiple keyrings in sources.list Signed-By + + [ Ben Hutchings ] + * Default to https: scheme for fetching Debian changelogs (Closes: #910941) + + [ Julian Andres Klode ] + * NeverAutoRemove kernel meta packages (LP: #1787460) + * Break pre-gcc8 aptitude and apt (Closes: #911090) + * http: Fix handling of server connection closure (LP: #1801338) + + [ Frans Spiesschaert ] + * Dutch program translation update (Closes: #912021) + * Dutch manpage translation update (Closes: #912022) + + [ Chris Leick ] + * German manpage translation update + * Fix typos encountered while updating de translation + + [ Petter Reinholdtsen ] + * Norwegian Bokmål program translation update (Closes: #912374) + + -- Julian Andres Klode Mon, 12 Nov 2018 11:52:15 +0100 + +apt (1.7.0) unstable; urgency=medium + + [ Julian Andres Klode ] + * Fix calculation of elapsed usec in downloads + * pkgCacheFile: Only unlock in destructor if locked before (LP: #1794053) + * Set DPKG_FRONTEND_LOCKED when running {pre,post}-invoke scripts. + Some post-invoke scripts install packages, which fails because + the environment variable is not set. This sets the variable for + all three kinds of scripts {pre,post-}invoke and pre-install-pkgs, + but we will only allow post-invoke at a later time. + * prepare-release: Fix last-modification detection for manpages + + [ David Kalnischkies ] + * Show APT::Compressor example in apt.conf(5) (Closes: #909712) + + [ Muhamed Huseinbašić ] + * apt-mark: showhold: typo-fix (package -> packages) + + -- Julian Andres Klode Sun, 07 Oct 2018 07:56:02 +0200 + +apt (1.7.0~rc2) unstable; urgency=medium + + [ David Kalnischkies ] + * Deal with descriptions embedded in displayed record correctly + (Closes: #909155) + + -- Julian Andres Klode Thu, 20 Sep 2018 21:03:54 +0200 + +apt (1.7.0~rc1) unstable; urgency=medium + + [ Laurent Bigonville ] + * fr.po: Do not translate the apt-ftparchive commands (Closes: #907481) + + [ David Kalnischkies ] + * Don't use invalid iterator in Fallback-Of handling. + Thanks to David Binderman for reporting + * Process status-fd completely before finishing dpkg call + * Don't expect duplicated dpkg status-fd messages + * Reorder progress report messages + * Show all architectures in 'apt list' output (Closes: #908218) + + [ Julian Andres Klode ] + * http: Stop pipeline after close only if it was not filled before + + -- Julian Andres Klode Tue, 18 Sep 2018 16:12:38 +0200 + +apt (1.7.0~alpha3) experimental; urgency=medium + + [ David Kalnischkies ] + * SECURITY UPDATE: Fallback in the mirror method allowed a later server to + supply any InRelease file without it having to be verified. (LP: #1787752) + - apt-pkg/acquire-item.cc:: clear alternative URIs for mirror:// between steps + - CVE-2018-0501 + + [ Jean-Ralph Aviles ] + * Add trailing newline to output of edit-sources. + + [ Julian Andres Klode ] + * Add support for dpkg frontend lock (Closes: #869546) + * Set DPKG_FRONTEND_LOCKED as needed when doing selection changes + * Update symbols files + + [ Boyuan Yang ] + * Simplified Chinese program translation update (Closes: #903695) + + [ David Kalnischkies ] + * Report (soon) worthless keys if gpg uses fpr for GOODSIG + + -- Julian Andres Klode Mon, 20 Aug 2018 17:44:19 +0200 + +apt (1.7.0~alpha2) experimental; urgency=medium + + * Handle JSON hooks that just close the file/exit and fix some other errors + (LP: #1776218) + * Use cheaper entropy source for randomizing items to fetch + + -- Julian Andres Klode Mon, 09 Jul 2018 16:02:45 +0200 + +apt (1.7.0~alpha1) experimental; urgency=medium + + [ Julian Andres Klode ] + * CMake: Fix builds without zstd + * apt.conf.autoremove: Catch some new Ubuntu module packages + * Fix build with new gtest (Closes: #897149) + * tests: Do not expect requested-by if sudo was invoked by root + * Run tests on GitLab CI + * Handle a missed case of timed out ip addresses (LP: #1766542) + * Lower default timeout from 120s to 30s + * apt-key: Pass all instead of gpg-agent to gpgconf --kill (LP: #1773992) + * Fix lock counting in debSystem + * CI: Export DEBIAN_FRONTEND=noninteractive in all CI environments + * Ensure that we are online in apt-daily-upgrade.service (LP: #1723761) + * gitlab-ci: chmod 755 /root + + [ David Kalnischkies ] + * move special READMEs into doc/ and format as md + * Add boilerplate plural form to po/apt-all.pot + * don't try SRV requests based on IP addresses + * use 127.0.0.1 instead of localhost as default Tor proxy + * Extend apt build-dep pkg/release to switch dep as needed + * Support release selector for volatile files as well + * Start pkg records for deb files with dpkg output + * Deprecate buggy/incorrect Rls/PkgFile::IsOk methods + * Support --with-source in show & search commands + * Support local files as arguments in show command (Closes: 883206) + * Drop alternative URIs we got a hash-based fail from + * Handle by-hash URI construction more centrally + * Don't force the same mirror for by-hash URIs + * Reword error for timed out read/write on SOCKS proxy (Closes: #898886) + * Don't show acquire warning for "hidden" components (Closes: #879591) + * Use a steady clock source for progress reporting + * Use steady clock source for bandwidth limitation + + [ Guillem Jover ] + * Remove obsolete RCS keywords + * Normalize authors through a mailmap file + * po: Fill Project-Id-Version with correct project id and version + * po: Fix translated string not matching format string arguments + * po: Fix Language field to match actual locale + * po: Remove spurious text in Plural-Forms field + * po: Add missing Plural-Forms fields + + [ Filipe Brandenburger ] + * Update .gitignore + * Increase debug verbosity in `apt-get autoremove` + * Extend test-apt-get-autoremove to check debug output + + [ annadane ] + * Add verb 'be' to NEWS entry for 1.5~beta1 (Closes: 892792) + + [ Алексей Шилин ] + * Russian program translation update (Closes: 898797) + + [ Frans Spiesschaert ] + * Dutch program translation update (Closes: #900589) + * Dutch manpage translation update (Closes: #900602) + + -- Julian Andres Klode Mon, 25 Jun 2018 17:12:30 +0200 + +apt (1.7.0~alpha0) experimental; urgency=medium + + [ David Kalnischkies ] + * mention mirror method in sources.list (Closes: 679580) + + [ Julian Andres Klode ] + * Build with cmake+ninja instead of cmake+make + * Make libzstd optional in CMakeLists.txt, to aid cross-building + * Run travis against debian:testing again, keep shippable at bionic + + -- Julian Andres Klode Wed, 18 Apr 2018 17:22:19 +0200 + +apt (1.6~rc1) unstable; urgency=medium + + [ Julian Andres Klode ] + * Experimental support for zstd (LP: #1763839) + * Fix debian/NEWS entry for 1.6~beta1 + * Use https for Ubuntu changelogs + * Bump cache major version to allow different 1.5 and 1.6 updates + * CI: Switch testing to use ubuntu:bionic for 1.6.y + * Turn off seccomp sandboxing by default (LP: #1732030) (Closes: #890489) + * Allow restart_syscall() syscall in seccomp sandboxes (Closes: #891644) + * Delete /etc/dpkg/dpkg.cfg.d/excludes on Docker CI images + * test: export GCOV_ERROR_FILE=/dev/null to make it fail less/no tests + * apt-private: Collect not found packages in CacheSetHelperAPTGet + * Introduce experimental new hooks for command-line tools (LP: #1763839) + + [ David Kalnischkies ] + * remove duplicate changelog lines from 1.6~beta1 entry + * fix communication typo in https manpage + * set our two libapt libraries to prio:optional + * document Acquire::AllowReleaseInfoChange without extra s + + [ jean-pierre giraud ] + * French man pages translation (Closes: #895117) + + -- Julian Andres Klode Sun, 15 Apr 2018 21:41:44 +0200 + +apt (1.6~beta1) unstable; urgency=medium + + [ David Kalnischkies ] + * allow the apt/lists/auxfiles/ directory to be missing (Closes: 887624) + * add apt-helper drop-privs command… + * restore gcc visibility=hidden for apt-private + * ensure correct file permissions for auxfiles + + [ Julian Andres Klode ] + * indexcopy: Copy uncompressed indices from cdrom again (LP: #1746807) + * Work around test-method-mirror failure by setting umask at start + * Check that Date of Release file is not in the future + * apt.conf.autoremove: Add linux-cloud-tools to list (LP: #1698159) + + [ Chris Leick ] + * German manpage translation update + + -- Julian Andres Klode Mon, 26 Feb 2018 13:14:13 +0100 + +apt (1.6~alpha7) unstable; urgency=medium + + [ Mert Dirik ] + * Turkish program translation update (Closes: 886250) + + [ David Kalnischkies ] + * dpkg status parsing: check if name is valid before use + + [ Julian Andres Klode ] + * apt-compat.cron.daily: Correctly handle undetermined power status + (LP: #1742378) + * Introduce inrelease-path option for sources.list (Closes: #886745) + * Drop obsolete Suggests on python-apt (Closes: #887607) + * Point people to salsa.d.o instead of anonscm.d.o for git + + [ Justin B Rye ] + * review and fix the three new apt-transport- manpages + + [ Holger Wansing ] + * German program translation update (Closes: 886429) + + [ Julien Patriarca ] + * French program translation update (Closes: 887017) + + -- Julian Andres Klode Thu, 18 Jan 2018 14:44:14 +0000 + +apt (1.6~alpha6) unstable; urgency=medium + + [ Julian Andres Klode ] + * Add Breaks: aptitude (<< 0.8.10) for gzip method removal + * Also look at https_proxy for https URLs + * Run wrap-and-sort + * Translate shared documentation parts again + * tests: Improve handling profiling messages on CI + * connect: Store the IP used when picking a connection + * Add rapid "happy eyeballs" connection fallback (RFC 8305) (Closes: #668948) + (LP: #1308200) + + [ David Kalnischkies ] + * allow multivalue fields in deb822 sources to be folded (Closes: 881875) + * support COLUMNS environment variable in apt tools + * allow apt_auth.conf(5) to be translated + * if insecure repo is allowed continue on all http errors + * don't auto-switch candidate if installed is good enough + * update libapt-pkg symbols file + * explicitly name token in auth.conf parsing error + * fix over-calculating dpkg commandline length + * avoid some useless casts reported by -Wuseless-cast + * deal with floats without old-style cast + * support multiline values in LookupTag + * mark some 500 HTTP codes as transient acquire errors + * report transient errors as transient errors + * implement Acquire::Retries support for all items + * give the methods more metadata about the files to acquire + * implement fallback to alternative URIs for all items + * do not remap current files if nullptrs in cache generation + * apt.daily: remove unused dbus signal for apt update (Closes: 849636) + * Support cleartext signed InRelease files with CRLF line endings. + Thanks to Lukas Wunner for detailed report & initial patch! (Closes: 884922) + * document http options in new apt-transport-http manpage + * document https options in new apt-transport-https manpage + * refactor message generation for methods + * allow a method to request auxiliary files + * reimplement and simplify mirror:// method + * require methods to request AuxRequest capability at startup + * add tag-based control over mirror choices from the list + * non-local mirrorlists shouldn't redirect to local + * add apt-transport-mirror manpage + + [ Milo Casagrande ] + * Italian program translation update (Closes: 882850) + + [ Christian Göttsche ] + * apt.daily: fix several "shellcheck" annotations + + -- Julian Andres Klode Wed, 03 Jan 2018 22:33:37 +0000 + +apt (1.6~alpha5) unstable; urgency=medium + + [ Julian Andres Klode ] + * Do not attempt seccomp under qemu-user and drop EFAULT workaround + (Closes: #881519) + + [ Frans Spiesschaert ] + * Dutch manpage translation update (Closes: #881402) + + -- Julian Andres Klode Sun, 12 Nov 2017 19:57:00 +0100 + +apt (1.6~alpha4) unstable; urgency=medium + + * debian: Set Rules-Requires-Root: no + * debian: Bump Standards-Version to 4.1.1 + * Re-introduce a transitional apt-transport-https + + -- Julian Andres Klode Sun, 05 Nov 2017 15:25:53 +0100 + +apt (1.6~alpha3) unstable; urgency=medium + + [ Julian Andres Klode ] + * debian/tests/control: Add dpkg so we get triggered by it + * seccomp: Allow ipc() for fakeroot, and allow sysinfo() for sort + (Closes: #879814, #879826) + * Drop unused gzip, lzma, bzip2, and xz symlinks of store + * seccomp: Allow clock_nanosleep() and nanosleep() syscalls + * Prevent overflow in Installed-Size (and Size) in apt show + + [ David Kalnischkies ] + * use store: instead of gzip: to open local changelogs + + -- Julian Andres Klode Sat, 28 Oct 2017 17:57:05 +0200 + +apt (1.6~alpha2) unstable; urgency=medium + + * seccomp: Conditionalize statx() allowlisting + * CMake: methods: Cleanup link libraries, use OBJECT libraries + * methods: Enable additional syscalls (SYSV IPC) in fakeroot (Closes: #879662) + * Don't segfault if receiving a method warning on empty queue + * Only warn about seccomp() EINVAL (normal) and EFAULT (qemu) errors + * Print syscall number and arch to stderr when trapped by seccomp + + -- Julian Andres Klode Thu, 26 Oct 2017 00:32:20 +0200 + +apt (1.6~alpha1) unstable; urgency=medium + + [ Julian Andres Klode ] + * Bump Standards-Version to 4.1.0 + * Drop obsolete dh-systemd build-dep + * Drop obsolute Testsuite: autopkgtest header + * Drop curl method and apt-transport-https package + * Fix testsuite for and add new fields from dpkg 1.19 + * Run Proxy-Auto-Detect script from main process + * methods/mirror: Enable sandboxing and other aptMethod features + * Sandbox methods with seccomp-BPF; except cdrom, gpgv, rsh + + [ David Kalnischkies ] + * proper error reporting for v3 onion services + * allow empty build-dependency fields in the parser (Closes: #875363) + * send the hashes for alternative file correctly + * ignore unsupported key formats in apt-key (Closes: #876508) + + [ Mo Zhou ] + * zh_CN.po: Update Simplified Chinese programs translation + + [ Frans Spiesschaert ] + * Dutch program translation update (Closes: #879137) + + -- Julian Andres Klode Mon, 23 Oct 2017 01:58:18 +0200 + +apt (1.5) unstable; urgency=medium + + * Fix translator comment location for legacy target warning + + -- Julian Andres Klode Sun, 24 Sep 2017 17:54:41 +0200 + +apt (1.5~rc4) unstable; urgency=medium + + * apt-daily: Do not Wants=network-online, and add some more After= + We now wait for being online ourselves, so all we need to wait + on is for services we are using to be online first. This avoids + severe boot slowdowns by other services having specified an + After=network-online.target without a Wants=. + + -- Julian Andres Klode Wed, 13 Sep 2017 16:02:30 +0200 + +apt (1.5~rc3) unstable; urgency=medium + + * CMake: Properly handle Udev missing + * CMake: Mark BZip2, LZMA, and LZ4 as required + * apt-helper: Add connman support to wait-online + + -- Julian Andres Klode Sun, 10 Sep 2017 23:46:30 +0200 + +apt (1.5~rc2) unstable; urgency=medium + + [ Julian Andres Klode ] + * Actually install apt_auth.conf manual page (Closes: #873934) + * test: Workaround gpgv warning + * apt-daily: Wait for network before daily updates. + Introduce a new helper, apt-helper wait-online that uses + NetworkManager and/or systemd-networkd to wait for them + reporting online, with a time out of 30 seconds; and run + that helper before running the daily update script. (LP: #1699850) + * apt-daily: Pull in network-online.target in service, not timer + * Do not warn about duplicate "legacy" targets (Closes: #839259) + (LP: #1697120) + * cdrom: Don't hardcode "Files" field for copying source files + * ftparchive: Do not pass through disabled hashes in Sources (Closes: #872963) + * Directly link against libudev on Linux systems - this does not affect + public API and ABI, but protected pkgUdevCdromDevices function pointers + were renamed and are now always NULL, even if Dlopen returns true. + + [ Christos Trochalakis ] + * doc: correct '--allow-releaseinfo-change-*' typos (Closes: #873914) + + [ Frans Spiesschaert ] + * Dutch program translation update (Closes: #874285) + * Dutch manpage translation update (Closes: #874293) + + [ David Kalnischkies ] + * don't write & chmod /dev/null log files + * don't ask an uninit _system for supported archs (LP: #1613184) + + -- Julian Andres Klode Sat, 09 Sep 2017 21:47:14 +0200 + +apt (1.5~rc1) unstable; urgency=medium + + * Redefine APT_CONST to mean APT_PURE (APT_CONST is deprecated) + APT_CONST was used on functions where it should not have, causing + the compiler to optimize code it should not have, like turning + the "::" content in StringSplit(name, "::") into garbage because it + figured out that the value is not going to be read anyway, causing + stuff to go horribly wrong (mostly on -O3, really). + * Replace APT_CONST with APT_PURE everywhere + * Make test-bug-818628-unreadable-source work on !amd64 + + -- Julian Andres Klode Thu, 24 Aug 2017 23:13:52 +0200 + +apt (1.5~beta2) unstable; urgency=medium + + [ M. Willis Monroe ] + * Minor grammar fix + + [ Zhou Mo ] + * zh_CN.po: update Simplified Chinese programs translation + + [ David Kalnischkies ] + * don't expect more downloads from failed transactions + * remove reference to a-t-debtorrent in description + * ignore SIGPIPE in dump solver if forwarding + * support compressed extended_states file for bug triage + * don't move failed pdiff indexes out of partial (Closes: 869425) + * don't try to parse all fields starting with HTTP as status-line + * send weak-only hashes to methods + * fail earlier if server answers with too much data + * fail early in http if server answer is too small as well + * use FileFd to parse all apt configuration files + * show warnings instead of errors if files are unreadable (LP: #1701852) + * reimplement and document auth.conf (Closes: #811181) + * lookup login info for proxies in auth.conf + * allow the auth.conf to be root:root owned + * update URI scheme descriptions in sources.list(5) + * show a warning for Debian shutting down FTP services + * suggest using auth.conf for sources with passwords + * ftparchive: sort discovered filenames before writing indexes. + Thanks to Chris Lamb for initial patch & Stefan Lippers-Hollmann for testing + (Closes: 869557) + * don't keep configuration files open needlessly + * don't hang if multiple sources use unavailable method (Closes: 870675) + + [ Beatrice Torracca ] + * Italian manpage translation update (Closes: 858877) + + [ Apollon Oikonomopoulos ] + * Handle supported components with slashes in sources.list (Closes: #868127) + + [ Julian Andres Klode ] + * Drop cacheiterators.h include + * methods/aptmethod.h: Add missing fileutl.h include + * Reformat and sort all includes with clang-format + * cacheiterators: Warn about direct include and don't include pkgcache.h + * Update gitignore with new files + * Use C++11 threading support instead of pthread + * Always warn if --force-yes is validly specified, not just if used + * Work around float rounding change in gcc 7 on i386 + * Handle GCC 7 std::string operator ABI break (Closes: #871275) + * debian: Update symbols for libapt-pkg5.0 + + [ Paul Wise ] + * Support zero delay for the various APT::Periodic activities + * Support seconds, minutes, hours and days for APT::Periodic intervals + * Switch from /org to /srv in example apt-ftparchive configuration + + [ Balint Reczey ] + * Gracefully terminate process when stopping apt-daily-upgrade (LP: #1690980) + + [ Dominik ] + * doc: Add '--allow-unauthenticated' to '--force-yes' + + -- Julian Andres Klode Thu, 17 Aug 2017 19:28:00 +0200 + +apt (1.5~beta1) unstable; urgency=medium + + [ Julian Andres Klode ] + * Make Verify-Host and Verify-Peer independent again + * http: A response with Content-Length: 0 has no content + * Ignore download order in test-apt-update-failure-propagation + * tls: Add more details to error messages, and detect more errors + * Do not error out, only warn if ca certificates are not available + + [ David Kalnischkies ] + * don't set ip addresses as server names for SNI + + [ Алексей Шилин ] + * Russian translation update (Closes: #866749) + + -- Julian Andres Klode Mon, 03 Jul 2017 16:57:59 +0200 + +apt (1.5~alpha4) experimental; urgency=medium + + * Reset failure reason when connection was successful + * Allow running the TLS stack on any lower connection + * http: Add support for CONNECT proxying to HTTPS locations + * http: Add support for https:// proxies + * Allow http(s) and socks5h for http and https in proxy auto detect + * Switch to 'http' as the default https method + * Improve closing the TLS connection + * TLS support: Error out on unsupported curl options + + -- Julian Andres Klode Fri, 30 Jun 2017 18:18:09 +0200 + +apt (1.5~alpha3) experimental; urgency=medium + + * Don't read CaInfo if not specified (missing else) + This fixes a regression from ~alpha2. (Closes: #866559) + + -- Julian Andres Klode Fri, 30 Jun 2017 09:50:13 +0200 + +apt (1.5~alpha2) experimental; urgency=medium + + [ David Kalnischkies ] + * support tor+https being handled by http + * use port from SRV record instead of initial port + + [ Robert Luberda ] + * fix a "critical" typo in old changelog entry (Closes: 866358) + + [ Julian Andres Klode ] + * Improve error message if system CA store is empty (Closes: #866377) + * Have apt Recommend ca-certificates + * Demote gnupg to Suggests + * http: Only use system CA store if CaInfo is not set + * Bump Standards-Version (and wrap-and-sort a bit) + * Build-Depend on debhelper (>= 10) to shut up lintian + + -- Julian Andres Klode Thu, 29 Jun 2017 17:52:19 +0200 + +apt (1.5~alpha1) experimental; urgency=medium + + [ Julian Andres Klode ] + * pkgcache: Bump major version to 12 + * Squashed 'triehash/' changes from 565fde4e7..0ca66b761 + * methods: Add HTTPS support to http method, using GnuTLS. + The http method will eventually replace the curl-based + https method, but for now, this is an opt-in experiment + that can be enabled by setting Dir::Bin::Methods::https + to "http". + Known issues: + - We do not support HTTPS proxies yet + - We do not support proxying HTTPS connections yet (CONNECT) + - IssuerCert and SslForceVersion are unsupported + * Allow building without curl + * Introduce Acquire::AllowTLS to turn off TLS support + * Skip test-apt-download-progress + * Strip 0: epochs from the version hash + + [ David Kalnischkies ] + * schedule the correct side of the conflict for removal. + Thanks to Michael Biebl for helping find this with countless tests + * don't show incorrect 'How odd' error in no-download mode (Closes: 863635) + * Show permission error if ProxyAutoDetect cmd can't be executed + (Closes: 857885) + * Avoid chdir in acquire clean with unlinkat (Closes: 860738) + * ident a CD without changing directory + * clean archives without changing directory + * avoid changing directory in mirror method + * warn if an expected file can't be acquired + * show .diff/Index properly as ignored if we fallback + * fail InRelease on non-404 HTTP errorcodes + * deal with 3xx httpcodes as required by HTTP/1.1 spec + * fail instead of warn on insecure repositories in apt-get + * error in update on Release information changes + * show a Release-Notes URI if infos were changed + * allow frontends to override releaseinfo change behaviour + * ask for releaseinfo change interactively in apt + + -- Julian Andres Klode Wed, 28 Jun 2017 19:52:24 +0200 + +apt (1.4.6) unstable; urgency=medium + + * apt.systemd.daily: Do not pass -d to unattended-upgrade for the download + job. This actually enables debugging. Instead check if unattended-upgrade + supports an option --download-only (which is yet to be implemented) and use + that (Closes: #863859) + + -- Julian Andres Klode Thu, 01 Jun 2017 10:50:26 +0200 + +apt (1.4.5) unstable; urgency=medium + + * Fix parsing of or groups in build-deps with ignored packages (LP: #1694697) + + -- Julian Andres Klode Wed, 31 May 2017 14:52:25 +0200 + +apt (1.4.4) unstable; urgency=medium + + [ Alan Jenkins ] + * apt.systemd.daily: fix error from locking code (Closes: #862567) + + -- Julian Andres Klode Tue, 16 May 2017 23:19:50 +0200 + +apt (1.4.3) unstable; urgency=medium + + [ Julian Andres Klode ] + * Do not try to (re)start timers outside 'apt' package (Closes: #862001) + + [ Miroslav Kure ] + * Updated Czech translation of apt (Closes: #861943) + + -- Julian Andres Klode Thu, 11 May 2017 14:46:28 +0200 + +apt (1.4.2) unstable; urgency=medium + + [ Julian Andres Klode ] + * Run unattended-upgrade -d in download part + * apt.systemd.daily: Add locking + * Split apt-daily timer into two (LP: #1686470) + + [ Matt Kraai ] + * bash-completion: Fix spelling of autoclean (Closes: #861846) + + -- Julian Andres Klode Thu, 04 May 2017 22:52:10 +0200 + +apt (1.4.1) unstable; urgency=medium + + [ Julian Andres Klode ] + * systemd: Rework timing and add After=network-online (LP: #1615482) + * debian/rules: Actually invoke dh_clean in override_dh_clean + + [ Unit 193 ] + * apt-ftparchive: Support '.ddeb' dbgsym packages + + -- Julian Andres Klode Mon, 24 Apr 2017 18:47:55 +0200 + +apt (1.4) unstable; urgency=medium + + * The April Fools' Release + + [ Julian Andres Klode ] + * Ignore \.ucf-[a-z]+$ like we do for \.dpkg-[a-z]+$ + * Fix mistake in CHANGEPATH comment example + + [ Chris Lamb ] + * auto-removal: Ignore running kernel if attempting a reproducible build + (Closes: #857632) + + [ Joe Dalton ] + * Danish program translation update (Closes: #856723) + + [ David Kalnischkies ] + * Fix and avoid quoting in CommandLine::AsString (LP: #1672710) + * Ignore AutomaticRemove conffile option in upgrade (Closes: #855891) + + -- Julian Andres Klode Sat, 01 Apr 2017 21:39:37 +0200 + +apt (1.4~rc2) unstable; urgency=medium + + [ David Kalnischkies ] + * add Auto-Built-Package to tagfile-order + * don't test with "too early for 32bit" years + + [ Julian Andres Klode ] + * Do not lowercase package names representing .dsc/.deb/... files (Closes: #854794) + * shippable: Perform CI on Debian stretch instead of Ubuntu xenial + * Don't use -1 fd and AT_SYMLINK_NOFOLLOW for faccessat() + Thanks to James Clarke for debugging these issues + * CMake: Install statvfs.h to include/sys, not just include/ + * debian: Generate debian/copyright during clean + + -- Julian Andres Klode Wed, 22 Feb 2017 16:02:10 +0100 + +apt (1.4~rc1) unstable; urgency=medium + + [ David Kalnischkies ] + * don't show update stats if cache generation is disabled + * don't lock dpkg in 'apt-get clean' + * don't lock dpkg in update commands + * avoid validate/delete/load race in cache generation + * fix 'install --no-download' mode + * remove 'old' FAILED files in the next acquire call (Closes: 846476) + * stop rred from leaking debug messages on recovered errors (Closes: #850759) + * make the moo reproducible. + Thanks to Chris Lamb for initial patch and guru meditation (Closes: #848721) + * update release mappings in documentation + * avoid malloc if option allowlist is disabled (default) + + [ Julian Andres Klode ] + * basehttp: Only read Content-Range on 416 and 206 responses (LP: #1657567) + * test suite: Do not exit 0 in trap for QUIT + * Only merge acquire items with the same meta key (Closes: #838441) + + [ Zhou Mo ] + * po: update Simplified Chinese program translation + + [ Jean-Pierre Giraud ] + * French manpages translation update (Closes: 852460) + + [ victory ] + * Japanese manpages & program translation update + + [ Frans Spiesschaert ] + * Dutch program translation update (Closes: #853761) + * Dutch manpage translation update (Closes: #853762) + + -- Julian Andres Klode Mon, 06 Feb 2017 14:41:23 +0100 + +apt (1.4~beta4) unstable; urgency=medium + + * Read dpkg tables to handle architecture wildcards. + Thanks to James Clarke for the initial patch + (Closes: #748936) + * https: Quote path in URL before passing it to curl (LP: #1651923) + * Update symbols file for changes in 1.3.1, 1.4~beta{1,3,4} + + -- Julian Andres Klode Tue, 17 Jan 2017 15:18:27 +0100 + +apt (1.4~beta3) unstable; urgency=medium + + [ Lukasz Kawczynski ] + * Honour Acquire::ForceIPv4/6 in the https transport + + [ David Kalnischkies ] + * reword "Can't drop priv" warning message (Closes: #813786) (LP: #1522675) + * let {dsc,tar,diff}-only implicitly enable download-only + * remove needless fork() in apt-get source + * default to --no-check for dpkg-source call (Closes: 724744) + * warn if clearsigned file has ignored content parts + * ensure generation of valid EDSP error stanzas + * add --indep-only for build-dep command (Closes: #845775) + * allow default build-essentials to be overridden + * expand -f to --fix-broken in error messages. + Thanks to Kristian Glass for initial patch! (Closes: #709092) + * separating state variables regarding server/request (Closes: #440057) + * fix minimum pkgs option for dpkg --recursive usage + * allow warning generation for non-allowlisted options + + [ Oriol Debian ] + * Catalan program translation update (Closes: #846514) + + [ Frans Spiesschaert ] + * Dutch manpages translation update (Closes: #849235) + + [ Niels Thykier ] + * ParseDepends: Support passing the desired architecture (Closes: #845969) + + -- Julian Andres Klode Thu, 05 Jan 2017 20:50:01 +0100 + +apt (1.4~beta2) unstable; urgency=high + + [ John R. Lenton ] + * bash-completion: Only complete understood file paths for install + (LP: #1645815) + + [ Julian Andres Klode ] + * SECURITY UPDATE: gpgv: Check for errors when splitting files (CVE-2016-1252) + Thanks to Jann Horn, Google Project Zero for reporting the issue + (LP: #1647467) + * gpgv: Flush the files before checking for errors + + -- Julian Andres Klode Thu, 08 Dec 2016 15:21:16 +0100 + +apt (1.4~beta1) unstable; urgency=medium + + [ Chris Leick ] + * Updated German documentation translation + * fix three typos in sources & manpages + * German translation proof read by Helge Kreutzmann + + [ Frans Spiesschaert ] + * Dutch program translation update (Closes: #840552) + * Dutch manpages translation update (Closes: #840757) + + [ David Kalnischkies ] + * don't install new deps of candidates for kept back pkgs + * keep Release.gpg on untrusted to trusted IMS-Hit (Closes: 838779) + * fix testcase expecting incorrect remove log from dpkg + * reset HOME, USER(NAME), TMPDIR & SHELL in DropPrivileges (Closes: 842877) + * show the conflicting distribution warning again (Closes: 841874) + * rename Checksum-FileSize to Filesize in hashsum mismatch + * improve SOCKS error messages for http slightly + * support 'apt build-dep .' (aka: without /) + * add TMP/TEMP/TEMPDIR to the TMPDIR DropPrivileges dance + * http: skip connection cleanup if we close it anyhow + * add hidden config to set packages as Essential/Important. + Thanks to Anthony Towns for initial patch (Closes: 767891) + * don't warn if untransformed distribution matches. + Thanks to Lukas Anzinger for initial patch (Closes: 644610) + * show distribution mismatch for changed codenames + * react to trig-pend only if we have nothing else to do + * correct cross & disappear progress detection + * improve arch-unqualified dpkg-progress parsing + * don't perform implicit crossgrades involving M-A:same + * do not configure unconfigured to be removed packages + * skip unconfigure for unconfigured to-be removed pkgs + * report apt-key errors via status-fd messages (LP: #1522988) + * add apt-key support for armored GPG key files (*.asc) + * document which keyring formats are supported by apt-key (Closes: 844724) + * get pdiff files from the same mirror as the index + * follow the googletest merge in build-depends + + [ Michael Vogt ] + * Do not (re)start "apt-daily.system" + Thanks to Alexandre Detiste (Closes: #841763) + + [ Johannes Schauer ] + * add support for Build-Depends/Conflicts-Arch (Closes: #837395) + + [ Edgar Fuß ] + * http: clear content before reporting the failure (Closes: #465572) + + [ James Clarke ] + * apt-ftparchive: Support NotAutomatic and ButAutomaticUpgrades fields + (Closes: #272557) + + [ Julian Andres Klode ] + * TagSection: Split AlphaIndexes into AlphaIndexes and BetaIndexes + * TagSection: Extract Find() methods taking Pos instead of Key + * Squashed 'triehash/' content from commit 16f59e1 + * TagSection: Introduce functions for looking up by key ids + * debListParser: Convert to use pkgTagSection::Key-based lookup + * Bump the cache major version for non-backportable changes + * Introduce tolower_ascii_unsafe() and use it for hashing + * Optimize VersionHash() to not need temporary copy of input + * Compare size before data when ordering cache bucket entries + * debListParser: Micro-optimize AvailableDescriptionLanguages() + * Do not use MD5SumValue for Description_md5() + * gpgv: Untrust SHA1, RIPE-MD/160, but allow downgrading to weak + + [ Paul Wise ] + * show output as documented for APT::Periodic::Verbose 2 (Closes: 845599) + + -- Julian Andres Klode Fri, 25 Nov 2016 23:49:54 +0100 + +apt (1.3.1) unstable; urgency=medium + + [ Julian Andres Klode ] + * Do not read stderr from proxy autodetection scripts + * travis: Move codecov from after_success to after_script + + [ victory ] + * Japanese manpages translation update + + [ Mert Dirik ] + * Turkish program translation update (Closes: #838731) + + -- Julian Andres Klode Tue, 04 Oct 2016 19:43:35 +0200 + +apt (1.3) unstable; urgency=medium + + [ David Kalnischkies ] + * abort connection on '.' target replies in SRV + * edsp: try 2 to read responses even if writing failed + + [ Julian Andres Klode ] + * test: Always install dpkg into our tests, regardless of MA + * CMake: Add coverage build type + * Coverage: Do not print messages from gcov + * VersionHash: Do not skip too long dependency lines + + -- Julian Andres Klode Tue, 20 Sep 2016 23:53:51 +0200 + +apt (1.3~rc4) unstable; urgency=medium + + [ Julian Andres Klode ] + * Fix segfault and out-of-bounds read in Binary fields + * TagFile: Fix off-by-one errors in comment stripping + * Base256ToNum: Fix uninitialized value + * test-apt-cdrom: Fix for gnupg 2.1.15 + * CMake: test/libapt: Use a prebuilt GTest library if available + * CMake: apt-pkg: Use correct ICONV_INCLUDE_DIRS variable + * acquire: Use priority queues and a 3 stage pipeline design + => faster updates with better progress reporting + * debian: Move bugscript to old location for overlayfs xdev issue + * debian: Pass -O to make to get readable build logs + + [ David Kalnischkies ] + * try not to call memcpy with length 0 in hash calculations + * re-add apt breaks/replaces apt-utils (<< 1.3~exp2~) (Closes: #836220) + * support long keyid and fingerprint in gpgv's GOODSIG + + -- Julian Andres Klode Fri, 02 Sep 2016 20:26:36 +0200 + +apt (1.3~rc3) unstable; urgency=medium + + [ Julian Andres Klode ] + * Ignore SIGINT and SIGQUIT for Pre-Install hooks + This basically fixes Bug #832593, as long as your /bin/sh + is not dash, as dash is evil. + * prepare-release: Use equivs and gdebi-core for travis deps + * install-progress: Call the real ::fork() in our fork() method + * Packaging cleanup: + - debian: Install etc/apt if present (e.g., on Ubuntu) + - tests/control: Handle the gpg1/gpg2 mess a bit better + - debian: Make better use of the tree installed by CMake + - debian: Switch to debhelper 10 + - debian: Add more lintian overrides + - debian: Drop outdated stuff + - debian: Run wrap-and-sort + - Add new symbols to symbols file + * Build system fixes, including: + - CMake: Translations: Don't rebuild .mo for line number changes + - CMake: Translations: Pass --previous to msgmerge. + Thanks to Guillem Jover for the suggestion. + - CMake: Do not add po/ if USE_NLS is OFF + - CMake: Install config and logging directories + - CMake: Translations: Build byproduct before output + - CMake: Add Large File Support (Closes: #834767) + * Several portability fixes (full test suite passes on FreeBSD), including: + - CMake: Discover docbook stylesheet in other locations + - Add missing includes and external definitions + - Use C locale instead of C.UTF-8 for protocol strings + - Make directory paths configurable + - Lower-case uname -r output in kernel autoremove helper + - Make root group configurable via ROOT_GROUP + * Accept --autoremove as alias for --auto-remove + * apt-inst: debfile: Pass comp. Name to ExtractTar, not Binary + * changelog: Respect Dir setting for local changelog getting + * init: Add Dir::Bin::planners default entry + * Switch documentation from httpredir.d.o to deb.d.o + + [ Zhou Mo ] + * zh_CN.po: update simplified Chinese translation + + [ David Kalnischkies ] + * do dpkg --configure before --remove/--purge --pending (Closes: 835094) + * prevent C++ locale number formatting in text APIs (try 3) (LP: 1611010) + * do fail on weakhash/loop earlier in acquire (Closes: 835195) + * do not restore selections for already purged packages + * apt-key: warn instead of fail on unreadable keyrings + * show apt-key warnings in apt update (Closes: 834973) + * treat .ddeb files like .deb, especially for dpkg (LP: #1616909) + * randomize acquire order for same type index files + * don't loop on pinning pkgs from absolute debs by regex (Closes: 835818) + + -- Julian Andres Klode Tue, 30 Aug 2016 22:20:28 +0200 + +apt (1.3~rc2) unstable; urgency=medium + + [ Julian Andres Klode ] + * debian/NEWS: Get rid of 1.3~pre3+cmake1 entry. + Thanks to Axel Beckert for reporting + * CMake: Use COPYONLY instead of @ONLY + * fileutl: empty file support: Avoid fstat() on -1 fd and check result + * Change anonscm.d.o links to /git/apt/apt.git and https + + [ David Kalnischkies ] + * don't perform int Wed, 17 Aug 2016 23:31:07 +0200 + +apt (1.3~rc1) unstable; urgency=medium + + * Summary: CMake branch merged, socks5h (and tor) support, and fancy + installation ordering changes. + + [ Julian Andres Klode ] + * Handle interrupt when running Pre-Install hooks (Closes: #832593) + * CMake: po: Add mirror method + * CMake: Translations: Add support for shell scripts + * debian: make autopkgtest run with CMake build dir + * CMake: Bump minimum required version to 3.4.0 + * CMake: Check for ptsname_r() again (Closes: #833674) + * CMake: Rewrite existing Documentation support and add doxygen + * apt-private: Do not include apti18n.h in headers + * Get rid of the old buildsystem + * Fix some indentation issues in README.md + + [ David Kalnischkies ] + * pass --force-remove-essential to dpkg only if needed + * use dpkg --unpack --recursive to avoid long cmdlines + * save and restore selection states before/after calling dpkg + * select remove/purge packages early on for dpkg + * call dpkg with --no-triggers by default (Closes: #626599) + * don't purge directly, but remove and do purge at the end + * ensure all configures are reported to hook scripts + * ensure all removes are reported to hook scripts + * support all socks-proxy known to curl in https method + * suggest transport-packages based on established namescheme + * fail on unsupported http/https proxy settings (Closes: #623443) + * detect redirection loops in acquire instead of workers + * use the same redirection handling for http and https + * implement generic config fallback for methods + * implement socks5h proxy support for http method (Closes: 744934) + * allow methods to be disabled and redirected via config + * allow user@host (aka: no password) in URI parsing + * try to avoid removal of crossgraded packages + * simulate all package manager actions explicitly + * disable explicit configuration of all packages at the end + * block direct connections to .onion domains (RFC7687) + * http: auto-configure for local Tor proxy if called as 'tor' + + -- Julian Andres Klode Thu, 11 Aug 2016 14:10:22 +0200 + +apt (1.3~pre3+cmake2) experimental; urgency=medium + + * Build-depend on pkg-config + + -- Julian Andres Klode Sat, 06 Aug 2016 23:18:37 +0200 + +apt (1.3~pre3+cmake1) experimental; urgency=medium + + [ Julian Andres Klode ] + * configure.ac: Re-enable pthread support for thread-local _error + * CMake: Add basic CMake build system + * CMake: Add support for building and installing .mo files + * CMake: Add initial support for documentation building + * CMake: Switch integration tests and travis over + * CMake: debian: Switch packaging over to CMake and dh 9 + + [ Jason Travis ] + * doc: update path to periodic options script + + -- Julian Andres Klode Sat, 06 Aug 2016 22:37:30 +0200 + +apt (1.3~pre3) unstable; urgency=medium + + [ Julian Andres Klode ] + * ExecGPGV: Fork in all cases + * ExecGPGV: Pass current config state to apt-key via temp file (LP: #1607283) + + [ David Kalnischkies ] + * tests: activate dpkg multi-arch even if test is single arch + * ensure Cnf::FindFile doesn't return files below /dev/null + * don't hardcode /var/lib/dpkg/status as dir::state::status + * allow arch=all to override No-Support-for-Architecture-all + * support "install ./foo.changes" + * clean up default-stanzas from extended_states on write + * report warnings&errors consistently in edit-sources + * create non-existent files in edit-sources with 644 instead of 640 + * report progress for removing while purging pkgs + * use a configurable location for apport report storage + * report progress for triggered actions + * call flush on the wrapped writebuffered FileFd + * verify hash of input file in rred + * use proper warning for automatic pipeline disable + * http: skip requesting if pipeline is full + * rred: truncate result file before writing to it (Closes: #831762) + * eipp: avoid producing file warnings in simulation (Closes: 832614) + * if the FileFd failed already following calls should fail, too + * edsp: try to read responses even if writing failed + * prevent C++ locale number formatting in text APIs (try 2) (Closes: 832044) + * apt-key: kill gpg-agent explicitly in cleanup + + [ Mert Dirik ] + * Turkish program translation update (Closes: 832039) + + -- Julian Andres Klode Thu, 04 Aug 2016 10:23:49 +0200 + +apt (1.3~pre2) unstable; urgency=medium + + [ Andrew Patterson ] + * Add kernels with "+" in the package name to APT::NeverAutoRemove + (Closes: #830159) + + [ David Kalnischkies ] + * add Testsuite-Triggers to tagfile-order + * tests: fix external solver/planner directory setup + + -- Julian Andres Klode Fri, 08 Jul 2016 14:28:57 +0200 + +apt (1.3~pre1) unstable; urgency=medium + + Upload to unstable from the pub because Niels wanted it + + [ David Kalnischkies ] + * show right binary name in simulation notice (Closes: 825216) + * imbue datetime parsing with C.UTF-8 locale (Closes: 828011) + * imbue .diff/Index parsing with C.UTF-8 as well + * close server if parsing of header field failed + * add myself to Uploaders + * eipp: implement version 0.1 of the protocol + * eipp: provide the internal planer as an external one + * eipp: make no difference between remove & purge + * eipp: properly handle arch-specific provides + * eipp: implement Immediate-Configuration flag + * eipp: add Allow-Temporary-Remove-of-Essentials + * eipp: rename stanza 'Install' to 'Unpack' + * eipp: enable xz-compressed scenario logging + * if conf unset, don't read / as conf/pref/sources dir + * don't do atomic overrides with failed files (Closes: 828908) + * if reading of autobit state failed, let write fail + * write auto-bits before calling dpkg & again after if needed + * protect only the latest same-source providers from autoremove + * reinstalling local deb file is no downgrade + * do not treat same-version local debs as downgrade + * alias apt-key list to finger (Closes: 829232) + * warn if apt-key is used in scripts/its output parsed + * deprecate 'apt-key update' and no-op it in Debian + * use +0000 instead of UTC by default as timezone in output + * avoid 416 response teardown binding to null pointer + * report write errors in EDSP/EIPP properly back to caller + * EIPP/EDSP log can't be written is a warning, not an error + * don't change owner/perms/times through file:// symlinks + * report all instead of first error up the acquire chain + * keep trying with next if connection to a SRV host failed + + [ Zhou Mo ] + * zh_CN.po: update simplified chinese translation + + [ Julian Andres Klode ] + * methods/ftp: Cope with weird PASV responses. + Thanks to Lukasz Stelmach for the initial patch (Closes: #420940) + * Fix buffer overflow in debListParser::VersionHash() (Closes: #828812) + * cache: Bump minor version to 6 + * indextargets: Check that cache could be built before using it + (Closes: #829651) + + [ Nicolas Le Cam ] + * Use the ConditionACPower feature of systemd in the apt-daily service + (Closes: #827930) + * Add a apt suggests powermgmt-base + + -- Julian Andres Klode Thu, 07 Jul 2016 20:25:18 +0200 + +apt (1.3~exp3) experimental; urgency=medium + + [ Petter Reinholdtsen ] + * Norwegian Bokmål program translation update (Closes: 827067) + + [ David Kalnischkies ] + * apt-key: don't search PATH if command is a path already + * don't use FindFile for external Dir::Bin commands + * http: don't hang on redirect with length + connection close + * merge sources.list lines based on Release filename (Closes: 826944) + * avoid std::get_time usage to sidestep libstdc++6 bug (LP: 1593583) + * do not error if auto-detect-proxy cmd has no output (Closes: 827713) + * implement and document DIRECT for auto-detect-proxy + * run update post-invokes even on (partial) failures + * handle weak-security repositories as unauthenticated (Closes: 827364) + * generalize secure->insecure downgrade protection + * forbid insecure repositories by default expect in apt-get (Closes: 808367) + * source: if download is skipped, don't try to unpack + * better error message for insufficient hashsums (Closes: 827758) + * add [weak] tag to hash errors to indicate insufficiency + * ensure filesize of deb is included in the hashes list + * add insecure (and weak) allow-options for sources.list + + [ Dominic Benson ] + * Reinstate caching of file hashes in apt-ftparchive (Closes: #806924) + + [ Zhou Mo ] + * zh_CN.po: update simplified chinese translation + + -- Julian Andres Klode Wed, 22 Jun 2016 14:50:12 +0200 + +apt (1.3~exp2) experimental; urgency=medium + + [ Johannes 'josch' Schauer ] + * edsp: document unique package identifiers + + [ David Kalnischkies ] + * edsp: warn if unexpected stanzas appear in the solution + * show globalerrors before asking for confirmation + * show final solution in --no-download --fix-missing mode + * document --no- as --show-upgraded is the default (Closes: 824456) + * fail instead of segfault on unreadable config files (Closes: 824503) + * convert EDSP to be based on FileFd instead of FILE* + * edsp: dump: support dumping into compressed file + * edsp: add Forbid-{New-Install,Remove} and Upgrade-All + * update symbols file + * no-change bump of Standards-Version to 3.9.8 + * override lintian on doxygens embedded-javascript-library + * fix and document on the fly compressor config + * prevent C++ locale number formatting in text APIs (Closes: #825396) + * accept only the expected UTC timezones in date parsing (Closes: 819697) + * avoid changing the global LC_TIME for Release writing + * use de-localed std::put_time instead rolling our own + * use std::locale::global instead of setlocale + * look into the right textdomain for apt-utils again + * try to detect sudo spawned root-shell in prefixing (Closes: 825742) + * ignore std::locale exception on non-existent "" locale + * apt-key: change to / before find to satisfy its CWD needs. + Thanks to Samuel Thibault for 'finding' the culprit! (Closes: 826043) + * edsp: use an ID mapping for the internal solver + * edsp: use a stanza based interface for solution writing + * edsp: optionally store a compressed copy of the last scenario + * move 'dump' solver from apt-utils to apt package + * edsp: if internal is used, keep this decision + * edsp: if logging is requested, do it for internal, too + * edsp: drop privileges before executing solvers + * don't explicitly configure the last round of packages + * drop Dpkg::MaxArgs in favor of Dpkg::MaxArgsBytes + * do not hang on piped input in PipedFileFdPrivate + * don't leak an FD in lz4 (de)compression + * don't leak EDSP solver output fd + * don't leak FD in AutoProxyDetect command return parsing + + [ Julian Andres Klode ] + * Provide complete apt bash completion. + Thanks to Elias Fröhner and Svyatoslav Gryaznov for the initial work + (LP: #1573547) + * apt.systemd.daily: Put opening brace of check_power on extra line + (LP: #1581985) + * Add conflicting Signed-By values to error message + * Normalize Signed-By values by removing trailing commas everywhere + * Pass -fvisibility-inlines-hidden to g++ + + [ Zhou Mo ] + * zh_CN.po: update simplified Chinese translation. + + [ Yuri Kozlov ] + * Russian program translation update (Closes: 824702) + + [ Takuma Yamada ] + * Japanese program translation update (Closes: 826291) + + -- Julian Andres Klode Sat, 11 Jun 2016 17:23:19 +0200 + +apt (1.3~exp1) experimental; urgency=medium + + [ David Kalnischkies ] + * make random acquire queues work less random + * add dep11 files to default Release patterns + * don't ask server if we have entire file in partial/ + * properly format multiline error messages + * format multiline errors properly in acquire progress + * show more details for "Hash Sum mismatch" errors + * show more details for "Writing more data" errors, too + * use the same redirection mirror for all index files + * edsp: ask policy engine for the pin of the version directly + * give rc-status packages a pin of -1 + * respect user pinning in M-A:same version (un)screwing + * deprecate confusing Pkg.CandVersion() method + * factor out Pkg/DepIterator prettyprinters into own header + * gpgv: use EXPKEYSIG instead of KEYEXPIRED + * gpgv: handle expired sig as worthless + * don't show NO_PUBKEY warning if repo is signed by another key + (Closes: 618445) + * support multiple fingerprints in signed-by + * support Signed-By in Release files as a sort of HPKP + * bugscript: include all configuration fragment files (Closes: 820861) + * move gnupg|gnupg2 from apt Depends to Recommends + * warn if apt-key is run unconditionally in maintainerscript + * remove 100-levels config nesting limit + * let DPKG_COLORS default to our APT::Color setting + * allow redirection for items without a space in the desc again + * delay progress until Release files are downloaded + * download arch:all also for NATIVE_ARCHITECTURE indextargets + * implement Fallback-Of for IndexTargets + * implement Identifier field for IndexTargets + * gpgv: show always webportal error on NODATA (Closes: 823746) + * don't sent uninstallable rc-only versions via EDSP + * edsp: support generic and solver-specific configs (Closes: 823918) + + [ Julian Andres Klode ] + * policy: Get rid of old (pre-1.1) GetCandidateVer algorithm + * private-show: Get rid of old policy support code + * ftparchive: Support writing Signed-By fields + * Strip trailing commas for created signed-by fingerprint lists + * update: Run Post-Invoke-Success if not all sources failed + + [ Patrick Cable ] + * refactored no_proxy code to work regardless of where https proxy is set + + [ James McCoy ] + * deb822: Restore support for -{Add,Remove} + + [ Zhou Mo ] + * zh_TW.po: remove several fuzzy tags after review + + [ Adrian Wielgosik ] + * Don't copy strings in Startswith, Endswith + * Speed up GetLocalitySortedVersionSet. + + [ Frans Spiesschaert ] + * Dutch program translation update (Closes: 823976) + + -- Julian Andres Klode Wed, 11 May 2016 10:48:27 +0200 + +apt (1.2.11) unstable; urgency=medium + + [ David Kalnischkies ] + * ensure transaction states are changed only once + * stop handling items in doomed transactions. + Thanks to Barr Detwix & Vincent Lefevre for log files (Closes: 817240) + * do not require non-broken systems in 'upgrade' + * detect compressed status files on extension again + * recheck Pre-Depends satisfaction in SmartConfigure (LP: #1569099) + * fix Alt-Filename handling of file method + * allow uncompressed files to be empty in store again + * silently skip acquire of empty index files + * ensure outdated files are dropped without lists-cleanup + + [ Kelemen Gábor ] + * Hungarian program translation update (Closes: 820638) + + -- Julian Andres Klode Mon, 25 Apr 2016 15:23:49 +0200 + +apt (1.2.10) unstable; urgency=medium + + [ Zhou Mo ] + * zh_CN.po: update simplified Chinese translation. (100%) + + [ Julian Andres Klode ] + * test-apt-download-progress: Use a larger file for testing + * Allow lowering trust level of a hash via config + + [ Michael Vogt ] + * Use systemd.timer instead of a cron job (Closes: #600262, #709675, #663290) + (LP: #246381, #727685) + + [ David Kalnischkies ] + * use buffered writing for InRelease splitting + + [ Takuma Yamada ] + * Japanese program translation update (Closes: 819938) + + -- Michael Vogt Tue, 05 Apr 2016 20:23:47 +0200 + +apt (1.2.9) unstable; urgency=high + + [ David Kalnischkies ] + * drop confusing comma from no strong hash message + + [ Julian Andres Klode ] + * Do not mark packages for keep that we want to remove (LP: #1562402) + (This fixes some upgrades involving renames where the old package + is removed) + + -- Julian Andres Klode Sun, 27 Mar 2016 01:26:51 +0100 + +apt (1.2.8) unstable; urgency=medium + + [ Michael Vogt ] + * Get accurate progress reporting in apt update again + + [ Julian Andres Klode ] + * Report non-transient errors as errors, not as warnings + * methods/gpgv: Rewrite error handling and message. + Thanks to Ron Lee for wording suggestions + * Use descriptive URIs in 104 Warning messages + * cachefile: Only set members that were initialized successfully + (Closes: #818628) + * Update symbols file + + [ David Kalnischkies ] + * do not strip epochs from state version strings (Closes: 818162) + * properly check for "all good sigs are weak" (Closes: 818910) + * handle gpgv's weak-digests ERRSIG + + [ Zhou Mo ] + * zh_CN.po: update simplified Chinese translation. (Closes: #818639) + + [ Takuma Yamada ] + * Japanese manpage translation update (Closes: 818950) + + -- Julian Andres Klode Thu, 24 Mar 2016 19:31:24 +0100 + +apt (1.2.7) unstable; urgency=medium + + "Caesar is dead" + + [ Frans Spiesschaert ] + * Dutch program translation update (Closes: 817060) + * Dutch manpages translation update (Closes: 817062) + + [ Julian Andres Klode ] + * Use native architecture instead of amd64 for build-dep-purge test + * Do not consider SHA1 usable + * Test that SHA1-only .diff/Index files are not used + * test: Use SHA512 digests for GPG, reject SHA1-based signatures + * methods/gpgv: Reject weak digest algorithms + * apt-pkg/acquire-worker.cc: Introduce 104 Warning message + * methods/gpgv: Warn about SHA1 (and RIPEMD-160) + + [ David Kalnischkies ] + * require $(HASH)-Download field in .diff/Index files + * flush line-clearing on progress stop before post-invoke (Closes: 793672) + * enforce verify of filesize in 'apt-get source' + + [ Manuel "Venturi" Porras Peralta ] + * Spanish apt-mark translation fix (Closes: 817999) + + [ Zhou Mo ] + * zh_CN.po: fix translation bug. (Closes: #818177) + + [ Michael Vogt ] + * Fix bug where the problemresolve can put a pkg into a heisenstate + (LP: #1550741) + + -- Julian Andres Klode Tue, 15 Mar 2016 19:20:18 +0100 + +apt (1.2.6) unstable; urgency=high + + [ Veres Lajos ] + * Fix several typos + + [ Julian Andres Klode ] + * apt-pkg/algorithms.cc: Avoid stack buffer overflow in KillList + (Closes: #701069) + * urgency=high because this fixes a stack overflow and the last + upload fixed several segfaults and has not migrated yet either. + + -- Julian Andres Klode Mon, 07 Mar 2016 19:49:38 +0100 + +apt (1.2.5) unstable; urgency=medium + + [ Daniel Kahn Gillmor ] + * apt-key del should correctly handle keyids prefixed with 0x + + [ David Kalnischkies ] + * support APT::Get::Build-Dep-Automatic again in build-dep + * add test for apt-key 0xKEY and use parameter expansion. + Thanks to James McCoy for the suggestion. (Closes: 816691) + * do not move not-failed pdiff-patches into CWD on failure (Closes: #816837) + * get group again after potential remap in Source: parse. + Thanks to Francesco Poli and Marc Haber for testdata. (Closes: 812251) + + [ Colin Watson ] + * Fix lzma write support to handle "try again" case (Closes: #751688) + + [ Julian Andres Klode ] + * Prevent double remapping of iterators and string views + * debian/control: Set Standards-Version to 3.9.7 + + -- Julian Andres Klode Sun, 06 Mar 2016 19:47:45 +0100 + +apt (1.2.4) unstable; urgency=medium + + [ David Kalnischkies ] + * use local changelog from /usr/share/doc if possible + * always download changelogs into /tmp first + * pass versioned provides to external solvers in EDSP + + [ Julian Andres Klode ] + * Fix maintscript to properly remove 20changelog (Closes: #814754) + * Fix crash with empty architecture list (LP: #1549819) + * Add missing numeric includes in files using std::accumulate() + + -- Julian Andres Klode Sat, 27 Feb 2016 14:02:47 +0100 + +apt (1.2.3) unstable; urgency=high + + [ Julian Andres Klode ] + * Set seekpos to 0 after reopening files in Seek() (Closes: #812994, #813000) + + [ David Kalnischkies ] + * get dpkg lock in build-dep if cache was invalid again (Closes: 814139) + + -- Julian Andres Klode Wed, 10 Feb 2016 18:02:20 +0100 + +apt (1.2.2) unstable; urgency=medium + + [ David Kalnischkies ] + * always create pkg at the time pkg:arch is created + * reimplement build-dep via apts normal resolver + (Closes: #137560, #444930, #489911, #583914, #728317, #812173) + * parse version correctly from binary Source field (Closes: 812492) + * get sources for packages in multiple releases again (Closes: 812497) + * only warn about missing/invalid Date field for now (Closes: 809329) + * support -- in architecture specs. + Thanks to Bálint Réczey for initial patch (Closes: #812212) + * avoid building dependency tree in 'source' command + + [ Stefan Bühler ] + * fix "Mismatched free() / delete / delete []" in simple_buffer + + [ Julian Andres Klode ] + * Do not buffer writes larger than the buffer if possible + * Drop the g++ build-dep, transition is done + * NEWS: Prefix the keep deb option with Binary::apt:: (Closes: #812111) + * rred: If there were I/O errors, fail + * Correctly report write errors when flushing buffered writer + * test: Fix apt-key tests to work with current gpg 2.1 + + [ Manuel "Venturi" Porras Peralta ] + * Spanish program translation update (Closes: 813467) + + [ Adrian Wielgosik ] + * Try avoiding loading long package description + * Avoid temporary strings in SubstVar. + + [ Fredrik Fornwall ] + * edspsystem.cc: include for mkdtemp (Closes: #807367) + + -- Julian Andres Klode Thu, 04 Feb 2016 22:50:43 +0100 + +apt (1.2.1) unstable; urgency=high + + [ Zhou Mo ] + * po: update zh_CN programs translation + + [ Julian Andres Klode ] + * Remap StringView instances pointing into the cache (Closes: #812251) + + [ Michael Vogt ] + * Log calling SUDO_USER or PKEXEC_UID in history.log. + Thanks to Thomas Reusch + + -- Julian Andres Klode Mon, 25 Jan 2016 18:03:50 +0100 + +apt (1.2) unstable; urgency=medium + + [ Julian Andres Klode ] + * Do not break apt-file (<< 3.0~exp1~), 2.X works fine + * Version the build-depends on liblz4-dev to >= 0.0~r126 + * search: Handle packages without description (Closes: #810622) + * Only enable pipelining if server is HTTP/1.1 (Closes: #810796) + + [ Mattia Rizzolo ] + * Sort the list of sources to be built and linked (Closes: #810509) + + [ Michael Vogt ] + * Do not show multiple identical apt-cache showsrc entries (Closes: #734922) + + [ David Kalnischkies ] + * evaluate sourceslist-list-format entity in vendors sources.list. + Thanks to Niels Thykier for reporting on IRC + * update symbols file + * fix M-A:foreign provides creation for unknown archs + * revert file-hash based action-merging in acquire (Closes: 810046) + * return correct position in APT::StringView::(r)find + + [ Zhou Mo ] + * po: update simplified chinese programs translation + + -- Julian Andres Klode Fri, 15 Jan 2016 19:52:19 +0100 + +apt (1.2~exp1) experimental; urgency=medium + + [ Beatrice Torracca ] + * Italian manpages translation update (Closes: 809522) + + [ David Kalnischkies ] + * add optional support for comments in pkgTagFile + * support comments in debian/control parsing (Closes: 806775) + * properly parse comments in apt_preferences and deb822-style sources + * include all compressed Packages/Sources files in Release file + * use one 'store' method to rule all (de)compressors + * ensure compression cleanup even without lists-cleanup + * allow pdiff bootstrap from all supported compressors + * keep compressed indexes in a low-cost format + * support '-' and no parameter for stdin in apt-helper cat-file + * tests: limit autotest-functionname generation to sane characters + * use filesize of compressed pdiffs for the limit if possible + * remove uncompressed leftover partial file before pdiff bootstrap + + [ Michael Vogt ] + * Add support for APT::Periodic::CleanInterval. + Thanks to Martin-Éric Racine + * Add bash-completion support for the "apt" command (Closes: #747094) + * Add new APT::Keep-Downloaded-Packages option (Closes: #160743) + + [ Julian Andres Klode ] + * Change compressor costs to be 100 apart + * apt-cache: stats: Average is over used, not all, buckets + * Increase APT::Cache-HashTableSize default to 50503 + * travis: pull liblz4-dev from wily + * FileFd: (native) LZ4 support + * apt-helper: cat-file: Add -C/--compress option + * CopyFile: Use 64 * 1024 instead of 64000 as buffer size + * acquire: Allow parallelizing methods without hosts + * rred: Run in parallel + * Introduce internal APT::StringView class + * Switch performance critical code to use APT::StringView + * pkgCacheGenerator::StoreString: Get rid of std::string + * pkgCacheGenerator: CurMd5.Value() cannot be empty + * AvailableDescriptionLanguages: Use one string for all iterations + * NEWS: Document recompression of indices + * Store the size of strings in the cache + * libapt-pkg5.0: Add Breaks appstream (<< 0.9.0-3~) + + [ Helmut Grohne ] + * Allow building without libgtest-dev under build profile + (Closes: #809726) + + -- Julian Andres Klode Fri, 08 Jan 2016 21:41:10 +0100 + +apt (1.1.10) unstable; urgency=medium + + [ David Kalnischkies ] + * deal with empty values properly in deb822 parser (Closes: 808102) + + [ Beatrice Torracca ] + * fix 3 typos/omissions in apt.conf(5) (Closes: 809160) + + [ Julian Andres Klode ] + * BufferedWriter: flushing: Check for written < size instead of <= + * aptconfiguration: Set default compression level to 6 + * BufferedFileFdPrivate: Make InternalFlush() save against errors + * Switch to DJB hashing and use prime number as table size + * Turn tolower_ascii() and isspace_ascii() into inline functions + * Fix test case that was broken by switch of hash function + * pkgTagSection::Scan: Fix read of uninitialized value + * pkgCacheGenerator: Allow passing down an already created cache + * Add support for calculating hashes over the entire cache + * Do not sync the cache file + + -- Julian Andres Klode Wed, 30 Dec 2015 00:40:53 +0100 + +apt (1.1.9) unstable; urgency=medium + + Highlights: buffered rred writes and slightly faster cache generation (~10%) + + [ Julian Andres Klode ] + * Introduce isspace_ascii() for use by parsers + * Convert most callers of isspace() to isspace_ascii() + * pkgcachegen: Use std::unordered_map instead of std::map + * debListParser: ParseDepends: Only query native arch if needed + * debListParser: Do not validate Description-md5 for correctness twice + * ParseDepends: Mark branches for build-dep parsing as unlikely + * rred: Only call pkgInitConfig() in test mode + * FileFdPrivate: Add getter and setter for fields + * FildFd: Introduce a Flush() function and call it from Close() + * FileFd: Add a buffered writing mode + * rred: Use buffered writes + * pkgcachegen.h: Hack around unordered_map not existing before C++11 + * doc/acquire-additional-files.txt: Mention apt-helper cat-file + + [ Niels Thykier ] + * Hex2Digit: Do not use isxdigit() + + [ David Kalnischkies ] + * allow repositories to forbid arch:all for specific index targets + + -- Julian Andres Klode Sun, 27 Dec 2015 19:16:36 +0100 + +apt (1.1.8) unstable; urgency=medium + + * apt-helper: Add a cat-file command for concatening files + * Change InternalReadLine to always use buffer.read() return value + + -- Julian Andres Klode Sat, 26 Dec 2015 23:23:02 +0100 + +apt (1.1.7) unstable; urgency=medium + + The real "speed up rred for uncompressed files" release + + * Use a hardcoded buffer size of 4096 to fix performance + * rred: Allow passing files as arguments for compressor testing + * Get rid of memmove() in our read buffering + + -- Julian Andres Klode Sat, 26 Dec 2015 19:10:14 +0100 + +apt (1.1.6) unstable; urgency=medium + + Merry Christmas from the APT Team + + [ Pino Toscano ] + * Fix FileUtlTest.GetTempDir failure when run as root (Closes: #808383) + * CopyFile: fix BufSize to a sane value (Closes: #808381) + * CopyFile: avoid failing on EOF on some systems (Closes: #808381) + + [ Julian Andres Klode ] + * Do nothing in FileFd::Write() if Size is 0 (Closes: #808381) + + [ David Kalnischkies ] + * avoid evaluating shell in paths used in apt-key + * avoid triggering gpg2 migration in apt-key + * follow dpkg and xz and use CRC64 for xz compression + * parse xz-compression level from configuration + * implement a buffer system for FileFd::ReadLine (Closes: 808579) + * ensure we got a lock in clean operation (Closes: 808561) + + -- Julian Andres Klode Thu, 24 Dec 2015 17:01:49 +0100 + +apt (1.1.5) unstable; urgency=medium + + [ Julian Andres Klode ] + * Do not swap required and important in pkgCache::Priority() + Thanks to Manuel A. Fernandez Montecelo for discovering this + (Closes: #807523) + * Convert package names from Packages files to lower case (Closes: #807012) + * test framework: Correctly generate new paths in noopchroot + * debian/apt.auto-removal.sh: Adjust -dbg exclusion for multi-arch + * pkgcache: Make hash arch-independent using fixed size integer + * test-apt-download-progress: Run the https test multiple times + + [ David Kalnischkies ] + * update symbols files to 1.1.4 state of affairs + * parse .diff/Index hashes in reverse order + * redirect which stderr to /dev/null for consistency (Closes: 807373) + * show a more descriptive error for weak Release files (Closes: 806459) + * support regex and co in 'apt-cache policy $pkg' again (Closes: 807870) + * non-existing directories don't need to be cleaned (Closes: 807477) + + [ Seo Sanghyeon ] + * fix incorrect Korean translation of "manually" and "automatically" + + [ Andreas Metzler ] + * mention APT::AutoRemove::{Recommends,Suggests}Important option + (Closes: 807413) + + -- Julian Andres Klode Mon, 14 Dec 2015 16:56:11 +0100 + +apt (1.1.4) unstable; urgency=medium + + [ Julian Andres Klode ] + * defaults.mak: Set LC_COLLATE=C.UTF-8 for reproducible sort order + * Avoid overflow when summing up file sizes + + [ David Kalnischkies ] + * add a apt breaks (apt-utils << 1.1.3) for partial-upgrades (Closes: 806765) + * require explicit paths to dsc/control as we do for deb files + (Closes: 806693) + * use @CHANGEPATH@ as placeholder in changelog URI templates + * replace "which" with "command -v" for portability. + Thanks to Mingye Wang for the suggestion. (Closes: 807144) + * replace run-parts with find|sort to avoid debianutils usage + * part revert, part redo 'which' replacement. + Thanks to Jakub Wilk for pointing out #747320 + + [ Fredrik Fornwall ] + * apt-helper.cc: include for atoi (Closes: 807031) + + -- Julian Andres Klode Mon, 07 Dec 2015 15:31:31 +0100 + +apt (1.1.3) unstable; urgency=medium + + [ David Kalnischkies ] + * use function pointers instead of weak symbols for cmdline parsing + * accept ../ on the cmdline as start for a deb file as well + * add apt-utils Depends apt (= ${binary:Version}) + + [ Andreas Cadhalpun ] + * do not override exact targetrelease matches with lesser matches + (Closes: 746412) + + -- Michael Vogt Mon, 30 Nov 2015 08:49:40 +0100 + +apt (1.1.2) unstable; urgency=medium + + [ David Kalnischkies ] + * outsmart gcc -O3 over-optimization in pkgCdrom::FindPackages + * disable privilege-drop verification by default as fakeroot trips over it + (Closes: 806475) + * fix program name detection in rsh method + * disable privilege dropping for rsh/ssh method by default (Closes: 806511) + + [ Michael Vogt ] + * do not use "-Wl,-Bsymbolic-functions" during the build to avoid breakage + + -- Julian Andres Klode Sat, 28 Nov 2015 22:47:40 +0100 + +apt (1.1.1) unstable; urgency=medium + + [ Michael Vogt ] + * Deal with killed acquire methods properly instead of hanging + (Closes: #806406) + * Check if the Apt::Sandbox::User exists in CheckDropPrivsMustBeDisabled() + (Closes: #806406) + + [ David Kalnischkies ] + * appease adequate with some weak symbols for -private (Closes: #806422) + + -- Michael Vogt Fri, 27 Nov 2015 16:04:59 +0100 + +apt (1.1) unstable; urgency=medium + + [ Justin B Rye ] + * review apt(8) manpage + * review apt-mark(8) manpage + * review apt-secure(8) manpage + * review sources.list(5) manpage + + [ Michael Vogt ] + * upload ABI break version from experimental to unstable + + -- Michael Vogt Thu, 26 Nov 2015 12:33:44 +0100 + +apt (1.1~exp16) experimental; urgency=medium + + [ David Kalnischkies ] + * do not use _apt for file/copy sources if it isn't world-accessible + (Closes: 805069) + * support setting empty values (sanely) & removing support + for space-gapping: '-o option= value' + Thanks to Daniel Hartwig for initial patch. (Closes: 693092) + * ignore lost+found in private directory cleanup (Closes: 805424) + * update libapt-{pkg,inst} symbols files + * do not rerun ./configure causing FTCBFS with newer autotools-dev. + Thanks to Helmut Grohne for the detailed bugreport. (Closes: 804923) + * do not segfault in cache generation on mmap failure (Closes: 803417) + * do not sent Last-Modified if we expect a changed file + * show potentially arch-qualified fullname in 'apt show' + + [ Frans Spiesschaert ] + * Dutch manpages translation (NEW) (Closes: 805474) + + [ Justin B Rye ] + * review of new/changed translatable program strings + + -- Michael Vogt Tue, 24 Nov 2015 21:29:14 +0100 + +apt (1.1~exp15) experimental; urgency=medium + + [ Julian Andres Klode ] + * deblistparser: Make PrioList const + * srvrec: Do not expose C++11 tuple use in header + * cacheset: Fix compilation on new GCC in C++98 mode + * Provide tests for thread-safety + + [ Mert Dirik ] + * Turkish program translation update (Closes: 802610) + + [ David Kalnischkies ] + * implement a public pkgSystem::MultiArchSupported + * implement a public pkgSystem::ArchitecturesSupported + * implement operator* for cacheset iterators + * refactor dpkg execution in deb/debsystem + * provide public interface to hold/unhold packages + * allow all dpkg selections to be set via apt-mark and libapt + * drop privileges in file:// method as we do for decompressors + * unbreak the copy-method claiming hashsum mismatch since ~exp9 + (Closes: 799158) + * show progress info while 'downloading' a local .deb file + * support .deb files in upgrade operations as well + * rework errors and warnings around insecure repositories (Closes: 796549) + * refer to apt-secure(8) in unsecure repositories warning + * suggest 'apt autoremove' to get right of unneeded packages (Closes: 801571) + * add binary-specific options via Binary scope + * revamp apt(8) to refer more instead of duplicating + * disable updating insecure repositories in apt by default + * new quiet level -qq for apt to hide progress output + * hidden support more apt-get/apt-cache commands in apt + (Closes: 778234, 780700, 781237) + * show version and type in "apt (r)depends" (Closes: 218995) + * revamp all tools help messages + * sanify API to get 'the' candidate version (Closes: #803471) + * support arch:all data e.g. in separate Packages file + * ignore newlines in dpkg-deb control output for installing debs + (Closes: 802553) + * allow acquire method specific options via Binary scope + * encode UTF-8 characters correctly in QuoteString (Closes: 799123) + * activate AI_IDN by default to support IDN domains (Closes: 763437) + + -- Michael Vogt Wed, 11 Nov 2015 17:04:43 +0100 + +apt (1.1~exp14) experimental; urgency=medium + + [ Julian Andres Klode ] + * Revert "Fix select timeout to be 50msec instead of 0.5msec" for acquire + * .travis.yml: Add pinned vivid for gettext and clean up a bit + * Allow -i and -u as aliases for installed and upgradable in list + + -- Michael Vogt Tue, 20 Oct 2015 18:25:04 +0200 + +apt (1.1~exp13) experimental; urgency=medium + + [ Michael Vogt ] + * Use xgettext --no-location in make update-pot + * Fix select timeout to be 50msec instead of 0.5msec (Closes: #799857) + + [ David Kalnischkies ] + * M-A: allowed pkgs of unconfigured archs do not satisfy :any + * implement dpkgs vision of interpreting pkg: dependencies + * add Source-Version field for EDSP + * fix insecure use of /tmp in EDSP solver 'dump' (Closes: 795600) + * select kernels to protect from autoremove based on Debian version + (Closes: 787827) + * implement autobit and pinning in EDSP solver 'apt' + * do not discard new manual-bits while applying EDSP solutions + * include debug information in the autoremove-kernels file + * avoid using global PendingError to avoid failing too often too soon + * implement apt-get source msg 'Please use: $vcs' for git + * do not ignore differently versioned self-provides + * do not generate bogus hashes if hash is disabled in apt-ftparchive + * use APT::FTPArchive hash settings as default for APT::FPArchive::$filetype + * add --sha512 option + documentation for apt-ftparchive + * deal with spaces in path, command and filepaths in apt-key + * add by-hash sources.list option and document all of by-hash + * fallback to well-known URI if by-hash fails (Closes: 798919) + + -- Michael Vogt Mon, 05 Oct 2015 18:27:22 +0200 + +apt (1.1~exp12) experimental; urgency=medium + + [ David Kalnischkies ] + * sources.list and indextargets option for pdiffs + * auto-prefix $(SITE) for indextargets Description field + * implement PDiff patching for compressed files + * implement indextargets option 'DefaultEnabled' + * try xz instead of bz2 first for compressed files + * implement $(NATIVE_ARCHITECTURE) substvar for indextargets + * detect and deal with indextarget duplicates + * ignore for _apt inaccessible TMPDIR in pkgAcqChangelog (Closes: 797270) + * if file is inaccessible for _apt, disable privilege drop in acquire + * remove Christian Perrier from Uploaders as requested. + Thanks to Christian for all the l10n, code & social contributions! + (Closes: #783337) + * use unusable-for-security hashes for integrity checks + * use clock() as source for SRV randomness + + [ Miroslav Kure ] + * Czech program translation update (Closes: 797329) + + [ Michael Vogt ] + * Consider md5sum no longer a usable hash + * Add support for writing by-hash dirs in apt-ftparchive + + [ Julian Andres Klode ] + * apt-pkg/tagfile.h: Include stdint.h, fixes rdep build failures + + -- Michael Vogt Fri, 11 Sep 2015 23:31:34 +0200 + +apt (1.1~exp11) experimental; urgency=medium + + [ Julian Andres Klode ] + * pkgcachegen: Account for remapping when parsing depends from NewPackage. + Thanks to Jakub Wilk for the bug report and the backtraces (Closes: #796999) + * debian/rules: Only do parallel build if specified in DEB_BUILD_OPTIONS. + Thanks to Jakub Wilk for the suggestion + * cacheset: Prefer the depcache over the policy again + * install: Set a local deb as the candidate for that package + * Always close compressed files in FileFd + * Use compressor support from FileFd for ExtractTar instead of programs + * Do not parse Status fields from remote sources + + [ David Kalnischkies ] + * just-in-time removal of broken essential packages (Closes: 796070) + * correct 'apt update' download summary line + * ignore AllowMem parameter in cache generation (Closes: 796459) + * add a libapt-pkg recommends apt + * fix various typos reported by codespell + * use always priv-dropping for changelog download as root + * allow explicit dis/enable of IndexTargets in sources options + + [ Anders Jonsson ] + * Swedish program translation update (Closes: 796059) + + -- Julian Andres Klode Thu, 27 Aug 2015 17:55:12 +0200 + +apt (1.1~exp10) experimental; urgency=medium + + [ Michael Vogt ] + * add support for SRV record lookup before connect + * Provide "apt-get full-upgrade" to match "apt full-upgrade" + * Add support for "apt-cache showsrc --only-source srcpkgname" + Thanks to Steve Slangasek for the suggestion (Closes: 695633) + + [ Julian Andres Klode ] + * Support tabs in sources.list files (Closes: #796067) + * Re-indent GetCandidateVerNew() and make ConsiderFiles argument explicit + * postinst: Correctly pass --home instead of -home, and fixup old user. + Thanks to Niels Thykier for reporting this on IRC + + -- Michael Vogt Mon, 24 Aug 2015 10:12:15 +0200 + +apt (1.1~exp9) experimental; urgency=medium + + [ Michael Vogt ] + * Add "ca-certificates" recommends to apt-transport-https + * test/integration/test-apt-download-progress: + - fix test failure on fast hardware + * Rename "Size" in ServerState to TotalFileSize + * Make apt compile with clang++ again + * Cleanup includes (Thanks iwyu) + + [ David Kalnischkies ] + * re-enable patchsize limit option for pdiffs + * better non-virtual metaIndex.LocalFileName() implementation + * mark internal interfaces as hidden + * restore ABI of pkgTagSection + * streamline display of --help in all tools + * allow uninstalled packages to be put on hold + * use 'best' hash for source authentication (LP: #1098738) + * re-enable support for -s (and co) in apt-get source (Closes: 742578) + * create directory for extended_states if needed + * create our cache and lib directory always with mode 755 + * fix file ownership tests to work on kfreebsd + * use dpkg --merge-avail only if needed in apt-mark + * properly handle already reinstall pkgs in ordering (Closes: 770291) + * correct architecture detection for 'rc' packages for purge (Closes: 770898) + * derive more of https from http method + * properly implement pkgRecord::Parser for *.deb files + * improve https method queue progress reporting. + Thanks to Robert Edmonds and Anders Kaseorg for initial patchs + (Closes: 777565, 781509) + * calculate only expected hashes in methods + * calculate hashes while downloading in https + * ensure lists/ files have correct permissions after apt-cdrom add + * unsigned Release files can expire, too + * a hit on Release files means the indexes will be hits too + * remove "first package seen is native package" assumption. + Thanks to Axel Beckert for testing (Closes: 782777) + * improve partial/ cleanup in abort and failure cases + * a pin of 1000 always means downgrade allowed + * remove unused and strange default-value for pins + * show non-matching m-a:same versions in debug message + * fix 'Source' to 'Package' rename in apt-ftparchive + * sync TFRewrite*Order arrays with dpkg and dak + * stop depending on copy-on-write for std::string + * implement a more c++-style TFRewrite alternative + * rewrite all TFRewrite instances to use the new pkgTagSection::Write + * detect 416 complete file in partial by expected hash + * implement VerifyFile as all-hashes check + * detect Releasefile IMS hits even if the server doesn't + * treat older Release files than we already have as an IMSHit + * don't try other compressions on hashsum mismatch + * rework hashsum verification in the acquire system + * check patch hashes in rred worker instead of in the handler + * add more parsing error checking for rred + * support hashes for compressed pdiff files + * do not request files if we expect an IMS hit + * configurable acquire targets to download additional files + * show URI.Path in all acquire item descriptions + * implement 'apt-get files' to access index targets + * store Release files data in the Cache + * implement default apt-get file --release-info mode (Closes: 752702) + * populate the Architecture field for PackageFiles (Closes: 687255) + * hide Translation-* in 'apt-cache policy' output + * provide a public interface for acquiring changelogs + (Closes: 687147, 739854, 784027, 787190) + * ensure valid or remove destination file in file method + * deal better with acquiring the same URI multiple times + * call URIStart in cdrom and file method + * show item ID in Hit, Ign and Err lines as well + * condense parallel requests with the same hashes to one + * support lang= and target= sources.list options + * bring back deb822 sources.list entries as .sources + * detect and error out on conflicting Trusted settings + * merge indexRecords into metaIndex + * add sources.list Check-Valid-Until and Valid-Until-{Max,Min} options + * implement Signed-By option for sources.list + * remove the longtime deprecated vendor{,list} stuff + * allow individual targets to be kept compressed + * support gpg 2.1.x in apt-key (Closes: 781042) + * merge keyrings with cat instead of gpg in apt-key. + Thanks to Daniel Kahn Gillmor for the suggestion + * handle site-changing redirects as mirror changes + * disable locking even for root in --simulate + * rename 'apt-get files' to 'apt-get indextargets' + * enforce GCC5 C++11 ABI and usage + * show or-groups in not-installed recommends and suggests lists + * hide implicit deps in apt-cache again by default + * just-in-time creation for (explicit) negative deps + * add volatile sources support in libapt-pkg + * parse packages from all architectures into the cache + * enhance "hit paywall" error message to mention the probable cause + * drop extra newline in 'Failed to fetch' and 'GPG error' message + * mark again deps of pkgs in APT::Never-MarkAuto-Sections as manual. + Thanks to Raphaël Hertzog and Adam Conrad for detailed reports and + initial patches (Closes: 793360) (LP: #1479207) + * change to libapt-pkg abi 5.0 with versioned symbols + * move APT::Never-MarkAuto-Sections handling to MarkDelete + * move manual-bit from 'oldlibs' pkg to its dependencies + * remove Dir:: scope limit of RootDir in the documentation (Closes: 659387) + * add {contrib,non-free}/{metapackages,oldlibs} to section specialhandling + (Closes: 788320) + + [ Frans Spiesschaert ] + * Dutch program translation update (Closes: 771039) + + [ Julien Patriarca ] + * French program translation update (Closes: 766755) + + [ Zhou Mo ] + * Chinese (simplified) program translation update (Closes: 766170) + * Chinese (simplified) program translation update (Closes: 771982) + + [ Miroslav Kure ] + * Czech program translation update (Closes: 764055) + + [ Mert Dirik ] + * Turkish program translation update (Closes: 763379) + * Turkish translation update for apt (Closes: #789491) + + [ Kenshi Muto ] + * Japanese program translation update (Closes: 763033) + * Japanese program translation update (Closes: 772678) + + [ James McCoy ] + * support long keyids in "apt-key del" instead of ignoring them + (Closes: 754436) + * tighten filtering of kernel images in apt.auto-removal (Closes: 772732) + * Use terminfo's typical save_cursor/restore_cursor sequences + (Closes: #772521) + + [ Manuel "Venturi" Porras Peralta ] + * Spanish program translation update (Closes: 771815) + + [ Jean-Pierre Giraud ] + * French manpages translation update (Closes: 771967) + + [ Theppitak Karoonboonyanan ] + * Thai program translation update (Closes: 772913) + + [ Tomasz Buchert ] + * Fix crash in the apt-transport-https when Owner is NULL (Closes: #778375) + + [ Helmut Grohne ] + * parse arch-qualified Provides correctly (Closes: 777071) + + [ Beatrice Torracca ] + * Italian manpage translation update (Closes: 776702) + + [ Jérémy Bobbio ] + * stop displaying time of build in online help (Closes: 774342) + + [ Robert Edmonds ] + * HttpsMethod::Fetch(): Zero the FetchResult object when leaving due to 404 + + [ Milo Casagrande ] + * Italian program translation update (Closes: 782122) + + [ Julian Andres Klode ] + * pkgPolicy: Introduce storage and helpers for per-version pins + * versionmatch: Extract version match checking out of Find() + * policy: Assign per-version pins + * apt-cache: Change version pin output to use per-version pins + * fileutl_test.cc: Check for /etc/passwd instead of /bin/sh + * policy: Return highest file pin if version pin == 0 in GetPriority() + * Determine the candidate based on per-version pins, instead of old code + (Closes: #770017, #622237, #620249, #685215) + * policy: Fix the new policy implementation to handle downgrades correctly + * Fix test case breakage from the new policy implementation + * policy: Fix the handling of config-files states + * Replace INT_MIN with std::numeric_limits::min + * Simply ignore cruft in the status files, do not treat it as prio 0 + * Fix an obscure warning from GCC + * apt-get: Do not include apt-pkg/indexrecords.h + * Drop C++11 elements from headers + * Re-introduce None as a deprecated alias for No + * Make QItem a subclass of DescItem + * ExecFork: Use /proc/self/fd to determine which files to close + (Closes: #764204) + * Merge changelog entries from sid-gcc5 + * Bump apt-inst SONAME to 2.0 to adjust for the ABI break in apt-pkg + * Annotate more methods with APT_OVERRIDE. + Thanks to g++ -Wsuggest-override + * debian/gbp.conf: Set multimaint-merge = True + * debian/control: Rename libapt-pkg4.15 -> libapt-pkg5.0 + * apt.cron.daily: Reference 10periodic instead of 02periodic (LP: #1332106) + * Makefile: Add a make fast command for development + * Add a parameter ConsiderFiles to GetPriority(VerIterator) + * apt-cache: Modify policy output to use per-version pins + * Only make Upgradable() return true for packages with a candidate + (LP: #896689) + * apt-cache: Improve translateability of the "with priority" thing + * policy: Be more strict about parsing pin files, and document prio 0 + (Closes: #429912) + * apt_preferences(5): Re-document how priorities are calculated + (Closes: #554773) + * Drop the Section field from pkgCache::Package again + * Fix integration tests for the removal of the Package pin output + * Remove an invalid fi from a testcase + * C++11: Switch from auto_ptr to unique_ptr + * Mark SPtr as deprecated, and convert users to std::unique_ptr + * Deprecate SPtrArray and convert everyone to unique_ptr + * Use setresuid() and setresgid() where available + * Accept --upgradeable as synonym for --upgradable (Closes: #787846) + * po/fr.po: Remove the unbreakable space before ! in the confirm string + (Closes: #727680) + * Replace --force-yes by various options starting with --allow + * Add integration test for Pin-Priority range checks + * Replace UINT_MAX with std::numeric_limits::max() + * Mention that source order only matter per version (Closes: #617445) + * Say "in combination with the other options" if an option is not understood + (Closes: #762758) + * apt-cache: Show an error if stats gets any arguments (Closes: #153161) + * apt-cache(8): Mention that --names-only search provides (Closes: #618017) + * apt_preferences(5): Correct default pin assignment documentation + (Closes: #623706) + * apt_preferences(5): Mention overlapping of pin matches + * Make auto-remove and auto-clean aliases for the versions without - + (Closes: #274159) + * apt: Add autoremove and auto-remove commands + * changelog: Replace spelling typo for re-enable everywhere. + Thanks to Lintian + * debian/control: Replace debian by Debian. + Thanks to Lintian + * debian/control: Drop the versioned python-apt conflict. + Thanks to Lintian + * debian/control: Remove XS- from Testsuite and bump Standards-Version. + Thanks to Lintian + * Set Acquire::Changelogs::URI::Origin::Tanglu for Tanglu changelogs + * Also add 'in combination with the other options.' to another error + * apt-cache(8): Drop the #versions >= #package names comparison + (Closes: #691281) + * apt-get: allow non-root --print-uris build-dep (Closes: #283400) + * doc/files.dbk: Improve documentation for {src,}pkgcache.bin + (Closes: #465551) + * update: Check if the cache could be opened, don't just assume it + (Closes: #756162) + * cachefile.cc: Do not ignore return value of pkgDepCache::Init() + * Add GetPriority(VerIterator) to pkgDepCache::Policy + * Document the general effect of the comma operator (Closes: #574939) + * When looking if Provides match, OR them with the normal patches + (Closes: #760868) + * install: If package already is the newest version, display version + (Closes: #315149) + * Make pkgCache::Priority() static, it does not need the instance + (Closes: #448627) + * Replace "extra" in "the following extra packages [...]" by "additional" + (Closes: #82430) + * Do not crash in 'apt show' for non-installed packages + * debian/NEWS: Mention new pinning algorithm added in 2.0~exp1 + + [ Yuri Kozlov ] + * Russian program translation update (Closes: 789709) + + [ Guillem Jover ] + * po-fixups: fill Project-Id-Version and Encoding correctly (Closes: 612996) + * Do not set unhonored DPKG_NO_TSTP variable for dpkg (Closes: #765366) + + [ Daniel Hartwig ] + * support setting a port for rsh:// in sources.list (Closes: 624727) + * replace direct calls to egrep with grep -E. + Thanks to David Weinehall for initial patch (Closes: 255577) + + [ Luca Bruno ] + * Replace all "press enter" occurrences with "press [Enter]" + Thanks to Andre Felipe Machado for initial patch (Closes: 414848) + + [ Jonathan Nieder ] + * document VERSION 2 (and 3) pre-install-pkgs hook interface (Closes: 627188) + + [ Tomas Pospisek ] + * document APT::Periodic::RandomSleep. + Thanks to Chris Bainbridge and Kees Cook for initial text (Closes: 776380) + + [ Johannes Schauer ] + * use a=experimental instead n=experimental in pin documentation + (Closes: 783343) + + [ Kusanagi Kouichi ] + * Show full package records in apt-cache search -f (Closes: #660851) + + -- Michael Vogt Tue, 18 Aug 2015 11:15:52 +0200 + +apt (1.1~exp8) experimental; urgency=medium + + [ Michael Vogt ] + * merge unstable upload version 1.0.9.3 + * Ensure /etc/apt/auth.conf has _apt:root owner + * Use sysconf(_SC_ARG_MAX) to find the size of Dpkg::MaxArgBytes + * Only support Translation-* that are listed in the {In,}Release file + * Call "Dequeue()" for items in AbortTransaction() to fix race + * prepare ABI for feature/socketpair + * Bump ABI to 4.15 + + [ David Kalnischkies ] + * re-enable support for -s (and co) in apt-get source (Closes: 742578) + * run acquire transactions only once + * aborted reverify restores file owner and permission + * test if TMPDIR is accessible before using (Closes: 765951) + * chown finished partial files earlier + * promote filesize to a hashstring + + -- Michael Vogt Thu, 06 Nov 2014 10:01:21 +0100 + +apt (1.1~exp7) experimental; urgency=medium + + [ David Kalnischkies ] + * don't cleanup cdrom files in apt-get update (Closes: 765458) + * ignore Acquire::GzipIndexes for cdrom sources + + -- David Kalnischkies Wed, 15 Oct 2014 20:12:15 +0200 + +apt (1.1~exp6) experimental; urgency=medium + + [ josch ] + * implement the updated build profile spec + + [ Michael Vogt ] + * methods/rsh.cc: replace strcat with std::string (Closes: #76442) + * Add new configallowinsecurerepositories to the test framework + + [ Guillem Jover ] + * Update Status field values handling + + [ David Kalnischkies ] + * don't drop privileges if _apt has not enough rights + * check for available space, excluding root reserved blocks + + -- Michael Vogt Wed, 15 Oct 2014 07:47:36 +0200 + +apt (1.1~exp5) experimental; urgency=medium + + [ Michael Vogt ] + * Only rename StatError files in AbortTransaction() + * Document Acquire{MaxReleaseFileSize,AllowInsecureRepositories, + AllowDowngradeToInsecureRepositories} and + --no-allow-insecure-repositories + * Fix backward compatibility of the new pkgAcquireMethod::DropPrivsOrDie() + * Change default of Acquire::AllowInsecureRepositories to "true" + so that this change is less disruptive, this will be switched + to "false" again after jessie + + [ David Kalnischkies ] + * remove useless pdiff filename output (Closes: 764737) + * make --allow-insecure-repositories message an error + * display a warning for unsigned repos + * trusted=yes sources are secure, we just don't know why + + -- Michael Vogt Mon, 13 Oct 2014 16:15:22 +0200 + +apt (1.1~exp4) experimental; urgency=medium + + [ Michael Vogt ] + * Merge sid version 1.0.9.2 + * feature/acq-trans: + - Make apt-get update more transactional by keeping all data from + a sources.list line in partial/ until all data is good and only + then move it into lists/ in one step + - add new -o Debug::Acquire::Transaction=1 debug option + * feature/expected-size: + Do not download more data in the mehotds than expected if we know + the size. For the InRelease/Release/Release.gpg add new + Acquire::MaxReleaseFileSize that defaults to 10Mb for now + * Verify the hashes of the downloaded compressed files early + * Only load unauthenticated data into our parsers when the user + explicitly asked for it via --allow-insecure-repositories + (Acquire::AllowInsecureRepositories) + * Print warning when trying to use unauthenticated repositories + * Use /var/empty as the homedir for _apt + * Revert making pkgAcquire::Item::DescURI() "const" to not break + API + * Do not allow going from a authenticated to unauthenticated repository + * Add missing "adduser" dependency (for the new _apt user) + Thanks to Russ Allbery (Closes: #763004) + * Test if TMPDIR is a directory in apt-key and if not unset it + * add early verification for the .diff/Index download + * Bump library version to libapt-pkg4.14 + * Rework pkgAcqMeta{Index,Sig,ClearSig}::{Done,Failed]() for readability + * Ignore EINVAL from prctl(PR_SET_NO_NEW_PRIVS) (closes: 764066) + + [ David Kalnischkies ] + * deprecate Pkg->Name in favor of Grp->Name + * drop stored StringItems in favor of in-memory mappings + * de-duplicate version strings in the cache + * fix progress output for (dist-)upgrade calculation + * move PCI::From* methods into CacheSetHelper class (Closes: 686221) + * add a (hidden) --quiet option for apt-key + * only create new trusted.gpg if directory is writeable + * support (multiple) arguments properly in apt-key + * set a primary-keyring only if we have access to it + * merge fragment keyrings in apt-key to avoid hitting gpg limits + (Closes: 733028) + * use apt-key adv (+ gnupg) instead of gpgv for verify + * support gnupg2 as drop-in replacement for gnupg + * allows one to specify fingerprints in 'apt-key del' + * use only one --keyring in gpg interactions + * add and use 'apt-key verify' which prefers gpgv over gpg + * remove empty keyrings in trusted.gpg.d on upgrade + * store source name and version in binary cache + * allow fetcher setup without directory creation (Closes: 762898) + * cleanup partial directory of lists in apt-get clean (Closes: #762889) + * allow options between command and -- on commandline + * update symbols file + * support parsing of all hashes for pdiff + * ensure world-readability for trusted.gpg in postinst (Closes: 647001) + * ensure partial dirs are 0700 and owned by _apt:root + * use _apt:root only for partial directories + * display errortext for all Err + * set PR_SET_NO_NEW_PRIVS also if run as non-root + + [ James McCoy ] + * ensure apt-key del handles 16-byte key ids (Closes: 754436) + + [ Kenshi Muto ] + * Japanese program translation update (Closes: 763033) + + [ Trần Ngọc Quân ] + * Set STRIP_FROM_PATH for doxygen + + [ Mert Dirik ] + * Turkish program translation update (Closes: 763379) + + [ Guillem Jover ] + * apt-get: Create the temporary downloaded changelog inside tmpdir + + [ Miroslav Kure ] + * [l10n] Updated Czech translation of apt (Closes: #764055) + + -- Michael Vogt Wed, 08 Oct 2014 09:37:35 +0200 + +apt (1.1~exp3) experimental; urgency=medium + + [ Michael Vogt ] + * merged changes from debian/sid up to 1.0.9.1 + * Make /var/lib/apt/lists and /var/cache/apt/archives owned + by the new _apt user + * Drop Privileges in the following acquire methods: + copy, http, https, ftp, gpgv, gzip/bzip2/lzma/xz + * DropPrivs: Improvements based on feedback from error@debian.org + + [ Julian Andres Klode ] + * DropPriv: Really call seteuid and not setuid, and add more checks + * Use _apt as our unprivileged user name + * DropPrivs: Also check for saved set-user-ID and set-group-ID + * methods: Fail if we cannot drop privileges + * DropPrivs: Also check for saved set-user-ID and set-group-ID + + -- Michael Vogt Wed, 24 Sep 2014 22:30:09 +0200 + +apt (1.1~exp2) experimental; urgency=medium + + [ Guillem Jover ] + * Add new Base256ToNum long long overload function + * Fix ar and tar code to be LFS-safe (Closes: #742882) + + [ Michael Vogt ] + * increase libapt-inst to version 1.6 + * Only allow "apt-get build-dep path" when path starts with ./ or / + * Allow passing a full path to apt-get install /foo/bar.deb (CLoses: #752327) + * merge changes from the 1.0.6 upload + + -- Michael Vogt Thu, 10 Jul 2014 13:18:08 +0200 + +apt (1.1~exp1) experimental; urgency=low + + [ David Kalnischkies ] + * [API Break] change "std::string pkgAcquire::Item::DescURI()" to + "std::string pkgAcquire::Item::DescURI() const" + * [ABI-Break] increase hashtable size for packages/groups by factor 5 + * [ABI-Break] cleanup datatypes mix used in binary cache + * [internal API-Break] remove the Section member from package struct + * use 'best' hash for source authentication (LP: 1098738) + * use HashStringList in the acquire system + * deal with hashes in ftparchive more dynamic as well + * re-enable pipelining via hashsum reordering support + * parse and retrieve multiple Descriptions in one record + * improve pkgTagSection scanning and parsing + * invalid cache if architecture set doesn't match (Closes: 745036) + + [ Michael Vogt ] + * add support for "apt-get build-dep foo.dsc" + * add support for "apt-get build-dep unpacked-source-dir" + * add support for "apt-get install foo_1.0_all.deb" + * make "apt-get update" progress much more accurate by loading the + sizes of the targets into the fetcher early + * Implement simple by-hash for apt update to improve reliability of + the update. Apt will try to fetch the Packages file via + /by-hash/$hash_type/$hash_value if the repo supports that. + - add APT::Acquire::$(host)::By-Hash=1 knob + - add Acquire-By-Hash=1 to Release file + * add Debug::Acquire::Progress debug option + * [ABI-Break] lp:~mvo/apt/source-hashes: + - use sha{512,256,1} for deb-src when available LP: #1098738 + * [ABI-Break] stop exporting the accidentally exported parsenetrc() symbol + * [ABI-Break] remove the PACKAGE_MATCHER_ABI_COMPAT defines + * [ABI BREAK] apt-pkg/pkgcache.h: + - adjust pkgCache::State::VerPriority enum, to match reality + * test/integration/test-debsrc-hashes: + - add integration test, thanks to Daniel Hartwig + * [ABI-Break] remove the PACKAGE_MATCHER_ABI_COMPAT defines + * [ABI-Break] Pass struct IndexTarget/indexRecords to + pkgAcqIndex{,Merge}Diffs + * [internal API-Break] rename pkgCache::Package::NextPackage to + pkgCache::Package::Next + * Calculate Percent as part of pkgAcquireStatus to provide a weighted + percent for both items and bytes + * apt-pkg/contrib/macros.h: bump library version to 4.13 + * apt-private/acqprogress.cc: do not show file size on IMSHit, it wasn't + fetched + * Fix warnings from clang -Wall/clang -fsanitize=address + * add DropPrivs() and drop privileges to nobody when running the + the buildin apt and dump solvers + * lp:~mvo/apt/webserver-simulate-broken-with-fix346386: + - fix invalid InRelease file download checking and add regression + test to server broken files to the buildin test webserver + - add regression test for LP: #34638 + + -- Michael Vogt Thu, 19 Jun 2014 12:01:48 +0200 + +apt (1.0.10.1) unstable; urgency=medium + + * hide first pdiff merge failure debug message (Closes: 793444) + * mark again deps of pkgs in APT::Never-MarkAuto-Sections as manual. + Thanks to Raphaël Hertzog and Adam Conrad for detailed reports and + initial patches (Closes: 793360) (LP: #1479207) + * explicitly build-dep on g++ (>= 4:5.2) for gcc5 transition + + -- David Kalnischkies Mon, 03 Aug 2015 07:29:40 +0200 + +apt (1.0.10) unstable; urgency=medium + + [ Zhou Mo ] + * po: update zh_CN translation slightly + * po: Update Simplified Chinese programs translation + + [ Mert Dirik ] + * Turkish translation update for apt (Closes: #789491) + + [ Yuri Kozlov ] + * Russian program translation update (Closes: 789709) + + [ Milo Casagrande ] + * Italian program translation update (Closes: 782122) + + [ Beatrice Torracca ] + * Italian manpage translation update (Closes: 776702) + + [ Julian Andres Klode ] + * ExecFork: Use /proc/self/fd to determine which files to close + (Closes: #764204) + + [ Michael Vogt ] + * Prepare new 1.0.10 release with gcc5 abi transition + + [ David Kalnischkies ] + * stop depending on copy-on-write for std::string + * bump next-abi check above gcc5-abi bump + * update symbols file to use gcc5 abi mangling + + -- David Kalnischkies Sat, 25 Jul 2015 12:11:08 +0200 + +apt (1.0.9.10) unstable; urgency=medium + + [ Michael Vogt ] + * Fix crash in pkgDPkgPM::WriteApportReport(() (LP: #1436626) + * Move sysconf(_SC_OPEN_MAX); out of the for() loop to avoid unneeded + syscalls + * Fix endless loop in apt-get update that can cause disk fillup + (LP: #1445239) + + [ Helmut Grohne ] + * parse arch-qualified Provides correctly (Closes: 777071) + + -- Michael Vogt Fri, 22 May 2015 17:38:31 +0200 + +apt (1.0.9.9) unstable; urgency=medium + + [ David Kalnischkies ] + * parse specific-arch dependencies correctly on single-arch systems + (Closes: 777760) + * remove "first package seen is native package" assumption. + Thanks to Axel Beckert for testing (Closes: 782777) + + -- David Kalnischkies Tue, 28 Apr 2015 16:11:27 +0200 + +apt (1.0.9.8) unstable; urgency=medium + + [ David Kalnischkies ] + * fix another d(e)select-upgrade typo (LP: #1399037) + * properly handle expected filesize in https. + Thanks to Robert Edmonds and Anders Kaseorg for initial patchs + (Closes: 777565, 781509) (LP: #807303) + * avoid depends on std::string implementation for pkgAcquire::Item::Mode + (Closes: 781858) + * demote VectorizeString gcc attribute from const to pure + * keyids in "apt-key del" should be case-insensitive (Closes: 781696) + * parse specific-arch dependencies correctly on single-arch systems + (Closes: 777760) + + [ Michael Vogt ] + * fix crash in order writing in pkgDPkgPM::WriteApportReport() (LP: #1436626) + + -- David Kalnischkies Mon, 13 Apr 2015 07:14:36 +0200 + +apt (1.0.9.7) unstable; urgency=medium + + [ Tomasz Buchert ] + * Fix crash in the apt-transport-https when Owner is NULL (Closes: #778375) + + -- Michael Vogt Mon, 23 Feb 2015 12:54:03 +0100 + +apt (1.0.9.6) unstable; urgency=medium + + [ Michael Vogt ] + * Fix missing URIStart() for https downloads + * Add regression test for the previous commit + + [ David Kalnischkies ] + * 128 KiB DSC files ought to be enough for everyone (Closes: 774893) + * award points for positive dependencies again (Closes: 774924) + + -- Michael Vogt Fri, 16 Jan 2015 08:37:25 +0100 + +apt (1.0.9.5) unstable; urgency=medium + + [ David Kalnischkies ] + * dispose http(s) 416 error page as non-content (Closes: 768797) + * do not make PTY slave the controlling terminal (Closes: 772641) + * always run 'dpkg --configure -a' at the end of our dpkg callings + (Closes: 769609) + * pass-through stdin fd instead of content if not a terminal (Closes: 773061) + + [ James McCoy ] + * tighten filtering of kernel images in apt.auto-removal (Closes: 772732) + + [ Jean-Pierre Giraud ] + * French manpages translation update (Closes: 771967) + + [ Zhou Mo ] + * Chinese (simplified) program translation update (Closes: 771982) + + [ Kenshi Muto ] + * Japanese program translation update (Closes: 772678) + + [ Theppitak Karoonboonyanan ] + * Thai program translation update (Closes: 772913) + + -- David Kalnischkies Tue, 23 Dec 2014 13:22:42 +0100 + +apt (1.0.9.4) unstable; urgency=medium + + [ David Kalnischkies ] + * use 'best' hash for source authentication (LP: 1098738) + * deprecate the Section member from package struct + * allow options between command and -- on commandline + * re-enable support for -s (and co) in apt-get source (Closes: 742578) + * change codenames to jessie as stable POV in docs + * close leaking slave fd after setting up pty magic (Closes: 767774) + * fix PTY interaction on linux and kfreebsd (Closes: 765687) + + [ James McCoy ] + * support long keyids in "apt-key del" instead of ignoring them + (Closes: 754436) + + [ Michael Vogt ] + * Use sysconf(_SC_ARG_MAX) to find the size of Dpkg::MaxArgBytes + + [ Frans Spiesschaert ] + * Dutch program translation update (Closes: 771039) + + [ Julien Patriarca ] + * French program translation update (Closes: 766755) + + [ Zhou Mo ] + * Chinese (simplified) program translation update (Closes: 766170) + + [ Miroslav Kure ] + * Czech program translation update (Closes: 764055) + + [ Mert Dirik ] + * Turkish program translation update (Closes: 763379) + + [ Kenshi Muto ] + * Japanese program translation update (Closes: 763033) + + [ Manuel "Venturi" Porras Peralta ] + * Spanish program translation update (Closes: 771815) + + -- David Kalnischkies Wed, 03 Dec 2014 14:26:04 +0100 + +apt (1.0.9.3) unstable; urgency=medium + + [ josch ] + * implement the updated build profile spec + + [ Michael Vogt ] + * methods/rsh.cc: replace strcat with std::string (Closes: #76442) + + [ Guillem Jover ] + * Update Status field values handling + + [ David Kalnischkies ] + * don't cleanup cdrom files in apt-get update (Closes: 765458) + + -- Michael Vogt Wed, 15 Oct 2014 19:49:38 +0200 + +apt (1.0.9.2) unstable; urgency=medium + + [ Michael Vogt ] + * test/integration/test-apt-update-file: improve test + * Fix regression when copy: is used for a relative path (Closes: #762160) + * generalize Acquire::GzipIndex to support all compressions that + apt supports + * Fix regression for cdrom: sources from latest security update + * Ensure that iTFRewritePackageOrder is "MD5sum" to match + apt-ftparchive + * debian/rules: add hardening=+all. + Thanks to Simon Ruderich, Markus Waldeck + + [ Holger Wansing ] + * German program translation update (Closes: 762223) + + [ Jérémy Bobbio ] + * disable timestamps in the footer of docs by doxygen + + [ Trần Ngọc Quân ] + * Set STRIP_FROM_PATH for doxygen + + [ Guillem Jover ] + * apt-get: Create the temporary downloaded changelog inside tmpdir + (closes: #763780) (CVE-2014-7206) + + -- Michael Vogt Thu, 02 Oct 2014 22:05:39 +0200 + +apt (1.0.9.1) unstable; urgency=high + + [ Michael Vogt ] + * Allow override of Proxy-Auto-Detect by the users configuration + (Closes: 759264) + * fix ci autopkgtest + * fix regression from 1.0.9 when file:/// source are used and + those are on a different partition than the apt state directory + and add regression test + + [ Trần Ngọc Quân ] + * l10n: vi.po (636t): Update program translation + + [ Chris Leick ] + * Updated German documentation translation + + [ Mert Dirik ] + * Turkish program translation update (Closes: 761394) + + -- Michael Vogt Tue, 16 Sep 2014 20:52:25 +0200 + +apt (1.0.9) unstable; urgency=high + + * SECURITY UPDATE: + - incorrect invalidating of unauthenticated data (CVE-2014-0488) + - incorrect verification of 304 reply (CVE-2014-0487) + - incorrect verification of Acquire::Gzip indexes (CVE-2014-0489) + + -- Michael Vogt Mon, 15 Sep 2014 08:34:46 +0200 + +apt (1.0.8) unstable; urgency=medium + + [ Holger Wansing ] + * German program translation update (Closes: 758837) + + [ Américo Monteiro ] + * Portuguese manpages translation update (Closes: 759608) + + [ Warren He ] + * initialize iPolicyBrokenCount in DepCache::Update (Closes: 758397) + + [ Andreas Oberritter ] + * Avoid yielding blank lines with APT::Cmd::use-format=true + + [ Michael Vogt ] + * Make Proxy-Auto-Detect check for each host (Closes: #759264) + * Add testcase for apt list --all-versions + * * apt-pkg/deb/dpkgpm.cc: + - update string matching for dpkg I/O errors. (LP: #1363257) + - properly parse the dpkg status line so that package name + is properly set and an apport report is created. Thanks + to Anders Kaseorg for the patch (LP: #1353171) + * Use heap to allocate PatternMatch to avoid potential stack overflow + (Closes: 759612) + * Run autopkgtest tests with "env -i" to avoid pollution from the host env + (Closes: #759655) + * test/integration/test-ubuntu-bug-346386-apt-get-update-paywall: + - use downloadfile() to fix test failure + * Fix incorrect upgradable listing in "apt list" + (thanks to Michael Musenbrock) (Closes: #753297) + * apt-pkg/cachefile.cc: + - ensure we have a Policy in CacheFile.BuildDepCache() + * methods/http.cc: + - Improve Debug::Acquire::http debug output + + [ Dimitri John Ledkov ] + * apt-ftparchive: make Packages & Sources generation optional, + during Generate call + + [ David Kalnischkies ] + * support regular expressions in 'apt search' + * implement --full in apt search + * fix progress report for upgrade and reinstall + * rework PTY magic to fix stair-stepping on kfreebsd (Closes: 759684) + * don't call pager in non-terminals for changelog (Closes: 755040) + + -- Michael Vogt Tue, 09 Sep 2014 20:09:11 +0200 + +apt (1.0.7) unstable; urgency=medium + + [ Michael Vogt ] + * add README.md + * StringToBool: only act if the entire string is consumed by strtol() + * Use @builddeps@ in the debian/tests/control file + * apt-pkg/acquire-item.cc: make pkgAcqDiffIndex more uniform + * Fix SmartConfigure to ignore ordering of packages that are already valid + * doc/apt.8.xml: fix typo, thanks to Jakub Wilk (Closes: #756056) + * doc/po/pt.po: updated, thanks to Américo Monteir (Closes: #756200) + + [ victory ] + * Update Japanese documentation translation (Closes: #754817) + + [ Trần Ngọc Quân ] + * l10n: vi.po (636t): Update one new string + + [ Julian Andres Klode ] + * Fix debListParser to accept "no" as a value for the Multi-Arch field + (Closes: #759099) + + [ Mert Dirik ] + * Turkish program translation update (Closes: 756710) + + [ Miroslav Kure ] + * Czech program translation update (Closes: 758208) + + [ David Kalnischkies ] + * add dpkg::source-options for dpkg-source invocation (Closes: 757534) + * support versioned provides as implemented by dpkg (Closes: 758153) + + -- Michael Vogt Wed, 27 Aug 2014 17:11:42 -0700 + +apt (1.0.6) unstable; urgency=medium + + [ Chris Leick ] + * German translation reviewed by Erik Pfannenstein + + [ Michael Vogt ] + * methods/http.cc: use Req.str() in debug output + * Do not try to parse invalid translation files (LP: #756317) + * Do not clean "/" in pkgAcquire::Clean/pkgArchiveCleaner (Closes: #753531) + * Only show packages as upgradable if the have a CandidateVer != 0 + (Closes: #753297) + + [ Trần Ngọc Quân ] + * l10n: vi.po: Update 3 new messages + + [ Joe Hansen ] + * Danish program translation update (Closes: 753979) + + [ David Kalnischkies ] + * handle moved mmap after UniqFindTagWrite call (Closes: #753941) + + [ Michele Orrù ] + * use printf instead of echo in testing framework + + [ Cédric Barboiron ] + * Improve description how to turn off the caches (Closes: #753531) + + [ Guillem Jover ] + * po: Fill or add missing Language field + * po: Remove fuzzy from file msgid header + * po: Fill Project-Id-Version with correct project id and version + * po: Fix Plural-Forms fields + * po: Fix or add missing email addresses + * po: Fix encoding issues + * po: Fix format specifier order in translation + * build: Set the XSL parameter through the command line instead of sed + * build: Convert from DebianDoc SGML to DocBook XML + * doc: Convert from DebianDoc SGML to DocBook XML + * doc: Unfuzzy DocBook translations + + -- Michael Vogt Thu, 10 Jul 2014 11:46:07 +0200 + +apt (1.0.5) unstable; urgency=low + + [ Michael Vogt ] + * fix autopkgtest tests + * fix test-apt-ftparchive-cachedb-lp1274466 and apt-internal-solver tests + * test/integration/test-essential-force-loopbreak: fix on non-amd64 systems + * Tell the user if no updates are available after apt update (Closes: #751388) + + [ Michele Orrù ] + * Check for gtest's header before building. + + [ Chris Leick ] + * Updated translation of german documentation + + [ Konstantin Manna ] + * fix two german manpage spelling mistakes (Closes: 751635) + * add missing comma in SEE ALSO of apt-secure manpage (Closes: 748506) + + [ Fredrik Fornwall ] + * use P_ instead of ngettext to compiling with --disable-nls (Closes: 751857) + + [ David Kalnischkies ] + * don't send pkg from an unknown architecture via EDSP + * fix SubstVar to be usable as a replace_all method + * show our broken packages message in 'apt' solver + * do not call resolver twice on (dist-)upgrade + + [ Stefano Zacchiroli ] + * EDSP doc: clarify that Install/Remove packages are arch-qualified + + -- Michael Vogt Wed, 18 Jun 2014 13:35:13 +0200 + +apt (1.0.4) unstable; urgency=low + + [ Michael Vogt ] + * Implement CacheDB for source packages in apt-ftparchive + * apt-private/acqprogress.cc: reset color in apt update + * Show progress in run-tests + * Never parse Version/Architecture tags in a Translation-$lang file + * Show upgradable packages after apt update (Closes: 748389) + * Fix various errors found by clang -fsanitize=address + * Fix various errors found by clang scan-build + * Show unauthenticated warning for source packages as well (Closes: #749795) + * Add compat mode for old (32bit FileSize) CacheDB (LP: #1274466) + * cmdline/apt-helper.cc: use less generic description/short-description + in apt-helper download + * add pkgSrcRecords::Step() to step through all the pkgSrcRecords + (thanks to Helmut Grohne) + + [ David Kalnischkies ] + * initialize Verify in second pkgAcqIndex constructor + * consistently fail if Smart* packagemanager actions fail + * fix tight loop detection and temporary removes + * if Resolver fails, do not continue even if not broken + * check exit status of external solvers + * do not revert candidate for protected packages (Closes: 745046) + * support Acquire::GzipIndexes in dumpavail (Closes: 742835) + + [ Stefano Zacchiroli ] + * EDSP doc: fix typo in Request stanza description + * EDSP: bump protocol version to 0.5 + * EDSP: add Architecture(s) multi-arch fields to the Request stanza + * EDSP: add Source field to Package stanzas + * EDSP: add APT-Release field to Package stanzas + + [ Sebastian Schmidt ] + * fix screen width detection for apt/apt-get lists (Closes: 748430, 747942) + + [ Milo Casagrande ] + * Italian program translation update (Closes: 750009) + + -- Michael Vogt Tue, 10 Jun 2014 14:55:05 +0200 + +apt (1.0.3) unstable; urgency=medium + + [ Michael Vogt ] + * reduce delta to ubuntu + * provide support for vendor specific config files + * debian/apt-doc.docs: remove README.MultiArch + * Fix missing ScreenWidth check in apt.cc + * Only do openpty() if both stdin/stdout are terminals (Closes: 746434) + + [ David Kalnischkies ] + * add a README for vendor information + * remove outdated README.MultiArch + * build http request in a stringstream + * enforce LFS for partial files in https range requests + * handle pkgnames shorter than modifiers (Closes: 744940) + * allow vendors to install configuration files + + [ John Ogness ] + * properly undo CD-ROM mount in all error cases + + [ Mahyuddin Ramli ] + * add vendor information for BlankOn (Closes: 743595) + + [ Adam Conrad ] + * fix FileFd::Size bitswap on big-endian architectures (Closes: 745866) + + [ Trần Ngọc Quân ] + * l10n: vi.po: Update one new string + + -- Michael Vogt Mon, 05 May 2014 14:03:15 +0200 + +apt (1.0.2) unstable; urgency=medium + + [ Michael Vogt ] + * fix apt list output for pkgs in dpkg ^rc state + * Notice the user about "apt list -a" when only a single hit if found + * fix test-failure in adt + * apt-private/acqprogress.cc: fix output when ctrl-c is hit during + apt update (LP: #1310548, closes: #744297) + * Fix option name DPkg::Progress-Fancy in apt.8 manpage + (LP: #1310506) + + [ David Kalnischkies ] + * don't double-count seeks in FileFd::Skip for bzip/xz + * deal with umask only if we really need to for mkstemp + * consider priorities only for downloadable pkgs in resolver + * force fancy progressbar redraw on window size change + * clear HitEof flag in FileFd::Seek + * use Google C++ Testing Framework for libapt tests + * support dist-upgrade options in full-upgrade + + [ Trần Ngọc Quân ] + * l10n: vi.po (624t): Update translation + + [ Theppitak Karoonboonyanan ] + * Updated Thai program translation (closes: #745120) + + [ James McCoy ] + * Consistently use Dpkg::Progress* in documentation (Closes: 745452) + + -- Michael Vogt Fri, 25 Apr 2014 13:15:03 +0200 + +apt (1.0.1) unstable; urgency=medium + + [ Michael Vogt ] + * Fix crash in "apt list" when a sources.list file is unreable + (Closes: 743413) + * make apt search case-insensitive by default + * Fix possible race when stunnel/aptwebserver create their PID files + in the tests + * Fix insecure file permissions when using FileFd with OpenMode::Atomic + (LP: #1304657) + + [ Julian Andres Klode ] + * Version the Breaks/Replaces for sun-java{5,6}-jdk (LP: #1302736) + (Closes: #743616) + * Add versioned openjdk-6-jdk breaks + + [ Josef Vitu ] + * apt: Minor typo in 'apt' man page (closes: #743657) + + -- Michael Vogt Thu, 10 Apr 2014 09:48:56 +0200 + +apt (1.0) unstable; urgency=low + + The "Happy birthday and 10000b years in the making" release + + [ Julian Andres Klode ] + * apt-inst: Do not try to create a substring of an empty string in + error reporting (LP: #1288718) + + [ Beatrice Torracca ] + * Italian manpages translation update (Closes: 741867) + + [ Kenshi Muto ] + * Japanese programs translation update (Closes: 742255) + + [ David Kalnischkies ] + * continue reading in xz even if it outputs nothing + * only consider versioned kernel packages in autoremove (Closes: 741962) + * correct some reported typos in /etc/cron.daily/apt (Closes: 702016) + * ensure proper teardown in dpkg error cases (Closes: 738969) + * update symbols file to include new symbols from 0.9.16 + * do IsInstallOk call in MarkInstall unconditionally + * discard candidates via IsInstallOk to allow override (Closes: 740750) + + [ Michael Vogt ] + * install apt binary + * add apt.8.xml manpage + * make fancy-progress fg/bg color configurable via something like + Dpkg::Progress-Fancy::Progress-{bg,fg}="%1b[30m" + (thanks to Tim Wasser for the suggestion) + * Add progressbar to "Dpkg::Progress-Fancy" + * fix documentation for APT::Periodic::MaxSize "0" (closes: #740551) + * Use mkstemp() in apt-extracttemplaes (closes: #741627) + * Add new Debug::RunScripts debug option + * do not crash on SIGPIPE in pkgDPkgPM::RunScriptsWithPkgs() + * enable DPkg::Progress-Fancy by default when "apt" is used + * refresh po/pot and unfuzzy apt-extracttemplate manpage change + * remove no longer needed apt.7 page + * install "apt" binary by default + * add sun-java{5,6}-jdk to breaks/replaces as they provided a + "apt" binary as well + + [ Trần Ngọc Quân ] + * l10n: vi.po (623t): Update Vietnamese translation + * debian: Add default compress option to xz + + -- Michael Vogt Tue, 01 Apr 2014 15:48:46 +0200 + +apt (0.9.16.1) unstable; urgency=medium + + [ Chris Leick ] + * Updated German doc translation + + [ Julian Andres Klode ] + * Fix handling of autoclosing for compressed files (Closes: #741685) + + -- Julian Andres Klode Sat, 15 Mar 2014 18:05:25 +0100 + +apt (0.9.16) unstable; urgency=medium + + [ Michael Vogt ] + * add hashsum support in apt-helper download-file and + add more tests + + [ Trần Ngọc Quân ] + * l10n: vi.po (624t): Update Vietnamese translation + + [ David Kalnischkies ] + * propagate a negative score point along breaks/conflicts + * check version before adding scores in resolver + * autogenerate makefile for vendor system + * add default and override handling for Cnf::FindVector + * support DEB_BUILD_PROFILES and -P for build profiles + * do not configure already unpacked packages needlessly (Closes: 740843) + * if mountpoint has a ".disk" directory it is mounted + * no error for non-existing mountpoints in MountCdrom + * apt-cdrom ident shouldn't be interactive (Closes: 740673) + * support very long mtab entries in mountpoint discovery + * msgstr with elipses need three dots + * cmdline parsing: apt-config is not apt-cdrom + * use a configurable list of versioned kernel packages + * support kfreebsd and hurd in the kernel hook + * add ".*-{kernel,modules}-$KERVER" matcher for hook + * ensure that a dot is a dot in the hook + * use liblzma-dev to provide xz/lzma support + * use the pretty fullname of a pkg as download description + + [ Johannes Schauer ] + * implement BuildProfileSpec support as dpkg has in 1.17.2 (Closes: 661537) + + [ Wojciech Górski ] + * fix polish --install-suggests text in apt-get manpage (Closes: 741056) + + -- Michael Vogt Fri, 14 Mar 2014 09:45:05 +0100 + +apt (0.9.15.5) unstable; urgency=medium + + [ Michael Vogt ] + * vendor/tanglu/makefile: add missing clean/sources.list + * run the acquire tests with the new apt-helper binary, this + fixes the autopkgtest failures + + [ Martin Pitt ] + * Fix autopkgtest missing dependencies and locale (closes: #739988) + + -- Michael Vogt Fri, 28 Feb 2014 08:44:25 +0100 + +apt (0.9.15.4) unstable; urgency=low + + [ Michael Vogt ] + * remove auto-generated apt-key and sources.list on clean (closes: 739749) + * add testcase for Bug#718329 + * various fixes for ADT failures + + [ Jon Severinsson ] + * add apt-vendor information for tanglu + + [ Guillem Jover ] + * ExtractTar: Allow an empty decompressor program + * DebFile: Refactor ExtractTarMember() out from ExtractArchive() + * Add support for data.tar, control.tar and control.tar.xz + * debian: Add debDebFile::ExtractTarMember to the symbols file + * Fix typos in documentation (codespell) + + -- Michael Vogt Sun, 23 Feb 2014 00:27:12 +0100 + +apt (0.9.15.3) unstable; urgency=medium + + [ Michael Vogt ] + * disable https->http redirects in libcurl, thanks to Julien Cristau + * ADT: use "Restrictions: allow-stderr and avoid apt-stderr.log in + debian/tests/run-tests + * test/integration/test-bug-723705-tagfile-truncates-fields: + - fix autopkgtest failure + * add missing canNotFindFnmatch/showFnmatchSelection + (for the next ABI break) + * disable fnmatch() matching from the commandline + * merge testcase for the autoremove feature from the ubuntu branch + + [ David Kalnischkies ] + * do not recommend dselect in apt-get manpage (Closes: 617625) + * report https download start only if we really get it + * allow http protocol to switch to https + * do not compress .xhtml files and remove junk files (Closes: 738933) + * simplify code some more to make reddit happy + * update symbols file with hints from the buildlogs + + -- Michael Vogt Thu, 20 Feb 2014 14:42:39 +0100 + +apt (0.9.15.2) unstable; urgency=medium + + [ Michael Vogt ] + * move isatty() check into InitOutput() + * Use a APT::VersionSet instead of a VersionList + (closes: #738103) + + [ David Kalnischkies ] + * simplify code to make compilers happy + * update libapt-pkg.symbols file + * bump Standards-Version to 3.9.5 (no changes needed) + * do not use an empty APT_CONFIG environment variable + * always cleanup patchfiles at the end of rred call + * use VersionSet in download to handle repeats (Closes: 738103) + * use utimes instead of utimensat/futimens (Closes: 738567) + + [ John Ogness ] + * apt-cdrom should succeed if any drive succeeds (Closes: 728153) + + [ Trần Ngọc Quân ] + * l10n: vi.po (621t): Update and review + + -- Michael Vogt Thu, 13 Feb 2014 09:50:04 +0100 + +apt (0.9.15.1) unstable; urgency=medium + + [ David Kalnischkies ] + * use gpg --homedir instead of explicit file placement + * use svg in doxygen and ensure dot is around for it + * pkgTagFile: if we have seen the end, do not try to see more + * restart debSrcRecordParsers only if needed + * discard impossible candidates in MarkInstall (Closes: #735967) + + [ Chris Leick ] + * update german manpage translation + * Trivian unfuzzies of the German po4a translation + + [ Michael Vogt ] + * fix apt-get download truncation (closes: #736962) + * do not crash if VF.File()/VF.File().Archive() is NULL + * show "status" in apt list last to be more awk friendly + (thanks to Axel Beckert) + * Fix multiarch package upgrade issue + * add test for Suite with path + + [ Colin Watson ] + * multicompress with externals sets wrong file modes (Closes: 737130) + + -- Michael Vogt Thu, 06 Feb 2014 18:09:19 +0100 + +apt (0.9.15) unstable; urgency=low + + * upload version from debian/experimental to unstable + + -- Michael Vogt Sat, 25 Jan 2014 21:57:00 +0100 + +apt (0.9.14.3~exp5) experimental; urgency=medium + + [ Anthony Towns ] + * methods/rred: minor robustness improvements + + [ Michael Vogt ] + * make "apt-mark help" shows all commands + * make "apt show" output more user friendly + * add "apt full-upgrade" and tweak "apt upgrade" + * set APT::Sources::Use-Deb822=false until the format + is fully finalized + + -- Michael Vogt Fri, 24 Jan 2014 23:21:04 +0100 + +apt (0.9.14.3~exp4) experimental; urgency=medium + + * implement deb822 suggestions by Anthony Towns and Julian Andres Klode: + - add Description tag for deb822 sources + - add support for Enabled: no in deb822 sources.list + - add support for multiple URIs in deb822 style sources.list + - add support for multiple types in one line + * add integration test for apt search and apt show + * do not ignore ioctl(TIOCSCTTY) errors + + -- Michael Vogt Wed, 22 Jan 2014 18:59:07 +0100 + +apt (0.9.14.3~exp3) experimental; urgency=low + + * implement deb822 suggestions by donkult (thanks!): + - rename "Dist" to "Suites" + - rename "Section" to "Sections" + - rename "Architectures-Delete" to "Architectures-Remove" + - rename "Uri" to "URI" + * add "apt list --manual-installed" + * add "apt upgrade --dist" + * add "apt purge" + * flock() the file edited in "apt edit-sources" + * apt-private/private-show.cc: + - do not show Description-lang: header + * reword apt !isatty() warning + * add missing integration test for "apt list" and fix bugs + found by it + + -- Michael Vogt Sat, 18 Jan 2014 21:09:24 +0100 + +apt (0.9.14.3~exp2) experimental; urgency=medium + + [ Julian Andres Klode ] + * debian/rules: Call dh_makeshlibs for 'apt' + + [ Anthony Towns ] + * reimplement rred to allow applying all the diffs in a single pass + * correct IndexDiff vs DiffIndex in Debug output + + [ David Kalnischkies ] + * re-enable unlimited pdiff files download + * integrate Anthonys rred with POC for client-side merge + + [ Michael Vogt ] + * document deb822 style sources.list in sources.list(5) + * rename "Dist:" in deb822 style sources.list to "Suite:" + * rename URL to Uri in deb822-sources + * support multiple "Suite:" entries in deb822 style sources.list: + "Suite: stable testing unstable" + + -- Michael Vogt Thu, 16 Jan 2014 21:43:22 +0100 + +apt (0.9.14.3~exp1) experimental; urgency=low + + [ Michael Vogt ] + * add support for "deb822" style sources.list format and add + APT::Sources::Use-Deb822 to support disabling it + + [ David Kalnischkies ] + * implement POC client-side merging of pdiffs via apt-file + + [ Trần Ngọc Quân ] + * l10n: vi.po(617t): Update Vietnamese translation + + -- Michael Vogt Sun, 05 Jan 2014 15:13:32 +0100 + +apt (0.9.14.2) unstable; urgency=low + + [ Joe Hansen ] + * Danish translation update. Closes: #732166 + + [ Peter Green ] + * add apt-vendor for raspbian. Closes: #732749 + + [ Thomas Bechtold ] + * apt-pkg/contrib/gpgv.cc: use /tmp as fallback dir if the + directory from $TMPDIR is not available (closes: #728500) + + [ Michael Vogt ] + * vendor/getinfo: + - fix ubuntu-codename + * vendor/steamos/*: + - add steamos support + * bugfix/bts731738-fancy-progess: + - fix terminal size issues with e.g. "less" when "APT::Progress-Fancy=1" + is used (closes: #731738) + * feature/policy-parser-bts732746: + - allow more flexibility in /etc/apt/preferences, e.g. comment only + sections (closes: #732746) + * move TMPDIR handling into GetTempDir() and use that instead of + getenv("TMPDIR") + * update apt-key net-update and add integration test with the buildin + apt webserver + * run autopkgtest against the installed apt + + -- Michael Vogt Sun, 29 Dec 2013 16:41:16 +0100 + +apt (0.9.14.1) unstable; urgency=medium + + * fix apt-get source -t dist regression (closes: #731853) + and add testcase + * clarify error message when apt-get source=ver fails + (thans to David Kalnischkies) + * Fix conffile prompt regression (LP: #1260297) + and add testcase + * improve error message for apt-get source pkg:arch{=ver,/release} + + -- Michael Vogt Thu, 12 Dec 2013 18:34:29 +0100 + +apt (0.9.14) unstable; urgency=low + + [ David Kalnischkies ] + * merge ubuntus apport reporting changes to reduce diff + * enable NOISE for build logs to enable analyse + * introduce a vendor system to change sources.list + * add a vendor specific file to have configurable entities + * use a substvar to set the archive-keyring in debian/control + * cherry-pick ubuntus (disabled) net-update fixes + * generate apt-key script with vendor info about keys + * drop old /var/state to /var/lib transition artifacts + + [ Steve Langasek ] + * prepare-release: declare the packages needed as source build deps. + + [ Michael Vogt ] + * enable release based selection for deb-src (closes: 731102) + * document Dpkg::Progress-Fancy (closes: 726169), thanks to James McCoy + * vendor/makefile: fix build error for parallel builds + * Handle SIGWINCH in APT::Progress-Fancy=1 + + -- Michael Vogt Sat, 07 Dec 2013 14:54:31 +0100 + +apt (0.9.13.1) unstable; urgency=low + + [ Colin Watson ] + * fix "apt-get --purge build-dep" (closes: #720597) + * fix regression that APT::Keep-Fds is not honored (closes: #730490) + + [ Michael Vogt ] + * add "-f" option to "build-dep" as sbuild is using it to fix + regression with cross-building (LP: #1255806) + * add autopkgtest support for the integration testsuite + * merge mvo/feature/short-list + * merge mvo/feature/edit-sources + * fix segfault in pkgDepCache::SetCandidateRelease() (closes: #709560) + * reset terminal on error (closes: #730795) + * fix apport report writing (LP: #1254499) + + -- Michael Vogt Fri, 29 Nov 2013 20:50:17 +0100 + +apt (0.9.13) unstable; urgency=low + + [ TJ Guthrie ] + * Changed MinAgeSec to MinAge in /etc/cron.daily/apt:200,204 + LP: #1206047 + + -- Michael Vogt Sun, 24 Nov 2013 10:56:22 +0100 + +apt (0.9.13~exp1) experimental; urgency=low + + * Improve the API for APT::Upgrade::Upgrade() + * Re-add "Calculating upgrade..." message + * move upgrade related code into upgrade.{cc,h} + * Move ListUpdate/AcquireUpdate into update.{cc,h} + * Add new apt-pkg/install-progress.h with APT::Progress::PackageManager + progress reporting classes + * Move the status-fd progress reporting out of the pkgDPkgPM class + and into PackageManagerProgressFd + * Fix reading dpkg --status-fd on reinstalls + * Add new APT::Status-deb822-Fd progress output + * add Acquire::http::Proxy-Auto-Detect to the apt.conf.5 manpage + (closes: 726597) + * Fix detection when multiarch packages are reported by dpkg as + disappeared Packages + * test/integration/run-tests: output the failed test names + * Code Cleanup in pkgDPkgPM + * prepare next ABI via #if (APT_PKG_MAJOR >= 4 && APT_PKG_MINOR >= 13) + * add new pid_t ExecFork(std::set KeepFDs) + * Avoid flickering when "apt-get -o DpkgPM::Progress-Fancy=1" is use + * use sysconf(_SC_OPEN_MAX) in ExecFork() + + -- Michael Vogt Fri, 01 Nov 2013 10:03:06 +0100 + +apt (0.9.12.1) unstable; urgency=low + + [ Michael Vogt ] + * do not send pkgname:arch over the APT::Status-Fd to not break + clients (closes: 726156). A new APT::Status-deb822-Fd will be + used to fix this. + * add integration tests for APT::Status-Fd + * add missing _() around the new "Progress" string + + [ David Kalnischkies ] + * fix progress-segfault in case of dpkg errors/prompts (Closes: 726047) + + -- Michael Vogt Tue, 15 Oct 2013 18:25:51 +0200 + +apt (0.9.12) unstable; urgency=low + + [ Christian Perrier ] + * Fix typo in apt-private/private-show.cc. Thanks to Benjamin + Keresa. Closes: #724073 + + [ Mark Hymers ] + * fix libapt-inst for >2G debs (closes: #725483) + + [ David Kalnischkies ] + * don't strip :any from dependencies in single-arch (Closes: 723586) + * pkg from only trusted sources keeps being trusted (Closes: 617690) + * compression-neutral message for missing data.tar member (Closes: 722710) + * print-uris prints regardless of quiet-level again (Closes: 722207) + * retry without partial data after a 416 response (Closes: 710924) + * replace "filesize - 1" trick in http with proper 416 handling + * fix partial (206 and 416) support in https + * handle complete responses to https range requests (Closes: 617643, 667699) + (LP: 1157943) + * don't consider holds for autoremoval (Closes: 724995) + * put fetch errors in 'source' on our errorstack + * use pkgAcqArchive in 'download' for proper errors + * fix lzma-support detection via xz binary + * do not ++ on erased package pointers in autoremove + + [ Michael Vogt ] + * Add new "apt-get upgrade --with-new-pkgs" option (and add man-page for it). + So "apt-get upgrade --with-new-pkgs" will pull in new dependencies but + never remove packages + * Rename "--dpkg-progress" to "--show-progress" and document it in + apt-get.8. This will show global install progress information in the + terminal. + * Fix status-fd progress calculation for certain multi-arch install/upgrade + situations + * add new -o DpkgPM::Progress-Fancy for nicer dpkg progress output + on vt100+ terminals + * fix libapt-inst for >2G debs (closes: #725483), thanks to Mark Hymers + * debian/apt.postinst: use --compare-versions lt instead of lt-nl, + to ensure the apt-auto-removal file is correctly create, + thanks to Ben Hutchings + * update Uploaders to match recent uploaders better + * Set the default "Acquire::PDiffs::FileLimit" to 20. If the amount + of pdiffs is bigger things tend to get slower. Set + Acquire::PDiffs::FileLimit "0"; + in /etc/apt/apt.conf to get the old behavior back. + + -- Michael Vogt Wed, 09 Oct 2013 22:39:41 +0200 + +apt (0.9.11.4) unstable; urgency=low + + [ Oskari Saarenmaa ] + * don't truncate 100 char long paths in tar extraction. + Thanks to Mika Eloranta for the testcase! (Closes: #689582) + + [ David Kalnischkies ] + * do not trust FileFd::Eof() in pkgTagFile::Fill() + Thanks to Cyril Brulebois (Closes: 723705) + + -- Michael Vogt Fri, 20 Sep 2013 16:12:07 +0200 + +apt (0.9.11.3) unstable; urgency=low + + [ Michael Vogt ] + * Add DPkgPM::Progress option to enable terminal install + progress + * fix typo (mkostemp->mkstemp) + * Remove invalid "-f" option for apt-get check, thanks to + Philipp Weis (closes: #721477) + * Fix regression of "apt-cache unmet -i", thanks to Daniel Schepler + (closes: #722324) + + [ David Kalnischkies ] + * use FileFd in HashSum test to unbreak non-linux ports. + Thanks to Aaron M. Ucko (Closes: 721723) + + -- Michael Vogt Tue, 10 Sep 2013 17:32:02 +0200 + +apt (0.9.11.2) unstable; urgency=low + + [ Milo Casagrande ] + * Update Italian translation. Closes: #721030 + + [ Trần Ngọc Quân ] + * Update Vietnamese translation. Closes: #720752 + + [ Michael Vogt ] + * dselect/install: + - remove "-f" option for apt-get clean/auto-clean (closes: #720532) + * apt-private/private-cmndline.cc: + - fix typo in CmdMatches() selection for dselect-upgrade (closes: #720532) + * use SPtr in DoInstall() to simplify the code + * allow pkg manipulation in the upgrade/dist-upgrade commandline, like + apt-get dist-upgrade 2vcard- 4g8+ (thanks to Thorsten Glaser for the + suggestion) + + [ Angel Guzman Maeso ] + * replace usage of potential dangerous mktemp with mkstemp + + -- Michael Vogt Sat, 31 Aug 2013 16:45:31 +0200 + +apt (0.9.11.1) unstable; urgency=low + + [ Michael Vogt ] + * more coverity fixes: + - explicit init + - always chdir("/") after chroot() + - ftparchive/override.cc: fix "skip empty lines" code, the pointer + needs to get de-referenced first + * dselect/update: + - remove "-f" option for apt-get update to fix breakage (closes: 720532) + + [ Christopher Baines ] + * Add test for bug #507998 + + [ David Kalnischkies ] + * add a breaks libapt-inst for FileFd changes in 0.9.9 (Closes: 720449) + * add versions to manpages-it Replaces+Breaks + + [ Ángel Guzmán Maeso ] + * apt-pkg:contrib Avoid compiler warning about sign-compare + + -- Michael Vogt Sat, 24 Aug 2013 09:13:27 +0200 + +apt (0.9.11) unstable; urgency=low + + [ Daniel Hartwig ] + * Clarify units of Acquire::http::Dl-Limit (closes: #705445) + * Show a error message if {,dist-}upgrade is used with additional + arguments (closes: #705510) + + [ Michael Vogt ] + * lp:~mvo/apt/config-clear: + - support Configuration.Clear() for a clear of the entire + configuration + * lp:~mvo/apt/add-glob-function: + - add Glob() to fileutl.{cc,h} + * feature/apt-binary2 + - refactor large chunks of cmdline/*.cc into a new libapt-private + library that is shared between the internal apt cmdline tools + - install libapt-private* into the apt binary + - add PACKAGE_MATCHER_ABI_COMPAT define so that this branch can be + merged without breaking ABI + - add lintian override for no-shlibs-control-file so that + the internal libapt-private.so.0.0.0 can be shipped + - adjust apt.install.in to only install libapt-private.so.* + + [ David Kalnischkies ] + * ensure that pkgTagFile isn't writing past Buffer length (Closes: 719629) + * allow Pre-Install-Pkgs hooks to get info over an FD != stdin + (Closes: #671726) + + [ Christian PERRIER ] + * French translation update. + + -- Michael Vogt Wed, 21 Aug 2013 17:51:09 +0200 + +apt (0.9.10) unstable; urgency=low + + The "Hello to Debconf" upload + + [ Christian Perrier ] + * Vietnamese translation update. Closes: #718615 + * Japanese translation update. Closes: #719279 + * French translation update. + + [ Michael Vogt ] + * work on fixing coverity scan results: + - fix some off-by-one errors + - fix some resource leaks + - fixes in chroot() handling + - fix some missing va_end() + * make the code -Wall clean again + * remove duplicated #include + * add .travis.yml + * use the 'abi-complicance-checker' package and remove the buildin + copy for the abi checks + + [ David Kalnischkies ] + * ensure that FileFd::Size returns 0 in error cases + * add missing Turkish (tr) to po/LINGUAS + * correct management-typo in description found by lintian + * implement debian/rules build-{arch,indep} as required by policy 3.9.4 + * re-enable automatic parallel build of APT + * exclude config.{sub,guess} from source package + * update the symbol files to reflect current state + * unset LANGUAGE for showing [Y/n] answer hints + * fix some uninitialized data members + * specific pins below 1000 cause downgrades (Closes: 543966) + * use pkgTagFile to parse "header" of Release files + * fix: --print-uris removes authentication (Closes: 719263) + * always use our own trustdb.gpg in apt-key + * use a tmpfile for trustdb.gpg in apt-key. + Thanks to Andreas Beckmann for the initial patch! (Closes: #687611) + * do not double-slash paths in apt-key (Closes: 665411) + * make the keyring locations in apt-key configurable + * let apt-key del work better with softlink and single key keyrings + * do not call 'apt-key update' in apt.postinst + + [ Colin Watson ] + * prefer native arch over higher priority for providers (Closes: #718482) + + -- Michael Vogt Mon, 12 Aug 2013 21:45:07 +0200 + +apt (0.9.9.4) unstable; urgency=low + + [ David Kalnischkies ] + * pick up Translation-* even if only compressed available (Closes: 717665) + * request absolute URIs from proxies again (0.9.9.3 regression) + (Closes: 717891) + + [ Michael vogt ] + * fix missing changelog entry for 0.9.9.3 (git-dch issue) + + -- Michael Vogt Fri, 26 Jul 2013 09:58:17 +0200 + +apt (0.9.9.3) unstable; urgency=low + + [ Ben Hutchings ] + * debian/apt.auto-removal.sh: + - do not include debug symbol packages for the kernel in the + denylist (closes: #717616) + + [ Michael Vogt ] + * debian/apt.postinst: + - run /etc/kernel/postinst.d/apt-auto-removal once on upgrade + to ensure that the correct auto-removal list is generated + (closes: #717615) + + [ David Kalnischkies ] + * skip all Description fields in apt-cache, not just first (Closes: 717254) + * fix 'apt-cache search' crash with missing description (Closes: 647590) + + [ Raphael Geissert ] + * Do not send a connection: keep-alive, at all + + -- Michael Vogt Thu, 25 Jul 2013 17:14:58 +0200 + +apt (0.9.9.2) unstable; urgency=low + + [ Programs translations ] + * Vietnamese updated by Tran Ngoc Quan. Closes: #717016 + + [ David Kalnischkies ] + * fix if-clause to generate hook-info for 'rc' packages (Closes: 717006) + + -- Michael Vogt Wed, 17 Jul 2013 14:56:34 +0200 + +apt (0.9.9.1) unstable; urgency=low + + [ Michael Vogt ] + * debian/rules: + - call dh_clean in clean (closes: #714980) + * apt-pkg/packagemanager.cc: + - increate APT::pkgPackageManager::MaxLoopCount to 5000 + * cherry pick debian/apt.auto-removal.sh feature from the + ubuntu/master branch + + [ Steve Langasek ] + * debian/apt.conf.autoremove: don't include linux-image*, + linux-restricted-modules*, and linux-ubuntu-modules* packages in the + list to never be autoremoved. + * debian/apt.auto-removal.sh, debian/rules, debian/apt.dirs: install new + script to /etc/kernel/postinst.d/ which ensures we only automatically + keep the currently-running kernel, the being-installed kernel, and the + newest kernel, so we don't fill /boot up with an unlimited number of + kernels. LP: #923876. + + [ Adam Conrad ] + * Fix up two things in debian/apt.auto-removal.sh: + - Use exact matches with $-terminated regexes, so we don't get + confusion between similarly-named kernel flavours. + - Keep linux-backports-modules in sync with installed kernels. + + [ David Kalnischkies ] + * Version 3 for DPkg::Pre-Install-Pkgs with MultiArch info (Closes: #712116) + * implement arch+= and arch-= for sources.list + * prevent MarkInstall of unsynced Multi-Arch:same siblings + + -- Michael Vogt Thu, 11 Jul 2013 20:44:31 +0200 + +apt (0.9.9) unstable; urgency=low + + [ Michael Vogt ] + * improve debug output for the Debug::pkgProblemResolver and + Debug::pkgDepCache::AutoInstall + * improve apt-cdrom output when no CD-ROM can be auto-detected + * document --no-auto-detect in apt-cdrom + + [ David Kalnischkies ] + * build the en manpages in subdirectory doc/en + * remove -ldl from cdrom and -lutil from apt-get linkage + * rewrite pkgOrderList::DepRemove to stop incorrect immediate setting + (Closes: 645713) + * prefer Essentials over Removals in ordering score + * fix priority sorting by preferring higher in MarkInstall + * try all providers in order if uninstallable in MarkInstall + * do unpacks before configures in SmartConfigure (Closes: #707578) + * fix support for multiple patterns in apt-cache search (Closes: #691453) + * set Fail flag in FileFd on all errors consistently + * don't explicitly init ExtractTar InFd with invalid fd + * OpenDescriptor should autoclose fd always on error (Closes: #704608) + * fail in CopyFile if the FileFds have error flag set + * ensure state-dir exists before coyping cdrom files + * fix file location for configure-index.gz in apt.conf(5) (Closes: #711921) + * handle missing "Description" in apt-cache show (Closes: #712435) + * try defaults if auto-detection failed in apt-cdrom (Closes: #712433) + * support \n and \r\n line endings in ReadMessages + * do not redownload unchanged InRelease files + * trigger NODATA error for invalid InRelease files (Closes: #712486) + + -- Michael Vogt Tue, 02 Jul 2013 08:58:33 +0200 + +apt (0.9.8.2) unstable; urgency=low + + [ Programs translations ] + * French translation : typo fix. Closes: #677272 + + [ Guillem Jover ] + * Update Vcs fields (Closes: #708562) + + [ Michael Vogt ] + * buildlib/apti18n.h.in: + - fix build failure when building without NLS (closes: #671587) + + [ Gregoire Menuel ] + * Fix double free (closes: #711045) + + [ Raphael Geissert ] + * Fix crash when the "mirror" method does not find any entry + (closes: #699303) + + [ Johan Kiviniemi ] + * cmdline/apt-key: + - Create new keyrings with mode 0644 instead of 0600. + - Accept a nonexistent --keyring file with the adv subcommand as well. + + -- Michael Vogt Thu, 06 Jun 2013 19:15:14 +0200 + +apt (0.9.8.1) unstable; urgency=low + + [ David Kalnischkies ] + * apt-pkg/indexcopy.cc: + - non-inline RunGPGV methods to restore ABI compatibility with previous + versions to fix partial upgrades (Closes: #707771) + + [ Michael Vogt ] + * moved source to http://git.debian.org/apt/apt.git + * updated gbp.conf to match what bzr-buildpackage is doing + * remove .bzr-buildpackage/default.conf (superseded by gbp.conf) + + -- Michael Vogt Thu, 16 May 2013 14:50:43 +0200 + +apt (0.9.8) unstable; urgency=low + + [ Ludovico Cavedon ] + * properly handle if-modfied-since with libcurl/https + (closes: #705648) + + [ Andreas Beckman ] + * apt-pkg/algorithms.cc: + - Do not propagate negative scores from rdepends. Propagating the absolute + value of a negative score may boost obsolete packages and keep them + installed instead of installing their successors. (Closes: #699759) + + [ Michael Vogt ] + * apt-pkg/sourcelist.cc: + - fix segfault when a hostname contains a [, thanks to + Tzafrir Cohen (closes: #704653) + * debian/control: + - replace manpages-it (closes: #704723) + + [ David Kalnischkies ] + * various simple changes to fix cppcheck warnings + * apt-pkg/pkgcachegen.cc: + - do not store the MD5Sum for every description language variant as + it will be the same for all so it can be shared to save cache space + - handle language tags for descriptions are unique strings to be shared + - factor version string creation out of NewDepends, so we can easily reuse + version strings e.g. for implicit multi-arch dependencies + - equal comparisons are used mostly in same-source relations, + so use this to try to reuse some version strings + - sort group and package names in the hashtable on insert + - share version strings between same versions (of different architectures) + to save some space and allow quick comparisons later on + * apt-pkg/pkgcache.cc: + - assume sorted hashtable entries for groups/packages + * apt-pkg/cacheiterators.h: + - provide DepIterator::IsSatisfied as a nicer shorthand for DepCheck + * apt-pkg/deb/debversion.cc: + - add a string-equal shortcut for equal version comparisons + + [ Marc Deslauriers ] + * make apt-ftparchive generate missing deb-src hashes (LP: #1078697) + + [ Yaroslav Halchenko ] + * Fix English spelling error in a message ('A error'). Unfuzzy + translations. Closes: #705087 + + [ Programs translations ] + * French translation completed (Christian Perrier) + + [ Manpages translations ] + * French translation completed (Christian Perrier) + + [ Daniel Hartwig ] + * apt-pkg/contrib/strutl.cc: + - include port in shortened URIs (e.g. with apt-cache policy, progress + display) thanks to James McCoy (Closes: #154868, #322074) + - percent-encode username and password when writing URIs + * methods/http.cc: + - properly escape IP-literals (e.g. IPv6 address) when building + Host headers and URIs (Closes: #620344) + * methods/https.cc: + - use https_proxy environment variable if present, falling back to + http_proxy otherwise + - use authentication credentials from proxy URI + (Closes: #651640, LP: #1087512) + - environment variables do not override an explicit no proxy + directive ("DIRECT") in apt.conf + - disregard all_proxy environment variable, like other methods + + -- Michael Vogt Wed, 08 May 2013 18:43:28 +0200 + +apt (0.9.7.9~exp2) experimental; urgency=low + + [ Programs translations ] + * Update all PO files and apt-all.pot + * French translation completed (Christian Perrier) + + [ Daniel Hartwig ] + * cmdline/apt-get.cc: + - do not have space between "-a" and option when cross building + (closes: #703792) + * test/integration/test-apt-get-download: + - fix test now that #1098752 is fixed + * po/{ca,cs,ru}.po: + - fix merge artifact + + [ David Kalnischkies ] + * apt-pkg/indexcopy.cc: + - rename RunGPGV to ExecGPGV and move it to apt-pkg/contrib/gpgv.cc + * apt-pkg/contrib/gpgv.cc: + - ExecGPGV is a method which should never return, so mark it as such + and fix the inconsistency of returning in error cases + - don't close stdout/stderr if it is also the statusfd + - if ExecGPGV deals with a clear-signed file it will split this file + into data and signatures, pass it to gpgv for verification + - add method to open (maybe) clearsigned files transparently + * apt-pkg/acquire-item.cc: + - keep the last good InRelease file around just as we do it with + Release.gpg in case the new one we download isn't good for us + * apt-pkg/deb/debmetaindex.cc: + - re-enable InRelease by default + * ftparchive/writer.cc, + apt-pkg/deb/debindexfile.cc, + apt-pkg/deb/deblistparser.cc: + - use OpenMaybeClearSignedFile to be free from detecting and + skipping clearsigning metadata in dsc and Release files + + [ Michael Vogt ] + * add regression test for CVE-2013-1051 + * implement GPGSplit() based on the idea from Ansgar Burchardt + (many thanks!) + * methods/connect.cc: + - use Errno() instead of strerror(), thanks to David Kalnischk + * doc/apt.conf.5.xml: + - document Acquire::ForceIPv{4,6} + + -- Michael Vogt Wed, 03 Apr 2013 14:19:58 +0200 + +apt (0.9.7.9~exp1) experimental; urgency=low + + [ Niels Thykier ] + * test/libapt/assert.h, test/libapt/run-tests: + - exit with status 1 on test failure + + [ Daniel Hartwig ] + * test/integration/framework: + - continue after test failure but preserve exit status + + [ Programs translation updates ] + * Turkish (Mert Dirik). Closes: #703526 + + [ Colin Watson ] + * methods/connect.cc: + - provide useful error message in case of EAI_SYSTEM + (closes: #703603) + + [ Michael Vogt ] + * add new config options "Acquire::ForceIPv4" and + "Acquire::ForceIPv6" to allow focing one or the other + (closes: #611891) + * lp:~mvo/apt/fix-tagfile-hash: + - fix false positives in pkgTagSection.Exists(), thanks to + Niels Thykier for the testcase (closes: #703240) + - this will require rebuilds of the clients as this used to + be a inline function + + -- Michael Vogt Fri, 22 Mar 2013 21:57:08 +0100 + +apt (0.9.7.8) unstable; urgency=critical + + * SECURITY UPDATE: InRelease verification bypass + - CVE-2013-1051 + + [ David Kalnischk ] + * apt-pkg/deb/debmetaindex.cc, + test/integration/test-bug-595691-empty-and-broken-archive-files, + test/integration/test-releasefile-verification: + - disable InRelease downloading until the verification issue is + fixed, thanks to Ansgar Burchardt for finding the flaw + + -- Michael Vogt Thu, 14 Mar 2013 07:47:36 +0100 + +apt (0.9.7.8~exp2) experimental; urgency=low + + * include two missing patches to really fix bug #696225, thanks to + Guillem Jover + * ensure sha512 is really used when available, thanks to Tyler Hicks + (LP: #1098752) + + -- Michael Vogt Fri, 01 Mar 2013 19:06:55 +0100 + +apt (0.9.7.8~exp1) experimental; urgency=low + + [ Manpages translation updates ] + * Italian (Beatrice Torracca). Closes: #696601 + + [ Programs translation updates ] + * Japanese (Kenshi Muto). Closes: #699783 + + [ Michael Vogt ] + * fix pkgProblemResolver::Scores, thanks to Paul Wise. + Closes: #697577 + * fix missing translated apt.8 manpages, thanks to Helge Kreutzmann + for the report. Closes: #696923 + * apt-pkg/contrib/progress.cc: + - Make "..." translatable to fix inconsistencies in the output + of e.g. apt-get update. While this adds new translatable strings, + not having translations for them will not break anything. + Thanks to Guillem Jover. Closes: #696225 + * debian/apt.cron.daily: + - when reading from /dev/urandom, use less entropy and fix a rare + bug when the random number chksum is less than 1000. + Closes: #695285 + * methods/https.cc: + - reuse connection in https, thanks to Thomas Bushnell, BSG for the + patch. LP: #1087543, Closes: #695359 + - add missing curl_easy_cleanup() + * methods/http.cc: + - quote spaces in filenames to ensure as the http method is also + (potentially) used for non deb,dsc content that may contain + spaces, thanks to Daniel Hartwig and Thomas Bushnell + (LP: #1086997) + - quote plus in filenames to work around a bug in the S3 server + (LP: #1003633) + * apt-pkg/indexrecords.cc: + - support '\r' in the Release file + + [ David Kalnischkies ] + * apt-pkg/depcache.cc: + - prefer to install packages which have an already installed M-A:same + sibling while choosing providers (LP: #1130419) + + -- Michael Vogt Fri, 01 Mar 2013 14:16:42 +0100 + +apt (0.9.7.7) unstable; urgency=low + + [ Program translation updates ] + * Catalan (Jordi Mallach) + * Drop a confusing non-breaking space. Closes: #691024 + * Thai (Theppitak Karoonboonyanan). Closes: #691613 + * Vietnamese (Trần Ngọc Quân). Closes: #693773 + * Fix Plural forms in German, French, Japanese and Portuguese + translations. Thanks to Jakub Wilk for reporting these errors. + + [ David Kalnischkies ] + * apt-pkg/packagemanager.cc: + - do not do lock-step configuration for a M-A:same package if it isn't + unpacked yet in SmartConfigure and do not unpack a M-A:same package + again in SmartUnPack if we have already configured it (LP: #1062503) + * apt-pkg/depcache.cc: + - don't call MarkInstall with the FromUser flag set for packages + which are dependencies of APT::Never-MarkAuto-Sections matchers + - no mode changes should obviously be ok for pkgDepCache::IsModeChangeOk + * cmdline/apt-get.cc: + - do not call Mark{Install,Delete} from the autoremove code with + the FromUser bit set to avoid modifying the auto-installed bit + * apt-pkg/algorithms.cc: + - ensure pkgProblemResolver calls MarkDelete without FromUser set + so that it can't overrule holds and the protection flag + + [ Michael Vogt ] + * change permissions of /var/log/apt/term.log to 0640 (LP: #975199) + + [ Jonathan Thomas ] + * apt-pkg/algorithms.cc: + - fix package-pointer array memory leak in ResolveByKeepInternal() + + -- Michael Vogt Thu, 13 Dec 2012 09:52:19 +0100 + +apt (0.9.7.6) unstable; urgency=low + + [ Program translation updates ] + * Ukrainian (A. Bondarenko) + + [ David Kalnischkies ] + * apt-pkg/pkgcachegen.cc: + - ensure that dependencies for packages:none are always generated + - add 2 missing remap registrations causing a segfault in case + we use the not remapped iterators after a move of the mmap again + - write the native architecture as unique string into the cache header + as it is used for arch:all packages as a map to arch:native. + Otherwise arch comparisons later will see differences (Closes: #689323) + * apt-pkg/pkgcache.cc: + - ignore negative dependencies applying in the same group for M-A:same + packages on the real package name as self-conflicts (Closes: #688863) + * cmdline/apt-cache.cc: + - print versioned dependency relations in (r)depends if the option + APT::Cache::ShowVersion is true (default: false) as discussed in + #218995 to help debian-cd fixing #687949. Thanks to Sam Lidder + for initial patch and Steve McIntyre for nagging and testing! + * apt-pkg/edsp.cc: + - include reinstall requests and already installed (= protected) packages + in the install-request for external resolvers (Closes: #689331) + * apt-pkg/policy.cc: + - match pins with(out) an architecture as we do on the commandline + (partly fixing #687255, b= support has to wait for jessie) + * apt-pkg/contrib/netrc.cc: + - remove the 64 char limit for login/password in internal usage + - remove 256 char line limit by using getline() (POSIX.1-2008) + + [ Colin Watson ] + * apt-pkg/pkgcachegen.cc: + - Fix crash if the cache is remapped while writing a Provides version + (LP: #1066445). + + -- Michael Vogt Tue, 16 Oct 2012 18:08:53 +0200 + +apt (0.9.7.5) unstable; urgency=low + + [ Manpages translation updates ] + * Japanese (KURASAWA Nozomu) (Closes: #684435) + * Portuguese (Américo Monteiro) (Closes: #686975) + + [ David Kalnischkies ] + * handle packages without a mandatory architecture (debian-policy §5.3) + by introducing a pseudo-architecture 'none' so that the small group of + users with these packages can get right of them without introducing too + much hassle for other users (Closes: #686346) + * apt-pkg/cdrom.cc: + - copy only configured translation files from a CD-ROM and not all + available translation files preventing new installs with d-i from + being initialized with all translations (Closes: #678227) + - handle Components in the reduction for the source.list as multi-arch CDs + otherwise create duplicated source entries (e.g. "wheezy main main") + * apt-pkg/packagemanager.cc: + - unpack versions only in case a different version from the package + is currently in unpack state to recover from broken system states + (like different file in M-A:same package and other dpkg errors) + and avoid re-unpack otherwise (Closes: #670900) + * debian/control: + - let libapt-pkg break apt < 0.9.4 to ensure that the installed http- + method supports the new redirection-style, thanks to Raphael Geissert + for reporting & testing (Closes: #685192) + * doc/apt_preferences.5.xml: + - use the correct interval (x <= P < y) for pin value documentation as + these are the intervals used by the code (Closes: #685989) + * apt-pkg/indexcopy.cc: + - do not create duplicated flat-archive CD-ROM sources for foreign + architectures on multi-arch CD-ROMs + - do not warn about files which have a record in the Release file, but + are not present on the CD to mirror the behavior of the other methods + and to allow uncompressed indexes to be dropped without scaring users + * apt-pkg/pkgcachegen.cc: + - do not create 'native' (or now 'none') package structures as a side + effect of description translation parsing as it pollutes the cache + + -- Michael Vogt Tue, 11 Sep 2012 15:56:44 +0200 + +apt (0.9.7.4) unstable; urgency=low + + [ Manpages translation updates ] + * Polish (Robert Luberda) (Closes: #683109) + + [ Program translation updates ] + * Polish (Michał Kułach) + + [ Pino Toscano ] + * apt-pkg/contrib/mmap.cc: + - guard only the msync call with _POSIX_SYNCHRONIZED_IO rather + than also the fallback code as it breaks APT on hurd since 0.9.7.3 + as the fallback is now always used on non-linux (Closes: #683354) + + [ David Kalnischkies ] + * apt-pkg/contrib/fileutl.cc: + - remove _POSIX_SYNCHRONIZED_IO guard in FileFd::Sync() around fsync + as this guard is only needed for fdatasync and not defined on hurd + * cmdline/apt-get.cc: + - error out on (unsatisfiable) build-deps on purly virtual packages + instead of ignoring these dependencies; thanks to Johannes Schauer + for the detailed report! (Closes: #683786) + - ensure that the right architecture is used for cross-dependencies in + cases we have to choose a provider by defaulting on host-arch + instead of build-arch + * doc/apt-verbatim.ent: + - denote 'wheezy' as stable codename and 'jessie' as testing codename + in the documentation in preparation for release + * apt-pkg/indexcopy.cc: + - do not use atomic writing if the target is /dev/null as we don't want + to replace it, not even automically. (Closes: #683410) + * apt-pkg/cdrom.cc: + - do not link() but rename() the cdroms.list to cdroms.list~ as a backup + to ensure that apt-cdrom can be run multiple times (Closes: #676302) + + -- Michael Vogt Mon, 06 Aug 2012 15:55:04 +0200 + +apt (0.9.7.3) unstable; urgency=low + + [ Manpages translation updates ] + * Spanish; (Omar Campagne). Closes: #681566 + + [ Program translation updates ] + * Czech (Miroslav Kure). Closes: #680758 + + [ David Kalnischkies ] + * apt-pkg/cacheset.cc: + - handle :all and :native correctly as architectures again + in the commandline parsing (regression in 0.9.7) + * apt-pkg/packagemanager.cc: + - do not segfault if nothing can be configured to satisfy + a pre-depends (e.g. in a pre-depends loop) (Closes: #681958) + * apt-pkg/contrib/mmap.cc: + - trigger the usage of the fallback code for kfreebsd also in the + second (filebased) constructor of DynamicMMap (Closes: #677704) + - refer to APT::Cache-Start in case the growing failed as if -Limit is + really the offender it will be noted in a previous error message. + - for filesystems not supporting mmap'ing a file we need to use a + SyncToFd dummy just as we did for compressed files in 0.9.5 + + -- Michael Vogt Fri, 27 Jul 2012 17:53:41 +0200 + +apt (0.9.7.2) unstable; urgency=low + + [ Manpages translation updates ] + * French (Christian Perrier) + * German (Chris Leick) + + [ Program translation updates ] + * Greek (Θανάσης Νάτσης) + * Japanese (Kenshi Muto) (Closes: #679662) + * Russian (Yuri Kozlov) (Closes: #679599) + * Danish (Joe Dalton) (Closes: #680119) + * Portuguese (Miguel Figueiredo) (Closes: #680616) + + [ David Kalnischkies ] + * debian/apt.cron.daily: + - do not try to backup extended_states file if it doesn't + exist (Closes: #680287) + * ftparchive/writer.cc: + - handle the APT::FTPArchive::Packages::SHA512 option correctly instead + of overriding SHA256, thanks Christian Marillat! (Closes: #680252) + * cmdline/apt-mark.cc: + - arch:all packages are treated as arch:native packages, but dpkg + expects pkg:all for selections, so use the arch of the installed + version instead of the package structure if possible. + Thanks to Stepan Golosunov for the report! (Closes: #680041) + * apt-pkg/clean.cc: + - run autoclean against pkg:arch and not always against pkg:native as + this removes valid cache entries (Closes: #679371) + * apt-pkg/deb/deblistparser.cc: + - negative dependencies need to apply to all architectures, + but those with a specific architecture only apply to this one + * apt-pkg/cachefilter.cc: + - remove architecture-specific arch to tuple expansion-rules as they lead + to the same tuples for different architectures (e.g. linux-arm for arm, + armel and armhf) while the dpkg-architecture code uses triples which + are different (in the first part, which we omit in our tuples), so e.g. + build-dep restrictions for armel ended up effecting armhf as well + + -- Michael Vogt Fri, 13 Jul 2012 21:33:56 +0200 + +apt (0.9.7.1) unstable; urgency=low + + [ Program translation updates ] + * Bulgarian (Damyan Ivanov) (Closes: #678983) + * Hungarian (Gabor Kelemen) + * Italian (Milo Casagrande) + * Slovenian (Andrej Znidarsic) + * German (Holger Wansing) (Closes: #679314) + * Slovak (Ivan Masár) (Closes: #679448) + + [ David Kalnischkies ] + * cmdline/apt-internal-solver.cc, cmdline/apt-mark.cc: + - typo fixes and unfuzzy translations + * debian/control: + - libapt-{pkg,inst} packages should be in section 'libs' instead + of 'admin' as by ftp-master override request in #677596 + - demote debiandoc-sgml to Build-Depends-Indep + * doc/makefile: + - separate translation building of debiandoc from manpages + so that we don't need to build debiandoc for binary packages + + -- Michael Vogt Fri, 29 Jun 2012 14:26:32 +0200 + +apt (0.9.7) unstable; urgency=low + + [ Julian Andres Klode ] + * apt-pkg/contrib/mmap.cc: + - Fix the Fallback option to work correctly, by not calling + realloc() on a map mapped by mmap(), and by using malloc + and friends instead of new[]. + - Zero out the new memory allocated with realloc(). + + [ Daniel Hartwig ] + * apt-pkg/pkgcachegen.cc: + - always reset _error->StackCount in MakeStatusCache (Closes: #677175) + + [ David Kalnischkies ] + * apt-pkg/deb/deblistparser.cc: + - ensure that mixed positive/negative architecture wildcards + are handled in the same way as dpkg handles them + - use PackageArchitectureMatchesSpecification filter + * apt-pkg/cachefilter.cc: + - add PackageArchitectureMatchesSpecification (Closes: #672603) + * apt-pkg/cacheset.cc: + - add PackageContainerInterface::FromGroup to support + architecture specifications with wildcards on the commandline + * apt-pkg/pkgcache.cc: + - do a string comparison for architecture checking in IsMultiArchImplicit + as 'unique' strings in the pkgcache aren't unique (Closes: #677454) + * buildlib/configure.mak: + - print a message detailing how to get config.guess and config.sub + in case they are not in /usr/share/misc (Closes: #677312) + * cmdline/apt-get.cc: + - print a friendly message in 'download' if a package can't be + downloaded (Closes: #677887) + + -- Michael Vogt Tue, 19 Jun 2012 16:42:43 +0200 + +apt (0.9.6) unstable; urgency=low + + [ David Kalnischkies ] + * apt-pkg/cdrom.cc: + - fix regression from 0.9.3 which dumped the main configuration + _config instead of the cdrom settings (Cnf) as identified and + tested by Milan Kupcevic, thanks! (Closes: #674100) + * cmdline/apt-get.cc: + - do not show 'list of broken packages' header if no package + is broken as it happens e.g. for external resolver errors + - print URIs for all changelogs in case of --print-uris, + thanks to Daniel Hartwig for the patch! (Closes: #674897) + - show 'bzr branch' as 'bzr get' is deprecated (LP: #1011032) + - check build-dep candidate if install is forbidden + * debian/apt-utils.links: + - the internal resolver 'apt' is now directly installed in + /usr/lib/apt/solvers, so don't instruct dh to create a broken link + * doc/apt-verbatim.ent: + - APT doesn't belong to the product 'Linux', so use 'APT' instead + as after all APT is a big suite of applications + * doc/examples/sources.list: + - use the codename instead of 'stable' in the examples sources.list + as we do in the manpage and as the debian-installer does + * doc/apt-get.8.xml: + - use apt-utils as package example instead of libc6 + * apt-pkg/contrib/cmdline.cc: + - apply patch from Daniel Hartwig to fix a segfault in case + the LongOpt is empty (Closes: #676331) + - fix segfault with empty LongOpt in --no-* branch + * ftparchive/apt-ftparchive.cc: + - default to putting the Contents-* files below $(SECTION) as apt-file + expects them there - thanks Martin-Éric Racine! (Closes: #675827) + * apt-pkg/deb/deblistparser.cc: + - set pkgCacheGen::Essential to "all" again (Closes: #675449) + * apt-pkg/algorithms.cc: + - force install only for one essential package out of a group + * apt-pkg/aptconfiguration.cc: + - if APT::Languages=none save "none" in allCodes so that the detected + configuration is cached as intended (Closes: #674690, LP: #1004947) + * apt-pkg/cacheiterators.h: + - add an IsMultiArchImplicit() method for Dep- and PrvIterator + + [ Justin B Rye ] + * doc/apt-cdrom.8.xml: + - replace CDROM with the proper CD-ROM in text + - correct disc vs. disk issues + * doc/apt-extracttemplates.1.xml: + - debconf is not DebConf + * doc/apt-get.8.xml: + - move dselect-upgrade below dist-upgrade + - review and fix spelling issues + * doc/apt-ftparchive.8.xml, doc/apt-config.8.xml, + doc/apt-key.8.xml, doc/apt-mark.8.xml, + doc/apt_preferences.5.xml, doc/apt-secure.8.xml, + doc/apt-sortpkgs.1.xml, sources.list.5.xml: + - review and fix typo, grammar and style issues + * doc/apt.conf.5.xml: + - review and fix typo, grammar and style issues + - rephrase APT::Immediate-Configuration and many others + + [ Sebastian Heinlein ] + * cmdline/apt-key: + - do not hardcode /etc but use Dir::Etc instead + + [ Robert Luberda ] + * Polish manpage translation update (Closes: #675603) + * doc/apt-mark.8.xml: + - in hold, the option name is --file not --filename + + [ Christian Perrier ] + * French program and manpage translation update + * Danish program translation by Joe Hansen. Closes: #675605 + + [ Thibaut Girka ] + * cmdline/apt-get.cc: + - complain correctly about :any build-dep on M-A:none packages + * apt-pkg/deb/deblistparser.cc: + - add support for arch-specific qualifiers in dependencies + + -- Michael Vogt Mon, 11 Jun 2012 16:21:53 +0200 + +apt (0.9.5.1) unstable; urgency=low + + [ David Kalnischkies ] + * apt-pkg/contrib/fileutl.cc: + - dup() given compressed fd in OpenDescriptor if AutoClose + is disabled as otherwise gzclose() and co will close it + * doc/*.xml: + - mark even more stuff as untranslatable and improve the + markup here and there (no real text change) + - use docbook DTD 4.5 instead of 4.2 to have valid docs + + [ Justin B Rye ] + * doc/*.xml: + - remove 'GNU/Linux' from 'Debian systems' strings as Debian + has more systems than just GNU/Linux nowadays + * doc/apt-cache.8.xml: + - fix a typo as well as adding missing literal markup + - three small rewordings for better english sentences + + -- Michael Vogt Thu, 24 May 2012 17:16:34 +0200 + +apt (0.9.5) unstable; urgency=low + + [ Chris Leick ] + * proofreading of the manpage pot + * German manpage translation update (Closes: #673294) + + [ David Kalnischkies ] + * buildlib/podomain.mak: + - ensure that all sources end up in the srclist so that we don't + forget to extract half of the translation strings + * buildlib/inttypes.h.in: + - remove inttypes.h compatibility as providing such a c99 types + compatibility conflicts with the usage of c99 type long long + * apt-pkg/contrib/mmap.cc: + - have a dummy SyncToFd around in case of ReadOnly access to a + compressed file as we otherwise on Close() do not delete[] the + char buffer but munmap() it… (Closes: #673815) + * debian/control: + - moving debiandoc-sgml to Build-Depends-Indep was one step too much + for the buildds as we still build two sgml files in arch:any + * debian/rules: + - move internal-solver as 'apt' to his friend dump-solver in + /usr/lib/apt/solvers to avoid writing a manpage for it + + -- Michael Vogt Tue, 22 May 2012 16:14:22 +0200 + +apt (0.9.4) unstable; urgency=low + + [ David Kalnischkies ] + * methods/http.cc: + - after many years of pointless discussions disable http/1.1 pipelining + by default as many webservers and proxies seem to be unable to conform + to specification must's (rfc2616 section 8.1.2.2) (LP: #996151) + - add spaces around PACKAGE_VERSION to fix FTBFS with -std=c++11 + * apt-pkg/pkgcachegen.cc: + - make IsDuplicatedDescription static so that it is really private + as we don't need a symbol for it as it is not in a header + * Makefile, buildlib/*.mak: + - reshuffle dependencies so that parallel building seems to work + - separate manpages from the rest of the doc building + * prepare-release: + - apt-inst version isn't apt versions, so don't override variable + * debian/rules: + - apt-utils packages manpages, so it should depend on build-doc + - make apt and apt-utils packages depend on manpages instead of full doc + * debian/control: + - move doxygen and debiandoc-sgml to Build-Depends-Indep as docs + are no longer build in the same target as the manpages + * apt-pkg/acquire-methods.cc: + - factor out into private Dequeue() to fix access to deleted pointer + * apt-pkg/contrib/fileutl.cc: + - ensure that we close compressed fds, wait for forks and such even if + the FileFd itself is set to not autoclose the given Fd + * cmdline/apt-get.cc: + - use the host architecture, not the build architecture for matching + of [architecture restrictions] in Build-Depends (Closes: #672927) + * doc/makefile: + - build manpages with the correct l10n.gentext.default.language setting + to get the correct section titles provided by docbook + * doc/po/de.po: + - updated german manpage translation by Chris Leick, thanks! + * apt-pkg/packagemanager.cc: + - do not run into loop on new-pre-depends-breaks (Closes: #673536) + * doc/*.xml: + - add a few translator notes and reword some paragraphs to ensure that + translators and users alike can better understand them (Closes: #669409) + - in mark all options with