-
apt (2.7.10) unstable; urgency=medium . * pkgcachegen: Use placement new to construct header to make valgrind happy when we hash/write out padding bytes * Add Conflicts: apt-verify. The APT team is very concerned about the encroachement of its namespace and the impact on security of its file verification process. We have expressed those concerns in the ITP bug, but the package was nonetheless uploaded and accepted, so we have to take this extraordinary step to protect our users. . apt (2.7.9) unstable; urgency=medium . [ David Kalnischkies ] * Accept file system disorder in test-ignored-files . [ Julian Andres Klode ] * CI: Pull from testing, unstable broken atm . apt (2.7.8) unstable; urgency=medium . [ Gábor Németh ] * Add 'dist-clean' command to remove packages and list files (Closes: #959093); this is experimental and does not yet have docs or tests. . [ David Kalnischkies ] * Have Grp.FindPreferredPkg return very foreign pkgs as last resort * Improve and test distclean implementation * Do not store .diff_Index files in update . [ Tianyu Chen ] * apt-pkg/cacheset.cc: set ShowErrors to true when no version matched (Closes: #1053887) . [ Julian Andres Klode ] * Do not silently ignore directories for reserved file names * test: Disable valgrind on armhf, incompatible with stack clash protector (Closes: #1059352) . apt (2.7.7) unstable; urgency=medium . [ sid ] * Fix incorrect time unit comment for PulseInterval . [ Patrice Duroux ] * Update fr.po (add a missing dot) . [ Julian Andres Klode ] * Stop calculating Description-md5 if missing * Revert "Do not fail on systems running in FIPSmode." * s/AlreadDownloaded/AlreadyDownloaded/ in doc/progress-reporting.md. Thanks to jwilk for suggestion * Bump Priority to required to match Debian archive. This unbreaks mmdebstrap scenarios if you mirror Debian or use a distro where apt did not get overridden to required. Reported-By: josch on IRC, following discovery by helmut * Restore ?garbage by calling MarkAndSweep before parsing (LP: #1995790) * Fix the test suite by adding new "m" flags to debug output . [ Frans Spiesschaert ] * Dutch program translation update (Closes: #1055178) . [ David Kalnischkies ] * Raise cmake_minimum_required to 3.13 to avoid warnings * Use different variable name in GTest source path detection . apt (2.7.6) unstable; urgency=medium . [ Américo Monteiro ] * Portuguese manpages translation update (Closes: #1051731) . [ Julian Andres Klode ] * Downgrade unmerged-usr from error to two warnings (Closes: #1052058) . apt (2.7.5) unstable; urgency=medium . * doc/po/nl.po: Fix spurious translation of docbook tag . apt (2.7.4) unstable; urgency=medium . [ Julian Andres Klode ] * CI: Do not require UID 1000 for our test user. * methods: store: Use APT_BUFFER_SIZE (64k) instead of 4k buffers * Only accept installs of usrmerge on unmerged-usr systems. As of bookworm, merged-usr is mandatory, and people got caught in the crosshairs of the dpkg fsys-unmessusr debacle and inadvertently reverted back to an unmerged configuration and continue to remain on an unsupported system unknowingly. * Drop alternatives to the gpgv dependency (Closes: #1051642) * Remove unnecessary explicit st_dev check for merged-usr . [ Frans Spiesschaert ] * Dutch translation update (Closes: #1051720) * Dutch documentation translation update (Closes: #1051723) . [ Helge Kreutzmann ] * updated German translation (Closes: #1049427) . apt (2.7.3) unstable; urgency=medium . [ Tianon Gravi ] * Add "apt-patterns" reference to "apt list" description in apt(8) . [ Frans Spiesschaert ] * Dutch manpages translation update (Closes: #1033904) * Dutch program translation update (Closes: #1033909) . [ Mert Dirik ] * Turkish program translation update . [ Remus-Gabriel Chelu ] * Romanian program translation update (Closes: #1040644) . [ David Kalnischkies ] * Add apt-patterns(7) to apt{,-cache,-get} SEE ALSO sections . [ Julian Andres Klode ] * Compare SHA256 to check if versions are really the same (Closes: #931175) (LP: #2029268) . apt (2.7.2) unstable; urgency=medium . [ A. Maitland Bottoms ] * Do not fail on systems running in FIPSmode. . [ Julian Andres Klode ] * Upload to unstable * update: Add notice about missing Signed-By in deb822 sources * doc: Bump distro versions for apt-key removal * dist-upgrade: Revert phased updates using keeps only (LP: #2025462) * Do not mark updates for install that are still phasing * Fix snapshot crashes with multiple components inside Ubuntu docker image . apt (2.7.1) experimental; urgency=medium . * Seed snapshot servers for well-known hosts, including PPAs. Note that it is preferable for repositories to declare their snapshot server in the Snapshots Release file field than to rely on this feature. . apt (2.7.0) experimental; urgency=medium . [ Jacob Kauffmann ] * Keep "or group" when installing package to satisfy it . [ Julian Andres Klode ] * Add apt install,upgrade,... -U,--update options. Please note that this still releases locks in between and is subject to races. * Initial support for snapshot servers, apt --snapshot option. Some implementation details may change down the road to 2.8 . apt (2.6.0) unstable; urgency=medium . * The "unhappy bookworm" release. Too many changes needed to clarify licensing. . [ Cyril Brulebois ] * Teach apt-cdrom's scoring system about non-free-firmware (Closes: #1029751) . [ David Kalnischkies ] * More support for non-free-firmware - Have values in Section config trees refer to them in all components - Add non-free-firmware component in documentation - Suggest using non-free-firmware in update for Debian * other bookworm regressions: - Bump codenames in docs in preparation for Debian 12 - Detect trimmed changelogs and pick online instead (Closes: #1024457) * Do not store trusted=yes Release file unconditionally . [ Miroslav Kure ] * Czech program translation update (Closes: #1031008) . [ Bastian Germann ] * machine-readable version of COPYING (Closes: #1019273), initial version . [ Julian Andres Klode ] * Update lintian override info format in d/apt.lintian-overrides * Further work on machine-readable COPYING file and the source code comments to address licensing inadequacies: - Address statements of public domain - po/nb.po: Relicensing GPL-2.0 -> GPL-2.0+. Thanks Petter for chasing down the copyright holders and getting agreement. - COPYING: Group by license - Address translation licensing concerns - COPYING: Address RunScripts() - We do not believe rsh was supposed to exclude GPL-3 This unfortunately creates a bit of churn, but updating the COPYING file without addressing the actual licensing issues would not have solved the bug. . apt (2.5.6) unstable; urgency=medium . [ MichaIng ] * Document --allow-insecure-repositories . [ Helge Kreutzmann ] * German program translation update (Closes: #1029280) . [ David Kalnischkies ] * Build with and fix warnings of gcc-13 (Closes: #1030592) . apt (2.5.5) unstable; urgency=medium . [ David Kalnischkies ] * Do not document path to be repeatable in apt-ftparchive cmds . [ Julian Andres Klode ] * gitlab-ci: Install adduser * make ?installed pattern match installed version only when narrowed * apt-patterns(7): Grouping with () and or using | are supported . [ Egon Willighagen ] * Typo fix . [ Camiel Vletter ] * improve `--help` text for cmdline `apt autoremove` . [ Frans Spiesschaert ] * Dutch manpages translation update (Closes: #1023456, #1025843) . [ Алексей Шилин ] * Add 'tasks' section to default APT::Never-MarkAuto-Sections list . apt (2.5.4) unstable; urgency=medium . [ David Kalnischkies ] * Report failures back from debSystem::AddStatusFiles * Avoid dealing with a fake dpkg stanza in the tests * Allow apt to run if no dpkg/status file exists . [ Johannes Schauer Marin Rodrigues ] * since base-passwd 3.6.1 the _apt user is in the default /etc/passwd . [ Boyuan Yang ] * po/zh_CN.po: Update translation for apt/2.5.3 . [ quazgar ] * Documentation for autopurge command . [ Julian Andres Klode ] * Actually delete temporary apt-key.*.asc helper files (LP: #1995247) . apt (2.5.3) unstable; urgency=medium . [ Povilas Kanapickas ] * doc: Explain that apt-get download ensures package authenticity . [ David Kalnischkies ] * Keep color disabled if APT::Color was set to false * Don't reuse filename for in-tree builds of apt * Respect users pkg order on `apt install` for resolving . [ Hideki Yamane ] * Fix typo in Japanese program translation . [ lancethepants ] * porting (musl): - apt-pkg/contrib/fileutl.h Explicitly include sys/stat.h . [ Khem Raj ] * porting (clang15): - typecast time_t and suseconds_t from std::chrono - interactive-helper: Undefine _FORTIFY_SOURCE . [ Julian Andres Klode ] * edsp: Add support for phased updates (test in LP#1990586) * Check state of dependency, not depender in dependency keep back (LP: #1990684) * full-upgrade: Mark phased upgrades for keep before anything else (LP: #1990586) . apt (2.5.2) unstable; urgency=medium . [ Julian Andres Klode ] * Mark broken reverse depends for upgrade (LP: #1974196) * Upgrade all binaries in a source package . [ Michael Vogt ] * apt-pkg: (re)export pkgTagSection::Key to fix FTBFS in python-apt (Closes: #1011678) . apt (2.5.1) unstable; urgency=medium . [ Américo Monteiro ] * Portuguese manpages translation update (Closes: #1011315) . [ Ronan Desplanques ] * Fix integer underflow in flExtension . [ Roberto C. Sánchez ] * Some minor tweaks of spelling/grammar for better readability. . [ Tianon Gravi ] * Switch from "security.d.o" to "deb.d.o" (matching bullseye release notes) . [ Julian Andres Klode ] * (Temporarily) Rewrite phased updates using a keep-back approach (LP: #1979244) * policy: Do not override negative pins with 1 due to phasing (LP: #1978125) . apt (2.5.0) unstable; urgency=medium . [ Helmut Grohne ] * Avoid use of deprecated std::iterator (twice) (Closes: #1008036) . [ David Kalnischkies ] * Document tagfile-keys.h as internal to apt * Drop support for long obsoleted Suggests alias: Optional * Do not order long obsoleted fields anymore * Stop parsing undocumented unknown EDSP field APT-Hash * Avoid .c_str() on strings feed into pkgTagSection::FindS * Use pkgTagSection::Key in more places in src:apt * Parse Checksum fields via pkgTagSection::Key, too * Avoid building all docs in nodoc build profile * Add pkg.apt.nodoxygen build profile * Use build-dep & satisfy for our CI dependency resolution * Mark pkg-config-test autopkgtest as superficial * Avoid building inside the source dir in autopkgtest * Link interactive helpers against system libapt for autopkgtest * Remove unused public zlib include from libapt fileutl.h * Run ./prepare-release post-build checks in Gitlab CI * Do not build documentation twice in CI * Ignore stty failures in testcases * Include our config.h in all C++ files to avoid ODR violations * Ship our README.md in apt package . [ Frans Spiesschaert ] * Dutch program translation update (Closes: #1010029) * Dutch manpages translation update (Closes: #1010030) . [ Troy Varney ] * Fix mirror method dequeuing incorrect items . [ Julian Andres Klode ] * Do not accept arguments for apt-cache dotty, xvcg. These commands do not actually interpret the same arguments as depends, or any own ones for that matter. * tests: Add g++ dependency to pkg-config test . [ Vagrant Cascadian ] * Pass -DCMAKE_BUILD_RPATH_USE_ORIGIN=ON via dh_auto_configure override (Closes: #1009796) * Add support for "nodoc" build profile (Closes: #1009797) . apt (2.4.5) unstable; urgency=medium . * Only protect two kernels, not last installed one (LP: #1968154) * Fix segfault in CacheSetHelperAPTGet::tryVirtualPackage() . apt (2.4.4) unstable; urgency=medium . [ David Kalnischkies ] * Recognize Static-Built-Using and order it below Built-Using (Closes: #1008759) . apt (2.4.3) unstable; urgency=medium . [ Guillem Jover ] * Update .mailmap . [ David Kalnischkies ] * Fix build failure with gcc-12 due to missing include (Closes: #1008036) * Avoid using unqualified make_pair potentially triggering ftbfs . apt (2.4.2) unstable; urgency=medium . [ Frans Spiesschaert ] * Dutch manpages translation update (Closes: #1005781) . [ David Kalnischkies ] * Revert "bugscript: switch from bash to POSIX shell" (Closes: #1007121) . [ Helge Kreutzmann ] * German program translation update (Closes: #1007128) . apt (2.4.1) unstable; urgency=medium . [ Paul Wise ] * Document the APT::Periodic interval suffixes and "always" value . [ Julian Andres Klode ] * gpgv: Fix legacy fallback on unavailable keys * gpgv: Use Valid instead of Good to determine fallback . apt (2.4.0) unstable; urgency=medium . [ Jörn-Thorben Hinz ] * Provide the same bash-completions for autopurge as for autoremove * Provide bash-completions for reinstall (same as for install) (Closes: #930295) * Don’t bash-complete package names before the command word . [ Boyuan Yang ] * Simplified Chinese program translation update (Closes: #1004931) . [ David Kalnischkies ] * Allow --solver apt to work on apt satisfy . [ Julian Andres Klode ] * Install an empty /etc/apt/keyrings directory. This directory is intended to provide an alternative to /usr/share/keyrings for placing keys used with signed-by. * Warn if the legacy trusted.gpg keyring is used for verification . [ Paul Wise ] * bugscript: switch to POSIX shell, quoting, other improvements . [ Croydon ] * Readme: Default branch is now main . [ Johannes Schauer Marin Rodrigues ] * doc/apt-key.8.xml: document alternatives to apt-key add (Closes: #1002820) . apt (2.3.15) unstable; urgency=medium . [ Arnaud Rebillout ] * Fix incorrect type when parsing Size (int to unsigned long long) (Closes: #1004064) . [ Julian Andres Klode ] * Add a --full mode to apt show . [ Ville Skyttä ] * Fix "was already not hold" message grammar . [ Jörn-Thorben Hinz ] * Also bash-complete .deb filenames after `apt install` for paths starting with ~ * Bash-complete either package name or .deb filename for `apt install` * Start bash-completing .deb file paths after the first . passed in an argument to `apt install` * Provide bash-completion of .dsc filenames for `apt build-dep` (Closes: #985899) * Don’t fail bash-completion for `apt` when the nounset option is set * bash-completion: Don’t misidentify short options as commands to `apt` . apt (2.3.14) unstable; urgency=medium . [ Helge Kreutzmann ] * German program translation update (Closes: #1000537) . [ Walter Lozano ] * Use short options for cmp . [ Ville Skyttä ] * Spelling fixes . [ Zhang Boyang ] * Fix incorrect SIGWINCH handling (Closes: #852757) . [ Johannes Schauer Marin Rodrigues ] * add pattern to select packages by codename (closes: #1002646) * test/integration/test-policy-pinning: test listing multiple package in Package: field * doc/apt_preferences.5.xml: document Package field syntax . [ Frans Spiesschaert ] * Dutch program translation update (Closes: #1002476) . [ Julian Andres Klode ] * Introduce and use isalpha_ascii() in debversion rather than isalpha() . apt (2.3.13) unstable; urgency=medium . [ Alexander Kanavin ] * apt-pkg/contrib/srvrec.h: Explicitly include sys/types.h . [ Américo Monteiro ] * Portuguese manpages translation update (Closes: #1000424) . [ David Kalnischkies ] * Support more than exact release matches in 'source' (Closes: #998444) . [ Cameron Katri ] * basehttp: Rename HaveContent's Tristate . apt (2.3.12) unstable; urgency=medium . [ Ville Skyttä ] * Use `command -v` instead of `which` * bash completion: use `grep -E` instead of `egrep` . [ Victor Westerhuis ] * Don't print every inline PGP key in Signed-By . [ Frans Spiesschaert ] * Dutch manpages translation update (Closes: #998830) . [ Julian Andres Klode ] * Require argument to remove essential packages, do not prompt * Do not remove Essential/Protected due to dependencies. Thanks to Ariadne Conill for the inspiration . apt (2.3.11) unstable; urgency=medium . [ David Kalnischkies ] * Allow version selection to match versioned self-provides * Allow =version and /release selector on virtual packages . [ Johannes Schauer Marin Rodrigues ] * apt-pkg/deb/dpkgpm.cc: make DPkg::Chroot-Directory work under fakechroot . [ Julian Andres Klode ] * Respect NO_COLOR environment variable * Invalidate cached architecture list when building cache. Fixes a regression in python-apt where switching the architectures in the config between cache invocations regressed. . apt (2.3.10) unstable; urgency=medium . [ Julian Andres Klode ] * basehttp: Turn HaveContent into a TriState * Set haveContent to FALSE on `Content-Length: 0` (Closes: #990281) * Add support for embedding PGP keys into Signed-By in deb822 sources . [ David Kalnischkies ] * All pkgCaches are MultiArch caches * Do not strip M-A for native build-dep resolution * Do not make provides of M-A:allowed implicit M-A:foreign * Barbarian M-A:allowed don't satisfy :any deps of other archs * Streamline access to barbarian architecture functionality * Read and work with canonical file-URIs from sources.lists * Use https config on https proxies for http servers (Closes: #990555) * Add AllowRange option to disable HTTP Range usage * Disable HTTP Range usage if varnish < 6.4 is involved * Use exact If-Range match in our test webserver . [ Johannes Schauer Marin Rodrigues ] * add pattern to select packages by priority (closes: #989558) . apt (2.3.9) unstable; urgency=medium . [ Frans Spiesschaert ] * Dutch manpages translation update (Closes: #992352) . [ David Kalnischkies ] * Fix infinite recursions in MarkPackage and improve recursions in general - Inhibit autoremove calculation in apt-mark and apt show - Don't venture too deeply in AutoRemovers MarkPackage - Stop autoremover from endlessly exploring cyclic providers (Closes: #992993) - Increase recursion limits from 100 to 3000 . [ Julian Andres Klode ] * Improve error handling of cycling delayed queues . apt (2.3.8) unstable; urgency=medium . * Upload to unstable * Bump to C++17 . apt (2.3.7) experimental; urgency=medium . [ David Kalnischkies ] * Use full item description in broken repo error * Store size from volatile sources for already installed versions * Restore dpkg::chroot-directory functionality . [ Dillon Brock ] * apt.conf(5): indicate # is also used for comments (LP: #1309658) . [ Julian Andres Klode ] * Check sources.list could be parsed before adding volatile files (Closes: #990518) * pkgAcqIndex::CommonFailed: Set StatIdle before calling Init() * Implement exponential backoff between retries - acquire: Automatically reduce select() timeout as needed - Properly convert PulseInterval to timeval - Add support for a maximum delay and testing of delay - tests (retry-downloads): Avoid delay in second test . apt (2.3.6) experimental; urgency=medium . [ David Kalnischkies ] * URI encode Filename field of Packages files (again) * Do not use filename of local sources in 'apt download' * No URL decode and quoting support for Files in Sources . apt (2.3.5) experimental; urgency=medium . * policy: Apply phasing to uninstalled packages too (LP: #1925745) . apt (2.3.4) experimental; urgency=medium . [ Khem Raj ] * srvrec: Keep support for older resolver . [ Julian Andres Klode ] * Turn TLS handshake issues into transient errors (LP: #1928100) . apt (2.3.3) experimental; urgency=medium . [ David Kalnischkies ] * Allow superfluous commas in build-dependency lines * Mark only provides from protected versioned kernel packages * Count uninstallable packages in "not upgraded" (Closes: #981535) * Reexplore providers of marked packages if some didn't satisfy before * Call MarkAndSweep only manually in apt-get for autoremove * Store versioned kernel package detectors in d-pointer . [ Brian Murray ] * Fix a typo in json-hooks-protocol.md . [ Julian Andres Klode ] * Temporarily Revert "2.3-only: Warn that the 0.1 protocol is deprecated" . apt (2.3.2) experimental; urgency=medium . * Remove inversed comment for AllowUnsizedPackages * Automatically retry failed downloads 3 times. Enable the Acquire::Retries option by default, set to 3. This will help with slightly unreliable networking; future work is needed for adding backoff and SRV/IP rotation. (LP: #1876035) * Require dpkg >= 1.20.8 and make more use of --auto-deconfigure now that no longer needs forcing for essential/protected: - Support deconfiguring Essential packages - Do not pass --force-remove-protected with --auto-deconfigure * JSON hook bug fixes: - json: Escape strings using \u escape sequences, add test - json: Actually pop states - json: Encode NULL strings as null - json: Flush standard file descriptors before calling hooks - test/json: Make the test hook more reliable * JSON hooks 0.2: - json: Add origins fields to version - upgrade: Add JSON hook support (AptCli::Hooks::Upgrade) - json: Add `package-list` and `statistics` install hooks - json: Hook protocol 0.2 (added upgrade,downgrade,reinstall modes) - 2.3-only: Warn that the 0.1 protocol is deprecated * Avoid infinite loop on EOF on media change prompt . apt (2.3.1) experimental; urgency=medium . [ David Kalnischkies ] * Replace macro and manual management with lambda and RAII: - Replace multi-statement macro with lambda - Use RAII to clean up tmp dir for dpkg recursive install - Handle multi-arch pkgnames for dpkg call via RAII - Merge the three RAII vectors managing args lifetime * Harden test for no new acquires after transaction abort (Closes: #984966) . [ Julian Andres Klode ] * Check for and discard expected warning from MaybeAddAuth * Fix downloads of unsized files that are largest in pipeline (LP: #1921626) * Error on packages without a Size field (option Acquire::AllowUnsizedPackages) * debian/gbp.conf: HEAD branch is main now . [ Cameron Katri ] * add vendor information for Procursus . apt (2.3.0) experimental; urgency=medium . [ David Kalnischkies ] * Deal with rred shortcomings around empty patch files (LP: #1918112) - Allow merging with empty pdiff patches - Rename pdiff merge patches only after they are all downloaded - Start pdiff patching from the last possible starting point - Ensure all index files sent custom tags to the methods . apt (2.2.1) unstable; urgency=medium . [ Julian Andres Klode ] * Do not require force-loopbreak on Protected packages (Closes: #983014) * Branch of as 2.2.y for bullseye * configuration: Add missing #include <array> * Remove .travis.yml, we are using GitLab CI these days * RunScripts: Do not reset SIGQUIT and SIGINT to SIG_DFL (LP: #1898026) * regression fix: do require force-loopbreak for Conflicts . [ Алексей Шилин ] * Russian translation update (Closes: #983348) . apt (2.2.0) unstable; urgency=medium . * The "Happy soft freeze" release * Do not make DefaultRootSetFunc2 public symbol * kernels: Avoid std::regex for escaping '.' and '+' * symbols: Remove spurious package line, add kernel autoremoval helper . apt (2.1.20) unstable; urgency=medium . * CI: Run test as user on i386 * Fix test suite regression from StrToNum fixes. The tests started failing on 32-bit because the values were actually out of range, but we did not test errno before the last version, so it was not treated as an error. . apt (2.1.19) unstable; urgency=medium . [ Helge Kreutzmann ] * German program translation update (Closes: #979848) . [ Youfu Zhang ] * dpkg: fix passing readonly /dev/null fd as stdout/stderr . [ Diederik de Haas ] * Fix apt-acquire-additional-files entity's location. . [ Wolfgang Schweer ] * vendor: Adjust Debian -security codename . [ Julian Andres Klode ] * Include all translations when building the cache (LP: #1907850) . [ David Kalnischkies ] * Various patches uplifted from unfinished fuzzer branches - Use 500 MB memory limit for xz/lzma decoding - Guess compressor only if no AR nember with exact name exists - Free XXH3 state to avoid leak in cache hashing - Fail ConfigDir reading if directory listing failed - Retire and deprecate _strtabexpand - Fix incorrect base64 encoding due to int promotion - Don't parse \x and \0 past the end in DeEscapeString - Remove Word size limit from ParseQuote and CWord - Forbid negative values in unsigned StrToNum explicitly - Avoid overstepping bounds in config file parsing - Show 'Done' always for 'Building dependency tree' - Avoid undefined pointer arithmetic while growing mmap - Use error reporting instead of assert in rred patching - Replace PrintStatus with SendMessage usage - Ensure HTTP status code text has sensible content - Limit on first patch size only for server-merged patches - Use size of the old cache as APT::Cache-Start default - Remove spurious periods on progress strings in po/de.po . [ Frans Spiesschaert ] * Dutch program translation update (Closes: #981885) * Dutch manpages translation update (Closes: #981883) . apt (2.1.18) unstable; urgency=high . * pkgcachegen: Avoid write to old cache for Version::Extra (Closes: #980037) * Adjust apt-mark test for dpkg 1.20.7 . apt (2.1.17) unstable; urgency=medium . [ Américo Monteiro ] * Portuguese manpages translation update (Closes: #979725) . [ Julian Andres Klode ] * kernels: Fix std::out_of_range if no kernels to protect * Call ischroot with -t . apt (2.1.16) unstable; urgency=medium . [ Faidon Liambotis ] * Various fixes to http and connect method - basehttp: also consider Access when a Server's URI - connect: convert a C-style string to std::string - connect: use ServiceNameOrPort, not Port, as the cache key . [ Julian Andres Klode ] * patterns: Add dependency patterns ?depends, ?conflicts, etc. Note that the -broken- variants are not implemented yet. * Rewrite of the kernel autoremoval code: - Determine autoremovable kernels at run-time (LP: #1615381), this fixes the issue where apt could consider a running kernel autoremovable - Automatically remove unused kernels on apt {full,dist}-upgrade. This helps ensuring that we don't run out of /boot space. - Only keep up to 3 (not 4) kernels. Ubuntu boot partitions were sized for 3 kernels, not 4. * Bump codenames to bullseye/hirsute and adjust -security codename for bullseye (Closes: #969932) * Ignore failures from immediate configuration. This does not change the actual installation ordering - we never passed the return code to the caller and installation went underway anyway if it could be ordered at a later stage, this just removes spurious after-the-fact errors. (Closes: #973305, #188161, #211075, #649588) (LP: #1871268) * Add support for Phased-Update-Percentage, previously used only by update-manager. * Implement update --error-on=any so that scripts can reliably check for transient failures as well. (Closes: #594813) . [ Demi M. Obenour ] * test/integration/framework: Be compatible with Bash . [ Vangelis Skarmoutsos ] * Greek program translation update . apt (2.1.15) unstable; urgency=medium . [ Julian Andres Klode ] * Unroll pkgCache::sHash 8 time, break up dependency * Do not require libxxhash-dev for including pkgcachegen.h (Closes: #978171) . [ David Kalnischkies ] * Proper URI encoding for config requests to our test webserver * Keep URIs encoded in the acquire system * Implement encoded URI handling in all methods * Don't re-encode encoded URIs in pkgAcqFile . [ Helge Kreutzmann ] * German program translation update (Closes: #977938) . apt (2.1.14) unstable; urgency=medium . * test: fixup for hash table size increase (changed output order) * Use XXH3 for cache, hash table hashing . apt (2.1.13) unstable; urgency=medium . [ Debian Janitor ] * Apply multi-arch hints. + apt-doc, libapt-pkg-doc: Add Multi-Arch: foreign. . [ Jordi Mallach ] * Fix typo in Catalan translation. . [ David Kalnischkies ] * Prepare rred binary for external usage * Support reading compressed patches in rred direct call modes * Support compressed output from rred similar to apt-helper cat-file . [ Julian Andres Klode ] * gitignore: Add /build and /obj-* build dirs * gitignore: Add .*.swp files * HexDigest: Silence -Wstringop-overflow * patterns: Terminate short pattern by ~ and ! * SECURITY UPDATE: Integer overflow in parsing (LP: #1899193) - apt-pkg/contrib/arfile.cc: add extra checks. - apt-pkg/contrib/tarfile.cc: limit tar item sizes to 128 GiB - apt-pkg/deb/debfile.cc: limit control file sizes to 64 MiB - test/*: add tests. - CVE-2020-27350 * Additional hardening: - apt-pkg/contrib/tarfile.cc: Limit size of long names and links to 1 MiB * Raise APT::Cache-HashtableSize to 196613 . apt (2.1.12) unstable; urgency=medium . [ Julian Andres Klode ] * pkgnames: Correctly set the default for AllNames to false (LP: #1876495) * pkgnames: Do not exclude virtual packages with --all-names * Remove expired domain that became nsfw from debian/changelog * Do not immediately configure m-a: same packages in lockstep (LP: #1871268) . [ Américo Monteiro ] * Portuguese manpages translation update (Closes: #968414) . [ David Kalnischkies ] * Rename CMake find_package helpers to avoid developer warnings * Install translated apt-patterns(7) man pages * Remove ancient versions support from apts postinst * Update libapt-pkg6.0 symbols file * Refresh lintian-overrides of apt and libapt-pkg-doc . apt (2.1.11) unstable; urgency=medium . [ JCGoran ] * Fix "extended_states" typo in apt-mark(8) (Closes: #969086) . [ Julian Andres Klode ] * doc: Bump Ubuntu release from focal to groovy * Do not produce late error if immediate configuration fails, just warn (Closes: #953260, #972552) (LP: #1871268) . [ Frans Spiesschaert ] * Dutch manpages translation update (Closes: #970037) . apt (2.1.10) unstable; urgency=medium . * Default Acquire::AllowReleaseInfoChange::Suite to "true" (Closes: #931566) * acquire: Do not hide _error messages in Fail() * Further improvements to HTTP method (Closes: #968220, verified against that server and the Canonical infra where it blocked buildds) - Do not use non-blocking local I/O - they don't do anything anyway, and we can't really use non-blocking I/O here because we need to be able to flush it. - Restore successful exits from Die() and rewrite Die() in a more comprehensible way, after careful code path analysis - http: Fully flush local file both before/after server read, avoiding both partial flush before sending requests to the server, as well as preventing leftover data before receiving from the server, which cause data left in the buffer. . apt (2.1.9) unstable; urgency=medium . [ Julian Andres Klode ] * http: Fix infinite loop on read errors * basehttp: Correctly handle non-transient failure from RunData() * Do not retry on failure to fetch (Closes: #968163) . [ Aleix Vidal i Gaya ] * updated catalan translations . apt (2.1.8) unstable; urgency=medium . [ Julian Andres Klode ] * Fully deprecate apt-key, schedule removal for Q2/2022 * apt-key: Allow depending on gpg instead of gnupg * Removal of racist terminology, except for two cases that still need consensus * Various fixes to http code: - http: Always Close() the connection in Die() - http: Die(): Merge flushing code from Flush() - http: Only return false for EOF if we actually did not read anything - http: Die(): Do not flush the buffer, error out instead - http: Finish copying data from server to file before sending stuff to server - http: On select timeout, error out directly, do not call Die() - http: Redesign reading of pending data - http: Always write to the file if there's something to write; this fixes a regression from removing the buffer flushing code Overall, there's hope this Closes: #959518. It reproduced a bit, but eventually snapshot.d.o ratelimiting kicked in and broke the test case. . [ Nicolas Schier ] * Support marking all newly installed packages as automatically installed . apt (2.1.7) unstable; urgency=medium . [ David Kalnischkies ] * Do not hardcode (wrong) group and mode in setup warning (Closes: #962310) * Do not sent our filename-provides trick to EDSP solvers (Closes: #962741) * Tell EDSP solvers about all installed pkgs ignoring arch * Deduplicate EDSP Provides line of M-A:foreign packages * Delay removals due to Conflicts until Depends are resolved * Filter out impossible solutions for protected propagation * Add dependency points in the resolver also to providers * Reorder config check before checking systemd for non-interactive http * Reorder config check before result looping for SRV parsing debug * Fix test due to display change in ls (coreutils 8.32) * Detect pkg-config-dpkghook failure in tests to avoid fallback (Closes: #964475) . [ Américo Monteiro ] * Portuguese manpages translation update (Closes: #962483) . [ Julian Andres Klode ] * Replace some magic 64*1024 with APT_BUFFER_SIZE * Add basic support for the Protected field . [ Sergio Oller Moreno ] * Minor Catalan grammar typo . [ Frans Spiesschaert ] * Dutch program translation update (Closes: #963008) . apt (2.1.6) unstable; urgency=medium . [ David Kalnischkies ] * Fix small memory leak in MethodConfig * Consider protected packages for removal if they are marked as such * Consider if a fix is successful before claiming it is * Allow 20 instead of 10 loops for pkgProblemResolver * Deal with duplicates in the solution space of a dep . apt (2.1.5) unstable; urgency=medium . [ David Kalnischkies ] * Reset candidate version explicitly for internal state-keeping (Closes: #961266) * Known-bad candidate versions are not an upgrade option * Keep status number if candidate is discarded for kept back display * Allow pkgDepCache to be asked to check internal consistency * Don't update candidate provides map if the same as current * Ensure EDSP doesn't use a dangling architecture string * Allow FMV SSE4.2 detection to succeed on clang * Mark PatternTreeParser::Node destructor as virtual . [ Frans Spiesschaert ] * Dutch manpages translation update (Closes: #961431) . apt (2.1.4) unstable; urgency=medium . [ David Kalnischkies ] * Check satisfiability for versioned provides, not providing version . apt (2.1.3) unstable; urgency=medium . [ David Kalnischkies ] * Prefer use of O_TMPFILE in GetTempFile if available * Allow prefix to be a complete filename for GetTempFile * Properly handle interrupted write() call in ExtractTar * Skip reading data from tar members if nobody will look at it * Keep going if a dep is bad for user requests to improve errors * Support negative dependencies in VCI::FromDependency * Deal with protected solution providers first * Propagate protected to already satisfied conflicts (Closes: #960705) * Propagate protected to already satisfied dependencies * Recognize propagated protected in pkgProblemResolver . [ Julian Andres Klode ] * private-search: Only use V.TranslatedDescription() if good (LP: #1877987) . apt (2.1.2) unstable; urgency=critical . [ Julian Andres Klode ] * SECURITY UPDATE: Out of bounds read in ar, tar implementations (LP: #1878177) - apt-pkg/contrib/arfile.cc: Fix out-of-bounds read in member name - apt-pkg/contrib/arfile.cc: Fix out-of-bounds read on unterminated member names in error path - apt-pkg/contrib/extracttar.cc: Fix out-of-bounds read on unterminated member names in error path - CVE-2020-3810 . [ Frans Spiesschaert ] * Dutch program translation update (Closes: #960186) . apt (2.1.1) unstable; urgency=medium . [ David Kalnischkies ] * Allow aptitude to MarkInstall broken packages via FromUser * Drop nowrap from po4a --porefs as it is no longer supported * Use "po4a --porefs file" instead of undocumented compat noline . [ Artur Grącki ] * Fix typo in Polish translation of --help messages . apt (2.1.0) unstable; urgency=medium . [ Frans Spiesschaert ] * Dutch manpages translation update (Closes: #956313) . [ David Kalnischkies ] * Refactor MarkInstall fixing various or-group handling issues - Discard impossible candidate versions also for non-installed - Explore or-groups for Recommends further than first - Refactor and reorder MarkInstall code - Discard candidate if its dependencies can't be satisfied - Split up MarkInstall into private helper methods - Fail earlier on impossible Conflicts in MarkInstall - Propagate Protected flag to single-option dependencies - Prefer upgrading installed orgroup members - Protect a package while resolving in MarkInstall . [ Julian Andres Klode ] * Reinstate * wildcards (Closes: #953531) (LP: #1872200) * apt list: Fix behavior of regex vs fnmatch vs wildcards . apt (2.0.2) unstable; urgency=medium . [ Boyuan Yang ] * Simplified Chinese program translation update (Closes: #955023) . [ Frans Spiesschaert ] * Dutch program translation update (Closes: #955505) . [ Marco Ippolito ] * Fix gramma in apt(8): "by append(+ing) a" (Closes: #955412) . [ Chris Leick ] * German manpage translation update * Fix "string match{ing,es}" and whitespace typo in apt-patterns(7) . [ Julian Andres Klode ] * test/integration/apt.pem: Regenerate with SHA2 hashes to make the test work with stricter gnutls in Ubuntu which rejects SHA1 * ubuntu: http: Add non-interactive to user agent if run by systemd (LP: #1825000) . apt (2.0.1) unstable; urgency=medium . [ David Kalnischkies ] * Don't crash pattern matching sections if pkg has no section * Parse last line in deb file correctly by adding a newline . [ Julian Andres Klode ] * apt-helper: Add analyze-pattern helper * Add color highlighting to E:/W:/N: prefixes (Closes: #953527) . [ Алексей Шилин ] * Russian program translation update (Closes: #953804) . apt (2.0.0) unstable; urgency=medium . * Upload to unstable - Happy APT 2.0 day! * GetLock: No strerror if it's just another process holding the lock * Show absolute time while waiting for lock instead of %, rework message . apt (1.9.12) experimental; urgency=medium . * pkgcache: Add operator bool() to map_pointer * (temporarily) unhide pkgDPkgPM again to have python-apt compile . apt (1.9.11) experimental; urgency=medium . [ Tomáš Janoušek ] * bash completion: Add autopurge command . [ Tris Emmy Wilson ] * apt-mark: don't lie about successful marks . [ Julian Andres Klode ] * apt(8): Wait for lock (Closes: #754103) * policy: Implement pinning by source package (Closes: #166032) * Initialize libgcrypt on first use (Closes: #949074) * Fix various compiler warnings * Bump ABI to 6.0; update symbols file; cleanup ABI: - Merge various function overloads together - Make stuff that should be virtual virtual - Default to hidden visibility * Code removals: - Use a 32-bit djb VersionHash instead of CRC-16 - Remove CRC-16 implementation * Hardening: - tagfile: Check if memchr() returned null before using - tagfile: Check out-of-bounds access to Tags vector * Cache improvements: - Type safe cache: Replace map_pointer_t with map_pointer<T> - Extensibility: Add d-pointers to groups, packages, versions, and files - Prepare for package hashtable removal: Swap locations of hashtables . [ Nis Martensen ] * apt-pkg/srcrecords.cc: 'source' means 'deb-src' in error message . [ David Kalnischkies ] * Parse records including empty tag names correctly . apt (1.9.10) experimental; urgency=medium . [ David Kalnischkies ] * Fix remaining usec vs sec time-delta calculation typos. Thanks to Trent W. Buck for initial patch (Closes: #950776) . [ Julian Andres Klode ] * seccomp: Allow time64 variants (>402,<415) of allowed syscalls (Closes: #951012) * debian/control: Bump libseccomp-dev Build-Depends to >= 2.4.2 * seccomp: Allow recvmmsg_time64() and futex_time64() * policy: Add SetPriority() methods * Revert "Add a Packages-Require-Authorization Release file field" . [ Michael Vogt ] * doc: remove "WIP" from apt.8.xml . apt (1.9.9) experimental; urgency=medium . * Widen regular expressions for versioned kernel packages (LP: #1607845) * Implement short patterns (patterns starting with ~) . apt (1.9.8) experimental; urgency=medium . * pkgcache.cc: Mix PACKAGE_VERSION into the cache hash * mmap: Do not look for empty pool unless we need to * apt-verbatim.ent: Update ubuntu-codename from disco to focal * NewGroup: Create GrpIterator after allocation (fix segfault) . apt (1.9.7) experimental; urgency=medium . * Trim trailing whitespace (thanks lintian-brush) * NewProvidesAllArch: Check if group is empty before using it. This caused automake-1.16 to not be provided by automake anymore, because apt wanted to add provides to packages in an empty automake-1.16 group. LP: #1859952 * Fix debian-rules-uses-deprecated-systemd-override. We accidentally managed to restart apt-daily{,-upgrade}.service again because our dh_systemd_start override was being ignored since we switched to debhelper 12. Override dh_installsystemd instead. . apt (1.9.6) experimental; urgency=medium . [ Julian Andres Klode ] * gitlab-ci: Do not do coverage * gitlab-ci: Use ccache * satisfy: Fix segmentation fault when called with empty argument * Add support for GTest 1.9, do not fail silently if its missing * gtests: Fix netrc parser test regression from https-only changes * Macro cleanup: - Avoid #define _error, use anonymous C++ struct instead (Closes: #948338) - Rename _count() macro to APT_ARRAY_SIZE() - Remove various unused macros like MAX/MIN/ABS/APT_CONST - Only define likely/unlikely if APT_COMPILING_APT set * Performance: Avoid extra out-of-cache hash table deduplication for package names, this saved about 10-16% on gencaches in memory * acquire: Move queue startup after calling log's Start(), fixes abort() calls in python-apt * hashes: Use Libgcrypt for hashing purposes - Raise buffer size for Hashes::AddFD() from 4 KiB to 64 KiB - Convert users of {MD5,SHA1,SHA256,SHA512}Summation to use Hashes - Deprecate the Summation classes and mark them for removal - Remove includes of (md5|sha1|sha2).h headers * netrc: Add warning when ignoring entries for unencrypted protocols * apt(8): Disable regular expressions and fnmatch . [ David Kalnischkies ] * Drop g++ build-dependency to help crossbuilding (Closes: #948201) . [ Denis Mosolov ] * Fix typo in README.md . apt (1.9.5) experimental; urgency=medium . [ Julian Andres Klode ] * Parse 'show' arguments for the 'info' alias as well (LP: #1843812) * patterns: Add base class for regular expression matching * patterns: Add ?version * patterns: Add ?source-name and ?source-version * patterns: Add ?archive * patterns: Add ?origin * patterns: Add ?any-version * patterns: Implement ?narrow(...), as ?any-version(?and(...)) * patterns: Add ?all-versions * patterns: Add ?section * netrc: Restrict auth.conf entries to https by default (Closes: #945911) . [ Anatoly Borodin ] * README.md: fix dead anonscm link . [ Алексей Шилин ] * Search in all available description translations (Closes: #490000) * strutl: Add APT::String::DisplayLength() function * Fix progress bar width for multibyte charsets . [ Chris Leick ] * German manpage translation update . [ David Kalnischkies ] * Use correct filename on IMS-hit reverify for indices * Remove failed trusted signature instead of index on IMS hit . [ Anthony Papillon ] * Fix a mistake in man french translation . apt (1.9.4) experimental; urgency=medium . * CMake: Pass -Werror=return-type to gcc * CMake: Produce a fatal error if triehash could not be found * apt.systemd.daily: Do not numerically check if intervals equal 0 (LP: #1840995) * srvrec: Use re-entrant resolver functions * Pass --abort-after=1 to dpkg when using --force-depends (Closes: #935910) (LP: #1844634) * Fix use of GTest to adjust for GTest 1.9 . apt (1.9.3) experimental; urgency=medium . * Fix segfault in pkgAcquire::Enqueue() with Acquire::Queue-Mode=access (LP: #1839714) * test: Use valgrind to ensure Acquire::Queue-Mode=access does not crash * Add initial support for package patterns (patterns on versions WIP) . apt (1.9.2) experimental; urgency=medium . [ Julian Andres Klode ] * Improve locking messaging - pid and name, "do not remove lock file" . [ Lynn Cyrin ] * Change a pronoun in the readme from `he` to `they` . [ David Kalnischkies ] * Distribute host-less work based on backlog of the queues * Show details about the package with bad Provides * Apply various suggestions by cppcheck . apt (1.9.1) experimental; urgency=medium . * RFC1123StrToTime: Accept const std::string& as first argument * Fix pkg-config-test autopkgtest . apt (1.9.0) experimental; urgency=medium . [ Julian Andres Klode ] * CMakeLists.txt: Bump C++ standard version to C++14 * debian: Update to debhelper-compat (= 12) * debian/rules: Do not use dh_install --list-missing (dh 12 porting) * Remove all the deprecated bits, merge various function prototypes together * prepare-release: Add merge-translations command * Use system-provided triehash * CI: Use unstable for now, as we need triehash package * Tighten dependencies from apt and apt-utils on libs * Add test case for local-only packages pinned to never * acq: worker: Move CurrentSize, TotalSize, ResumePoint to CurrentItem * apt-helper: Support multiple hashes for a file * Add 'explicit' to most single argument constructors * Get rid of pkgExtract and pkgFLCache * Merge libapt-inst into libapt-pkg * Use debDebFile to get control file instead of dpkg-deb * prepare-release: Add bump-abi command * Change soname to libapt-pkg.so.5.90 * CMake: Enforce "override" use on overridden methods * debmetaindex: Use isspace_ascii() variant to normalize Signed-By * README.md: Quote -j <count> as code with backticks * apt-mark: Add hidden showheld alias for showhold * Mnor wording improvements in documentation * Make APT::StringView public, replace std::string with it in various places * Introduce apt satisfy and apt-get satisfy (Closes: #275379) * Run unifdef -DAPT_{8,9,10,15}_CLEANER_HEADERS * Adjust code for missing includes, and using std::string * Bump cache MajorVersion to 16 . [ Corentin Noël ] * Add pkg-config files for the apt-pkg and apt-inst libraries (Closes: #439121) . [ Simon McVittie ] * vendor/getinfo: Iterate through vendors in lexicographic order (Closes: #924662) * vendor/getinfo: Don't assume that Ubuntu is the last vendor (Closes: #924662) . [ Martin Michlmayr ] * Perform minor copy-editing on the docs . [ Ivan Krylov ] * Mark apt-transport-https as M-A:foreign (Closes: #905141) . [ David Kalnischkies ] * Don't limit cpu-limited queues to at most 10 . [ Stephen Kitt ] * apt-cache: only show solutions if displayed . [ Brian Murray ] * Do not include squashfs file systems in df output. (LP: #1756595) . [ Simon Körner ] * http: Fix Host header in proxied https connections . apt (1.8.2) unstable; urgency=medium . [ Alwin Henseler ] * Flip /: in documented default value of DPkg::Path (Closes: #917986) . [ TilmanK ] * Fix typo in German manpage translation . [ Américo Monteiro ] * Portuguese manpages translation update (Closes: #926614) . [ Jean-Pierre Giraud ] * French manpages translation update (Closes: #929290) . [ Michael Zhivich ] * methods: https: handle requests for TLS re-handshake (LP: #1829861) . [ Julian Andres Klode ] * Unlock dpkg locks in reverse locking order (LP: #1829860) . apt (1.8.1) unstable; urgency=medium . * Add test case for local-only packages pinned to never * Prevent shutdown while running dpkg (LP: #1820886) * Add linux-{buildinfo,image-unsigned,source} versioned kernel pkgs (LP: #1821640) . apt (1.8.0) unstable; urgency=medium . [ David Kalnischkies ] * Add explicit message for unsupported binary signature (Closes: #921685) . [ Milo Casagrande ] * [l10n] Update Italian translation . [ Julian Andres Klode ] * Fix name of APT::Update::Post-Invoke-Stats (was ...Update-Post...) * CMake: Install auth.conf.d directory (LP: #1818996) . [ Frans Spiesschaert ] * Dutch program translation update (Closes: #923728) * Dutch manpages translation update (Closes: #923834) . apt (1.8.0~rc4) unstable; urgency=medium . * update: Provide APT::Update-Post-Invoke-Stats script hook point (LP: #1815760) * Introduce APT::Install::Pre-Invoke / Post-Invoke-Success (LP: #1815761) . apt (1.8.0~rc3) unstable; urgency=medium . [ Julian Andres Klode ] * aptmethod.h: Do not have gcc warning about ignoring write() result * Fix issues in previous two debian/changelog entries * json-hooks-protocol: The "pin" field is optional * debian/gbp.conf: Set debian-branch to 1.8.y * Install translated apt_auth and apt-transport-* manpages . [ Алексей Шилин ] * Russian program translation update. Thanks to Vladimir Zhbanov <vzhbanov@gmail.com> (Closes: #921830) . [ Jakub Wilk ] * Fix various typos in the documentation . [ Frans Spiesschaert ] * Dutch program translation update (Closes: #921934) * Dutch manpages translation update (Closes: #921941) . apt (1.8.0~rc2) unstable; urgency=medium . * Correctly handle feature detection for sse4.2 and crc32 . apt (1.8.0~rc1) unstable; urgency=medium . [ David Kalnischkies ] * Fail instead of warn for unsigned lines in InRelease * Fail on non-signature lines in Release.gpg * Merge and reuse tmp file handling across the board * Explicitly remove the whitespaces defined by RFC * Refuse files with lines unexpectedly starting with a dash * Drop buffered writing from clearsigned message extraction * Step over empty sections in TagFiles with comments (Closes: #920317, #921037) . [ Josh Triplett ] * Add a "reinstall" command as an alias for "install --reinstall". . [ Michael Vogt ] * private-json-hooks.cc: deal with EPIPE (LP: #1814543) . [ Julian Andres Klode ] * Verify data being sent by methods in SendMessage() * Disable deprecated methods (ftp, rsh, ssh) by default * Introduce experimental 'never' pinning for sources * Add a Packages-Require-Authorization Release file field * gpgv: Use buffered writes for splitting clearsigned files * Detect function multiversioning and sse4.2/crc32, enables i386 * Use std::to_string() for HashStringList::FileSize() getter . [ Алексей Шилин ] * Russian program translation update (Closes: #921011) . [ Baptiste Jammet ] * French program translation update (Closes: #921008) . apt (1.8.0~beta1) unstable; urgency=medium . [ anatoly techtonik ] * README.md: Document that apt is also included * apt.cc: Add "apt info" alias for muscle memory . [ Jean-Pierre Giraud ] * French manpages translation update (Closes: #915952) . [ Frans Spiesschaert ] * Dutch manpages translation update (Closes: #916358) . [ Julian Andres Klode ] * cache hash: Use sse4.2 CRC32c on x86-64 where available * configuration: Compare size first during lookup * debListParser: Avoid native arch lookup in ParseDepends * hash32: Tighten to multiversion to x86-64 ELF and use uint32_t * apt-mark: Introduce minimize-manual * doc/apt-verbatim.ent: Point ubuntu-codename to disco (LP: #1812696) * CI: Use debian:buster as test base image * doc/apt-verbatim.ent: Debian buster is stable * SECURITY UPDATE: content injection in http method (CVE-2019-3462) (LP: #1812353) * debian/control: Drop libcurl4-gnutls-dev build dependency . [ Mo Zhou ] * zh_CN.po: Update Simplified Chinese programs translation. . [ Khem Raj ] * Remove `register` keyword . [ Vasya Novikov ] * bash completion: add keys . [ David Kalnischkies ] * Communicate back which key(s) were used for signing . apt (1.8.0~alpha3.1) unstable; urgency=emergency . * SECURITY UPDATE: content injection in http method (CVE-2019-3462) (LP: #1812353) . apt (1.8.0~alpha3) unstable; urgency=medium . [ Manuel A. Fernandez Montecelo ] * Remove "Ultimedia" config for Acquire::Changelogs * Remove "Tanglu" config for Acquire::Changelogs and as vendor . [ Julian Andres Klode ] * Adjust libapt-pkg Breaks aptitude to << 0.8.9 * Print useful error on "apt changelog" without arguments * test-pdiff-usage: make transaction failure test case more robust * Provide a "autopurge" shortcut. Thanks to Michael Vogt for the initial work * Override FileFd copy constructor to prevent copying * Add support for /etc/apt/auth.conf.d/*.conf (netrcparts) * Set PATH=/usr/sbin:/usr/bin:/sbin:/bin when running dpkg . [ David Kalnischkies ] * Allow setting Referer header for http method * Use quoted tagnames in config dumps . [ Алексей Шилин ] * Russian program translation update (Closes: #914096) . [ Balint Reczey ] * Set LC_ALL=C.UTF-8 for unattended-upgrades environment when parsing its --help (LP: #1806076) . [ Milo Casagrande ] * [l10n] Update Italian translation . apt (1.8.0~alpha2) unstable; urgency=medium . * Revert "http: Fix handling of server connection closure" This reverts commit fb3f36593563d09a8d1727cc7c6deb0b49823ca2. It caused downloads to hang on long-lived connections on certain servers. * Drop debian/source/options, not needed anymore . apt (1.8.0~alpha1) unstable; urgency=medium . [ Damyan Ivanov ] * apt-get.8: mention --only-source in 'source' and 'build-dep' description . [ David Kalnischkies ] * Support subkeys properly in Signed-By options * Support multiple keyrings in sources.list Signed-By . [ Ben Hutchings ] * Default to https: scheme for fetching Debian changelogs (Closes: #910941) . [ Julian Andres Klode ] * NeverAutoRemove kernel meta packages (LP: #1787460) * Break pre-gcc8 aptitude and apt (Closes: #911090) * http: Fix handling of server connection closure (LP: #1801338) . [ Frans Spiesschaert ] * Dutch program translation update (Closes: #912021) * Dutch manpage translation update (Closes: #912022) . [ Chris Leick ] * German manpage translation update * Fix typos encountered while updating de translation . [ Petter Reinholdtsen ] * Norwegian Bokmål program translation update (Closes: #912374) . apt (1.7.0) unstable; urgency=medium . [ Julian Andres Klode ] * Fix calculation of elapsed usec in downloads * pkgCacheFile: Only unlock in destructor if locked before (LP: #1794053) * Set DPKG_FRONTEND_LOCKED when running {pre,post}-invoke scripts. Some post-invoke scripts install packages, which fails because the environment variable is not set. This sets the variable for all three kinds of scripts {pre,post-}invoke and pre-install-pkgs, but we will only allow post-invoke at a later time. * prepare-release: Fix last-modification detection for manpages . [ David Kalnischkies ] * Show APT::Compressor example in apt.conf(5) (Closes: #909712) . [ Muhamed Huseinbašić ] * apt-mark: showhold: typo-fix (package -> packages) . apt (1.7.0~rc2) unstable; urgency=medium . [ David Kalnischkies ] * Deal with descriptions embedded in displayed record correctly (Closes: #909155) . apt (1.7.0~rc1) unstable; urgency=medium . [ Laurent Bigonville ] * fr.po: Do not translate the apt-ftparchive commands (Closes: #907481) . [ David Kalnischkies ] * Don't use invalid iterator in Fallback-Of handling. Thanks to David Binderman for reporting * Process status-fd completely before finishing dpkg call * Don't expect duplicated dpkg status-fd messages * Reorder progress report messages * Show all architectures in 'apt list' output (Closes: #908218) . [ Julian Andres Klode ] * http: Stop pipeline after close only if it was not filled before . apt (1.7.0~alpha3) experimental; urgency=medium . [ David Kalnischkies ] * SECURITY UPDATE: Fallback in the mirror method allowed a later server to supply any InRelease file without it having to be verified. (LP: #1787752) - apt-pkg/acquire-item.cc:: clear alternative URIs for mirror:// between steps - CVE-2018-0501 . [ Jean-Ralph Aviles ] * Add trailing newline to output of edit-sources. . [ Julian Andres Klode ] * Add support for dpkg frontend lock (Closes: #869546) * Set DPKG_FRONTEND_LOCKED as needed when doing selection changes * Update symbols files . [ Boyuan Yang ] * Simplified Chinese program translation update (Closes: #903695) . [ David Kalnischkies ] * Report (soon) worthless keys if gpg uses fpr for GOODSIG . apt (1.7.0~alpha2) experimental; urgency=medium . * Handle JSON hooks that just close the file/exit and fix some other errors (LP: #1776218) * Use cheaper entropy source for randomizing items to fetch . apt (1.7.0~alpha1) experimental; urgency=medium . [ Julian Andres Klode ] * CMake: Fix builds without zstd * apt.conf.autoremove: Catch some new Ubuntu module packages * Fix build with new gtest (Closes: #897149) * tests: Do not expect requested-by if sudo was invoked by root * Run tests on GitLab CI * Handle a missed case of timed out ip addresses (LP: #1766542) * Lower default timeout from 120s to 30s * apt-key: Pass all instead of gpg-agent to gpgconf --kill (LP: #1773992) * Fix lock counting in debSystem * CI: Export DEBIAN_FRONTEND=noninteractive in all CI environments * Ensure that we are online in apt-daily-upgrade.service (LP: #1723761) * gitlab-ci: chmod 755 /root . [ David Kalnischkies ] * move special READMEs into doc/ and format as md * Add boilerplate plural form to po/apt-all.pot * don't try SRV requests based on IP addresses * use 127.0.0.1 instead of localhost as default Tor proxy * Extend apt build-dep pkg/release to switch dep as needed * Support release selector for volatile files as well * Start pkg records for deb files with dpkg output * Deprecate buggy/incorrect Rls/PkgFile::IsOk methods * Support --with-source in show & search commands * Support local files as arguments in show command (Closes: 883206) * Drop alternative URIs we got a hash-based fail from * Handle by-hash URI construction more centrally * Don't force the same mirror for by-hash URIs * Reword error for timed out read/write on SOCKS proxy (Closes: #898886) * Don't show acquire warning for "hidden" components (Closes: #879591) * Use a steady clock source for progress reporting * Use steady clock source for bandwidth limitation . [ Guillem Jover ] * Remove obsolete RCS keywords * Normalize authors through a mailmap file * po: Fill Project-Id-Version with correct project id and version * po: Fix translated string not matching format string arguments * po: Fix Language field to match actual locale * po: Remove spurious text in Plural-Forms field * po: Add missing Plural-Forms fields . [ Filipe Brandenburger ] * Update .gitignore * Increase debug verbosity in `apt-get autoremove` * Extend test-apt-get-autoremove to check debug output . [ annadane ] * Add verb 'be' to NEWS entry for 1.5~beta1 (Closes: 892792) . [ Алексей Шилин ] * Russian program translation update (Closes: 898797) . [ Frans Spiesschaert ] * Dutch program translation update (Closes: #900589) * Dutch manpage translation update (Closes: #900602) . apt (1.7.0~alpha0) experimental; urgency=medium . [ David Kalnischkies ] * mention mirror method in sources.list (Closes: 679580) . [ Julian Andres Klode ] * Build with cmake+ninja instead of cmake+make * Make libzstd optional in CMakeLists.txt, to aid cross-building * Run travis against debian:testing again, keep shippable at bionic . apt (1.6~rc1) unstable; urgency=medium . [ Julian Andres Klode ] * Experimental support for zstd (LP: #1763839) * Fix debian/NEWS entry for 1.6~beta1 * Use https for Ubuntu changelogs * Bump cache major version to allow different 1.5 and 1.6 updates * CI: Switch testing to use ubuntu:bionic for 1.6.y * Turn off seccomp sandboxing by default (LP: #1732030) (Closes: #890489) * Allow restart_syscall() syscall in seccomp sandboxes (Closes: #891644) * Delete /etc/dpkg/dpkg.cfg.d/excludes on Docker CI images * test: export GCOV_ERROR_FILE=/dev/null to make it fail less/no tests * apt-private: Collect not found packages in CacheSetHelperAPTGet * Introduce experimental new hooks for command-line tools (LP: #1763839) . [ David Kalnischkies ] * remove duplicate changelog lines from 1.6~beta1 entry * fix communication typo in https manpage * set our two libapt libraries to prio:optional * document Acquire::AllowReleaseInfoChange without extra s . [ jean-pierre giraud ] * French man pages translation (Closes: #895117) . apt (1.6~beta1) unstable; urgency=medium . [ David Kalnischkies ] * allow the apt/lists/auxfiles/ directory to be missing (Closes: 887624) * add apt-helper drop-privs command… * restore gcc visibility=hidden for apt-private * ensure correct file permissions for auxfiles . [ Julian Andres Klode ] * indexcopy: Copy uncompressed indices from cdrom again (LP: #1746807) * Work around test-method-mirror failure by setting umask at start * Check that Date of Release file is not in the future * apt.conf.autoremove: Add linux-cloud-tools to list (LP: #1698159) . [ Chris Leick ] * German manpage translation update . apt (1.6~alpha7) unstable; urgency=medium . [ Mert Dirik ] * Turkish program translation update (Closes: 886250) . [ David Kalnischkies ] * dpkg status parsing: check if name is valid before use . [ Julian Andres Klode ] * apt-compat.cron.daily: Correctly handle undetermined power status (LP: #1742378) * Introduce inrelease-path option for sources.list (Closes: #886745) * Drop obsolete Suggests on python-apt (Closes: #887607) * Point people to salsa.d.o instead of anonscm.d.o for git . [ Justin B Rye ] * review and fix the three new apt-transport- manpages . [ Holger Wansing ] * German program translation update (Closes: 886429) . [ Julien Patriarca ] * French program translation update (Closes: 887017) . apt (1.6~alpha6) unstable; urgency=medium . [ Julian Andres Klode ] * Add Breaks: aptitude (<< 0.8.10) for gzip method removal * Also look at https_proxy for https URLs * Run wrap-and-sort * Translate shared documentation parts again * tests: Improve handling profiling messages on CI * connect: Store the IP used when picking a connection * Add rapid "happy eyeballs" connection fallback (RFC 8305) (Closes: #668948) (LP: #1308200) . [ David Kalnischkies ] * allow multivalue fields in deb822 sources to be folded (Closes: 881875) * support COLUMNS environment variable in apt tools * allow apt_auth.conf(5) to be translated * if insecure repo is allowed continue on all http errors * don't auto-switch candidate if installed is good enough * update libapt-pkg symbols file * explicitly name token in auth.conf parsing error * fix over-calculating dpkg commandline length * avoid some useless casts reported by -Wuseless-cast * deal with floats without old-style cast * support multiline values in LookupTag * mark some 500 HTTP codes as transient acquire errors * report transient errors as transient errors * implement Acquire::Retries support for all items * give the methods more metadata about the files to acquire * implement fallback to alternative URIs for all items * do not remap current files if nullptrs in cache generation * apt.daily: remove unused dbus signal for apt update (Closes: 849636) * Support cleartext signed InRelease files with CRLF line endings. Thanks to Lukas Wunner for detailed report & initial patch! (Closes: 884922) * document http options in new apt-transport-http manpage * document https options in new apt-transport-https manpage * refactor message generation for methods * allow a method to request auxiliary files * reimplement and simplify mirror:// method * require methods to request AuxRequest capability at startup * add tag-based control over mirror choices from the list * non-local mirrorlists shouldn't redirect to local * add apt-transport-mirror manpage . [ Milo Casagrande ] * Italian program translation update (Closes: 882850) . [ Christian Göttsche ] * apt.daily: fix several "shellcheck" annotations . apt (1.6~alpha5) unstable; urgency=medium . [ Julian Andres Klode ] * Do not attempt seccomp under qemu-user and drop EFAULT workaround (Closes: #881519) . [ Frans Spiesschaert ] * Dutch manpage translation update (Closes: #881402) . apt (1.6~alpha4) unstable; urgency=medium . * debian: Set Rules-Requires-Root: no * debian: Bump Standards-Version to 4.1.1 * Re-introduce a transitional apt-transport-https . apt (1.6~alpha3) unstable; urgency=medium . [ Julian Andres Klode ] * debian/tests/control: Add dpkg so we get triggered by it * seccomp: Allow ipc() for fakeroot, and allow sysinfo() for sort (Closes: #879814, #879826) * Drop unused gzip, lzma, bzip2, and xz symlinks of store * seccomp: Allow clock_nanosleep() and nanosleep() syscalls * Prevent overflow in Installed-Size (and Size) in apt show . [ David Kalnischkies ] * use store: instead of gzip: to open local changelogs . apt (1.6~alpha2) unstable; urgency=medium . * seccomp: Conditionalize statx() allowlisting * CMake: methods: Cleanup link libraries, use OBJECT libraries * methods: Enable additional syscalls (SYSV IPC) in fakeroot (Closes: #879662) * Don't segfault if receiving a method warning on empty queue * Only warn about seccomp() EINVAL (normal) and EFAULT (qemu) errors * Print syscall number and arch to stderr when trapped by seccomp . apt (1.6~alpha1) unstable; urgency=medium . [ Julian Andres Klode ] * Bump Standards-Version to 4.1.0 * Drop obsolete dh-systemd build-dep * Drop obsolute Testsuite: autopkgtest header * Drop curl method and apt-transport-https package * Fix testsuite for and add new fields from dpkg 1.19 * Run Proxy-Auto-Detect script from main process * methods/mirror: Enable sandboxing and other aptMethod features * Sandbox methods with seccomp-BPF; except cdrom, gpgv, rsh . [ David Kalnischkies ] * proper error reporting for v3 onion services * allow empty build-dependency fields in the parser (Closes: #875363) * send the hashes for alternative file correctly * ignore unsupported key formats in apt-key (Closes: #876508) . [ Mo Zhou ] * zh_CN.po: Update Simplified Chinese programs translation . [ Frans Spiesschaert ] * Dutch program translation update (Closes: #879137) . apt (1.5) unstable; urgency=medium . * Fix translator comment location for legacy target warning . apt (1.5~rc4) unstable; urgency=medium . * apt-daily: Do not Wants=network-online, and add some more After= We now wait for being online ourselves, so all we need to wait on is for services we are using to be online first. This avoids severe boot slowdowns by other services having specified an After=network-online.target without a Wants=. . apt (1.5~rc3) unstable; urgency=medium . * CMake: Properly handle Udev missing * CMake: Mark BZip2, LZMA, and LZ4 as required * apt-helper: Add connman support to wait-online . apt (1.5~rc2) unstable; urgency=medium . [ Julian Andres Klode ] * Actually install apt_auth.conf manual page (Closes: #873934) * test: Workaround gpgv warning * apt-daily: Wait for network before daily updates. Introduce a new helper, apt-helper wait-online that uses NetworkManager and/or systemd-networkd to wait for them reporting online, with a time out of 30 seconds; and run that helper before running the daily update script. (LP: #1699850) * apt-daily: Pull in network-online.target in service, not timer * Do not warn about duplicate "legacy" targets (Closes: #839259) (LP: #1697120) * cdrom: Don't hardcode "Files" field for copying source files * ftparchive: Do not pass through disabled hashes in Sources (Closes: #872963) * Directly link against libudev on Linux systems - this does not affect public API and ABI, but protected pkgUdevCdromDevices function pointers were renamed and are now always NULL, even if Dlopen returns true. . [ Christos Trochalakis ] * doc: correct '--allow-releaseinfo-change-*' typos (Closes: #873914) . [ Frans Spiesschaert ] * Dutch program translation update (Closes: #874285) * Dutch manpage translation update (Closes: #874293) . [ David Kalnischkies ] * don't write & chmod /dev/null log files * don't ask an uninit _system for supported archs (LP: #1613184) . apt (1.5~rc1) unstable; urgency=medium . * Redefine APT_CONST to mean APT_PURE (APT_CONST is deprecated) APT_CONST was used on functions where it should not have, causing the compiler to optimize code it should not have, like turning the "::" content in StringSplit(name, "::") into garbage because it figured out that the value is not going to be read anyway, causing stuff to go horribly wrong (mostly on -O3, really). * Replace APT_CONST with APT_PURE everywhere * Make test-bug-818628-unreadable-source work on !amd64 . apt (1.5~beta2) unstable; urgency=medium . [ M. Willis Monroe ] * Minor grammar fix . [ Zhou Mo ] * zh_CN.po: update Simplified Chinese programs translation . [ David Kalnischkies ] * don't expect more downloads from failed transactions * remove reference to a-t-debtorrent in description * ignore SIGPIPE in dump solver if forwarding * support compressed extended_states file for bug triage * don't move failed pdiff indexes out of partial (Closes: 869425) * don't try to parse all fields starting with HTTP as status-line * send weak-only hashes to methods * fail earlier if server answers with too much data * fail early in http if server answer is too small as well * use FileFd to parse all apt configuration files * show warnings instead of errors if files are unreadable (LP: #1701852) * reimplement and document auth.conf (Closes: #811181) * lookup login info for proxies in auth.conf * allow the auth.conf to be root:root owned * update URI scheme descriptions in sources.list(5) * show a warning for Debian shutting down FTP services * suggest using auth.conf for sources with passwords * ftparchive: sort discovered filenames before writing indexes. Thanks to Chris Lamb for initial patch & Stefan Lippers-Hollmann for testing (Closes: 869557) * don't keep configuration files open needlessly * don't hang if multiple sources use unavailable method (Closes: 870675) . [ Beatrice Torracca ] * Italian manpage translation update (Closes: 858877) . [ Apollon Oikonomopoulos ] * Handle supported components with slashes in sources.list (Closes: #868127) . [ Julian Andres Klode ] * Drop cacheiterators.h include * methods/aptmethod.h: Add missing fileutl.h include * Reformat and sort all includes with clang-format * cacheiterators: Warn about direct include and don't include pkgcache.h * Update gitignore with new files * Use C++11 threading support instead of pthread * Always warn if --force-yes is validly specified, not just if used * Work around float rounding change in gcc 7 on i386 * Handle GCC 7 std::string operator ABI break (Closes: #871275) * debian: Update symbols for libapt-pkg5.0 . [ Paul Wise ] * Support zero delay for the various APT::Periodic activities * Support seconds, minutes, hours and days for APT::Periodic intervals * Switch from /org to /srv in example apt-ftparchive configuration . [ Balint Reczey ] * Gracefully terminate process when stopping apt-daily-upgrade (LP: #1690980) . [ Dominik ] * doc: Add '--allow-unauthenticated' to '--force-yes' . apt (1.5~beta1) unstable; urgency=medium . [ Julian Andres Klode ] * Make Verify-Host and Verify-Peer independent again * http: A response with Content-Length: 0 has no content * Ignore download order in test-apt-update-failure-propagation * tls: Add more details to error messages, and detect more errors * Do not error out, only warn if ca certificates are not available . [ David Kalnischkies ] * don't set ip addresses as server names for SNI . [ Алексей Шилин ] * Russian translation update (Closes: #866749) . apt (1.5~alpha4) experimental; urgency=medium . * Reset failure reason when connection was successful * Allow running the TLS stack on any lower connection * http: Add support for CONNECT proxying to HTTPS locations * http: Add support for https:// proxies * Allow http(s) and socks5h for http and https in proxy auto detect * Switch to 'http' as the default https method * Improve closing the TLS connection * TLS support: Error out on unsupported curl options . apt (1.5~alpha3) experimental; urgency=medium . * Don't read CaInfo if not specified (missing else) This fixes a regression from ~alpha2. (Closes: #866559) . apt (1.5~alpha2) experimental; urgency=medium . [ David Kalnischkies ] * support tor+https being handled by http * use port from SRV record instead of initial port . [ Robert Luberda ] * fix a "critical" typo in old changelog entry (Closes: 866358) . [ Julian Andres Klode ] * Improve error message if system CA store is empty (Closes: #866377) * Have apt Recommend ca-certificates * Demote gnupg to Suggests * http: Only use system CA store if CaInfo is not set * Bump Standards-Version (and wrap-and-sort a bit) * Build-Depend on debhelper (>= 10) to shut up lintian . apt (1.5~alpha1) experimental; urgency=medium . [ Julian Andres Klode ] * pkgcache: Bump major version to 12 * Squashed 'triehash/' changes from 565fde4e7..0ca66b761 * methods: Add HTTPS support to http method, using GnuTLS. The http method will eventually replace the curl-based https method, but for now, this is an opt-in experiment that can be enabled by setting Dir::Bin::Methods::https to "http". Known issues: - We do not support HTTPS proxies yet - We do not support proxying HTTPS connections yet (CONNECT) - IssuerCert and SslForceVersion are unsupported * Allow building without curl * Introduce Acquire::AllowTLS to turn off TLS support * Skip test-apt-download-progress * Strip 0: epochs from the version hash . [ David Kalnischkies ] * schedule the correct side of the conflict for removal. Thanks to Michael Biebl for helping find this with countless tests * don't show incorrect 'How odd' error in no-download mode (Closes: 863635) * Show permission error if ProxyAutoDetect cmd can't be executed (Closes: 857885) * Avoid chdir in acquire clean with unlinkat (Closes: 860738) * ident a CD without changing directory * clean archives without changing directory * avoid changing directory in mirror method * warn if an expected file can't be acquired * show .diff/Index properly as ignored if we fallback * fail InRelease on non-404 HTTP errorcodes * deal with 3xx httpcodes as required by HTTP/1.1 spec * fail instead of warn on insecure repositories in apt-get * error in update on Release information changes * show a Release-Notes URI if infos were changed * allow frontends to override releaseinfo change behaviour * ask for releaseinfo change interactively in apt . apt (1.4.6) unstable; urgency=medium . * apt.systemd.daily: Do not pass -d to unattended-upgrade for the download job. This actually enables debugging. Instead check if unattended-upgrade supports an option --download-only (which is yet to be implemented) and use that (Closes: #863859) . apt (1.4.5) unstable; urgency=medium . * Fix parsing of or groups in build-deps with ignored packages (LP: #1694697) . apt (1.4.4) unstable; urgency=medium . [ Alan Jenkins ] * apt.systemd.daily: fix error from locking code (Closes: #862567) . apt (1.4.3) unstable; urgency=medium . [ Julian Andres Klode ] * Do not try to (re)start timers outside 'apt' package (Closes: #862001) . [ Miroslav Kure ] * Updated Czech translation of apt (Closes: #861943) . apt (1.4.2) unstable; urgency=medium . [ Julian Andres Klode ] * Run unattended-upgrade -d in download part * apt.systemd.daily: Add locking * Split apt-daily timer into two (LP: #1686470) . [ Matt Kraai ] * bash-completion: Fix spelling of autoclean (Closes: #861846) . apt (1.4.1) unstable; urgency=medium . [ Julian Andres Klode ] * systemd: Rework timing and add After=network-online (LP: #1615482) * debian/rules: Actually invoke dh_clean in override_dh_clean . [ Unit 193 ] * apt-ftparchive: Support '.ddeb' dbgsym packages . apt (1.4) unstable; urgency=medium . * The April Fools' Release . [ Julian Andres Klode ] * Ignore \.ucf-[a-z]+$ like we do for \.dpkg-[a-z]+$ * Fix mistake in CHANGEPATH comment example . [ Chris Lamb ] * auto-removal: Ignore running kernel if attempting a reproducible build (Closes: #857632) . [ Joe Dalton ] * Danish program translation update (Closes: #856723) . [ David Kalnischkies ] * Fix and avoid quoting in CommandLine::AsString (LP: #1672710) * Ignore AutomaticRemove conffile option in upgrade (Closes: #855891) . apt (1.4~rc2) unstable; urgency=medium . [ David Kalnischkies ] * add Auto-Built-Package to tagfile-order * don't test with "too early for 32bit" years . [ Julian Andres Klode ] * Do not lowercase package names representing .dsc/.deb/... files (Closes: #854794) * shippable: Perform CI on Debian stretch instead of Ubuntu xenial * Don't use -1 fd and AT_SYMLINK_NOFOLLOW for faccessat() Thanks to James Clarke for debugging these issues * CMake: Install statvfs.h to include/sys, not just include/ * debian: Generate debian/copyright during clean . apt (1.4~rc1) unstable; urgency=medium . [ David Kalnischkies ] * don't show update stats if cache generation is disabled * don't lock dpkg in 'apt-get clean' * don't lock dpkg in update commands * avoid validate/delete/load race in cache generation * fix 'install --no-download' mode * remove 'old' FAILED files in the next acquire call (Closes: 846476) * stop rred from leaking debug messages on recovered errors (Closes: #850759) * make the moo reproducible. Thanks to Chris Lamb for initial patch and guru meditation (Closes: #848721) * update release mappings in documentation * avoid malloc if option allowlist is disabled (default) . [ Julian Andres Klode ] * basehttp: Only read Content-Range on 416 and 206 responses (LP: #1657567) * test suite: Do not exit 0 in trap for QUIT * Only merge acquire items with the same meta key (Closes: #838441) . [ Zhou Mo ] * po: update Simplified Chinese program translation . [ Jean-Pierre Giraud ] * French manpages translation update (Closes: 852460) . [ victory ] * Japanese manpages & program translation update . [ Frans Spiesschaert ] * Dutch program translation update (Closes: #853761) * Dutch manpage translation update (Closes: #853762) . apt (1.4~beta4) unstable; urgency=medium . * Read dpkg tables to handle architecture wildcards. Thanks to James Clarke <jrtc27@jrtc27.com> for the initial patch (Closes: #748936) * https: Quote path in URL before passing it to curl (LP: #1651923) * Update symbols file for changes in 1.3.1, 1.4~beta{1,3,4} . apt (1.4~beta3) unstable; urgency=medium . [ Lukasz Kawczynski ] * Honour Acquire::ForceIPv4/6 in the https transport . [ David Kalnischkies ] * reword "Can't drop priv" warning message (Closes: #813786) (LP: #1522675) * let {dsc,tar,diff}-only implicitly enable download-only * remove needless fork() in apt-get source * default to --no-check for dpkg-source call (Closes: 724744) * warn if clearsigned file has ignored content parts * ensure generation of valid EDSP error stanzas * add --indep-only for build-dep command (Closes: #845775) * allow default build-essentials to be overridden * expand -f to --fix-broken in error messages. Thanks to Kristian Glass for initial patch! (Closes: #709092) * separating state variables regarding server/request (Closes: #440057) * fix minimum pkgs option for dpkg --recursive usage * allow warning generation for non-allowlisted options . [ Oriol Debian ] * Catalan program translation update (Closes: #846514) . [ Frans Spiesschaert ] * Dutch manpages translation update (Closes: #849235) . [ Niels Thykier ] * ParseDepends: Support passing the desired architecture (Closes: #845969) . apt (1.4~beta2) unstable; urgency=high . [ John R. Lenton ] * bash-completion: Only complete understood file paths for install (LP: #1645815) . [ Julian Andres Klode ] * SECURITY UPDATE: gpgv: Check for errors when splitting files (CVE-2016-1252) Thanks to Jann Horn, Google Project Zero for reporting the issue (LP: #1647467) * gpgv: Flush the files before checking for errors . apt (1.4~beta1) unstable; urgency=medium . [ Chris Leick ] * Updated German documentation translation * fix three typos in sources & manpages * German translation proof read by Helge Kreutzmann . [ Frans Spiesschaert ] * Dutch program translation update (Closes: #840552) * Dutch manpages translation update (Closes: #840757) . [ David Kalnischkies ] * don't install new deps of candidates for kept back pkgs * keep Release.gpg on untrusted to trusted IMS-Hit (Closes: 838779) * fix testcase expecting incorrect remove log from dpkg * reset HOME, USER(NAME), TMPDIR & SHELL in DropPrivileges (Closes: 842877) * show the conflicting distribution warning again (Closes: 841874) * rename Checksum-FileSize to Filesize in hashsum mismatch * improve SOCKS error messages for http slightly * support 'apt build-dep .' (aka: without /) * add TMP/TEMP/TEMPDIR to the TMPDIR DropPrivileges dance * http: skip connection cleanup if we close it anyhow * add hidden config to set packages as Essential/Important. Thanks to Anthony Towns for initial patch (Closes: 767891) * don't warn if untransformed distribution matches. Thanks to Lukas Anzinger for initial patch (Closes: 644610) * show distribution mismatch for changed codenames * react to trig-pend only if we have nothing else to do * correct cross & disappear progress detection * improve arch-unqualified dpkg-progress parsing * don't perform implicit crossgrades involving M-A:same * do not configure unconfigured to be removed packages * skip unconfigure for unconfigured to-be removed pkgs * report apt-key errors via status-fd messages (LP: #1522988) * add apt-key support for armored GPG key files (*.asc) * document which keyring formats are supported by apt-key (Closes: 844724) * get pdiff files from the same mirror as the index * follow the googletest merge in build-depends . [ Michael Vogt ] * Do not (re)start "apt-daily.system" Thanks to Alexandre Detiste (Closes: #841763) . [ Johannes Schauer ] * add support for Build-Depends/Conflicts-Arch (Closes: #837395) . [ Edgar Fuß ] * http: clear content before reporting the failure (Closes: #465572) . [ James Clarke ] * apt-ftparchive: Support NotAutomatic and ButAutomaticUpgrades fields (Closes: #272557) . [ Julian Andres Klode ] * TagSection: Split AlphaIndexes into AlphaIndexes and BetaIndexes * TagSection: Extract Find() methods taking Pos instead of Key * Squashed 'triehash/' content from commit 16f59e1 * TagSection: Introduce functions for looking up by key ids * debListParser: Convert to use pkgTagSection::Key-based lookup * Bump the cache major version for non-backportable changes * Introduce tolower_ascii_unsafe() and use it for hashing * Optimize VersionHash() to not need temporary copy of input * Compare size before data when ordering cache bucket entries * debListParser: Micro-optimize AvailableDescriptionLanguages() * Do not use MD5SumValue for Description_md5() * gpgv: Untrust SHA1, RIPE-MD/160, but allow downgrading to weak . [ Paul Wise ] * show output as documented for APT::Periodic::Verbose 2 (Closes: 845599) . apt (1.3.1) unstable; urgency=medium . [ Julian Andres Klode ] * Do not read stderr from proxy autodetection scripts * travis: Move codecov from after_success to after_script . [ victory ] * Japanese manpages translation update . [ Mert Dirik ] * Turkish program translation update (Closes: #838731) . apt (1.3) unstable; urgency=medium . [ David Kalnischkies ] * abort connection on '.' target replies in SRV * edsp: try 2 to read responses even if writing failed . [ Julian Andres Klode ] * test: Always install dpkg into our tests, regardless of MA * CMake: Add coverage build type * Coverage: Do not print messages from gcov * VersionHash: Do not skip too long dependency lines . apt (1.3~rc4) unstable; urgency=medium . [ Julian Andres Klode ] * Fix segfault and out-of-bounds read in Binary fields * TagFile: Fix off-by-one errors in comment stripping * Base256ToNum: Fix uninitialized value * test-apt-cdrom: Fix for gnupg 2.1.15 * CMake: test/libapt: Use a prebuilt GTest library if available * CMake: apt-pkg: Use correct ICONV_INCLUDE_DIRS variable * acquire: Use priority queues and a 3 stage pipeline design => faster updates with better progress reporting * debian: Move bugscript to old location for overlayfs xdev issue * debian: Pass -O to make to get readable build logs . [ David Kalnischkies ] * try not to call memcpy with length 0 in hash calculations * re-add apt breaks/replaces apt-utils (<< 1.3~exp2~) (Closes: #836220) * support long keyid and fingerprint in gpgv's GOODSIG . apt (1.3~rc3) unstable; urgency=medium . [ Julian Andres Klode ] * Ignore SIGINT and SIGQUIT for Pre-Install hooks This basically fixes Bug #832593, as long as your /bin/sh is not dash, as dash is evil. * prepare-release: Use equivs and gdebi-core for travis deps * install-progress: Call the real ::fork() in our fork() method * Packaging cleanup: - debian: Install etc/apt if present (e.g., on Ubuntu) - tests/control: Handle the gpg1/gpg2 mess a bit better - debian: Make better use of the tree installed by CMake - debian: Switch to debhelper 10 - debian: Add more lintian overrides - debian: Drop outdated stuff - debian: Run wrap-and-sort - Add new symbols to symbols file * Build system fixes, including: - CMake: Translations: Don't rebuild .mo for line number changes - CMake: Translations: Pass --previous to msgmerge. Thanks to Guillem Jover for the suggestion. - CMake: Do not add po/ if USE_NLS is OFF - CMake: Install config and logging directories - CMake: Translations: Build byproduct before output - CMake: Add Large File Support (Closes: #834767) * Several portability fixes (full test suite passes on FreeBSD), including: - CMake: Discover docbook stylesheet in other locations - Add missing includes and external definitions - Use C locale instead of C.UTF-8 for protocol strings - Make directory paths configurable - Lower-case uname -r output in kernel autoremove helper - Make root group configurable via ROOT_GROUP * Accept --autoremove as alias for --auto-remove * apt-inst: debfile: Pass comp. Name to ExtractTar, not Binary * changelog: Respect Dir setting for local changelog getting * init: Add Dir::Bin::planners default entry * Switch documentation from httpredir.d.o to deb.d.o . [ Zhou Mo ] * zh_CN.po: update simplified Chinese translation . [ David Kalnischkies ] * do dpkg --configure before --remove/--purge --pending (Closes: 835094) * prevent C++ locale number formatting in text APIs (try 3) (LP: 1611010) * do fail on weakhash/loop earlier in acquire (Closes: 835195) * do not restore selections for already purged packages * apt-key: warn instead of fail on unreadable keyrings * show apt-key warnings in apt update (Closes: 834973) * treat .ddeb files like .deb, especially for dpkg (LP: #1616909) * randomize acquire order for same type index files * don't loop on pinning pkgs from absolute debs by regex (Closes: 835818) . apt (1.3~rc2) unstable; urgency=medium . [ Julian Andres Klode ] * debian/NEWS: Get rid of 1.3~pre3+cmake1 entry. Thanks to Axel Beckert for reporting * CMake: Use COPYONLY instead of @Only * fileutl: empty file support: Avoid fstat() on -1 fd and check result * Change anonscm.d.o links to /git/apt/apt.git and https . [ David Kalnischkies ] * don't perform int<float in progress bar drawing * ensure a good clock() value for usage and tests * drop incorrect const attribute from DirectoryExists (LP: 1473674) * http(s): allow empty values for header fields (Closes: 834048) * don't sent Range requests if we know its not accepted * don't try pipelining if server closes connections (Closes: #832113) * log with the failed item description, not with next try * retry without same redirection mirror on 404 errors * support getting only-uncompressed files via by-hash * support compression and by-hash for .diff/Index files (Closes: #824926) * default to Dir=/ in dpkg/status file finding magic * add the gpg-classic variant to the gpgv/gnupg or-group * allow spaces in fingerprints for 'apt-key del' * add --with-source option and Packages/Sources support * don't count each Type as an individual deb822-sources stanza * methods: read config in most to least specific order (Closes: 834642) . apt (1.3~rc1) unstable; urgency=medium . * Summary: CMake branch merged, socks5h (and tor) support, and fancy installation ordering changes. . [ Julian Andres Klode ] * Handle interrupt when running Pre-Install hooks (Closes: #832593) * CMake: po: Add mirror method * CMake: Translations: Add support for shell scripts * debian: make autopkgtest run with CMake build dir * CMake: Bump minimum required version to 3.4.0 * CMake: Check for ptsname_r() again (Closes: #833674) * CMake: Rewrite existing Documentation support and add doxygen * apt-private: Do not include apti18n.h in headers * Get rid of the old buildsystem * Fix some indentation issues in README.md . [ David Kalnischkies ] * pass --force-remove-essential to dpkg only if needed * use dpkg --unpack --recursive to avoid long cmdlines * save and restore selection states before/after calling dpkg * select remove/purge packages early on for dpkg * call dpkg with --no-triggers by default (Closes: #626599) * don't purge directly, but remove and do purge at the end * ensure all configures are reported to hook scripts * ensure all removes are reported to hook scripts * support all socks-proxy known to curl in https method * suggest transport-packages based on established namescheme * fail on unsupported http/https proxy settings (Closes: #623443) * detect redirection loops in acquire instead of workers * use the same redirection handling for http and https * implement generic config fallback for methods * implement socks5h proxy support for http method (Closes: 744934) * allow methods to be disabled and redirected via config * allow user@host (aka: no password) in URI parsing * try to avoid removal of crossgraded packages * simulate all package manager actions explicitly * disable explicit configuration of all packages at the end * block direct connections to .onion domains (RFC7687) * http: auto-configure for local Tor proxy if called as 'tor' . apt (1.3~pre3+cmake2) experimental; urgency=medium . * Build-depend on pkg-config . apt (1.3~pre3+cmake1) experimental; urgency=medium . [ Julian Andres Klode ] * configure.ac: Re-enable pthread support for thread-local _error * CMake: Add basic CMake build system * CMake: Add support for building and installing .mo files * CMake: Add initial support for documentation building * CMake: Switch integration tests and travis over * CMake: debian: Switch packaging over to CMake and dh 9 . [ Jason Travis ] * doc: update path to periodic options script . apt (1.3~pre3) unstable; urgency=medium . [ Julian Andres Klode ] * ExecGPGV: Fork in all cases * ExecGPGV: Pass current config state to apt-key via temp file (LP: #1607283) . [ David Kalnischkies ] * tests: activate dpkg multi-arch even if test is single arch * ensure Cnf::FindFile doesn't return files below /dev/null * don't hardcode /var/lib/dpkg/status as dir::state::status * allow arch=all to override No-Support-for-Architecture-all * support "install ./foo.changes" * clean up default-stanzas from extended_states on write * report warnings&errors consistently in edit-sources * create non-existent files in edit-sources with 644 instead of 640 * report progress for removing while purging pkgs * use a configurable location for apport report storage * report progress for triggered actions * call flush on the wrapped writebuffered FileFd * verify hash of input file in rred * use proper warning for automatic pipeline disable * http: skip requesting if pipeline is full * rred: truncate result file before writing to it (Closes: #831762) * eipp: avoid producing file warnings in simulation (Closes: 832614) * if the FileFd failed already following calls should fail, too * edsp: try to read responses even if writing failed * prevent C++ locale number formatting in text APIs (try 2) (Closes: 832044) * apt-key: kill gpg-agent explicitly in cleanup . [ Mert Dirik ] * Turkish program translation update (Closes: 832039) . apt (1.3~pre2) unstable; urgency=medium . [ Andrew Patterson ] * Add kernels with "+" in the package name to APT::NeverAutoRemove (Closes: #830159) . [ David Kalnischkies ] * add Testsuite-Triggers to tagfile-order * tests: fix external solver/planner directory setup . apt (1.3~pre1) unstable; urgency=medium . Upload to unstable from the pub because Niels wanted it . [ David Kalnischkies ] * show right binary name in simulation notice (Closes: 825216) * imbue datetime parsing with C.UTF-8 locale (Closes: 828011) * imbue .diff/Index parsing with C.UTF-8 as well * close server if parsing of header field failed * add myself to Uploaders * eipp: implement version 0.1 of the protocol * eipp: provide the internal planer as an external one * eipp: make no difference between remove & purge * eipp: properly handle arch-specific provides * eipp: implement Immediate-Configuration flag * eipp: add Allow-Temporary-Remove-of-Essentials * eipp: rename stanza 'Install' to 'Unpack' * eipp: enable xz-compressed scenario logging * if conf unset, don't read / as conf/pref/sources dir * don't do atomic overrides with failed files (Closes: 828908) * if reading of autobit state failed, let write fail * write auto-bits before calling dpkg & again after if needed * protect only the latest same-source providers from autoremove * reinstalling local deb file is no downgrade * do not treat same-version local debs as downgrade * alias apt-key list to finger (Closes: 829232) * warn if apt-key is used in scripts/its output parsed * deprecate 'apt-key update' and no-op it in Debian * use +0000 instead of UTC by default as timezone in output * avoid 416 response teardown binding to null pointer * report write errors in EDSP/EIPP properly back to caller * EIPP/EDSP log can't be written is a warning, not an error * don't change owner/perms/times through file:// symlinks * report all instead of first error up the acquire chain * keep trying with next if connection to a SRV host failed . [ Zhou Mo ] * zh_CN.po: update simplified chinese translation . [ Julian Andres Klode ] * methods/ftp: Cope with weird PASV responses. Thanks to Lukasz Stelmach for the initial patch (Closes: #420940) * Fix buffer overflow in debListParser::VersionHash() (Closes: #828812) * cache: Bump minor version to 6 * indextargets: Check that cache could be built before using it (Closes: #829651) . [ Nicolas Le Cam ] * Use the ConditionACPower feature of systemd in the apt-daily service (Closes: #827930) * Add a apt suggests powermgmt-base . apt (1.3~exp3) experimental; urgency=medium . [ Petter Reinholdtsen ] * Norwegian Bokmål program translation update (Closes: 827067) . [ David Kalnischkies ] * apt-key: don't search PATH if command is a path already * don't use FindFile for external Dir::Bin commands * http: don't hang on redirect with length + connection close * merge sources.list lines based on Release filename (Closes: 826944) * avoid std::get_time usage to sidestep libstdc++6 bug (LP: 1593583) * do not error if auto-detect-proxy cmd has no output (Closes: 827713) * implement and document DIRECT for auto-detect-proxy * run update post-invokes even on (partial) failures * handle weak-security repositories as unauthenticated (Closes: 827364) * generalize secure->insecure downgrade protection * forbid insecure repositories by default expect in apt-get (Closes: 808367) * source: if download is skipped, don't try to unpack * better error message for insufficient hashsums (Closes: 827758) * add [weak] tag to hash errors to indicate insufficiency * ensure filesize of deb is included in the hashes list * add insecure (and weak) allow-options for sources.list . [ Dominic Benson ] * Reinstate caching of file hashes in apt-ftparchive (Closes: #806924) . [ Zhou Mo ] * zh_CN.po: update simplified chinese translation . apt (1.3~exp2) experimental; urgency=medium . [ Johannes 'josch' Schauer ] * edsp: document unique package identifiers . [ David Kalnischkies ] * edsp: warn if unexpected stanzas appear in the solution * show globalerrors before asking for confirmation * show final solution in --no-download --fix-missing mode * document --no- as --show-upgraded is the default (Closes: 824456) * fail instead of segfault on unreadable config files (Closes: 824503) * convert EDSP to be based on FileFd instead of FILE* * edsp: dump: support dumping into compressed file * edsp: add Forbid-{New-Install,Remove} and Upgrade-All * update symbols file * no-change bump of Standards-Version to 3.9.8 * override lintian on doxygens embedded-javascript-library * fix and document on the fly compressor config * prevent C++ locale number formatting in text APIs (Closes: #825396) * accept only the expected UTC timezones in date parsing (Closes: 819697) * avoid changing the global LC_TIME for Release writing * use de-localed std::put_time instead rolling our own * use std::locale::global instead of setlocale * look into the right textdomain for apt-utils again * try to detect sudo spawned root-shell in prefixing (Closes: 825742) * ignore std::locale exception on non-existent "" locale * apt-key: change to / before find to satisfy its CWD needs. Thanks to Samuel Thibault for 'finding' the culprit! (Closes: 826043) * edsp: use an ID mapping for the internal solver * edsp: use a stanza based interface for solution writing * edsp: optionally store a compressed copy of the last scenario * move 'dump' solver from apt-utils to apt package * edsp: if internal is used, keep this decision * edsp: if logging is requested, do it for internal, too * edsp: drop privileges before executing solvers * don't explicitly configure the last round of packages * drop Dpkg::MaxArgs in favor of Dpkg::MaxArgsBytes * do not hang on piped input in PipedFileFdPrivate * don't leak an FD in lz4 (de)compression * don't leak EDSP solver output fd * don't leak FD in AutoProxyDetect command return parsing . [ Julian Andres Klode ] * Provide complete apt bash completion. Thanks to Elias Fröhner and Svyatoslav Gryaznov for the initial work (LP: #1573547) * apt.systemd.daily: Put opening brace of check_power on extra line (LP: #1581985) * Add conflicting Signed-By values to error message * Normalize Signed-By values by removing trailing commas everywhere * Pass -fvisibility-inlines-hidden to g++ . [ Zhou Mo ] * zh_CN.po: update simplified Chinese translation. . [ Yuri Kozlov ] * Russian program translation update (Closes: 824702) . [ Takuma Yamada ] * Japanese program translation update (Closes: 826291) . apt (1.3~exp1) experimental; urgency=medium . [ David Kalnischkies ] * make random acquire queues work less random * add dep11 files to default Release patterns * don't ask server if we have entire file in partial/ * properly format multiline error messages * format multiline errors properly in acquire progress * show more details for "Hash Sum mismatch" errors * show more details for "Writing more data" errors, too * use the same redirection mirror for all index files * edsp: ask policy engine for the pin of the version directly * give rc-status packages a pin of -1 * respect user pinning in M-A:same version (un)screwing * deprecate confusing Pkg.CandVersion() method * factor out Pkg/DepIterator prettyprinters into own header * gpgv: use EXPKEYSIG instead of KEYEXPIRED * gpgv: handle expired sig as worthless * don't show NO_PUBKEY warning if repo is signed by another key (Closes: 618445) * support multiple fingerprints in signed-by * support Signed-By in Release files as a sort of HPKP * bugscript: include all configuration fragment files (Closes: 820861) * move gnupg|gnupg2 from apt Depends to Recommends * warn if apt-key is run unconditionally in maintainerscript * remove 100-levels config nesting limit * let DPKG_COLORS default to our APT::Color setting * allow redirection for items without a space in the desc again * delay progress until Release files are downloaded * download arch:all also for NATIVE_ARCHITECTURE indextargets * implement Fallback-Of for IndexTargets * implement Identifier field for IndexTargets * gpgv: show always webportal error on NODATA (Closes: 823746) * don't sent uninstallable rc-only versions via EDSP * edsp: support generic and solver-specific configs (Closes: 823918) . [ Julian Andres Klode ] * policy: Get rid of old (pre-1.1) GetCandidateVer algorithm * private-show: Get rid of old policy support code * ftparchive: Support writing Signed-By fields * Strip trailing commas for created signed-by fingerprint lists * update: Run Post-Invoke-Success if not all sources failed . [ Patrick Cable ] * refactored no_proxy code to work regardless of where https proxy is set . [ James McCoy ] * deb822: Restore support for <multivalue>-{Add,Remove} . [ Zhou Mo ] * zh_TW.po: remove several fuzzy tags after review . [ Adrian Wielgosik ] * Don't copy strings in Startswith, Endswith * Speed up GetLocalitySortedVersionSet. . [ Frans Spiesschaert ] * Dutch program translation update (Closes: 823976) . apt (1.2.11) unstable; urgency=medium . [ David Kalnischkies ] * ensure transaction states are changed only once * stop handling items in doomed transactions. Thanks to Barr Detwix & Vincent Lefevre for log files (Closes: 817240) * do not require non-broken systems in 'upgrade' * detect compressed status files on extension again * recheck Pre-Depends satisfaction in SmartConfigure (LP: #1569099) * fix Alt-Filename handling of file method * allow uncompressed files to be empty in store again * silently skip acquire of empty index files * ensure outdated files are dropped without lists-cleanup . [ Kelemen Gábor ] * Hungarian program translation update (Closes: 820638) . apt (1.2.10) unstable; urgency=medium . [ Zhou Mo ] * zh_CN.po: update simplified Chinese translation. (100%) . [ Julian Andres Klode ] * test-apt-download-progress: Use a larger file for testing * Allow lowering trust level of a hash via config . [ Michael Vogt ] * Use systemd.timer instead of a cron job (Closes: #600262, #709675, #663290) (LP: #246381, #727685) . [ David Kalnischkies ] * use buffered writing for InRelease splitting . [ Takuma Yamada ] * Japanese program translation update (Closes: 819938) . apt (1.2.9) unstable; urgency=high . [ David Kalnischkies ] * drop confusing comma from no strong hash message . [ Julian Andres Klode ] * Do not mark packages for keep that we want to remove (LP: #1562402) (This fixes some upgrades involving renames where the old package is removed) . apt (1.2.8) unstable; urgency=medium . [ Michael Vogt ] * Get accurate progress reporting in apt update again . [ Julian Andres Klode ] * Report non-transient errors as errors, not as warnings * methods/gpgv: Rewrite error handling and message. Thanks to Ron Lee for wording suggestions * Use descriptive URIs in 104 Warning messages * cachefile: Only set members that were initialized successfully (Closes: #818628) * Update symbols file . [ David Kalnischkies ] * do not strip epochs from state version strings (Closes: 818162) * properly check for "all good sigs are weak" (Closes: 818910) * handle gpgv's weak-digests ERRSIG . [ Zhou Mo ] * zh_CN.po: update simplified Chinese translation. (Closes: #818639) . [ Takuma Yamada ] * Japanese manpage translation update (Closes: 818950) . apt (1.2.7) unstable; urgency=medium . "Caesar is dead" . [ Frans Spiesschaert ] * Dutch program translation update (Closes: 817060) * Dutch manpages translation update (Closes: 817062) . [ Julian Andres Klode ] * Use native architecture instead of amd64 for build-dep-purge test * Do not consider SHA1 usable * Test that SHA1-only .diff/Index files are not used * test: Use SHA512 digests for GPG, reject SHA1-based signatures * methods/gpgv: Reject weak digest algorithms * apt-pkg/acquire-worker.cc: Introduce 104 Warning message * methods/gpgv: Warn about SHA1 (and RIPEMD-160) . [ David Kalnischkies ] * require $(HASH)-Download field in .diff/Index files * flush line-clearing on progress stop before post-invoke (Closes: 793672) * enforce verify of filesize in 'apt-get source' . [ Manuel "Venturi" Porras Peralta ] * Spanish apt-mark translation fix (Closes: 817999) . [ Zhou Mo ] * zh_CN.po: fix translation bug. (Closes: #818177) . [ Michael Vogt ] * Fix bug where the problemresolve can put a pkg into a heisenstate (LP: #1550741) . apt (1.2.6) unstable; urgency=high . [ Veres Lajos ] * Fix several typos . [ Julian Andres Klode ] * apt-pkg/algorithms.cc: Avoid stack buffer overflow in KillList (Closes: #701069) * urgency=high because this fixes a stack overflow and the last upload fixed several segfaults and has not migrated yet either. . apt (1.2.5) unstable; urgency=medium . [ Daniel Kahn Gillmor ] * apt-key del should correctly handle keyids prefixed with 0x . [ David Kalnischkies ] * support APT::Get::Build-Dep-Automatic again in build-dep * add test for apt-key 0xKEY and use parameter expansion. Thanks to James McCoy for the suggestion. (Closes: 816691) * do not move not-failed pdiff-patches into CWD on failure (Closes: #816837) * get group again after potential remap in Source: parse. Thanks to Francesco Poli and Marc Haber for testdata. (Closes: 812251) . [ Colin Watson ] * Fix lzma write support to handle "try again" case (Closes: #751688) . [ Julian Andres Klode ] * Prevent double remapping of iterators and string views * debian/control: Set Standards-Version to 3.9.7 . apt (1.2.4) unstable; urgency=medium . [ David Kalnischkies ] * use local changelog from /usr/share/doc if possible * always download changelogs into /tmp first * pass versioned provides to external solvers in EDSP . [ Julian Andres Klode ] * Fix maintscript to properly remove 20changelog (Closes: #814754) * Fix crash with empty architecture list (LP: #1549819) * Add missing numeric includes in files using std::accumulate() . apt (1.2.3) unstable; urgency=high . [ Julian Andres Klode ] * Set seekpos to 0 after reopening files in Seek() (Closes: #812994, #813000) . [ David Kalnischkies ] * get dpkg lock in build-dep if cache was invalid again (Closes: 814139) . apt (1.2.2) unstable; urgency=medium . [ David Kalnischkies ] * always create pkg at the time pkg:arch is created * reimplement build-dep via apts normal resolver (Closes: #137560, #444930, #489911, #583914, #728317, #812173) * parse version correctly from binary Source field (Closes: 812492) * get sources for packages in multiple releases again (Closes: 812497) * only warn about missing/invalid Date field for now (Closes: 809329) * support <libc>-<kernel>-<cpu> in architecture specs. Thanks to Bálint Réczey for initial patch (Closes: #812212) * avoid building dependency tree in 'source' command . [ Stefan Bühler ] * fix "Mismatched free() / delete / delete []" in simple_buffer . [ Julian Andres Klode ] * Do not buffer writes larger than the buffer if possible * Drop the g++ build-dep, transition is done * NEWS: Prefix the keep deb option with Binary::apt:: (Closes: #812111) * rred: If there were I/O errors, fail * Correctly report write errors when flushing buffered writer * test: Fix apt-key tests to work with current gpg 2.1 . [ Manuel "Venturi" Porras Peralta ] * Spanish program translation update (Closes: 813467) . [ Adrian Wielgosik ] * Try avoiding loading long package description * Avoid temporary strings in SubstVar. . [ Fredrik Fornwall ] * edspsystem.cc: include <stdlib.h> for mkdtemp (Closes: #807367) . apt (1.2.1) unstable; urgency=high . [ Zhou Mo ] * po: update zh_CN programs translation . [ Julian Andres Klode ] * Remap StringView instances pointing into the cache (Closes: #812251) . [ Michael Vogt ] * Log calling SUDO_USER or PKEXEC_UID in history.log. Thanks to Thomas Reusch . apt (1.2) unstable; urgency=medium . [ Julian Andres Klode ] * Do not break apt-file (<< 3.0~exp1~), 2.X works fine * Version the build-depends on liblz4-dev to >= 0.0~r126 * search: Handle packages without description (Closes: #810622) * Only enable pipelining if server is HTTP/1.1 (Closes: #810796) . [ Mattia Rizzolo ] * Sort the list of sources to be built and linked (Closes: #810509) . [ Michael Vogt ] * Do not show multiple identical apt-cache showsrc entries (Closes: #734922) . [ David Kalnischkies ] * evaluate sourceslist-list-format entity in vendors sources.list. Thanks to Niels Thykier for reporting on IRC * update symbols file * fix M-A:foreign provides creation for unknown archs * revert file-hash based action-merging in acquire (Closes: 810046) * return correct position in APT::StringView::(r)find . [ Zhou Mo ] * po: update simplified chinese programs translation . apt (1.2~exp1) experimental; urgency=medium . [ Beatrice Torracca ] * Italian manpages translation update (Closes: 809522) . [ David Kalnischkies ] * add optional support for comments in pkgTagFile * support comments in debian/control parsing (Closes: 806775) * properly parse comments in apt_preferences and deb822-style sources * include all compressed Packages/Sources files in Release file * use one 'store' method to rule all (de)compressors * ensure compression cleanup even without lists-cleanup * allow pdiff bootstrap from all supported compressors * keep compressed indexes in a low-cost format * support '-' and no parameter for stdin in apt-helper cat-file * tests: limit autotest-functionname generation to sane characters * use filesize of compressed pdiffs for the limit if possible * remove uncompressed leftover partial file before pdiff bootstrap . [ Michael Vogt ] * Add support for APT::Periodic::CleanInterval. Thanks to Martin-Éric Racine * Add bash-completion support for the "apt" command (Closes: #747094) * Add new APT::Keep-Downloaded-Packages option (Closes: #160743) . [ Julian Andres Klode ] * Change compressor costs to be 100 apart * apt-cache: stats: Average is over used, not all, buckets * Increase APT::Cache-HashTableSize default to 50503 * travis: pull liblz4-dev from wily * FileFd: (native) LZ4 support * apt-helper: cat-file: Add -C/--compress option * CopyFile: Use 64 * 1024 instead of 64000 as buffer size * acquire: Allow parallelizing methods without hosts * rred: Run in parallel * Introduce internal APT::StringView class * Switch performance critical code to use APT::StringView * pkgCacheGenerator::StoreString: Get rid of std::string * pkgCacheGenerator: CurMd5.Value() cannot be empty * AvailableDescriptionLanguages: Use one string for all iterations * NEWS: Document recompression of indices * Store the size of strings in the cache * libapt-pkg5.0: Add Breaks appstream (<< 0.9.0-3~) . [ Helmut Grohne ] * Allow building without libgtest-dev under <nocheck> build profile (Closes: #809726) . apt (1.1.10) unstable; urgency=medium . [ David Kalnischkies ] * deal with empty values properly in deb822 parser (Closes: 808102) . [ Beatrice Torracca ] * fix 3 typos/omissions in apt.conf(5) (Closes: 809160) . [ Julian Andres Klode ] * BufferedWriter: flushing: Check for written < size instead of <= * aptconfiguration: Set default compression level to 6 * BufferedFileFdPrivate: Make InternalFlush() save against errors * Switch to DJB hashing and use prime number as table size * Turn tolower_ascii() and isspace_ascii() into inline functions * Fix test case that was broken by switch of hash function * pkgTagSection::Scan: Fix read of uninitialized value * pkgCacheGenerator: Allow passing down an already created cache * Add support for calculating hashes over the entire cache * Do not sync the cache file . apt (1.1.9) unstable; urgency=medium . Highlights: buffered rred writes and slightly faster cache generation (~10%) . [ Julian Andres Klode ] * Introduce isspace_ascii() for use by parsers * Convert most callers of isspace() to isspace_ascii() * pkgcachegen: Use std::unordered_map instead of std::map * debListParser: ParseDepends: Only query native arch if needed * debListParser: Do not validate Description-md5 for correctness twice * ParseDepends: Mark branches for build-dep parsing as unlikely * rred: Only call pkgInitConfig() in test mode * FileFdPrivate: Add getter and setter for fields * FildFd: Introduce a Flush() function and call it from Close() * FileFd: Add a buffered writing mode * rred: Use buffered writes * pkgcachegen.h: Hack around unordered_map not existing before C++11 * doc/acquire-additional-files.txt: Mention apt-helper cat-file . [ Niels Thykier ] * Hex2Digit: Do not use isxdigit() . [ David Kalnischkies ] * allow repositories to forbid arch:all for specific index targets . apt (1.1.8) unstable; urgency=medium . * apt-helper: Add a cat-file command for concatening files * Change InternalReadLine to always use buffer.read() return value . apt (1.1.7) unstable; urgency=medium . The real "speed up rred for uncompressed files" release . * Use a hardcoded buffer size of 4096 to fix performance * rred: Allow passing files as arguments for compressor testing * Get rid of memmove() in our read buffering . apt (1.1.6) unstable; urgency=medium . Merry Christmas from the APT Team . [ Pino Toscano ] * Fix FileUtlTest.GetTempDir failure when run as root (Closes: #808383) * CopyFile: fix BufSize to a sane value (Closes: #808381) * CopyFile: avoid failing on EOF on some systems (Closes: #808381) . [ Julian Andres Klode ] * Do nothing in FileFd::Write() if Size is 0 (Closes: #808381) . [ David Kalnischkies ] * avoid evaluating shell in paths used in apt-key * avoid triggering gpg2 migration in apt-key * follow dpkg and xz and use CRC64 for xz compression * parse xz-compression level from configuration * implement a buffer system for FileFd::ReadLine (Closes: 808579) * ensure we got a lock in clean operation (Closes: 808561) . apt (1.1.5) unstable; urgency=medium . [ Julian Andres Klode ] * Do not swap required and important in pkgCache::Priority() Thanks to Manuel A. Fernandez Montecelo for discovering this (Closes: #807523) * Convert package names from Packages files to lower case (Closes: #807012) * test framework: Correctly generate new paths in noopchroot * debian/apt.auto-removal.sh: Adjust -dbg exclusion for multi-arch * pkgcache: Make hash arch-independent using fixed size integer * test-apt-download-progress: Run the https test multiple times . [ David Kalnischkies ] * update symbols files to 1.1.4 state of affairs * parse .diff/Index hashes in reverse order * redirect which stderr to /dev/null for consistency (Closes: 807373) * show a more descriptive error for weak Release files (Closes: 806459) * support regex and co in 'apt-cache policy $pkg' again (Closes: 807870) * non-existing directories don't need to be cleaned (Closes: 807477) . [ Seo Sanghyeon ] * fix incorrect Korean translation of "manually" and "automatically" . [ Andreas Metzler ] * mention APT::AutoRemove::{Recommends,Suggests}Important option (Closes: 807413) . apt (1.1.4) unstable; urgency=medium . [ Julian Andres Klode ] * defaults.mak: Set LC_COLLATE=C.UTF-8 for reproducible sort order * Avoid overflow when summing up file sizes . [ David Kalnischkies ] * add a apt breaks (apt-utils << 1.1.3) for partial-upgrades (Closes: 806765) * require explicit paths to dsc/control as we do for deb files (Closes: 806693) * use @CHANGEPATH@ as placeholder in changelog URI templates * replace "which" with "command -v" for portability. Thanks to Mingye Wang for the suggestion. (Closes: 807144) * replace run-parts with find|sort to avoid debianutils usage * part revert, part redo 'which' replacement. Thanks to Jakub Wilk for pointing out #747320 . [ Fredrik Fornwall ] * apt-helper.cc: include <stdlib.h> for atoi (Closes: 807031) . apt (1.1.3) unstable; urgency=medium . [ David Kalnischkies ] * use function pointers instead of weak symbols for cmdline parsing * accept ../ on the cmdline as start for a deb file as well * add apt-utils Depends apt (= ${binary:Version}) . [ Andreas Cadhalpun ] * do not override exact targetrelease matches with lesser matches (Closes: 746412) . apt (1.1.2) unstable; urgency=medium . [ David Kalnischkies ] * outsmart gcc -O3 over-optimization in pkgCdrom::FindPackages * disable privilege-drop verification by default as fakeroot trips over it (Closes: 806475) * fix program name detection in rsh method * disable privilege dropping for rsh/ssh method by default (Closes: 806511) . [ Michael Vogt ] * do not use "-Wl,-Bsymbolic-functions" during the build to avoid breakage . apt (1.1.1) unstable; urgency=medium . [ Michael Vogt ] * Deal with killed acquire methods properly instead of hanging (Closes: #806406) * Check if the Apt::Sandbox::User exists in CheckDropPrivsMustBeDisabled() (Closes: #806406) . [ David Kalnischkies ] * appease adequate with some weak symbols for -private (Closes: #806422) . apt (1.1) unstable; urgency=medium . [ Justin B Rye ] * review apt(8) manpage * review apt-mark(8) manpage * review apt-secure(8) manpage * review sources.list(5) manpage . [ Michael Vogt ] * upload ABI break version from experimental to unstable . apt (1.1~exp16) experimental; urgency=medium . [ David Kalnischkies ] * do not use _apt for file/copy sources if it isn't world-accessible (Closes: 805069) * support setting empty values (sanely) & removing support for space-gapping: '-o option= value' Thanks to Daniel Hartwig for initial patch. (Closes: 693092) * ignore lost+found in private directory cleanup (Closes: 805424) * update libapt-{pkg,inst} symbols files * do not rerun ./configure causing FTCBFS with newer autotools-dev. Thanks to Helmut Grohne for the detailed bugreport. (Closes: 804923) * do not segfault in cache generation on mmap failure (Closes: 803417) * do not sent Last-Modified if we expect a changed file * show potentially arch-qualified fullname in 'apt show' . [ Frans Spiesschaert ] * Dutch manpages translation (NEW) (Closes: 805474) . [ Justin B Rye ] * review of new/changed translatable program strings . apt (1.1~exp15) experimental; urgency=medium . [ Julian Andres Klode ] * deblistparser: Make PrioList const * srvrec: Do not expose C++11 tuple use in header * cacheset: Fix compilation on new GCC in C++98 mode * Provide tests for thread-safety . [ Mert Dirik ] * Turkish program translation update (Closes: 802610) . [ David Kalnischkies ] * implement a public pkgSystem::MultiArchSupported * implement a public pkgSystem::ArchitecturesSupported * implement operator* for cacheset iterators * refactor dpkg execution in deb/debsystem * provide public interface to hold/unhold packages * allow all dpkg selections to be set via apt-mark and libapt * drop privileges in file:// method as we do for decompressors * unbreak the copy-method claiming hashsum mismatch since ~exp9 (Closes: 799158) * show progress info while 'downloading' a local .deb file * support .deb files in upgrade operations as well * rework errors and warnings around insecure repositories (Closes: 796549) * refer to apt-secure(8) in unsecure repositories warning * suggest 'apt autoremove' to get right of unneeded packages (Closes: 801571) * add binary-specific options via Binary scope * revamp apt(8) to refer more instead of duplicating * disable updating insecure repositories in apt by default * new quiet level -qq for apt to hide progress output * hidden support more apt-get/apt-cache commands in apt (Closes: 778234, 780700, 781237) * show version and type in "apt (r)depends" (Closes: 218995) * revamp all tools help messages * sanify API to get 'the' candidate version (Closes: #803471) * support arch:all data e.g. in separate Packages file * ignore newlines in dpkg-deb control output for installing debs (Closes: 802553) * allow acquire method specific options via Binary scope * encode UTF-8 characters correctly in QuoteString (Closes: 799123) * activate AI_IDN by default to support IDN domains (Closes: 763437) . apt (1.1~exp14) experimental; urgency=medium . [ Julian Andres Klode ] * Revert "Fix select timeout to be 50msec instead of 0.5msec" for acquire * .travis.yml: Add pinned vivid for gettext and clean up a bit * Allow -i and -u as aliases for installed and upgradable in list . apt (1.1~exp13) experimental; urgency=medium . [ Michael Vogt ] * Use xgettext --no-location in make update-pot * Fix select timeout to be 50msec instead of 0.5msec (Closes: #799857) . [ David Kalnischkies ] * M-A: allowed pkgs of unconfigured archs do not satisfy :any * implement dpkgs vision of interpreting pkg:<arch> dependencies * add Source-Version field for EDSP * fix insecure use of /tmp in EDSP solver 'dump' (Closes: 795600) * select kernels to protect from autoremove based on Debian version (Closes: 787827) * implement autobit and pinning in EDSP solver 'apt' * do not discard new manual-bits while applying EDSP solutions * include debug information in the autoremove-kernels file * avoid using global PendingError to avoid failing too often too soon * implement apt-get source msg 'Please use: $vcs' for git * do not ignore differently versioned self-provides * do not generate bogus hashes if hash is disabled in apt-ftparchive * use APT::FTPArchive hash settings as default for APT::FPArchive::$filetype * add --sha512 option + documentation for apt-ftparchive * deal with spaces in path, command and filepaths in apt-key * add by-hash sources.list option and document all of by-hash * fallback to well-known URI if by-hash fails (Closes: 798919) . apt (1.1~exp12) experimental; urgency=medium . [ David Kalnischkies ] * sources.list and indextargets option for pdiffs * auto-prefix $(SITE) for indextargets Description field * implement PDiff patching for compressed files * implement indextargets option 'DefaultEnabled' * try xz instead of bz2 first for compressed files * implement $(NATIVE_ARCHITECTURE) substvar for indextargets * detect and deal with indextarget duplicates * ignore for _apt inaccessible TMPDIR in pkgAcqChangelog (Closes: 797270) * if file is inaccessible for _apt, disable privilege drop in acquire * remove Christian Perrier from Uploaders as requested. Thanks to Christian for all the l10n, code & social contributions! (Closes: #783337) * use unusable-for-security hashes for integrity checks * use clock() as source for SRV randomness . [ Miroslav Kure ] * Czech program translation update (Closes: 797329) . [ Michael Vogt ] * Consider md5sum no longer a usable hash * Add support for writing by-hash dirs in apt-ftparchive . [ Julian Andres Klode ] * apt-pkg/tagfile.h: Include stdint.h, fixes rdep build failures . apt (1.1~exp11) experimental; urgency=medium . [ Julian Andres Klode ] * pkgcachegen: Account for remapping when parsing depends from NewPackage. Thanks to Jakub Wilk for the bug report and the backtraces (Closes: #796999) * debian/rules: Only do parallel build if specified in DEB_BUILD_OPTIONS. Thanks to Jakub Wilk for the suggestion * cacheset: Prefer the depcache over the policy again * install: Set a local deb as the candidate for that package * Always close compressed files in FileFd * Use compressor support from FileFd for ExtractTar instead of programs * Do not parse Status fields from remote sources . [ David Kalnischkies ] * just-in-time removal of broken essential packages (Closes: 796070) * correct 'apt update' download summary line * ignore AllowMem parameter in cache generation (Closes: 796459) * add a libapt-pkg recommends apt * fix various typos reported by codespell * use always priv-dropping for changelog download as root * allow explicit dis/enable of IndexTargets in sources options . [ Anders Jonsson ] * Swedish program translation update (Closes: 796059) . apt (1.1~exp10) experimental; urgency=medium . [ Michael Vogt ] * add support for SRV record lookup before connect * Provide "apt-get full-upgrade" to match "apt full-upgrade" * Add support for "apt-cache showsrc --only-source srcpkgname" Thanks to Steve Slangasek for the suggestion (Closes: 695633) . [ Julian Andres Klode ] * Support tabs in sources.list files (Closes: #796067) * Re-indent GetCandidateVerNew() and make ConsiderFiles argument explicit * postinst: Correctly pass --home instead of -home, and fixup old user. Thanks to Niels Thykier for reporting this on IRC . apt (1.1~exp9) experimental; urgency=medium . [ Michael Vogt ] * Add "ca-certificates" recommends to apt-transport-https * test/integration/test-apt-download-progress: - fix test failure on fast hardware * Rename "Size" in ServerState to TotalFileSize * Make apt compile with clang++ again * Cleanup includes (Thanks iwyu) . [ David Kalnischkies ] * re-enable patchsize limit option for pdiffs * better non-virtual metaIndex.LocalFileName() implementation * mark internal interfaces as hidden * restore ABI of pkgTagSection * streamline display of --help in all tools * allow uninstalled packages to be put on hold * use 'best' hash for source authentication (LP: #1098738) * re-enable support for -s (and co) in apt-get source (Closes: 742578) * create directory for extended_states if needed * create our cache and lib directory always with mode 755 * fix file ownership tests to work on kfreebsd * use dpkg --merge-avail only if needed in apt-mark * properly handle already reinstall pkgs in ordering (Closes: 770291) * correct architecture detection for 'rc' packages for purge (Closes: 770898) * derive more of https from http method * properly implement pkgRecord::Parser for *.deb files * improve https method queue progress reporting. Thanks to Robert Edmonds and Anders Kaseorg for initial patchs (Closes: 777565, 781509) * calculate only expected hashes in methods * calculate hashes while downloading in https * ensure lists/ files have correct permissions after apt-cdrom add * unsigned Release files can expire, too * a hit on Release files means the indexes will be hits too * remove "first package seen is native package" assumption. Thanks to Axel Beckert for testing (Closes: 782777) * improve partial/ cleanup in abort and failure cases * a pin of 1000 always means downgrade allowed * remove unused and strange default-value for pins * show non-matching m-a:same versions in debug message * fix 'Source' to 'Package' rename in apt-ftparchive * sync TFRewrite*Order arrays with dpkg and dak * stop depending on copy-on-write for std::string * implement a more c++-style TFRewrite alternative * rewrite all TFRewrite instances to use the new pkgTagSection::Write * detect 416 complete file in partial by expected hash * implement VerifyFile as all-hashes check * detect Releasefile IMS hits even if the server doesn't * treat older Release files than we already have as an IMSHit * don't try other compressions on hashsum mismatch * rework hashsum verification in the acquire system * check patch hashes in rred worker instead of in the handler * add more parsing error checking for rred * support hashes for compressed pdiff files * do not request files if we expect an IMS hit * configurable acquire targets to download additional files * show URI.Path in all acquire item descriptions * implement 'apt-get files' to access index targets * store Release files data in the Cache * implement default apt-get file --release-info mode (Closes: 752702) * populate the Architecture field for PackageFiles (Closes: 687255) * hide Translation-* in 'apt-cache policy' output * provide a public interface for acquiring changelogs (Closes: 687147, 739854, 784027, 787190) * ensure valid or remove destination file in file method * deal better with acquiring the same URI multiple times * call URIStart in cdrom and file method * show item ID in Hit, Ign and Err lines as well * condense parallel requests with the same hashes to one * support lang= and target= sources.list options * bring back deb822 sources.list entries as .sources * detect and error out on conflicting Trusted settings * merge indexRecords into metaIndex * add sources.list Check-Valid-Until and Valid-Until-{Max,Min} options * implement Signed-By option for sources.list * remove the longtime deprecated vendor{,list} stuff * allow individual targets to be kept compressed * support gpg 2.1.x in apt-key (Closes: 781042) * merge keyrings with cat instead of gpg in apt-key. Thanks to Daniel Kahn Gillmor for the suggestion * handle site-changing redirects as mirror changes * disable locking even for root in --simulate * rename 'apt-get files' to 'apt-get indextargets' * enforce GCC5 C++11 ABI and usage * show or-groups in not-installed recommends and suggests lists * hide implicit deps in apt-cache again by default * just-in-time creation for (explicit) negative deps * add volatile sources support in libapt-pkg * parse packages from all architectures into the cache * enhance "hit paywall" error message to mention the probable cause * drop extra newline in 'Failed to fetch' and 'GPG error' message * mark again deps of pkgs in APT::Never-MarkAuto-Sections as manual. Thanks to Raphaël Hertzog and Adam Conrad for detailed reports and initial patches (Closes: 793360) (LP: #1479207) * change to libapt-pkg abi 5.0 with versioned symbols * move APT::Never-MarkAuto-Sections handling to MarkDelete * move manual-bit from 'oldlibs' pkg to its dependencies * remove Dir:: scope limit of RootDir in the documentation (Closes: 659387) * add {contrib,non-free}/{metapackages,oldlibs} to section specialhandling (Closes: 788320) . [ Frans Spiesschaert ] * Dutch program translation update (Closes: 771039) . [ Julien Patriarca ] * French program translation update (Closes: 766755) . [ Zhou Mo ] * Chinese (simplified) program translation update (Closes: 766170) * Chinese (simplified) program translation update (Closes: 771982) . [ Miroslav Kure ] * Czech program translation update (Closes: 764055) . [ Mert Dirik ] * Turkish program translation update (Closes: 763379) * Turkish translation update for apt (Closes: #789491) . [ Kenshi Muto ] * Japanese program translation update (Closes: 763033) * Japanese program translation update (Closes: 772678) . [ James McCoy ] * support long keyids in "apt-key del" instead of ignoring them (Closes: 754436) * tighten filtering of kernel images in apt.auto-removal (Closes: 772732) * Use terminfo's typical save_cursor/restore_cursor sequences (Closes: #772521) . [ Manuel "Venturi" Porras Peralta ] * Spanish program translation update (Closes: 771815) . [ Jean-Pierre Giraud ] * French manpages translation update (Closes: 771967) . [ Theppitak Karoonboonyanan ] * Thai program translation update (Closes: 772913) . [ Tomasz Buchert ] * Fix crash in the apt-transport-https when Owner is NULL (Closes: #778375) . [ Helmut Grohne ] * parse arch-qualified Provides correctly (Closes: 777071) . [ Beatrice Torracca ] * Italian manpage translation update (Closes: 776702) . [ Jérémy Bobbio ] * stop displaying time of build in online help (Closes: 774342) . [ Robert Edmonds ] * HttpsMethod::Fetch(): Zero the FetchResult object when leaving due to 404 . [ Milo Casagrande ] * Italian program translation update (Closes: 782122) . [ Julian Andres Klode ] * pkgPolicy: Introduce storage and helpers for per-version pins * versionmatch: Extract version match checking out of Find() * policy: Assign per-version pins * apt-cache: Change version pin output to use per-version pins * fileutl_test.cc: Check for /etc/passwd instead of /bin/sh * policy: Return highest file pin if version pin == 0 in GetPriority() * Determine the candidate based on per-version pins, instead of old code (Closes: #770017, #622237, #620249, #685215) * policy: Fix the new policy implementation to handle downgrades correctly * Fix test case breakage from the new policy implementation * policy: Fix the handling of config-files states * Replace INT_MIN with std::numeric_limits<int>::min * Simply ignore cruft in the status files, do not treat it as prio 0 * Fix an obscure warning from GCC * apt-get: Do not include apt-pkg/indexrecords.h * Drop C++11 elements from headers * Re-introduce None as a deprecated alias for No * Make QItem a subclass of DescItem * ExecFork: Use /proc/self/fd to determine which files to close (Closes: #764204) * Merge changelog entries from sid-gcc5 * Bump apt-inst SONAME to 2.0 to adjust for the ABI break in apt-pkg * Annotate more methods with APT_OVERRIDE. Thanks to g++ -Wsuggest-override * debian/gbp.conf: Set multimaint-merge = True * debian/control: Rename libapt-pkg4.15 -> libapt-pkg5.0 * apt.cron.daily: Reference 10periodic instead of 02periodic (LP: #1332106) * Makefile: Add a make fast command for development * Add a parameter ConsiderFiles to GetPriority(VerIterator) * apt-cache: Modify policy output to use per-version pins * Only make Upgradable() return true for packages with a candidate (LP: #896689) * apt-cache: Improve translateability of the "with priority" thing * policy: Be more strict about parsing pin files, and document prio 0 (Closes: #429912) * apt_preferences(5): Re-document how priorities are calculated (Closes: #554773) * Drop the Section field from pkgCache::Package again * Fix integration tests for the removal of the Package pin output * Remove an invalid fi from a testcase * C++11: Switch from auto_ptr to unique_ptr * Mark SPtr as deprecated, and convert users to std::unique_ptr * Deprecate SPtrArray<T> and convert everyone to unique_ptr<T[]> * Use setresuid() and setresgid() where available * Accept --upgradeable as synonym for --upgradable (Closes: #787846) * po/fr.po: Remove the unbreakable space before ! in the confirm string (Closes: #727680) * Replace --force-yes by various options starting with --allow * Add integration test for Pin-Priority range checks * Replace UINT_MAX with std::numeric_limits<unsigned int>::max() * Mention that source order only matter per version (Closes: #617445) * Say "in combination with the other options" if an option is not understood (Closes: #762758) * apt-cache: Show an error if stats gets any arguments (Closes: #153161) * apt-cache(8): Mention that --names-only search provides (Closes: #618017) * apt_preferences(5): Correct default pin assignment documentation (Closes: #623706) * apt_preferences(5): Mention overlapping of pin matches * Make auto-remove and auto-clean aliases for the versions without - (Closes: #274159) * apt: Add autoremove and auto-remove commands * changelog: Replace spelling typo for re-enable everywhere. Thanks to Lintian * debian/control: Replace debian by Debian. Thanks to Lintian * debian/control: Drop the versioned python-apt conflict. Thanks to Lintian * debian/control: Remove XS- from Testsuite and bump Standards-Version. Thanks to Lintian * Set Acquire::Changelogs::URI::Origin::Tanglu for Tanglu changelogs * Also add 'in combination with the other options.' to another error * apt-cache(8): Drop the #versions >= #package names comparison (Closes: #691281) * apt-get: allow non-root --print-uris build-dep (Closes: #283400) * doc/files.dbk: Improve documentation for {src,}pkgcache.bin (Closes: #465551) * update: Check if the cache could be opened, don't just assume it (Closes: #756162) * cachefile.cc: Do not ignore return value of pkgDepCache::Init() * Add GetPriority(VerIterator) to pkgDepCache::Policy * Document the general effect of the comma operator (Closes: #574939) * When looking if Provides match, OR them with the normal patches (Closes: #760868) * install: If package already is the newest version, display version (Closes: #315149) * Make pkgCache::Priority() static, it does not need the instance (Closes: #448627) * Replace "extra" in "the following extra packages [...]" by "additional" (Closes: #82430) * Do not crash in 'apt show' for non-installed packages * debian/NEWS: Mention new pinning algorithm added in 2.0~exp1 . [ Yuri Kozlov ] * Russian program translation update (Closes: 789709) . [ Guillem Jover ] * po-fixups: fill Project-Id-Version and Encoding correctly (Closes: 612996) * Do not set unhonored DPKG_NO_TSTP variable for dpkg (Closes: #765366) . [ Daniel Hartwig ] * support setting a port for rsh:// in sources.list (Closes: 624727) * replace direct calls to egrep with grep -E. Thanks to David Weinehall for initial patch (Closes: 255577) . [ Luca Bruno ] * Replace all "press enter" occurrences with "press [Enter]" Thanks to Andre Felipe Machado for initial patch (Closes: 414848) . [ Jonathan Nieder ] * document VERSION 2 (and 3) pre-install-pkgs hook interface (Closes: 627188) . [ Tomas Pospisek ] * document APT::Periodic::RandomSleep. Thanks to Chris Bainbridge and Kees Cook for initial text (Closes: 776380) . [ Johannes Schauer ] * use a=experimental instead n=experimental in pin documentation (Closes: 783343) . [ Kusanagi Kouichi ] * Show full package records in apt-cache search -f (Closes: #660851) . apt (1.1~exp8) experimental; urgency=medium . [ Michael Vogt ] * merge unstable upload version 1.0.9.3 * Ensure /etc/apt/auth.conf has _apt:root owner * Use sysconf(_SC_ARG_MAX) to find the size of Dpkg::MaxArgBytes * Only support Translation-* that are listed in the {In,}Release file * Call "Dequeue()" for items in AbortTransaction() to fix race * prepare ABI for feature/socketpair * Bump ABI to 4.15 . [ David Kalnischkies ] * re-enable support for -s (and co) in apt-get source (Closes: 742578) * run acquire transactions only once * aborted reverify restores file owner and permission * test if TMPDIR is accessible before using (Closes: 765951) * chown finished partial files earlier * promote filesize to a hashstring . apt (1.1~exp7) experimental; urgency=medium . [ David Kalnischkies ] * don't cleanup cdrom files in apt-get update (Closes: 765458) * ignore Acquire::GzipIndexes for cdrom sources . apt (1.1~exp6) experimental; urgency=medium . [ josch ] * implement the updated build profile spec . [ Michael Vogt ] * methods/rsh.cc: replace strcat with std::string (Closes: #76442) * Add new configallowinsecurerepositories to the test framework . [ Guillem Jover ] * Update Status field values handling . [ David Kalnischkies ] * don't drop privileges if _apt has not enough rights * check for available space, excluding root reserved blocks . apt (1.1~exp5) experimental; urgency=medium . [ Michael Vogt ] * Only rename StatError files in AbortTransaction() * Document Acquire{MaxReleaseFileSize,AllowInsecureRepositories, AllowDowngradeToInsecureRepositories} and --no-allow-insecure-repositories * Fix backward compatibility of the new pkgAcquireMethod::DropPrivsOrDie() * Change default of Acquire::AllowInsecureRepositories to "true" so that this change is less disruptive, this will be switched to "false" again after jessie . [ David Kalnischkies ] * remove useless pdiff filename output (Closes: 764737) * make --allow-insecure-repositories message an error * display a warning for unsigned repos * trusted=yes sources are secure, we just don't know why . apt (1.1~exp4) experimental; urgency=medium . [ Michael Vogt ] * Merge sid version 1.0.9.2 * feature/acq-trans: - Make apt-get update more transactional by keeping all data from a sources.list line in partial/ until all data is good and only then move it into lists/ in one step - add new -o Debug::Acquire::Transaction=1 debug option * feature/expected-size: Do not download more data in the mehotds than expected if we know the size. For the InRelease/Release/Release.gpg add new Acquire::MaxReleaseFileSize that defaults to 10Mb for now * Verify the hashes of the downloaded compressed files early * Only load unauthenticated data into our parsers when the user explicitly asked for it via --allow-insecure-repositories (Acquire::AllowInsecureRepositories) * Print warning when trying to use unauthenticated repositories * Use /var/empty as the homedir for _apt * Revert making pkgAcquire::Item::DescURI() "const" to not break API * Do not allow going from a authenticated to unauthenticated repository * Add missing "adduser" dependency (for the new _apt user) Thanks to Russ Allbery (Closes: #763004) * Test if TMPDIR is a directory in apt-key and if not unset it * add early verification for the .diff/Index download * Bump library version to libapt-pkg4.14 * Rework pkgAcqMeta{Index,Sig,ClearSig}::{Done,Failed]() for readability * Ignore EINVAL from prctl(PR_SET_NO_NEW_PRIVS) (closes: 764066) . [ David Kalnischkies ] * deprecate Pkg->Name in favor of Grp->Name * drop stored StringItems in favor of in-memory mappings * de-duplicate version strings in the cache * fix progress output for (dist-)upgrade calculation * move PCI::From* methods into CacheSetHelper class (Closes: 686221) * add a (hidden) --quiet option for apt-key * only create new trusted.gpg if directory is writeable * support (multiple) arguments properly in apt-key * set a primary-keyring only if we have access to it * merge fragment keyrings in apt-key to avoid hitting gpg limits (Closes: 733028) * use apt-key adv (+ gnupg) instead of gpgv for verify * support gnupg2 as drop-in replacement for gnupg * allows one to specify fingerprints in 'apt-key del' * use only one --keyring in gpg interactions * add and use 'apt-key verify' which prefers gpgv over gpg * remove empty keyrings in trusted.gpg.d on upgrade * store source name and version in binary cache * allow fetcher setup without directory creation (Closes: 762898) * cleanup partial directory of lists in apt-get clean (Closes: #762889) * allow options between command and -- on commandline * update symbols file * support parsing of all hashes for pdiff * ensure world-readability for trusted.gpg in postinst (Closes: 647001) * ensure partial dirs are 0700 and owned by _apt:root * use _apt:root only for partial directories * display errortext for all Err * set PR_SET_NO_NEW_PRIVS also if run as non-root . [ James McCoy ] * ensure apt-key del handles 16-byte key ids (Closes: 754436) . [ Kenshi Muto ] * Japanese program translation update (Closes: 763033) . [ Trần Ngọc Quân ] * Set STRIP_FROM_PATH for doxygen . [ Mert Dirik ] * Turkish program translation update (Closes: 763379) . [ Guillem Jover ] * apt-get: Create the temporary downloaded changelog inside tmpdir . [ Miroslav Kure ] * [l10n] Updated Czech translation of apt (Closes: #764055) . apt (1.1~exp3) experimental; urgency=medium . [ Michael Vogt ] * merged changes from debian/sid up to 1.0.9.1 * Make /var/lib/apt/lists and /var/cache/apt/archives owned by the new _apt user * Drop Privileges in the following acquire methods: copy, http, https, ftp, gpgv, gzip/bzip2/lzma/xz * DropPrivs: Improvements based on feedback from error@debian.org . [ Julian Andres Klode ] * DropPriv: Really call seteuid and not setuid, and add more checks * Use _apt as our unprivileged user name * DropPrivs: Also check for saved set-user-ID and set-group-ID * methods: Fail if we cannot drop privileges * DropPrivs: Also check for saved set-user-ID and set-group-ID . apt (1.1~exp2) experimental; urgency=medium . [ Guillem Jover ] * Add new Base256ToNum long long overload function * Fix ar and tar code to be LFS-safe (Closes: #742882) . [ Michael Vogt ] * increase libapt-inst to version 1.6 * Only allow "apt-get build-dep path" when path starts with ./ or / * Allow passing a full path to apt-get install /foo/bar.deb (CLoses: #752327) * merge changes from the 1.0.6 upload . apt (1.1~exp1) experimental; urgency=low . [ David Kalnischkies ] * [API Break] change "std::string pkgAcquire::Item::DescURI()" to "std::string pkgAcquire::Item::DescURI() const" * [ABI-Break] increase hashtable size for packages/groups by factor 5 * [ABI-Break] cleanup datatypes mix used in binary cache * [internal API-Break] remove the Section member from package struct * use 'best' hash for source authentication (LP: 1098738) * use HashStringList in the acquire system * deal with hashes in ftparchive more dynamic as well * re-enable pipelining via hashsum reordering support * parse and retrieve multiple Descriptions in one record * improve pkgTagSection scanning and parsing * invalid cache if architecture set doesn't match (Closes: 745036) . [ Michael Vogt ] * add support for "apt-get build-dep foo.dsc" * add support for "apt-get build-dep unpacked-source-dir" * add support for "apt-get install foo_1.0_all.deb" * make "apt-get update" progress much more accurate by loading the sizes of the targets into the fetcher early * Implement simple by-hash for apt update to improve reliability of the update. Apt will try to fetch the Packages file via /by-hash/$hash_type/$hash_value if the repo supports that. - add APT::Acquire::$(host)::By-Hash=1 knob - add Acquire-By-Hash=1 to Release file * add Debug::Acquire::Progress debug option * [ABI-Break] lp:~mvo/apt/source-hashes: - use sha{512,256,1} for deb-src when available LP: #1098738 * [ABI-Break] stop exporting the accidentally exported parsenetrc() symbol * [ABI-Break] remove the PACKAGE_MATCHER_ABI_COMPAT defines * [ABI BREAK] apt-pkg/pkgcache.h: - adjust pkgCache::State::VerPriority enum, to match reality * test/integration/test-debsrc-hashes: - add integration test, thanks to Daniel Hartwig * [ABI-Break] remove the PACKAGE_MATCHER_ABI_COMPAT defines * [ABI-Break] Pass struct IndexTarget/indexRecords to pkgAcqIndex{,Merge}Diffs * [internal API-Break] rename pkgCache::Package::NextPackage to pkgCache::Package::Next * Calculate Percent as part of pkgAcquireStatus to provide a weighted percent for both items and bytes * apt-pkg/contrib/macros.h: bump library version to 4.13 * apt-private/acqprogress.cc: do not show file size on IMSHit, it wasn't fetched * Fix warnings from clang -Wall/clang -fsanitize=address * add DropPrivs() and drop privileges to nobody when running the the buildin apt and dump solvers * lp:~mvo/apt/webserver-simulate-broken-with-fix346386: - fix invalid InRelease file download checking and add regression test to server broken files to the buildin test webserver - add regression test for LP: #34638 . apt (1.0.10.1) unstable; urgency=medium . * hide first pdiff merge failure debug message (Closes: 793444) * mark again deps of pkgs in APT::Never-MarkAuto-Sections as manual. Thanks to Raphaël Hertzog and Adam Conrad for detailed reports and initial patches (Closes: 793360) (LP: #1479207) * explicitly build-dep on g++ (>= 4:5.2) for gcc5 transition . apt (1.0.10) unstable; urgency=medium . [ Zhou Mo ] * po: update zh_CN translation slightly * po: Update Simplified Chinese programs translation . [ Mert Dirik ] * Turkish translation update for apt (Closes: #789491) . [ Yuri Kozlov ] * Russian program translation update (Closes: 789709) . [ Milo Casagrande ] * Italian program translation update (Closes: 782122) . [ Beatrice Torracca ] * Italian manpage translation update (Closes: 776702) . [ Julian Andres Klode ] * ExecFork: Use /proc/self/fd to determine which files to close (Closes: #764204) . [ Michael Vogt ] * Prepare new 1.0.10 release with gcc5 abi transition . [ David Kalnischkies ] * stop depending on copy-on-write for std::string * bump next-abi check above gcc5-abi bump * update symbols file to use gcc5 abi mangling565d8bbc
