-
python-apt (1.1.0~beta1ubuntu0.16.04.12) xenial; urgency=medium
* debfile: Pass `Name` instead of `Binary` to ExtractTar.
Passing the binary causes it to fail trying to find the `false`
compressor when a binary for a given compressor is not installed.
(LP: #1926437)
* Update mirror lists
-- Julian Andres Klode <email address hidden> Thu, 29 Apr 2021 21:37:32 +0200
-
python-apt (1.1.0~beta1ubuntu0.16.04.11) xenial-security; urgency=medium
* REGRESSION UPDATE: Passing a file descriptor to apt_inst.ArFile or
apt_inst.DebFile caused a segmentation fault (LP: #1907676)
- python/arfile.cc: Fix segmentation fault when opening fd, track
lifetime correctly
-- Marc Deslauriers <email address hidden> Thu, 10 Dec 2020 09:48:37 -0500
-
python-apt (1.1.0~beta1ubuntu0.16.04.10) xenial-security; urgency=high
* SECURITY UPDATE: various memory and file descriptor leaks (LP: #1899193)
- python/arfile.cc, python/generic.h, python/tag.cc, python/tarfile.cc:
fix file descriptor and memory leaks
- python/apt_instmodule.cc, python/apt_instmodule.h, python/arfile.h:
Avoid reference cycle with control,data members in apt_inst.DebFile
objects
- tests/test_cve_2020_27351.py: Test cases for DebFile (others not easily
testable)
- CVE-2020-27351
* data/templates: Update mirror lists
-- Julian Andres Klode <email address hidden> Tue, 01 Dec 2020 20:20:05 +0100
-
python-apt (1.1.0~beta1ubuntu0.16.04.9) xenial; urgency=medium
* Don't duplicate disabled sources during add() (LP: #1311056)
-- Dave Jones <email address hidden> Fri, 24 Jan 2020 22:05:23 +0000
-
python-apt (1.1.0~beta1ubuntu0.16.04.8) xenial-security; urgency=medium
* SECURITY REGRESSION: crash with ubuntu-release-upgrader (LP: #1860606)
- apt/cache.py: make allow_unauthenticated argument to
fetch_archives() optional.
-- Marc Deslauriers <email address hidden> Wed, 22 Jan 2020 16:53:47 -0500
-
python-apt (1.1.0~beta1ubuntu0.16.04.7) xenial-security; urgency=medium
* SECURITY UPDATE: Check that repository is trusted before downloading
files from it (LP: #1858973)
- apt/cache.py: Add checks to fetch_archives() and commit()
- apt/package.py: Add checks to fetch_binary() and fetch_source()
- CVE-2019-15796
* SECURITY UPDATE: Do not use MD5 for verifying downloadeds
(Closes: #944696) (#LP: #1858972)
- apt/package.py: Use all hashes when fetching packages, and
check that we have trusted hashes when downloading
- CVE-2019-15795
* To work around the new checks, the parameter allow_unauthenticated=True
can be passed to the functions. It defaults to the value of the
APT::Get::AllowUnauthenticated option.
- Bump Breaks aptdaemon (<< 1.1.1+bzr982-0ubuntu14.2), as it will have
to set that parameter after having done validation.
* Necessary backports:
- turn elements in apt_pkg.SourceRecords.files into a class, rather than
a tuple (w/ legacy compat), so we can get to their hashes
- add apt_pkg.HashStringList
- add apt_pkg.Hashes.hashes
* Automatic changes and fixes for external regressions:
- Adjustments to test suite and CI to fix CI regressions
- Automatic mirror list update
-- Julian Andres Klode <email address hidden> Wed, 15 Jan 2020 17:14:05 +0100
-
python-apt (1.1.0~beta1ubuntu0.16.04.5) xenial; urgency=medium
* Fix erronous use of apt_pkg.Error
apt_pkg.Error was introduced in later versions, and accidentally
used when backporting fixes in the previous SRU. (LP: #1830635)
* Update mirror lists
-- Julian Andres Klode <email address hidden> Mon, 27 May 2019 18:05:12 +0200
-
python-apt (1.1.0~beta1ubuntu0.16.04.4) xenial; urgency=medium
* apt.Cache: Fix (un)locking of archives (Closes: #922416) (LP: #1826870)
* apt.Cache: Use explicit, more safe locking in update()
* Update mirror lists
python-apt (1.1.0~beta1ubuntu0.16.04.3) xenial; urgency=medium
* Frontend locking and related locking improvements (LP: #1795407)
- apt.Cache: Keep / Re-establish the system lock in commit()
- apt.Cache: Keep archive locked during commit()/ in fetch_archives()
- apt.Cache: Reinstate locks in a finally / run dpkg inside try
- Introduce frontend locking
- Convert apt.Cache.commit and apt_pkg.DepCache.commit to FE lock
* Other changes to make that work:
- travis CI: enable PPA for new apt versions
* As always, updated mirror lists
-- Julian Andres Klode <email address hidden> Mon, 29 Apr 2019 14:11:32 +0200
-
python-apt (1.1.0~beta1ubuntu0.16.04.3) xenial; urgency=medium
* Frontend locking and related locking improvements (LP: #1795407)
- apt.Cache: Keep / Re-establish the system lock in commit()
- apt.Cache: Keep archive locked during commit()/ in fetch_archives()
- apt.Cache: Reinstate locks in a finally / run dpkg inside try
- Introduce frontend locking
- Convert apt.Cache.commit and apt_pkg.DepCache.commit to FE lock
* Other changes to make that work:
- travis CI: enable PPA for new apt versions
* As always, updated mirror lists
-- Julian Andres Klode <email address hidden> Mon, 01 Oct 2018 16:00:14 +0200
-
python-apt (1.1.0~beta1ubuntu0.16.04.2) xenial; urgency=medium
* python/tag.cc: Fix invalid read in TagFileNext
* DepCache: Check that candidate we are setting belongs to package
* Raise CacheMismatchError if objects passed to DepCache are from different cache
(LP: #1737441); also includes the following regression fixes from bionic:
- apt.Cache: Remap objects when reopening cache (LP: 1773316 in bionic+), incl. regression fixes:
+ Add more extensive test cases for cache remapping
+ Regression fix: Do not override __hash__ in apt.package.Package (LP: 1780099 in bionic+)
* CI / pre-build / data changes:
- Replace broken travis CI integration with current docker-based one
- utils/get_debian_mirrors.py: Get data from salsa (for pre-build hook)
- debian/control: Point to salsa instead of anonscm
- debian/gbp.conf: Point to 1.1.y-xenial branch
- Updated mirror list
-- Julian Andres Klode <email address hidden> Tue, 10 Jul 2018 12:47:50 +0200
-
python-apt (1.1.0~beta1ubuntu0.16.04.1) xenial; urgency=medium
* Refreshed mirror list for upcoming point-release.
-- Łukasz 'sil2100' Zemczak <email address hidden> Tue, 20 Feb 2018 11:14:53 +0100
-
python-apt (1.1.0~beta1build1) xenial; urgency=medium
* No-change rebuild to drop python3.4 support.
-- Matthias Klose <email address hidden> Tue, 19 Jan 2016 11:46:03 +0000
-
python-apt (1.1.0~beta1) unstable; urgency=medium
* Upload to unstable
[ Michael Vogt ]
* Do not show pulse progress when the output is not a tty
* Fix build-dependencies parsing from debian/control
* Print the failed function name in PyPkgManager::res()
[ Julian Andres Klode ]
* test_paths.py: Catch the IndexRecords warning
* Release 1.0.1
* changelog: Fix up the uploader name and close Barry's bug
* doc: tutorials: contribution: Rewrite for git and other changes
(Closes: #802084)
* Build with cleaner headers
* Use pkgCache::Version::No instead of pkgCache::Version::None
* apt.utils: Support parsing InRelease files (LP: #1503979)
Thanks to Brian Murray <email address hidden> for the initial patch.
* apt.utils: Open the release files using a 'with' statement
[ Jakub Wilk ]
* apt/debfile.py: Fix typo
* apt/debfile.py: Fix typo
[ Martin Pitt ]
* ./data/templates/Ubuntu.info.in: Add Xenial template.
* doc/source/examples/apt-cdrom.py: Fix PEP-8 errors.
-- Julian Andres Klode <email address hidden> Thu, 26 Nov 2015 17:32:28 +0100
-
python-apt (1.0.1ubuntu2) xenial; urgency=medium
* doc/source/examples/apt-cdrom.py: Fix PEP-8 errors.
-- Martin Pitt <email address hidden> Mon, 26 Oct 2015 07:07:17 +0100
-
python-apt (1.0.1ubuntu1) xenial; urgency=medium
* ./data/templates/Ubuntu.info.in: Add Xenial template.
-- Martin Pitt <email address hidden> Mon, 26 Oct 2015 07:00:47 +0100
-
python-apt (1.0.1build1) wily; urgency=medium
* No-change rebuild against libapt-pkg4.16
-- Michael Vogt <email address hidden> Mon, 05 Oct 2015 16:40:35 +0200
