apt, branch 1.2.8

Release 1.2.8

2016-03-24T18:31:51Z

Update symbols file

2016-03-24T14:16:00Z

Set hidden visibility for StringView

2016-03-24T14:16:00Z

This avoids templates using StringView to be exported, such as std::vector::emplace_back(). Gbp-Dch: ignore

Japanese manpage translation update

2016-03-24T09:24:43Z

Closes: 818950

handle gpgv's weak-digests ERRSIG

2016-03-22T00:58:45Z

Our own gpgv method can declare a digest algorithm as untrusted and handles these as worthless signatures. If gpgv comes with inbuilt untrusted (which is called weak in official terminology) which it e.g. does for MD5 in recent versions we should handle it in the same way. To check this we use the most uncommon still fully trusted hash as a configureable one via a hidden config option to toggle through all of the three states a hash can be in.

properly check for "all good sigs are weak"

2016-03-21T21:47:17Z

Using erase(pos) is invalid in our case here as pos must be a valid and derefenceable iterator, which isn't the case for an end-iterator (like if we had no good signature). The problem runs deeper still through as VALIDSIG is a keyid while GOODSIG is just a longid so comparing them will always fail. Closes: 818910

refactor loading of previous release file

2016-03-19T08:48:44Z

There is really no need to have the same code three times. Git-Dch: Ignore

tests: reenable basic auth test and add @ in username

2016-03-19T08:48:44Z

On launchpad #1558484 a user reports that @ in the authentication tokens parsing of sources.list isn't working in an older (precise) version. It isn't the recommended way of specifying passwords and co (auth.conf is), but we can at least test for regressions (and in this case test at all… who was that "clever" boy disabling a test with exit……… oh, nevermind. Git-Dch: Ignore

zh_CN.po: update simplified Chinese translation. (Closes: #818639)

2016-03-19T07:53:48Z

100% translated. Note: this commit contains a message from the future. #818639

cachefile: Only set members that were initialized successfully

2016-03-19T06:19:24Z

Otherwise, things will just start failing later down the stack, because (a) the lazy getters do not check if building was successful and (b) any further getter call would return the invalid object anyway. Also initialize VS in pkgCache to nullptr by default. Closes: #818628