apt, branch 1.8.0_alpha3.1

Release 1.8.0~alpha3.1

2019-01-22T18:52:42Z

SECURITY UPDATE: content injection in http method (CVE-2019-3462)

2019-01-22T18:50:36Z

This fixes a security issue that can be exploited to inject arbritrary debs or other files into a signed repository as followed: (1) Server sends a redirect to somewhere%0a (where %0a is \n encoded) (2) apt method decodes the redirect (because the method encodes the URLs before sending them out), writting something like somewhere\n into its output (3) apt then uses the headers injected for validation purposes. Regression-Of: c34ea12ad509cb34c954ed574a301c3cbede55ec LP: #1812353 (cherry picked from commit 5eb01ec13f3ede4bae5e60eb16bd8cffb7c03e1b)

Release 1.8.0~alpha3

2018-12-18T14:03:59Z

Merge branch 'pu/dpkg-path' into 'master'

2018-12-10T17:35:33Z

Set PATH=/usr/sbin:/usr/bin:/sbin:/bin when running dpkg See merge request apt-team/apt!38

Set PATH=/usr/sbin:/usr/bin:/sbin:/bin when running dpkg

2018-12-10T16:31:24Z

This avoids a lot of problems from local installations of scripting languages and other stuff in /usr/local for which maintainer scripts are not prepared. [v3: Inherit PATH during tests, check overrides work] [v2: Add testing]

Merge branch 'pu/netrcparts' into 'master'

2018-12-04T20:14:45Z

Add support for /etc/apt/auth.conf.d/*.conf (netrcparts) See merge request apt-team/apt!37

Add support for /etc/apt/auth.conf.d/*.conf (netrcparts)

2018-12-04T16:48:41Z

This allows us to install matching auth files for sources.list.d files, for example; very useful. This converts aptmethod's authfd from one FileFd to a vector of pointers to FileFd, as FileFd cannot be copied, and move operators are hard.

Override FileFd copy constructor to prevent copying

2018-12-04T15:34:26Z

FileFd could be copied using the default copy constructor, which does not work, and then causes code to crash.

Merge branch 'bugfix/spaceinconfig' into 'master'

2018-12-04T11:53:05Z

Use quoted tagnames in config dumps See merge request apt-team/apt!32

Merge branch 'remove_old_derivatives' into 'master'

2018-12-04T11:52:28Z

Remove old derivatives See merge request apt-team/apt!31