apt/debian, branch 1.9.5 Debians commandline package manager https://git.kalnischkies.de/apt/atom?h=1.9.5 2019-12-02T17:18:57Z Release 1.9.5 2019-12-02T17:18:57Z Julian Andres Klode julian.klode@canonical.com 2019-12-02T17:18:57Z urn:sha1:5a98b531f7afcd34367b46ac9e0c7bfe151d6999 netrc: Restrict auth.conf entries to https by default 2019-12-02T13:27:38Z Julian Andres Klode julian.klode@canonical.com 2019-12-02T10:46:49Z urn:sha1:93f33052de84e9aeaf19c92291d043dad2665bbd This avoids downgrade attacks where an attacker could inject Location: http://private.example/ and then (having access to raw data to private.example, for example, by opening a port there, or sniffing network traffic) read the credentials for the private repository. Closes: #945911 Release 1.9.4 2019-09-19T09:14:24Z Julian Andres Klode julian.klode@canonical.com 2019-09-19T09:13:53Z urn:sha1:534b12f4b47192bd20ea2147311bda58f92005e2 apt.systemd.daily: Do not numerically check if intervals equal 0 2019-08-22T07:10:16Z Julian Andres Klode julian.klode@canonical.com 2019-08-22T07:03:14Z urn:sha1:489da40d56075efaa28bfdcfb7b02b3bcc222323 Commit 1d9e29c9e2a5591b42a99a721b901fc003ed9149 added support for suffixes to to intervals, but did not adjust the code to actually support them by replacing -eq with =. LP: #1840995 Release 1.9.3 2019-08-19T14:22:15Z Julian Andres Klode julian.klode@canonical.com 2019-08-19T14:21:53Z urn:sha1:1eeacf3a51dbd7ddfc552919fc9dd3d498a9f971 doc: Add apt-patterns(7) manual page 2019-08-15T18:21:31Z Julian Andres Klode julian.klode@canonical.com 2019-08-15T09:19:20Z urn:sha1:7e22425c2cf937fd45160c6bbbda9210ea5d52ba This does not describe much yet, as there's not much to talk about. test: Use valgrind to ensure Acquire::Queue-Mode=access does not crash 2019-08-15T07:53:41Z Julian Andres Klode julian.klode@canonical.com 2019-08-15T07:50:22Z urn:sha1:56820d4c244e896a62f57ff96801dc1283b8b0e2 Unfortunately for us, apt update with Acquire::Queue-Mode=access does not always crash on a real system, so run the whole thing in valgrind. Release 1.9.2 2019-08-05T19:26:15Z Julian Andres Klode julian.klode@canonical.com 2019-08-05T19:24:59Z urn:sha1:ed4a8421e4d51c19a4aa1bd5e91370ba8bc8efca Fix typos reported by codespell in code comments 2019-07-10T14:15:30Z David Kalnischkies david@kalnischkies.de 2019-07-10T14:15:30Z urn:sha1:5cfbc5727dba2f4662d24cf4deb7cab7cdd57c14 Also in old changelogs, but nothing really user visible like error messages or alike so barely noteworthy. Reported-By: codespell Gbp-Dch: Ignore Release 1.9.1 2019-06-20T15:54:31Z Julian Andres Klode julian.klode@canonical.com 2019-06-20T15:53:22Z urn:sha1:67b51af0f9c7cab4d827ac1e63f8a83d03e2f23c