summaryrefslogtreecommitdiff
path: root/debian/NEWS
Commit message (Collapse)AuthorAgeFilesLines
* Release 2.1.16 - "Happy build-essential freeeze" release2.1.16Julian Andres Klode2021-01-081-4/+5
|
* Add support for Phased-Update-PercentageJulian Andres Klode2021-01-081-0/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | This adds support for Phased-Update-Percentage by pinning upgrades that are not to be installed down to 1. The output of policy has been changed to add the level of phasing, and documentation has been improved to document how phased updates work. The patch detects if it is running in a chroot, and if so, always includes phased updates, restoring classic apt behavior to avoid behavioral changes on buildd chroots. Various options are added to control this all: * APT::Get::{Always,Never}-Include-Phased-Updates and their legacy update-manager equivalents to always or never include phased updates * APT::Machine-ID can be set to a UUID string to have all machines in a fleet phase the same * Dir::Etc::Machine-ID is weird in that it's default is sort of like ../machine-id, but not really, as ../machine-id would look up $PWD/../machine-id and not relative to Dir::Etc; but it allows you to override the path to machine-id (as opposed to the value) * Dir::Bin::ischroot is the path to the ischroot(1) binary which is used to detect whether we are running in a chroot.
* Automatically remove unused kernels on dist-upgradeJulian Andres Klode2021-01-041-0/+7
| | | | | Kernels clutter /boot and /boot is small size, so we need to take extra care to remove kernels when possible.
* Release 1.9.111.9.11Julian Andres Klode2020-02-261-1/+1
|
* apt(8): Wait for frontend and cache lockJulian Andres Klode2020-02-261-0/+7
| | | | | | This is a rework of !6 with additional stuff for the frontend lock, so we can lock the frontend lock and then keep looping over dpkg lock.
* Release 1.9.61.9.6Julian Andres Klode2020-01-151-2/+2
|
* apt(8): Disable regular expressions and fnmatchJulian Andres Klode2020-01-151-0/+13
| | | | | This is the first step. Next step will be to add warnings to apt-get and then remove support there as well.
* Release 1.9.51.9.5Julian Andres Klode2019-12-021-1/+1
|
* netrc: Restrict auth.conf entries to https by defaultJulian Andres Klode2019-12-021-0/+10
| | | | | | | | | | | | This avoids downgrade attacks where an attacker could inject Location: http://private.example/ and then (having access to raw data to private.example, for example, by opening a port there, or sniffing network traffic) read the credentials for the private repository. Closes: #945911
* Flip /: in documented default value of DPkg::PathAlwin Henseler2019-04-051-1/+1
| | | | | | | The value as shown in the NEWS file (not in the code) has a typo in which just a "/" and ":" are swapped. Closes: #917986
* Release 1.8.0~alpha31.8.0_alpha3Julian Andres Klode2018-12-181-2/+4
|
* Set PATH=/usr/sbin:/usr/bin:/sbin:/bin when running dpkgJulian Andres Klode2018-12-101-0/+8
| | | | | | | | | This avoids a lot of problems from local installations of scripting languages and other stuff in /usr/local for which maintainer scripts are not prepared. [v3: Inherit PATH during tests, check overrides work] [v2: Add testing]
* Add verb 'be' to NEWS entry for 1.5~beta1annadane2018-05-181-1/+1
| | | | Closes: 892792
* Fix various typos reported by spellcheckersDavid Kalnischkies2018-05-051-1/+1
| | | | | Reported-By: codespell & spellintian Gbp-Dch: Ignore
* Release 1.6~rc11.6_rc1Julian Andres Klode2018-04-151-1/+1
|
* Turn off seccomp sandboxing by defaultJulian Andres Klode2018-04-061-0/+8
| | | | | | LP: #1732030 Closes: #890489 Fixes meefik/linuxdeploy#869
* Fix debian/NEWS entry for 1.6~beta1Julian Andres Klode2018-03-131-2/+2
|
* Check that Date of Release file is not in the futureJulian Andres Klode2018-02-191-0/+16
| | | | | | | | | | | | | By restricting the Date field to be in the past, an attacker cannot just create a repository from the future that would be accepted as a valid update for a repository. This check can be disabled by Acquire::Check-Date set to false. This will also disable Check-Valid-Until and any future date related checking, if any - the option means: "my computers date cannot be trusted." Modify the tests to allow repositories to be up to 10 hours in the future, so we can keep using hours there to simulate time changes.
* Release 1.6~alpha11.6_alpha1Julian Andres Klode2017-10-231-2/+4
|
* Sandbox methods with seccomp-BPF; except cdrom, gpgv, rshJulian Andres Klode2017-10-221-0/+13
| | | | | | | | | | | | This reduces the number of syscalls to about 140 from about 350 or so, significantly reducing security risks. Also change prepare-release to ignore the architecture lists in the build dependencies when generating the build-depends package for travis. We might want to clean up things a bit more and/or move it somewhere else.
* Release 1.5~beta11.5_beta1Julian Andres Klode2017-07-031-22/+11
|
* Upload 1.5~alpha4 to experimental1.5_alpha4Julian Andres Klode2017-06-301-3/+6
|
* Switch to 'http' as the default https methodJulian Andres Klode2017-06-301-0/+9
| | | | | The old curl based method is still available as 'curl', 'curl+http', and 'curl+https'.
* Upload 1.5~alpha1 to experimental1.5_alpha1Julian Andres Klode2017-06-281-2/+17
|
* fail instead of warn on insecure repositories in apt-getDavid Kalnischkies2017-06-281-0/+14
| | | | | | | | | The exception was made to give (script) users a one-release grace period to adapt their setup to deal with apt enforcing signing of repositories. As we are now at the start of a new release cycle its as good a time as any to lift it now. Removes-Exception: 952ee63b0af14a534c0aca00c11d1a99be6b22b2
* Release 1.4.31.4.3Julian Andres Klode2017-05-111-6/+5
|
* Release 1.4.21.4.2Julian Andres Klode2017-05-041-0/+11
|
* Release 1.4~beta11.4_beta1Julian Andres Klode2016-11-251-1/+1
|
* gpgv: Untrust SHA1, RIPE-MD/160, but allow downgrading to weakJulian Andres Klode2016-11-251-0/+18
| | | | | | | Change the trust level check to allow downgrading an Untrusted option to weak (APT::Hashes::SHA1::Weak "yes";), so it prints a warning instead of an error; and change the default values for SHA1 and RIPE-MD/160 from Weak to Untrusted.
* debian/NEWS: Get rid of 1.3~pre3+cmake1 entryJulian Andres Klode2016-08-111-14/+0
| | | | | | This was only needed temporarily Thanks: Axel Beckert for reporting
* releasing package apt version 1.3~pre3+cmake11.3_pre3+cmake1Julian Andres Klode2016-08-061-0/+14
|
* NEWS: Prefix the keep deb option with Binary::apt::Julian Andres Klode2016-02-041-3/+4
| | | | | | | I find the per-binary overrides a bit confusing in their current form, but let's tell the user the truth. Closes: #812111
* NEWS: Refer to apt(8) instead of apt(1)Julian Andres Klode2016-01-091-1/+1
| | | | | Reported-By: Mattia Rizzolo (on IRC) Gbp-Dch: ignore
* Release 1.2~exp11.2_exp1Julian Andres Klode2016-01-081-1/+1
|
* NEWS: Document recompression of indicesJulian Andres Klode2016-01-081-1/+7
|
* Document new APT::Keep-Downloaded-Packages option in NEWSMichael Vogt2016-01-051-0/+18
| | | | Git-Dch: ignore
* releasing package apt version 1.1~exp9Michael Vogt2015-08-181-1/+1
|
* debian/NEWS: Mention new pinning algorithm added in 2.0~exp1Julian Andres Klode2015-08-171-0/+12
|
* debian/changelog, debian/NEWS: prepare uploadMichael Vogt2011-02-081-1/+1
|
* merge 'after squeeze release'-stuffDavid Kalnischkies2011-02-031-0/+9
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [ David Kalnischkies ] * apt-pkg/depcache.cc: - add SetCandidateRelease() to set a candidate version and the candidates of dependencies if needed to a specified release (Closes: #572709) * cmdline/apt-get.cc: - if --print-uris is used don't setup downloader as we don't need progress, lock nor the directories it would create otherwise - show dependencies of essential packages which are going to remove only if they cause the remove of this essential (Closes: #601961) - keep not installed garbage packages uninstalled instead of showing in the autoremove section and installing those (Closes: #604222) - change pkg/release behavior to use the new SetCandidateRelease so installing packages from experimental or backports is easier - really do not show packages in the extra section if they were requested on the commandline, e.g. with a modifier (Closes: #184730) * debian/control: - add Vcs-Browser now that loggerhead works again (Closes: #511168) - depend on debhelper 7 to raise compat level - depend on dpkg-dev (>= 1.15.8) to have c++ symbol mangling * apt-pkg/contrib/fileutl.cc: - add a RealFileExists method and check that your configuration files are real files to avoid endless loops if not (Closes: #604401) - ignore non-regular files in GetListOfFilesInDir (Closes: #594694) * apt-pkg/contrib/weakptr.h: - include stddefs.h to fix compile error (undefined NULL) with gcc-4.6 * methods/https.cc: - fix CURLOPT_SSL_VERIFYHOST by really passing 2 to it if enabled * deb/dpkgpm.cc: - fix popen/fclose mismatch reported by cppcheck. Thanks to Petter Reinholdtsen for report and patch! (Closes: #607803) * doc/apt.conf.5.xml: - fix multipl{y,e} spelling error reported by Jakub Wilk (Closes: #607636) * apt-inst/contrib/extracttar.cc: - let apt-utils work with encoded tar headers if uid/gid are large. Thanks to Nobuhiro Hayashi for the patch! (Closes: #330162) * apt-pkg/cacheiterator.h: - do not segfault if cache is not build (Closes: #254770) * doc/apt-get.8.xml: - remove duplicated mentioning of --install-recommends * doc/sources.list.5.xml: - remove obsolete references to non-us (Closes: #594495) * debian/rules: - use -- instead of deprecated -u for dh_gencontrol - remove shlibs.local creation and usage - show differences in the symbol files, but never fail * pre-build.sh: - remove as it is not needed for a working 'bzr bd' * debian/{apt,apt-utils}.symbols: - ship experimental unmangled c++ symbol files * methods/rred.cc: - operate optional on gzip compressed pdiffs * apt-pkg/acquire-item.cc: - don't uncompress downloaded pdiff files before feeding it to rred - try downloading clearsigned InRelease before trying Release.gpg - change the internal handling of Extensions in pkgAcqIndex - add a special uncompressed compression type to prefer those files - download and use i18n/Index to choose which Translations to download * cmdline/apt-key: - don't set trustdb-name as non-root so 'list' and 'finger' can be used without being root (Closes: #393005, #592107) * apt-pkg/deb/deblistparser.cc: - rewrite LoadReleaseInfo to cope with clearsigned Releasefiles * ftparchive/writer.cc: - add config option to search for more patterns in release command - include Index files by default in the Release file * methods/{gzip,bzip}.cc: - print a good error message if FileSize() is zero * apt-pkg/aptconfiguration.cc: - remove the inbuilt Translation files whitelist
| * fix the invalid wrong locale month name in NEWS fileDavid Kalnischkies2011-01-141-1/+1
| |
| * * apt-pkg/depcache.cc:David Kalnischkies2010-12-031-0/+9
|/ | | | | | | - add SetCandidateRelease() to set a candidate version and the candidates of dependencies if needed to a specified release (Closes: #572709) - change pkg/release behavior to use the new SetCandidateRelease so installing packages from experimental or backports is easier
* * ftparchive/apt-ftparchive.cc:Julian Andres Klode2010-03-261-0/+7
| | | - Read default configuration (Closes: #383257)
* correct a spelling error spotted by lintian in the debian/NEWS file:David Kalnischkies2010-01-131-1/+1
| | | | W: spelling-error-in-news-debian: informations -> information
* fix a typo in debian/NEWS entry for 0.7.24: Allready -> Already (Closes: ↵David Kalnischkies2009-11-241-1/+1
| | | | #557674)
* add a NEWS entry for the upcoming upload summarizing the bigger and/orDavid Kalnischkies2009-09-241-0/+16
| | | | user-visible changes.
* releasing version 0.7.23Michael Vogt2009-08-271-1/+1
|
* merged from the jackyf-devel branchMichael Vogt2009-08-191-2/+2
|
* Rename: 'debian/NEWS.Debian' => 'debian/NEWS' to make the file recognizeable ↵Eugene V. Lyubimkin2008-12-181-0/+27
by debhelper and, so, installed.
generated by cgit v1.2.3-70-g09d2 (git 2.46.0) at 2024-11-01 08:31:56 +0000