From e126f608c877b5febb1a43d01cb3c662c598e8f2 Mon Sep 17 00:00:00 2001 From: Julian Andres Klode Date: Mon, 23 Dec 2024 12:23:44 +0100 Subject: Release 2.9.19 --- debian/NEWS | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) (limited to 'debian/NEWS') diff --git a/debian/NEWS b/debian/NEWS index 6bb6cf19f..5c10ff1f2 100644 --- a/debian/NEWS +++ b/debian/NEWS @@ -1,3 +1,22 @@ +apt (2.9.19) unstable; urgency=medium + + This release switches to OpenSSL for hashing and TLS, replacing the + GnuTLS and gcrypt libraries. + + This release switches to Sequoia for OpenPGP verification on supported + Debian platforms. A Sequoia policy override enabling SHA1 self-signatures + until 2026 is included. To override the policy, the following environment + variables and files are considered: + + * The APT_SEQUOIA_CRYPTO_POLICY environment variable, and failing that: + - /etc/crypto-policies/back-ends/apt-sequoia.config, + - /var/lib/crypto-config/profiles/current/apt-sequoia.config + * The SEQUOIA_CRYPTO_POLICY environment variable, and failing that: + - /etc/crypto-policies/back-ends/sequoia.config + - /var/lib/crypto-config/profiles/current/sequoia.config + + -- Julian Andres Klode Mon, 23 Dec 2024 12:16:22 +0100 + apt (2.9.15) unstable; urgency=medium This release stops using apt-key to verify the signatures. -- cgit v1.2.3-70-g09d2