From 55c373ca9f6567a27ec9e8f90384781908157dae Mon Sep 17 00:00:00 2001 From: Julian Andres Klode Date: Wed, 20 Nov 2024 16:10:46 +0100 Subject: Release 2.9.13 --- debian/changelog | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) (limited to 'debian') diff --git a/debian/changelog b/debian/changelog index 482f5a056..a6b45afeb 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,22 @@ +apt (2.9.13) unstable; urgency=medium + + * Add a --comment option to record Comment: in history + * Hardening: Add -Wp,-D_GLIBCXX_ASSERTIONS to CXXFLAGS to enable bounds + checking for all STL containers. + * patterns: Avoid out-of-bounds std::string_view read. + We only pass NUL-terminated strings to the function, and the code expects + that but we pass through an interface which doesn't guarantee that, so + we trigger an index < size() assertion when accessing the terminating + NUL byte when compiled with -Wp,-D_GLIBCXX_ASSERTIONS. + * ftparchive: Remove fixed size buffers on trusted inputs (LP: #2087848) + - ftparchive: override: Remove fixed-size line buffers in override files + - ftparchive: cachedb: Remove 600-byte key (and hence file path) limit + - ftparchive: writer: Remove line length limit on file lists + * tests: Temporarily disable valgrind-if-available on armhf and ppc64el + to avoid having to wait for a new valgrind without those architectures + + -- Julian Andres Klode Wed, 20 Nov 2024 15:59:46 +0100 + apt (2.9.12) unstable; urgency=medium [ наб ] -- cgit v1.2.3-70-g09d2