From e126f608c877b5febb1a43d01cb3c662c598e8f2 Mon Sep 17 00:00:00 2001 From: Julian Andres Klode Date: Mon, 23 Dec 2024 12:23:44 +0100 Subject: Release 2.9.19 --- debian/NEWS | 19 +++++++++++++++++++ debian/changelog | 15 +++++++++++++++ 2 files changed, 34 insertions(+) (limited to 'debian') diff --git a/debian/NEWS b/debian/NEWS index 6bb6cf19f..5c10ff1f2 100644 --- a/debian/NEWS +++ b/debian/NEWS @@ -1,3 +1,22 @@ +apt (2.9.19) unstable; urgency=medium + + This release switches to OpenSSL for hashing and TLS, replacing the + GnuTLS and gcrypt libraries. + + This release switches to Sequoia for OpenPGP verification on supported + Debian platforms. A Sequoia policy override enabling SHA1 self-signatures + until 2026 is included. To override the policy, the following environment + variables and files are considered: + + * The APT_SEQUOIA_CRYPTO_POLICY environment variable, and failing that: + - /etc/crypto-policies/back-ends/apt-sequoia.config, + - /var/lib/crypto-config/profiles/current/apt-sequoia.config + * The SEQUOIA_CRYPTO_POLICY environment variable, and failing that: + - /etc/crypto-policies/back-ends/sequoia.config + - /var/lib/crypto-config/profiles/current/sequoia.config + + -- Julian Andres Klode Mon, 23 Dec 2024 12:16:22 +0100 + apt (2.9.15) unstable; urgency=medium This release stops using apt-key to verify the signatures. diff --git a/debian/changelog b/debian/changelog index 5f90b1f77..5f6bb7205 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,18 @@ +apt (2.9.19) unstable; urgency=medium + + * Replace GnuTLS and gcrypt with OpenSSL + * Replace GnuPG with Sequoia on supported Debian platforms + - methods: Add new sqv method + - debian: Add default policy to allow SHA-1 self-signatures until 2026 + - debian: Plug sqv into the package build + * Smaller bits: + - apt-helper: Add a hash-file helper to debug file hashing + - Use sq in the test suite, remove apt-key + - abicheck: Add symbol-merge.py helper + - Symbols: Merge stable, noble, testing, unstable + + -- Julian Andres Klode Mon, 23 Dec 2024 12:16:19 +0100 + apt (2.9.18) unstable; urgency=medium * Fix out-of-bounds read in `apt show :` (Closes: #1090068) -- cgit v1.2.3-70-g09d2