Don't download "optional" files not in Release :/.

[apt.git] / debian / NEWS

diff --git a/debian/NEWS b/debian/NEWS
index 41ac763d816ba72ee06c22d5afd912576f176227..67275f6e4b9ac9b54b2263276a94a0387e5031f2 100644 (file)
--- a/debian/NEWS
+++ b/debian/NEWS
@@ -1,3 +1,46 @@
+apt (1.4~beta1) unstable; urgency=medium
+
+  Support for GPG signatures using the SHA1 or RIPE-MD/160 hash
+  algorithms has been disabled. Repositories using Release files
+  signed in such a way will stop working. This change has been made
+  due to security considerations, especially with regards to possible
+  further breakthroughs in SHA1 breaking during the lifetime
+  of this APT release series.
+
+  It is possible (but STRONGLY ADVISED AGAINST) to revert to the previous
+  behaviour by setting the options
+    APT::Hashes::SHA1::Weak "yes";
+    APT::Hashes::RIPE-MD/160::Weak "yes";
+  Note that setting these options only affects the verification of the overall
+  repository signature.
+
+ -- Julian Andres Klode <jak@debian.org>  Fri, 25 Nov 2016 13:19:32 +0100
+
+apt (1.2~exp1) experimental; urgency=medium
+
+  [ Automatic removal of debs after install ]
+  After packages are successfully installed by apt(8),
+  the corresponding .deb package files will be
+  removed from the /var/cache/apt/archives cache directory.
+
+  This can be changed by setting the apt configuration option
+    "Binary::apt::APT::Keep-Downloaded-Packages" to "true". E.g:
+
+  # echo 'Binary::apt::APT::Keep-Downloaded-Packages "true";' \
+      > /etc/apt/apt.conf.d/01keep-debs
+
+  Please note that the behavior of apt-get is unchanged. The
+  downloaded debs will be kept in the cache directory after they
+  are installed. To enable the behavior for other tools, you can set
+  "APT::Keep-Downloaded-Packages" to false.
+
+  [ Compressed indices ]
+  If you use Acquire::gzipIndexes, or any other compressed index targets,
+  those will now be compressed with the fastest supported algorithm,
+  currently lz4.
+
+ -- Michael Vogt <mvo@debian.org>  Tue, 05 Jan 2016 19:22:16 +0100
+
 apt (1.1~exp9) experimental; urgency=medium
 
   A new algorithm for pinning has been implemented, it now assigns a