+apt (1.3.1) unstable; urgency=medium
+
+ [ Julian Andres Klode ]
+ * Do not read stderr from proxy autodetection scripts
+ * travis: Move codecov from after_success to after_script
+
+ [ victory ]
+ * Japanese manpages translation update
+
+ [ Mert Dirik ]
+ * Turkish program translation update (Closes: #838731)
+
+ -- Julian Andres Klode <jak@debian.org> Tue, 04 Oct 2016 19:43:35 +0200
+
+apt (1.3) unstable; urgency=medium
+
+ [ David Kalnischkies ]
+ * abort connection on '.' target replies in SRV
+ * edsp: try 2 to read responses even if writing failed
+
+ [ Julian Andres Klode ]
+ * test: Always install dpkg into our tests, regardless of MA
+ * CMake: Add coverage build type
+ * Coverage: Do not print messages from gcov
+ * VersionHash: Do not skip too long dependency lines
+
+ -- Julian Andres Klode <jak@debian.org> Tue, 20 Sep 2016 23:53:51 +0200
+
+apt (1.3~rc4) unstable; urgency=medium
+
+ [ Julian Andres Klode ]
+ * Fix segfault and out-of-bounds read in Binary fields
+ * TagFile: Fix off-by-one errors in comment stripping
+ * Base256ToNum: Fix uninitialized value
+ * test-apt-cdrom: Fix for gnupg 2.1.15
+ * CMake: test/libapt: Use a prebuilt GTest library if available
+ * CMake: apt-pkg: Use correct ICONV_INCLUDE_DIRS variable
+ * acquire: Use priority queues and a 3 stage pipeline design
+ => faster updates with better progress reporting
+ * debian: Move bugscript to old location for overlayfs xdev issue
+ * debian: Pass -O to make to get readable build logs
+
+ [ David Kalnischkies ]
+ * try not to call memcpy with length 0 in hash calculations
+ * re-add apt breaks/replaces apt-utils (<< 1.3~exp2~) (Closes: #836220)
+ * support long keyid and fingerprint in gpgv's GOODSIG
+
+ -- Julian Andres Klode <jak@debian.org> Fri, 02 Sep 2016 20:26:36 +0200
+
+apt (1.3~rc3) unstable; urgency=medium
+
+ [ Julian Andres Klode ]
+ * Ignore SIGINT and SIGQUIT for Pre-Install hooks
+ This basically fixes Bug #832593, as long as your /bin/sh
+ is not dash, as dash is evil.
+ * prepare-release: Use equivs and gdebi-core for travis deps
+ * install-progress: Call the real ::fork() in our fork() method
+ * Packaging cleanup:
+ - debian: Install etc/apt if present (e.g., on Ubuntu)
+ - tests/control: Handle the gpg1/gpg2 mess a bit better
+ - debian: Make better use of the tree installed by CMake
+ - debian: Switch to debhelper 10
+ - debian: Add more lintian overrides
+ - debian: Drop outdated stuff
+ - debian: Run wrap-and-sort
+ - Add new symbols to symbols file
+ * Build system fixes, including:
+ - CMake: Translations: Don't rebuild .mo for line number changes
+ - CMake: Translations: Pass --previous to msgmerge.
+ Thanks to Guillem Jover for the suggestion.
+ - CMake: Do not add po/ if USE_NLS is OFF
+ - CMake: Install config and logging directories
+ - CMake: Translations: Build byproduct before output
+ - CMake: Add Large File Support (Closes: #834767)
+ * Several portability fixes (full test suite passes on FreeBSD), including:
+ - CMake: Discover docbook stylesheet in other locations
+ - Add missing includes and external definitions
+ - Use C locale instead of C.UTF-8 for protocol strings
+ - Make directory paths configurable
+ - Lower-case uname -r output in kernel autoremove helper
+ - Make root group configurable via ROOT_GROUP
+ * Accept --autoremove as alias for --auto-remove
+ * apt-inst: debfile: Pass comp. Name to ExtractTar, not Binary
+ * changelog: Respect Dir setting for local changelog getting
+ * init: Add Dir::Bin::planners default entry
+ * Switch documentation from httpredir.d.o to deb.d.o
+
+ [ Zhou Mo ]
+ * zh_CN.po: update simplified Chinese translation
+
+ [ David Kalnischkies ]
+ * do dpkg --configure before --remove/--purge --pending (Closes: 835094)
+ * prevent C++ locale number formatting in text APIs (try 3) (LP: 1611010)
+ * do fail on weakhash/loop earlier in acquire (Closes: 835195)
+ * do not restore selections for already purged packages
+ * apt-key: warn instead of fail on unreadable keyrings
+ * show apt-key warnings in apt update (Closes: 834973)
+ * treat .ddeb files like .deb, especially for dpkg (LP: #1616909)
+ * randomize acquire order for same type index files
+ * don't loop on pinning pkgs from absolute debs by regex (Closes: 835818)
+
+ -- Julian Andres Klode <jak@debian.org> Tue, 30 Aug 2016 22:20:28 +0200
+
+apt (1.3~rc2) unstable; urgency=medium
+
+ [ Julian Andres Klode ]
+ * debian/NEWS: Get rid of 1.3~pre3+cmake1 entry.
+ Thanks to Axel Beckert for reporting
+ * CMake: Use COPYONLY instead of @ONLY
+ * fileutl: empty file support: Avoid fstat() on -1 fd and check result
+ * Change anonscm.d.o links to /git/apt/apt.git and https
+
+ [ David Kalnischkies ]
+ * don't perform int<float in progress bar drawing
+ * ensure a good clock() value for usage and tests
+ * drop incorrect const attribute from DirectoryExists (LP: 1473674)
+ * http(s): allow empty values for header fields (Closes: 834048)
+ * don't sent Range requests if we know its not accepted
+ * don't try pipelining if server closes connections (Closes: #832113)
+ * log with the failed item description, not with next try
+ * retry without same redirection mirror on 404 errors
+ * support getting only-uncompressed files via by-hash
+ * support compression and by-hash for .diff/Index files (Closes: #824926)
+ * default to Dir=/ in dpkg/status file finding magic
+ * add the gpg-classic variant to the gpgv/gnupg or-group
+ * allow spaces in fingerprints for 'apt-key del'
+ * add --with-source option and Packages/Sources support
+ * don't count each Type as an individual deb822-sources stanza
+ * methods: read config in most to least specific order (Closes: 834642)
+
+ -- Julian Andres Klode <jak@debian.org> Wed, 17 Aug 2016 23:31:07 +0200
+
+apt (1.3~rc1) unstable; urgency=medium
+
+ * Summary: CMake branch merged, socks5h (and tor) support, and fancy
+ installation ordering changes.
+
+ [ Julian Andres Klode ]
+ * Handle interrupt when running Pre-Install hooks (Closes: #832593)
+ * CMake: po: Add mirror method
+ * CMake: Translations: Add support for shell scripts
+ * debian: make autopkgtest run with CMake build dir
+ * CMake: Bump minimum required version to 3.4.0
+ * CMake: Check for ptsname_r() again (Closes: #833674)
+ * CMake: Rewrite existing Documentation support and add doxygen
+ * apt-private: Do not include apti18n.h in headers
+ * Get rid of the old buildsystem
+ * Fix some indentation issues in README.md
+
+ [ David Kalnischkies ]
+ * pass --force-remove-essential to dpkg only if needed
+ * use dpkg --unpack --recursive to avoid long cmdlines
+ * save and restore selection states before/after calling dpkg
+ * select remove/purge packages early on for dpkg
+ * call dpkg with --no-triggers by default (Closes: #626599)
+ * don't purge directly, but remove and do purge at the end
+ * ensure all configures are reported to hook scripts
+ * ensure all removes are reported to hook scripts
+ * support all socks-proxy known to curl in https method
+ * suggest transport-packages based on established namescheme
+ * fail on unsupported http/https proxy settings (Closes: #623443)
+ * detect redirection loops in acquire instead of workers
+ * use the same redirection handling for http and https
+ * implement generic config fallback for methods
+ * implement socks5h proxy support for http method (Closes: 744934)
+ * allow methods to be disabled and redirected via config
+ * allow user@host (aka: no password) in URI parsing
+ * try to avoid removal of crossgraded packages
+ * simulate all package manager actions explicitly
+ * disable explicit configuration of all packages at the end
+ * block direct connections to .onion domains (RFC7687)
+ * http: auto-configure for local Tor proxy if called as 'tor'
+
+ -- Julian Andres Klode <jak@debian.org> Thu, 11 Aug 2016 14:10:22 +0200
+
+apt (1.3~pre3+cmake2) experimental; urgency=medium
+
+ * Build-depend on pkg-config
+
+ -- Julian Andres Klode <jak@debian.org> Sat, 06 Aug 2016 23:18:37 +0200
+
+apt (1.3~pre3+cmake1) experimental; urgency=medium
+
+ [ Julian Andres Klode ]
+ * configure.ac: Re-enable pthread support for thread-local _error
+ * CMake: Add basic CMake build system
+ * CMake: Add support for building and installing .mo files
+ * CMake: Add initial support for documentation building
+ * CMake: Switch integration tests and travis over
+ * CMake: debian: Switch packaging over to CMake and dh 9
+
+ [ Jason Travis ]
+ * doc: update path to periodic options script
+
+ -- Julian Andres Klode <jak@debian.org> Sat, 06 Aug 2016 22:37:30 +0200
+
+apt (1.3~pre3) unstable; urgency=medium
+
+ [ Julian Andres Klode ]
+ * ExecGPGV: Fork in all cases
+ * ExecGPGV: Pass current config state to apt-key via temp file (LP: #1607283)
+
+ [ David Kalnischkies ]
+ * tests: activate dpkg multi-arch even if test is single arch
+ * ensure Cnf::FindFile doesn't return files below /dev/null
+ * don't hardcode /var/lib/dpkg/status as dir::state::status
+ * allow arch=all to override No-Support-for-Architecture-all
+ * support "install ./foo.changes"
+ * clean up default-stanzas from extended_states on write
+ * report warnings&errors consistently in edit-sources
+ * create non-existent files in edit-sources with 644 instead of 640
+ * report progress for removing while purging pkgs
+ * use a configurable location for apport report storage
+ * report progress for triggered actions
+ * call flush on the wrapped writebuffered FileFd
+ * verify hash of input file in rred
+ * use proper warning for automatic pipeline disable
+ * http: skip requesting if pipeline is full
+ * rred: truncate result file before writing to it (Closes: #831762)
+ * eipp: avoid producing file warnings in simulation (Closes: 832614)
+ * if the FileFd failed already following calls should fail, too
+ * edsp: try to read responses even if writing failed
+ * prevent C++ locale number formatting in text APIs (try 2) (Closes: 832044)
+ * apt-key: kill gpg-agent explicitly in cleanup
+
+ [ Mert Dirik ]
+ * Turkish program translation update (Closes: 832039)
+
+ -- Julian Andres Klode <jak@debian.org> Thu, 04 Aug 2016 10:23:49 +0200
+
+apt (1.3~pre2) unstable; urgency=medium
+
+ [ Andrew Patterson ]
+ * Add kernels with "+" in the package name to APT::NeverAutoRemove
+ (Closes: #830159)
+
+ [ David Kalnischkies ]
+ * add Testsuite-Triggers to tagfile-order
+ * tests: fix external solver/planner directory setup
+
+ -- Julian Andres Klode <jak@debian.org> Fri, 08 Jul 2016 14:28:57 +0200
+
+apt (1.3~pre1) unstable; urgency=medium
+
+ Upload to unstable from the pub because Niels wanted it
+
+ [ David Kalnischkies ]
+ * show right binary name in simulation notice (Closes: 825216)
+ * imbue datetime parsing with C.UTF-8 locale (Closes: 828011)
+ * imbue .diff/Index parsing with C.UTF-8 as well
+ * close server if parsing of header field failed
+ * add myself to Uploaders
+ * eipp: implement version 0.1 of the protocol
+ * eipp: provide the internal planer as an external one
+ * eipp: make no difference between remove & purge
+ * eipp: properly handle arch-specific provides
+ * eipp: implement Immediate-Configuration flag
+ * eipp: add Allow-Temporary-Remove-of-Essentials
+ * eipp: rename stanza 'Install' to 'Unpack'
+ * eipp: enable xz-compressed scenario logging
+ * if conf unset, don't read / as conf/pref/sources dir
+ * don't do atomic overrides with failed files (Closes: 828908)
+ * if reading of autobit state failed, let write fail
+ * write auto-bits before calling dpkg & again after if needed
+ * protect only the latest same-source providers from autoremove
+ * reinstalling local deb file is no downgrade
+ * do not treat same-version local debs as downgrade
+ * alias apt-key list to finger (Closes: 829232)
+ * warn if apt-key is used in scripts/its output parsed
+ * deprecate 'apt-key update' and no-op it in Debian
+ * use +0000 instead of UTC by default as timezone in output
+ * avoid 416 response teardown binding to null pointer
+ * report write errors in EDSP/EIPP properly back to caller
+ * EIPP/EDSP log can't be written is a warning, not an error
+ * don't change owner/perms/times through file:// symlinks
+ * report all instead of first error up the acquire chain
+ * keep trying with next if connection to a SRV host failed
+
+ [ Zhou Mo ]
+ * zh_CN.po: update simplified chinese translation
+
+ [ Julian Andres Klode ]
+ * methods/ftp: Cope with weird PASV responses.
+ Thanks to Lukasz Stelmach for the initial patch (Closes: #420940)
+ * Fix buffer overflow in debListParser::VersionHash() (Closes: #828812)
+ * cache: Bump minor version to 6
+ * indextargets: Check that cache could be built before using it
+ (Closes: #829651)
+
+ [ Nicolas Le Cam ]
+ * Use the ConditionACPower feature of systemd in the apt-daily service
+ (Closes: #827930)
+ * Add a apt suggests powermgmt-base
+
+ -- Julian Andres Klode <jak@debian.org> Thu, 07 Jul 2016 20:25:18 +0200
+
+apt (1.3~exp3) experimental; urgency=medium
+
+ [ Petter Reinholdtsen ]
+ * Norwegian Bokmål program translation update (Closes: 827067)
+
+ [ David Kalnischkies ]
+ * apt-key: don't search PATH if command is a path already
+ * don't use FindFile for external Dir::Bin commands
+ * http: don't hang on redirect with length + connection close
+ * merge sources.list lines based on Release filename (Closes: 826944)
+ * avoid std::get_time usage to sidestep libstdc++6 bug (LP: 1593583)
+ * do not error if auto-detect-proxy cmd has no output (Closes: 827713)
+ * implement and document DIRECT for auto-detect-proxy
+ * run update post-invokes even on (partial) failures
+ * handle weak-security repositories as unauthenticated (Closes: 827364)
+ * generalize secure->insecure downgrade protection
+ * forbid insecure repositories by default expect in apt-get (Closes: 808367)
+ * source: if download is skipped, don't try to unpack
+ * better error message for insufficient hashsums (Closes: 827758)
+ * add [weak] tag to hash errors to indicate insufficiency
+ * ensure filesize of deb is included in the hashes list
+ * add insecure (and weak) allow-options for sources.list
+
+ [ Dominic Benson ]
+ * Reinstate caching of file hashes in apt-ftparchive (Closes: #806924)
+
+ [ Zhou Mo ]
+ * zh_CN.po: update simplified chinese translation
+
+ -- Julian Andres Klode <jak@debian.org> Wed, 22 Jun 2016 14:50:12 +0200
+
+apt (1.3~exp2) experimental; urgency=medium
+
+ [ Johannes 'josch' Schauer ]
+ * edsp: document unique package identifiers
+
+ [ David Kalnischkies ]
+ * edsp: warn if unexpected stanzas appear in the solution
+ * show globalerrors before asking for confirmation
+ * show final solution in --no-download --fix-missing mode
+ * document --no- as --show-upgraded is the default (Closes: 824456)
+ * fail instead of segfault on unreadable config files (Closes: 824503)
+ * convert EDSP to be based on FileFd instead of FILE*
+ * edsp: dump: support dumping into compressed file
+ * edsp: add Forbid-{New-Install,Remove} and Upgrade-All
+ * update symbols file
+ * no-change bump of Standards-Version to 3.9.8
+ * override lintian on doxygens embedded-javascript-library
+ * fix and document on the fly compressor config
+ * prevent C++ locale number formatting in text APIs (Closes: #825396)
+ * accept only the expected UTC timezones in date parsing (Closes: 819697)
+ * avoid changing the global LC_TIME for Release writing
+ * use de-localed std::put_time instead rolling our own
+ * use std::locale::global instead of setlocale
+ * look into the right textdomain for apt-utils again
+ * try to detect sudo spawned root-shell in prefixing (Closes: 825742)
+ * ignore std::locale exception on non-existent "" locale
+ * apt-key: change to / before find to satisfy its CWD needs.
+ Thanks to Samuel Thibault for 'finding' the culprit! (Closes: 826043)
+ * edsp: use an ID mapping for the internal solver
+ * edsp: use a stanza based interface for solution writing
+ * edsp: optionally store a compressed copy of the last scenario
+ * move 'dump' solver from apt-utils to apt package
+ * edsp: if internal is used, keep this decision
+ * edsp: if logging is requested, do it for internal, too
+ * edsp: drop privileges before executing solvers
+ * don't explicitly configure the last round of packages
+ * drop Dpkg::MaxArgs in favor of Dpkg::MaxArgsBytes
+ * do not hang on piped input in PipedFileFdPrivate
+ * don't leak an FD in lz4 (de)compression
+ * don't leak EDSP solver output fd
+ * don't leak FD in AutoProxyDetect command return parsing
+
+ [ Julian Andres Klode ]
+ * Provide complete apt bash completion.
+ Thanks to Elias Fröhner and Svyatoslav Gryaznov for the initial work
+ (LP: #1573547)
+ * apt.systemd.daily: Put opening brace of check_power on extra line
+ (LP: #1581985)
+ * Add conflicting Signed-By values to error message
+ * Normalize Signed-By values by removing trailing commas everywhere
+ * Pass -fvisibility-inlines-hidden to g++
+
+ [ Zhou Mo ]
+ * zh_CN.po: update simplified Chinese translation.
+
+ [ Yuri Kozlov ]
+ * Russian program translation update (Closes: 824702)
+
+ [ Takuma Yamada ]
+ * Japanese program translation update (Closes: 826291)
+
+ -- Julian Andres Klode <jak@debian.org> Sat, 11 Jun 2016 17:23:19 +0200
+
+apt (1.3~exp1) experimental; urgency=medium
+
+ [ David Kalnischkies ]
+ * make random acquire queues work less random
+ * add dep11 files to default Release patterns
+ * don't ask server if we have entire file in partial/
+ * properly format multiline error messages
+ * format multiline errors properly in acquire progress
+ * show more details for "Hash Sum mismatch" errors
+ * show more details for "Writing more data" errors, too
+ * use the same redirection mirror for all index files
+ * edsp: ask policy engine for the pin of the version directly
+ * give rc-status packages a pin of -1
+ * respect user pinning in M-A:same version (un)screwing
+ * deprecate confusing Pkg.CandVersion() method
+ * factor out Pkg/DepIterator prettyprinters into own header
+ * gpgv: use EXPKEYSIG instead of KEYEXPIRED
+ * gpgv: handle expired sig as worthless
+ * don't show NO_PUBKEY warning if repo is signed by another key
+ (Closes: 618445)
+ * support multiple fingerprints in signed-by
+ * support Signed-By in Release files as a sort of HPKP
+ * bugscript: include all configuration fragment files (Closes: 820861)
+ * move gnupg|gnupg2 from apt Depends to Recommends
+ * warn if apt-key is run unconditionally in maintainerscript
+ * remove 100-levels config nesting limit
+ * let DPKG_COLORS default to our APT::Color setting
+ * allow redirection for items without a space in the desc again
+ * delay progress until Release files are downloaded
+ * download arch:all also for NATIVE_ARCHITECTURE indextargets
+ * implement Fallback-Of for IndexTargets
+ * implement Identifier field for IndexTargets
+ * gpgv: show always webportal error on NODATA (Closes: 823746)
+ * don't sent uninstallable rc-only versions via EDSP
+ * edsp: support generic and solver-specific configs (Closes: 823918)
+
+ [ Julian Andres Klode ]
+ * policy: Get rid of old (pre-1.1) GetCandidateVer algorithm
+ * private-show: Get rid of old policy support code
+ * ftparchive: Support writing Signed-By fields
+ * Strip trailing commas for created signed-by fingerprint lists
+ * update: Run Post-Invoke-Success if not all sources failed
+
+ [ Patrick Cable ]
+ * refactored no_proxy code to work regardless of where https proxy is set
+
+ [ James McCoy ]
+ * deb822: Restore support for <multivalue>-{Add,Remove}
+
+ [ Zhou Mo ]
+ * zh_TW.po: remove several fuzzy tags after review
+
+ [ Adrian Wielgosik ]
+ * Don't copy strings in Startswith, Endswith
+ * Speed up GetLocalitySortedVersionSet.
+
+ [ Frans Spiesschaert ]
+ * Dutch program translation update (Closes: 823976)
+
+ -- Julian Andres Klode <jak@debian.org> Wed, 11 May 2016 10:48:27 +0200
+
+apt (1.2.11) unstable; urgency=medium
+
+ [ David Kalnischkies ]
+ * ensure transaction states are changed only once
+ * stop handling items in doomed transactions.
+ Thanks to Barr Detwix & Vincent Lefevre for log files (Closes: 817240)
+ * do not require non-broken systems in 'upgrade'
+ * detect compressed status files on extension again
+ * recheck Pre-Depends satisfaction in SmartConfigure (LP: #1569099)
+ * fix Alt-Filename handling of file method
+ * allow uncompressed files to be empty in store again
+ * silently skip acquire of empty index files
+ * ensure outdated files are dropped without lists-cleanup
+
+ [ Kelemen Gábor ]
+ * Hungarian program translation update (Closes: 820638)
+
+ -- Julian Andres Klode <jak@debian.org> Mon, 25 Apr 2016 15:23:49 +0200
+
+apt (1.2.10) unstable; urgency=medium
+
+ [ Zhou Mo ]
+ * zh_CN.po: update simplified Chinese translation. (100%)
+
+ [ Julian Andres Klode ]
+ * test-apt-download-progress: Use a larger file for testing
+ * Allow lowering trust level of a hash via config
+
+ [ Michael Vogt ]
+ * Use systemd.timer instead of a cron job (Closes: #600262, #709675, #663290)
+ (LP: #246381, #727685)
+
+ [ David Kalnischkies ]
+ * use buffered writing for InRelease splitting
+
+ [ Takuma Yamada ]
+ * Japanese program translation update (Closes: 819938)
+
+ -- Michael Vogt <mvo@debian.org> Tue, 05 Apr 2016 20:23:47 +0200
+
+apt (1.2.9) unstable; urgency=high
+
+ [ David Kalnischkies ]
+ * drop confusing comma from no strong hash message
+
+ [ Julian Andres Klode ]
+ * Do not mark packages for keep that we want to remove (LP: #1562402)
+ (This fixes some upgrades involving renames where the old package
+ is removed)
+
+ -- Julian Andres Klode <jak@debian.org> Sun, 27 Mar 2016 01:26:51 +0100
+
+apt (1.2.8) unstable; urgency=medium
+
+ [ Michael Vogt ]
+ * Get accurate progress reporting in apt update again
+
+ [ Julian Andres Klode ]
+ * Report non-transient errors as errors, not as warnings
+ * methods/gpgv: Rewrite error handling and message.
+ Thanks to Ron Lee for wording suggestions
+ * Use descriptive URIs in 104 Warning messages
+ * cachefile: Only set members that were initialized successfully
+ (Closes: #818628)
+ * Update symbols file
+
+ [ David Kalnischkies ]
+ * do not strip epochs from state version strings (Closes: 818162)
+ * properly check for "all good sigs are weak" (Closes: 818910)
+ * handle gpgv's weak-digests ERRSIG
+
+ [ Zhou Mo ]
+ * zh_CN.po: update simplified Chinese translation. (Closes: #818639)
+
+ [ Takuma Yamada ]
+ * Japanese manpage translation update (Closes: 818950)
+
+ -- Julian Andres Klode <jak@debian.org> Thu, 24 Mar 2016 19:31:24 +0100
+
+apt (1.2.7) unstable; urgency=medium
+
+ "Caesar is dead"
+
+ [ Frans Spiesschaert ]
+ * Dutch program translation update (Closes: 817060)
+ * Dutch manpages translation update (Closes: 817062)
+
+ [ Julian Andres Klode ]
+ * Use native architecture instead of amd64 for build-dep-purge test
+ * Do not consider SHA1 usable
+ * Test that SHA1-only .diff/Index files are not used
+ * test: Use SHA512 digests for GPG, reject SHA1-based signatures
+ * methods/gpgv: Reject weak digest algorithms
+ * apt-pkg/acquire-worker.cc: Introduce 104 Warning message
+ * methods/gpgv: Warn about SHA1 (and RIPEMD-160)
+
+ [ David Kalnischkies ]
+ * require $(HASH)-Download field in .diff/Index files
+ * flush line-clearing on progress stop before post-invoke (Closes: 793672)
+ * enforce verify of filesize in 'apt-get source'
+
+ [ Manuel "Venturi" Porras Peralta ]
+ * Spanish apt-mark translation fix (Closes: 817999)
+
+ [ Zhou Mo ]
+ * zh_CN.po: fix translation bug. (Closes: #818177)
+
+ [ Michael Vogt ]
+ * Fix bug where the problemresolve can put a pkg into a heisenstate
+ (LP: #1550741)
+
+ -- Julian Andres Klode <jak@debian.org> Tue, 15 Mar 2016 19:20:18 +0100
+
+apt (1.2.6) unstable; urgency=high
+
+ [ Veres Lajos ]
+ * Fix several typos
+
+ [ Julian Andres Klode ]
+ * apt-pkg/algorithms.cc: Avoid stack buffer overflow in KillList
+ (Closes: #701069)
+ * urgency=high because this fixes a stack overflow and the last
+ upload fixed several segfaults and has not migrated yet either.
+
+ -- Julian Andres Klode <jak@debian.org> Mon, 07 Mar 2016 19:49:38 +0100
+
+apt (1.2.5) unstable; urgency=medium
+
+ [ Daniel Kahn Gillmor ]
+ * apt-key del should correctly handle keyids prefixed with 0x
+
+ [ David Kalnischkies ]
+ * support APT::Get::Build-Dep-Automatic again in build-dep
+ * add test for apt-key 0xKEY and use parameter expansion.
+ Thanks to James McCoy for the suggestion. (Closes: 816691)
+ * do not move not-failed pdiff-patches into CWD on failure (Closes: #816837)
+ * get group again after potential remap in Source: parse.
+ Thanks to Francesco Poli and Marc Haber for testdata. (Closes: 812251)
+
+ [ Colin Watson ]
+ * Fix lzma write support to handle "try again" case (Closes: #751688)
+
+ [ Julian Andres Klode ]
+ * Prevent double remapping of iterators and string views
+ * debian/control: Set Standards-Version to 3.9.7
+
+ -- Julian Andres Klode <jak@debian.org> Sun, 06 Mar 2016 19:47:45 +0100
+
+apt (1.2.4) unstable; urgency=medium
+
+ [ David Kalnischkies ]
+ * use local changelog from /usr/share/doc if possible
+ * always download changelogs into /tmp first
+ * pass versioned provides to external solvers in EDSP
+
+ [ Julian Andres Klode ]
+ * Fix maintscript to properly remove 20changelog (Closes: #814754)
+ * Fix crash with empty architecture list (LP: #1549819)
+ * Add missing numeric includes in files using std::accumulate()
+
+ -- Julian Andres Klode <jak@debian.org> Sat, 27 Feb 2016 14:02:47 +0100
+
+apt (1.2.3) unstable; urgency=high
+
+ [ Julian Andres Klode ]
+ * Set seekpos to 0 after reopening files in Seek() (Closes: #812994, #813000)
+
+ [ David Kalnischkies ]
+ * get dpkg lock in build-dep if cache was invalid again (Closes: 814139)
+
+ -- Julian Andres Klode <jak@debian.org> Wed, 10 Feb 2016 18:02:20 +0100
+
+apt (1.2.2) unstable; urgency=medium
+
+ [ David Kalnischkies ]
+ * always create pkg at the time pkg:arch is created
+ * reimplement build-dep via apts normal resolver
+ (Closes: #137560, #444930, #489911, #583914, #728317, #812173)
+ * parse version correctly from binary Source field (Closes: 812492)
+ * get sources for packages in multiple releases again (Closes: 812497)
+ * only warn about missing/invalid Date field for now (Closes: 809329)
+ * support <libc>-<kernel>-<cpu> in architecture specs.
+ Thanks to Bálint Réczey for initial patch (Closes: #812212)
+ * avoid building dependency tree in 'source' command
+
+ [ Stefan Bühler ]
+ * fix "Mismatched free() / delete / delete []" in simple_buffer
+
+ [ Julian Andres Klode ]
+ * Do not buffer writes larger than the buffer if possible
+ * Drop the g++ build-dep, transition is done
+ * NEWS: Prefix the keep deb option with Binary::apt:: (Closes: #812111)
+ * rred: If there were I/O errors, fail
+ * Correctly report write errors when flushing buffered writer
+ * test: Fix apt-key tests to work with current gpg 2.1
+
+ [ Manuel "Venturi" Porras Peralta ]
+ * Spanish program translation update (Closes: 813467)
+
+ [ Adrian Wielgosik ]
+ * Try avoiding loading long package description
+ * Avoid temporary strings in SubstVar.
+
+ [ Fredrik Fornwall ]
+ * edspsystem.cc: include <stdlib.h> for mkdtemp (Closes: #807367)
+
+ -- Julian Andres Klode <jak@debian.org> Thu, 04 Feb 2016 22:50:43 +0100
+
+apt (1.2.1) unstable; urgency=high
+
+ [ Zhou Mo ]
+ * po: update zh_CN programs translation
+
+ [ Julian Andres Klode ]
+ * Remap StringView instances pointing into the cache (Closes: #812251)
+
+ [ Michael Vogt ]
+ * Log calling SUDO_USER or PKEXEC_UID in history.log.
+ Thanks to Thomas Reusch
+
+ -- Julian Andres Klode <jak@debian.org> Mon, 25 Jan 2016 18:03:50 +0100
+
+apt (1.2) unstable; urgency=medium
+
+ [ Julian Andres Klode ]
+ * Do not break apt-file (<< 3.0~exp1~), 2.X works fine
+ * Version the build-depends on liblz4-dev to >= 0.0~r126
+ * search: Handle packages without description (Closes: #810622)
+ * Only enable pipelining if server is HTTP/1.1 (Closes: #810796)
+
+ [ Mattia Rizzolo ]
+ * Sort the list of sources to be built and linked (Closes: #810509)
+
+ [ Michael Vogt ]
+ * Do not show multiple identical apt-cache showsrc entries (Closes: #734922)
+
+ [ David Kalnischkies ]
+ * evaluate sourceslist-list-format entity in vendors sources.list.
+ Thanks to Niels Thykier for reporting on IRC
+ * update symbols file
+ * fix M-A:foreign provides creation for unknown archs
+ * revert file-hash based action-merging in acquire (Closes: 810046)
+ * return correct position in APT::StringView::(r)find
+
+ [ Zhou Mo ]
+ * po: update simplified chinese programs translation
+
+ -- Julian Andres Klode <jak@debian.org> Fri, 15 Jan 2016 19:52:19 +0100
+
+apt (1.2~exp1) experimental; urgency=medium
+
+ [ Beatrice Torracca ]
+ * Italian manpages translation update (Closes: 809522)
+
+ [ David Kalnischkies ]
+ * add optional support for comments in pkgTagFile
+ * support comments in debian/control parsing (Closes: 806775)
+ * properly parse comments in apt_preferences and deb822-style sources
+ * include all compressed Packages/Sources files in Release file
+ * use one 'store' method to rule all (de)compressors
+ * ensure compression cleanup even without lists-cleanup
+ * allow pdiff bootstrap from all supported compressors
+ * keep compressed indexes in a low-cost format
+ * support '-' and no parameter for stdin in apt-helper cat-file
+ * tests: limit autotest-functionname generation to sane characters
+ * use filesize of compressed pdiffs for the limit if possible
+ * remove uncompressed leftover partial file before pdiff bootstrap
+
+ [ Michael Vogt ]
+ * Add support for APT::Periodic::CleanInterval.
+ Thanks to Martin-Éric Racine
+ * Add bash-completion support for the "apt" command (Closes: #747094)
+ * Add new APT::Keep-Downloaded-Packages option (Closes: #160743)
+
+ [ Julian Andres Klode ]
+ * Change compressor costs to be 100 apart
+ * apt-cache: stats: Average is over used, not all, buckets
+ * Increase APT::Cache-HashTableSize default to 50503
+ * travis: pull liblz4-dev from wily
+ * FileFd: (native) LZ4 support
+ * apt-helper: cat-file: Add -C/--compress option
+ * CopyFile: Use 64 * 1024 instead of 64000 as buffer size
+ * acquire: Allow parallelizing methods without hosts
+ * rred: Run in parallel
+ * Introduce internal APT::StringView class
+ * Switch performance critical code to use APT::StringView
+ * pkgCacheGenerator::StoreString: Get rid of std::string
+ * pkgCacheGenerator: CurMd5.Value() cannot be empty
+ * AvailableDescriptionLanguages: Use one string for all iterations
+ * NEWS: Document recompression of indices
+ * Store the size of strings in the cache
+ * libapt-pkg5.0: Add Breaks appstream (<< 0.9.0-3~)
+
+ [ Helmut Grohne ]
+ * Allow building without libgtest-dev under <nocheck> build profile
+ (Closes: #809726)
+
+ -- Julian Andres Klode <jak@debian.org> Fri, 08 Jan 2016 21:41:10 +0100
+
+apt (1.1.10) unstable; urgency=medium
+
+ [ David Kalnischkies ]
+ * deal with empty values properly in deb822 parser (Closes: 808102)
+
+ [ Beatrice Torracca ]
+ * fix 3 typos/omissions in apt.conf(5) (Closes: 809160)
+
+ [ Julian Andres Klode ]
+ * BufferedWriter: flushing: Check for written < size instead of <=
+ * aptconfiguration: Set default compression level to 6
+ * BufferedFileFdPrivate: Make InternalFlush() save against errors
+ * Switch to DJB hashing and use prime number as table size
+ * Turn tolower_ascii() and isspace_ascii() into inline functions
+ * Fix test case that was broken by switch of hash function
+ * pkgTagSection::Scan: Fix read of uninitialized value
+ * pkgCacheGenerator: Allow passing down an already created cache
+ * Add support for calculating hashes over the entire cache
+ * Do not sync the cache file
+
+ -- Julian Andres Klode <jak@debian.org> Wed, 30 Dec 2015 00:40:53 +0100
+
+apt (1.1.9) unstable; urgency=medium
+
+ Highlights: buffered rred writes and slightly faster cache generation (~10%)
+
+ [ Julian Andres Klode ]
+ * Introduce isspace_ascii() for use by parsers
+ * Convert most callers of isspace() to isspace_ascii()
+ * pkgcachegen: Use std::unordered_map instead of std::map
+ * debListParser: ParseDepends: Only query native arch if needed
+ * debListParser: Do not validate Description-md5 for correctness twice
+ * ParseDepends: Mark branches for build-dep parsing as unlikely
+ * rred: Only call pkgInitConfig() in test mode
+ * FileFdPrivate: Add getter and setter for fields
+ * FildFd: Introduce a Flush() function and call it from Close()
+ * FileFd: Add a buffered writing mode
+ * rred: Use buffered writes
+ * pkgcachegen.h: Hack around unordered_map not existing before C++11
+ * doc/acquire-additional-files.txt: Mention apt-helper cat-file
+
+ [ Niels Thykier ]
+ * Hex2Digit: Do not use isxdigit()
+
+ [ David Kalnischkies ]
+ * allow repositories to forbid arch:all for specific index targets
+
+ -- Julian Andres Klode <jak@debian.org> Sun, 27 Dec 2015 19:16:36 +0100
+
+apt (1.1.8) unstable; urgency=medium
+
+ * apt-helper: Add a cat-file command for concatening files
+ * Change InternalReadLine to always use buffer.read() return value
+
+ -- Julian Andres Klode <jak@debian.org> Sat, 26 Dec 2015 23:23:02 +0100
+
+apt (1.1.7) unstable; urgency=medium
+
+ The real "speed up rred for uncompressed files" release
+
+ * Use a hardcoded buffer size of 4096 to fix performance
+ * rred: Allow passing files as arguments for compressor testing
+ * Get rid of memmove() in our read buffering
+
+ -- Julian Andres Klode <jak@debian.org> Sat, 26 Dec 2015 19:10:14 +0100
+
+apt (1.1.6) unstable; urgency=medium
+
+ Merry Christmas from the APT Team
+
+ [ Pino Toscano ]
+ * Fix FileUtlTest.GetTempDir failure when run as root (Closes: #808383)
+ * CopyFile: fix BufSize to a sane value (Closes: #808381)
+ * CopyFile: avoid failing on EOF on some systems (Closes: #808381)
+
+ [ Julian Andres Klode ]
+ * Do nothing in FileFd::Write() if Size is 0 (Closes: #808381)
+
+ [ David Kalnischkies ]
+ * avoid evaluating shell in paths used in apt-key
+ * avoid triggering gpg2 migration in apt-key
+ * follow dpkg and xz and use CRC64 for xz compression
+ * parse xz-compression level from configuration
+ * implement a buffer system for FileFd::ReadLine (Closes: 808579)
+ * ensure we got a lock in clean operation (Closes: 808561)
+
+ -- Julian Andres Klode <jak@debian.org> Thu, 24 Dec 2015 17:01:49 +0100
+
+apt (1.1.5) unstable; urgency=medium
+
+ [ Julian Andres Klode ]
+ * Do not swap required and important in pkgCache::Priority()
+ Thanks to Manuel A. Fernandez Montecelo for discovering this
+ (Closes: #807523)
+ * Convert package names from Packages files to lower case (Closes: #807012)
+ * test framework: Correctly generate new paths in noopchroot
+ * debian/apt.auto-removal.sh: Adjust -dbg exclusion for multi-arch
+ * pkgcache: Make hash arch-independent using fixed size integer
+ * test-apt-download-progress: Run the https test multiple times
+
+ [ David Kalnischkies ]
+ * update symbols files to 1.1.4 state of affairs
+ * parse .diff/Index hashes in reverse order
+ * redirect which stderr to /dev/null for consistency (Closes: 807373)
+ * show a more descriptive error for weak Release files (Closes: 806459)
+ * support regex and co in 'apt-cache policy $pkg' again (Closes: 807870)
+ * non-existing directories don't need to be cleaned (Closes: 807477)
+
+ [ Seo Sanghyeon ]
+ * fix incorrect Korean translation of "manually" and "automatically"
+
+ [ Andreas Metzler ]
+ * mention APT::AutoRemove::{Recommends,Suggests}Important option
+ (Closes: 807413)
+
+ -- Julian Andres Klode <jak@debian.org> Mon, 14 Dec 2015 16:56:11 +0100
+
+apt (1.1.4) unstable; urgency=medium
+
+ [ Julian Andres Klode ]
+ * defaults.mak: Set LC_COLLATE=C.UTF-8 for reproducible sort order
+ * Avoid overflow when summing up file sizes
+
+ [ David Kalnischkies ]
+ * add a apt breaks (apt-utils << 1.1.3) for partial-upgrades (Closes: 806765)
+ * require explicit paths to dsc/control as we do for deb files
+ (Closes: 806693)
+ * use @CHANGEPATH@ as placeholder in changelog URI templates
+ * replace "which" with "command -v" for portability.
+ Thanks to Mingye Wang for the suggestion. (Closes: 807144)
+ * replace run-parts with find|sort to avoid debianutils usage
+ * part revert, part redo 'which' replacement.
+ Thanks to Jakub Wilk for pointing out #747320
+
+ [ Fredrik Fornwall ]
+ * apt-helper.cc: include <stdlib.h> for atoi (Closes: 807031)
+
+ -- Julian Andres Klode <jak@debian.org> Mon, 07 Dec 2015 15:31:31 +0100
+
+apt (1.1.3) unstable; urgency=medium
+
+ [ David Kalnischkies ]
+ * use function pointers instead of weak symbols for cmdline parsing
+ * accept ../ on the cmdline as start for a deb file as well
+ * add apt-utils Depends apt (= ${binary:Version})
+
+ [ Andreas Cadhalpun ]
+ * do not override exact targetrelease matches with lesser matches
+ (Closes: 746412)
+
+ -- Michael Vogt <mvo@debian.org> Mon, 30 Nov 2015 08:49:40 +0100
+
+apt (1.1.2) unstable; urgency=medium
+
+ [ David Kalnischkies ]
+ * outsmart gcc -O3 over-optimization in pkgCdrom::FindPackages
+ * disable privilege-drop verification by default as fakeroot trips over it
+ (Closes: 806475)
+ * fix program name detection in rsh method
+ * disable privilege dropping for rsh/ssh method by default (Closes: 806511)
+
+ [ Michael Vogt ]
+ * do not use "-Wl,-Bsymbolic-functions" during the build to avoid breakage
+
+ -- Julian Andres Klode <jak@debian.org> Sat, 28 Nov 2015 22:47:40 +0100
+
+apt (1.1.1) unstable; urgency=medium
+
+ [ Michael Vogt ]
+ * Deal with killed acquire methods properly instead of hanging
+ (Closes: #806406)
+ * Check if the Apt::Sandbox::User exists in CheckDropPrivsMustBeDisabled()
+ (Closes: #806406)
+
+ [ David Kalnischkies ]
+ * appease adequate with some weak symbols for -private (Closes: #806422)
+
+ -- Michael Vogt <mvo@debian.org> Fri, 27 Nov 2015 16:04:59 +0100
+
+apt (1.1) unstable; urgency=medium
+
+ [ Justin B Rye ]
+ * review apt(8) manpage
+ * review apt-mark(8) manpage
+ * review apt-secure(8) manpage
+ * review sources.list(5) manpage
+
+ [ Michael Vogt ]
+ * upload ABI break version from experimental to unstable
+
+ -- Michael Vogt <mvo@debian.org> Thu, 26 Nov 2015 12:33:44 +0100
+
+apt (1.1~exp16) experimental; urgency=medium
+
+ [ David Kalnischkies ]
+ * do not use _apt for file/copy sources if it isn't world-accessible
+ (Closes: 805069)
+ * support setting empty values (sanely) & removing support
+ for space-gapping: '-o option= value'
+ Thanks to Daniel Hartwig for initial patch. (Closes: 693092)
+ * ignore lost+found in private directory cleanup (Closes: 805424)
+ * update libapt-{pkg,inst} symbols files
+ * do not rerun ./configure causing FTCBFS with newer autotools-dev.
+ Thanks to Helmut Grohne for the detailed bugreport. (Closes: 804923)
+ * do not segfault in cache generation on mmap failure (Closes: 803417)
+ * do not sent Last-Modified if we expect a changed file
+ * show potentially arch-qualified fullname in 'apt show'
+
+ [ Frans Spiesschaert ]
+ * Dutch manpages translation (NEW) (Closes: 805474)
+
+ [ Justin B Rye ]
+ * review of new/changed translatable program strings
+
+ -- Michael Vogt <mvo@debian.org> Tue, 24 Nov 2015 21:29:14 +0100
+
+apt (1.1~exp15) experimental; urgency=medium
+
+ [ Julian Andres Klode ]
+ * deblistparser: Make PrioList const
+ * srvrec: Do not expose C++11 tuple use in header
+ * cacheset: Fix compilation on new GCC in C++98 mode
+ * Provide tests for thread-safety
+
+ [ Mert Dirik ]
+ * Turkish program translation update (Closes: 802610)
+
+ [ David Kalnischkies ]
+ * implement a public pkgSystem::MultiArchSupported
+ * implement a public pkgSystem::ArchitecturesSupported
+ * implement operator* for cacheset iterators
+ * refactor dpkg execution in deb/debsystem
+ * provide public interface to hold/unhold packages
+ * allow all dpkg selections to be set via apt-mark and libapt
+ * drop privileges in file:// method as we do for decompressors
+ * unbreak the copy-method claiming hashsum mismatch since ~exp9
+ (Closes: 799158)
+ * show progress info while 'downloading' a local .deb file
+ * support .deb files in upgrade operations as well
+ * rework errors and warnings around insecure repositories (Closes: 796549)
+ * refer to apt-secure(8) in unsecure repositories warning
+ * suggest 'apt autoremove' to get right of unneeded packages (Closes: 801571)
+ * add binary-specific options via Binary scope
+ * revamp apt(8) to refer more instead of duplicating
+ * disable updating insecure repositories in apt by default
+ * new quiet level -qq for apt to hide progress output
+ * hidden support more apt-get/apt-cache commands in apt
+ (Closes: 778234, 780700, 781237)
+ * show version and type in "apt (r)depends" (Closes: 218995)
+ * revamp all tools help messages
+ * sanify API to get 'the' candidate version (Closes: #803471)
+ * support arch:all data e.g. in separate Packages file
+ * ignore newlines in dpkg-deb control output for installing debs
+ (Closes: 802553)
+ * allow acquire method specific options via Binary scope
+ * encode UTF-8 characters correctly in QuoteString (Closes: 799123)
+ * activate AI_IDN by default to support IDN domains (Closes: 763437)
+
+ -- Michael Vogt <mvo@debian.org> Wed, 11 Nov 2015 17:04:43 +0100
+