Allow lowering trust level of a hash via config

[apt.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index 5d1b66ece20646a6fd44a576ddcd78b70f486e87..d4f5a3fe9cb4e7becedf25f484424450e0a35637 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,89 @@
+apt (1.2.9) unstable; urgency=high
+
+  [ David Kalnischkies ]
+  * drop confusing comma from no strong hash message
+
+  [ Julian Andres Klode ]
+  * Do not mark packages for keep that we want to remove (LP: #1562402)
+    (This fixes some upgrades involving renames where the old package
+     is removed)
+
+ -- Julian Andres Klode <jak@debian.org>  Sun, 27 Mar 2016 01:26:51 +0100
+
+apt (1.2.8) unstable; urgency=medium
+
+  [ Michael Vogt ]
+  * Get accurate progress reporting in apt update again
+
+  [ Julian Andres Klode ]
+  * Report non-transient errors as errors, not as warnings
+  * methods/gpgv: Rewrite error handling and message.
+    Thanks to Ron Lee for wording suggestions
+  * Use descriptive URIs in 104 Warning messages
+  * cachefile: Only set members that were initialized successfully
+    (Closes: #818628)
+  * Update symbols file
+
+  [ David Kalnischkies ]
+  * do not strip epochs from state version strings (Closes: 818162)
+  * properly check for "all good sigs are weak" (Closes: 818910)
+  * handle gpgv's weak-digests ERRSIG
+
+  [ Zhou Mo ]
+  * zh_CN.po: update simplified Chinese translation. (Closes: #818639)
+
+  [ Takuma Yamada ]
+  * Japanese manpage translation update (Closes: 818950)
+
+ -- Julian Andres Klode <jak@debian.org>  Thu, 24 Mar 2016 19:31:24 +0100
+
+apt (1.2.7) unstable; urgency=medium
+
+  "Caesar is dead"
+
+  [ Frans Spiesschaert ]
+  * Dutch program translation update (Closes: 817060)
+  * Dutch manpages translation update (Closes: 817062)
+
+  [ Julian Andres Klode ]
+  * Use native architecture instead of amd64 for build-dep-purge test
+  * Do not consider SHA1 usable
+  * Test that SHA1-only .diff/Index files are not used
+  * test: Use SHA512 digests for GPG, reject SHA1-based signatures
+  * methods/gpgv: Reject weak digest algorithms
+  * apt-pkg/acquire-worker.cc: Introduce 104 Warning message
+  * methods/gpgv: Warn about SHA1 (and RIPEMD-160)
+
+  [ David Kalnischkies ]
+  * require $(HASH)-Download field in .diff/Index files
+  * flush line-clearing on progress stop before post-invoke (Closes: 793672)
+  * enforce verify of filesize in 'apt-get source'
+
+  [ Manuel "Venturi" Porras Peralta ]
+  * Spanish apt-mark translation fix (Closes: 817999)
+
+  [ Zhou Mo ]
+  * zh_CN.po: fix translation bug. (Closes: #818177)
+
+  [ Michael Vogt ]
+  * Fix bug where the problemresolve can put a pkg into a heisenstate
+    (LP: #1550741)
+
+ -- Julian Andres Klode <jak@debian.org>  Tue, 15 Mar 2016 19:20:18 +0100
+
+apt (1.2.6) unstable; urgency=high
+
+  [ Veres Lajos ]
+  * Fix several typos
+
+  [ Julian Andres Klode ]
+  * apt-pkg/algorithms.cc: Avoid stack buffer overflow in KillList
+    (Closes: #701069)
+  * urgency=high because this fixes a stack overflow and the last
+    upload fixed several segfaults and has not migrated yet either.
+
+ -- Julian Andres Klode <jak@debian.org>  Mon, 07 Mar 2016 19:49:38 +0100
+
 apt (1.2.5) unstable; urgency=medium
 
   [ Daniel Kahn Gillmor ]