Merge branch 'debian/sid' into debian/experimental

[apt.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index 5afda2cec839e6ed83667278a92578193f61e5f0..c268f9bb95e4b3698202b3bd01621657d1fb09aa 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,4 +1,24 @@
-apt (1.1~exp4) UNRELEASED; urgency=medium
+apt (1.1~exp5) experimental; urgency=medium
+
+  [ Michael Vogt ]
+  * Only rename StatError files in AbortTransaction()
+  * Document Acquire{MaxReleaseFileSize,AllowInsecureRepositories,
+    AllowDowngradeToInsecureRepositories} and
+    --no-allow-insecure-repositories
+  * Fix backward compatiblity of the new pkgAcquireMethod::DropPrivsOrDie()
+  * Change default of Acquire::AllowInsecureRepositories to "true"
+    so that this change is less disruptive, this will be switched
+    to "false" again after jessie
+
+  [ David Kalnischkies ]
+  * remove useless pdiff filename output (Closes: 764737)
+  * make --allow-insecure-repositories message an error
+  * display a warning for unsigned repos
+  * trusted=yes sources are secure, we just don't know why
+
+ -- Michael Vogt <mvo@debian.org>  Mon, 13 Oct 2014 16:15:22 +0200
+
+apt (1.1~exp4) experimental; urgency=medium
 
   [ Michael Vogt ]
   * Merge sid version 1.0.9.2
@@ -191,7 +211,7 @@ apt (1.0.9.2) unstable; urgency=medium
 
   [ Guillem Jover ]
   * apt-get: Create the temporary downloaded changelog inside tmpdir
-    (closes: #763780)
+    (closes: #763780) (CVE-2014-7206)
 
  -- Michael Vogt <mvo@debian.org>  Thu, 02 Oct 2014 22:05:39 +0200