X-Git-Url: https://git.saurik.com/apt.git/blobdiff_plain/fd6a8d0ddc14406bb6c0996b5bbaa95d6ccc1186..6b1e33b5447e50af6bac0b2d260b167b28e3e1fd:/debian/changelog?ds=inline diff --git a/debian/changelog b/debian/changelog index bfc4279b3..1ba066a3b 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,42 @@ +apt (0.9.7.8) unstable; urgency=criticial + + * SECURITY UPDATE: InRelease verification bypass + - CVE-2013-1051 + + [ David Kalnischk ] + * apt-pkg/deb/debmetaindex.cc, + test/integration/test-bug-595691-empty-and-broken-archive-files, + test/integration/test-releasefile-verification: + - disable InRelease downloading until the verification issue is + fixed, thanks to Ansgar Burchardt for finding the flaw + + -- Michael Vogt Thu, 14 Mar 2013 07:47:36 +0100 + +apt (0.9.7.8~exp3) UNRELEASEDexperimental; urgency=low + + [ Niels Thykier ] + * test/libapt/assert.h, test/libapt/run-tests: + - exit with status 1 on test failure + + [ Daniel Hartwig ] + * test/integration/framework: + - continue after test failure but preserve exit status + + [ Programs translation updates ] + * Turkish (Mert Dirik). Closes: #703526 + + [ Colin Watson ] + * methods/connect.cc: + - provide useful error message in case of EAI_SYSTEM + (closes: #703603) + + [ Michael Vogt ] + * add new config options "Acquire::ForceIPv4" and + "Acquire::ForceIPv6" to allow focing one or the other + (closes: #611891) + + -- Michael Vogt Sun, 17 Mar 2013 19:46:23 +0100 + apt (0.9.7.8~exp2) experimental; urgency=low * include two missing patches to really fix bug #696225, thanks to