lp:ubuntu/quantal-security/apt

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

194. By Marc Deslauriers on 2013-03-13

* SECURITY UPDATE: InRelease verification bypass
  - CVE-2013-1051
* This package does _not_ contain the changes from 0.9.7.5ubuntu5.3 in
  quantal-proposed.

[ David Kalnischk ]
[ Michael Vogt ]
* apt-pkg/deb/debmetaindex.cc,
  test/integration/test-bug-595691-empty-and-broken-archive-files,
  test/integration/test-releasefile-verification:
  - disable InRelease downloading until the verification issue is
    fixed, thanks to Ansgar Burchardt for finding the flaw

193. By Michael Vogt on 2012-12-04

* SECURITY UPDATE: change permissions of
  /var/log/apt/term.log to 0640 (LP: #975199)
  - CVE-2012-0961

192. By Colin Watson on 2012-10-16

Revert "missing remap registration" change from 0.9.7.5ubuntu4; this
iterator was already registered, and double registration causes a crash
(LP: #1067056).

191. By Colin Watson on 2012-10-14

[ Colin Watson ]
* apt-pkg/pkgcachegen.cc:
  - Fix crash if the cache is remapped while writing a Provides version
    (LP: #1066445).

Cherry-pick from http://bzr.debian.org/bzr/apt/apt/debian-sid:

[ David Kalnischkies ]
* apt-pkg/pkgcachegen.cc:
  - add a missing remap registration causing a segfault in case
    we use the not remapped iterators after a move of the mmap again

190. By Martin Pitt on 2012-10-12

Refresh translations from Launchpad. Amongst other fixes, this drops the
erroneous "个" from "Retrieving file ..." translation in zn_CN.
(LP: #985634)

189. By Michael Vogt on 2012-09-04

Merged from lp:~donkult/apt/experimental:

[ David Kalnischkies ]
* apt-pkg/contrib/strutl.cc:
  - support \n and \r\n line endings in ReadMessages

[ Michael Vogt ]
* lp:~mvo/apt/webserver-simulate-broken-with-fix346386:
  - merge fix for LP: #346386

Merged from http://bzr.debian.org/bzr/apt/apt/debian-sid:

[ David Kalnischkies ]
* apt-pkg/cdrom.cc:
  - copy only configured translation files from a CD-ROM and not all
    available translation files preventing new installs with d-i from
    being initialized with all translations (Closes: #678227)
  - handle Components in the reduction for the source.list as multi-arch CDs
    otherwise create duplicated source entries (e.g. "wheezy main main")
* apt-pkg/packagemanager.cc:
  - unpack versions only in case a different version from the package
    is currently in unpack state to recover from broken system states
    (like different file in M-A:same package and other dpkg errors)
    and avoid re-unpack otherwise (Closes: #670900)
* debian/control:
  - let libapt-pkg break apt < 0.9.4 to ensure that the installed http-
    method supports the new redirection-style, thanks to Raphael Geissert
    for reporting & testing (Closes: #685192)
* doc/apt_preferences.5.xml:
  - use the correct interval (x <= P < y) for pin value documentation as
    these are the intervals used by the code (Closes: #685989)
* apt-pkg/indexcopy.cc:
  - do not create duplicated flat-archive CD-ROM sources for foreign
    architectures on multi-arch CD-ROMs
  - do not warn about files which have a record in the Release file, but
    are not present on the CD to mirror the behavior of the other methods
    and to allow uncompressed indexes to be dropped without scaring users

188. By Michael Vogt on 2012-08-28

[ Michael Vogt ]
* merged latest fixes from the debian-sid branch

[ TJ ]
* apt-pkg/contrib/netrc.cc:
  - increase LOGINSIZE/PASSWORDSIZE limits and add proper error
    if the limits are reached (LP: #1008289)

187. By Colin Watson on 2012-08-20

* ftparchive/override.cc:
  - Double maximum override line length to 1000 (LP: #1038961).

186. By Michael Vogt on 2012-06-29

merged from the debian-sid branch

185. By Jamie Strandboge on 2012-06-15

* SECURITY UPDATE: Disable apt-key net-update for now, as validation
  code is still insecure
  - cmdline/apt-key: exit 1 immediately in net_update()
  - CVE-2012-0954
  - LP: #1013639