* SECURITY UPDATE: gpgv: Check for errors when splitting files (CVE-2016-1252)
Thanks to Jann Horn, Google Project Zero for reporting the issue
(LP: #1647467)
* gpgv: Flush the files before checking for errors
apt (1.2.17) xenial; urgency=medium
[ David Kalnischkies ]
* apt-key: warn instead of fail on unreadable keyrings (LP: #1642386)
* show apt-key warnings in apt update (Closes: 834973)
[ Julian Andres Klode ]
* test-releasefile-verification: installaptold: Clean up before run
apt (1.2.16) xenial; urgency=medium
[ David Kalnischkies ]
* avoid changing the global LC_TIME for Release writing
* use de-localed std::put_time instead rolling our own
* accept only the expected UTC timezones in date parsing (Closes: 819697)
* avoid std::get_time usage to sidestep libstdc++6 bug (LP: #1593583)
* imbue datetime parsing with C.UTF-8 locale (Closes: 828011)
* prevent C++ locale number formatting in text APIs (try 2) (Closes: 832044)
* prevent C++ locale number formatting in text APIs (try 3) (LP: #1611010)
(LP: #1592817)
* imbue .diff/Index parsing with C.UTF-8 as well
[ Julian Andres Klode ]
* Use C locale instead of C.UTF-8 for protocol strings
* Add shippable.yml for CI on Shippable
* Revert "if the FileFd failed already following calls should fail, too"
(LP: #1641905)
-- Julian Andres Klode <email address hidden> Thu, 08 Dec 2016 15:28:08 +0100
This bug was fixed in the package apt - 1.2.18
---------------
apt (1.2.18) xenial; urgency=high
* SECURITY UPDATE: gpgv: Check for errors when splitting files (CVE-2016-1252)
Thanks to Jann Horn, Google Project Zero for reporting the issue
(LP: #1647467)
* gpgv: Flush the files before checking for errors
apt (1.2.17) xenial; urgency=medium
[ David Kalnischkies ]
* apt-key: warn instead of fail on unreadable keyrings (LP: #1642386)
* show apt-key warnings in apt update (Closes: 834973)
[ Julian Andres Klode ] e-verification: installaptold: Clean up before run
* test-releasefil
apt (1.2.16) xenial; urgency=medium
[ David Kalnischkies ]
* avoid changing the global LC_TIME for Release writing
* use de-localed std::put_time instead rolling our own
* accept only the expected UTC timezones in date parsing (Closes: 819697)
* avoid std::get_time usage to sidestep libstdc++6 bug (LP: #1593583)
* imbue datetime parsing with C.UTF-8 locale (Closes: 828011)
* prevent C++ locale number formatting in text APIs (try 2) (Closes: 832044)
* prevent C++ locale number formatting in text APIs (try 3) (LP: #1611010)
(LP: #1592817)
* imbue .diff/Index parsing with C.UTF-8 as well
[ Julian Andres Klode ]
* Use C locale instead of C.UTF-8 for protocol strings
* Add shippable.yml for CI on Shippable
* Revert "if the FileFd failed already following calls should fail, too"
(LP: #1641905)
-- Julian Andres Klode <email address hidden> Thu, 08 Dec 2016 15:28:08 +0100