-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 17 Dec 2024 23:41:19 +0100
Source: apt
Architecture: source
Version: 2.9.17+exp1
Distribution: experimental
Urgency: medium
Maintainer: APT Development Team <deity@lists.debian.org>
Changed-By: Julian Andres Klode <jak@debian.org>
Closes: 1090068
Changes:
apt (2.9.17+exp1) experimental; urgency=medium
.
* Fix out-of-bounds read in `apt show :` (Closes: #1090068)
* gpgv: Extract VerifyDetachedSignatureFile()
* Switch to sqv for OpenPGP verification:
- methods: New sqv method.
- acquire: Use the sqv method if an sqv binary is found at build time.
- test: Various adjustments for changed outputs
- debian/control: Use sqv instead of gpgv
* Incompatibilities:
- Output for gpgv methods is slightly different
- The APT::Hashes feature is not supported, policy is handled by Sequoia
- The Signed-By feature no longer supports exact subkeys (with !).
Checksums-Sha1:
f1564e529130b4550047a65f530b1e5c4e494f6d 3028 apt_2.9.17+exp1.dsc
521fdaf6bb26209f173a2d0ed9ac43ada4d68c33 2392644 apt_2.9.17+exp1.tar.xz
a86e8f0215f400fbfc4191401f0fc21c1ea509bc 7964 apt_2.9.17+exp1_source.buildinfo
Checksums-Sha256:
26084b8e1dd5a1df3dc0ac23c74299e7be7a8c6799a2003845665340927a8ddb 3028 apt_2.9.17+exp1.dsc
214b8f2271a706b8d8814464bc3a93fe9975dd9f09c242f384e95a0ecc5b92cd 2392644 apt_2.9.17+exp1.tar.xz
0a03a97c904f11ffaa1163f5989b5cb22030c2a097a752005226a713222788ac 7964 apt_2.9.17+exp1_source.buildinfo
Files:
32006d06c8d80366b6ee4e4c98790fb7 3028 admin required apt_2.9.17+exp1.dsc
70de754c26e52e86f73e9278a3a2eb05 2392644 admin required apt_2.9.17+exp1.tar.xz
5026707674ebe2e5902d76408c629c1a 7964 admin required apt_2.9.17+exp1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQJDBAEBCgAtFiEET7WIqEwt3nmnTHeHb6RY3R2wP3EFAmdiAEgPHGpha0BkZWJp
YW4ub3JnAAoJEG+kWN0dsD9xyGAP+wYfaaRpUYuIPrcx8a9shceXWZjD+T0Cla1s
iPMXnBk9CJUlQCMt+US/t6L/8WYWMyK0Fg93iDx4ZtWd8ZFUapbDA0DIqBE1H6Dn
pw/vrWdsjb/Cjv2OpqvbLqPBXgG0ZN4qyiKKRjGHKzUGjz9xxl6Wsds0KR8arl7d
RtG+Cy4/qpyYfs8kbCLgtwcuCRF27CkERPMc/EJ64YmPN4WDtXEF4klVOP/rnEbB
lI1pX8biK6mDDPmID4+RjF0B9B5aJzgM/gJN6yEZZfro2U1XNc5OYgCuVmhN64H1
RpPD8+ITxuIdYLiLmX3QVnSLqbYCVLt1kAJb9i8EnICAk0zWRnnchIzEVvX7vepe
ZRN8VGuB4EB7a9PUgmntdzmznFwtderEifhj9QpXF2xLMkedAkju2GNWco4JnAsi
wLwF82ArUQ1AWBgeWt2IvXXlFCJUOIPZowXZsgjIA4YzN0Iur2XMzexU6urxe75O
M/2g+XOYgmSOJVvCddI/2bm2mZpTOY/r8warRimXEtHDUHcEsU2IaQ7OvBh4+yme
FM3CITPZV8QNfvxboE9DWSmTP7p9WKZRqhXbNc9uxnsrLBAU5W53xYFZKiCGxadn
RfBDZ3Y0tyPqxEDsdQC+2DpuOWep1OUsB8vQZcbj7BDvV2VnK6eonua8QwG1XWcv
Bcoo+rl0
=TCcz
-----END PGP SIGNATURE-----
Attachment:
pgpZvL1dY9UQc.pgp
Description: PGP signature