UbuntuUpdates.org

Package "python-apt"

Name: python-apt

Description:

Python interface to libapt-pkg

Latest version: 1.6.5ubuntu0.2
Release: bionic (18.04)
Level: updates
Repository: main

Links

Save this URL for the latest version of "python-apt": https://www.ubuntuupdates.org/python-apt


Download "python-apt"


Other versions of "python-apt" in Bionic

Repository Area Version
base main 1.6.0
security main 1.6.5ubuntu0.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.6.5ubuntu0.2 2020-01-23 02:06:21 UTC

  python-apt (1.6.5ubuntu0.2) bionic-security; urgency=medium

  * SECURITY REGRESSION: crash with ubuntu-release-upgrader (LP: #1860606)
    - apt/cache.py: make allow_unauthenticated argument to
      fetch_archives() optional.

 -- Marc Deslauriers <email address hidden> Wed, 22 Jan 2020 16:52:51 -0500

Source diff to previous version

Version: 1.6.5ubuntu0.1 2020-01-22 20:07:10 UTC

  python-apt (1.6.5ubuntu0.1) bionic-security; urgency=medium

  * SECURITY UPDATE: Check that repository is trusted before downloading
    files from it (LP: #1858973)
    - apt/cache.py: Add checks to fetch_archives() and commit()
    - apt/package.py: Add checks to fetch_binary() and fetch_source()
    - CVE-2019-15796
  * SECURITY UPDATE: Do not use MD5 for verifying downloadeds
    (Closes: #944696) (#LP: #1858972)
    - apt/package.py: Use all hashes when fetching packages, and
      check that we have trusted hashes when downloading
    - CVE-2019-15795
  * To work around the new checks, the parameter allow_unauthenticated=True
    can be passed to the functions. It defaults to the value of the
    APT::Get::AllowUnauthenticated option.
    - Bump Breaks aptdaemon (<< 1.1.1+bzr982-0ubuntu21.2), as it will have
      to set that parameter after having done validation.
  * Automatic changes and fixes for external regressions:
    - Adjustments to test suite and CI to fix CI regressions
    - Automatic mirror list update

 -- Julian Andres Klode <email address hidden> Wed, 15 Jan 2020 17:01:17 +0100

Source diff to previous version
944696 Certificate error on launchpad xmlrpc server with H...
CVE-2019-15796 python-apt: Check that repository is trusted before downloading from it
CVE-2019-15795 python-apt: Do not use MD5 for verifying downloads

Version: 1.6.4 2019-05-16 11:07:17 UTC

  python-apt (1.6.4) bionic; urgency=medium

  * apt.Cache: Fix (un)locking of archives (Closes: #922416) (LP: #1826870)
  * apt.Cache: Use explicit, more safe locking in update()
  * Update mirror lists

 -- Julian Andres Klode <email address hidden> Mon, 29 Apr 2019 13:49:15 +0200

Source diff to previous version
1826870 cache.commit() doesn't release the archives lock
922416 cache.commit() doesn't release the archives lock - Debian Bug report logs

Version: 1.6.3ubuntu1 2019-02-05 09:06:49 UTC

  python-apt (1.6.3ubuntu1) bionic; urgency=medium

  * updated mirror lists for the forthcoming point release.

 -- Brian Murray <email address hidden> Thu, 31 Jan 2019 16:38:36 -0800

Source diff to previous version

Version: 1.6.3 2018-10-29 12:06:57 UTC

  python-apt (1.6.3) bionic; urgency=medium

  * Frontend locking and related locking improvements (LP: #1795407)
    - apt.Cache: Keep / Re-establish the system lock in commit()
    - apt.Cache: Keep archive locked during commit()/ in fetch_archives()
    - apt.Cache: Reinstate locks in a finally / run dpkg inside try
    - Introduce frontend locking
    - Convert apt.Cache.commit and apt_pkg.DepCache.commit to FE lock
  * Other changes to make that work:
    - Cherry-pick apt_pkg.Error type hint from 1.7
    - travis CI: bionic only; stretch does not have FE locking nor PPA
  * As always, updated mirror lists

 -- Julian Andres Klode <email address hidden> Mon, 01 Oct 2018 16:00:14 +0200

1795407 python-apt frontend locking



About   -   Send Feedback to @ubuntu_updates