From b438f971a9fe2b06bd15cb56451b155853c0100c Mon Sep 17 00:00:00 2001 From: Julian Andres Klode Date: Mon, 20 Aug 2018 17:39:08 +0200 Subject: Release 1.6.4 --- debian/changelog | 11 +++++++++++ 1 file changed, 11 insertions(+) (limited to 'debian') diff --git a/debian/changelog b/debian/changelog index 8dd68cdaa..264e61735 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,14 @@ +apt (1.6.4) unstable; urgency=critical + + [ David Kalnischkies ] + * SECURITY UPDATE: Fallback in the mirror method allowed a later server to + supply any InRelease file without it having to be verified. (LP: #1787752) + - apt-pkg/acquire-item.cc:: clear alternative URIs for mirror:// between steps + - CVE-2018-0501 + - https://mirror.fail/ + + -- Julian Andres Klode Mon, 20 Aug 2018 17:38:50 +0200 + apt (1.6.3) unstable; urgency=medium * Handle JSON hooks that just close the file/exit and fix some other errors -- cgit v1.2.3