-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 04 Nov 2026 13:07:30 +0100
Source: apt
Architecture: source
Version: 3.3.6
Distribution: unstable
Urgency: medium
Maintainer: APT Development Team <deity@lists.debian.org>
Changed-By: Julian Andres Klode <juliank@ubuntu.com>
Changes:
apt (3.3.6) unstable; urgency=medium
.
[ Julian Andres Klode ]
* SECURITY UPDATE: Download verification bypass
- methods/*.cc: Open target files exclusively
- CVE-2026-109518
* Out of bounds accesses
- debDebFileParser: reject .deb without a Version field
- solver: Ensure workLess is a strict weak ordering
* Performance evaluation tooling
- perf: scale multiplexed hardware counters
- perf: set CLOEXEC on perf and output file descriptors
- perf: make PerformanceContext non-copyable
- perf: clean up includes, member initialization, and stub signature
* Additional unit tests and property-based tests using Hegel
- test: Add Hegel property-based testing support
- test: Hegel tests for Debian version comparison
- test: Additional tag file parser unit tests
- test: Hegel round-trip property tests for string utilities
- test: Hegel and more unit tests for the solver
- test: Add ParseQuoteWord and Base64 whitespace unit tests
.
[ Andriy Pysyk ]
* Update Ukrainian translation for APT 3.3.5
Checksums-Sha1:
beb7abaca0417f37d6bf1cb76c52e83a426d0797 3159 apt_3.3.6.dsc
ec5fb930f901ae2c4e635b366b2d22fd80dad87b 2568388 apt_3.3.6.tar.xz
c73d77001605fffff450945006a5fbe9660ce310 7246 apt_3.3.6_source.buildinfo
Checksums-Sha256:
6ad58e95a3704a6d204ff43290544f122ee7bb47abe3731c0b1c7aeb4193f891 3159 apt_3.3.6.dsc
993c1c140ced0c760a5ea0d40c7a6fd9efcc0c0f32cf0fd90aaf933ddb067612 2568388 apt_3.3.6.tar.xz
74c80df0a8fc41a7ba607d02a733af49027f09a3d57df95e18983e3496aba47e 7246 apt_3.3.6_source.buildinfo
Files:
f62fcbe6e93a4ef4a11b8482d4f4671a 3159 admin required apt_3.3.6.dsc
38ba4e2dba81a9b4e8cd98c14a59ba29 2568388 admin required apt_3.3.6.tar.xz
8fa145eed2a211c8c26be3e81bc6d00c 7246 admin required apt_3.3.6_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=bgtW
-----END PGP SIGNATURE-----
