packagekit (1.1.9-1ubuntu2.18.04.6) bionic-security; urgency=medium

  * SECURITY UPDATE: information disclosure (LP: #1888887)
    - debian/patches/CVE-2020-16121.patch: hide failures behind a single
      error message in src/pk-transaction.c.
    - CVE-2020-16121
  * SECURITY UPDATE: untrusted local file installation (LP: #1882098)
    - debian/patches/CVE-2020-16122.patch: do not trust local packages in
      backends/aptcc/apt-intf.cpp.
    - CVE-2020-16122

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 23 Sep 2020 07:01:04 -0400

packagekit (1.1.9-1ubuntu2.18.04.5) bionic; urgency=medium

  * 03_aptcc-use-correct-return-type-in-function.patch: Cherry pick upstream
    fix for show_errors crashes (LP: #1818201)

 -- Julian Andres Klode <juliank@ubuntu.com>  Mon, 04 Mar 2019 16:42:18 +0100

packagekit (1.1.9-1ubuntu2.18.04.4) bionic; urgency=medium

  * debian/patches/0001-aptcc-Only-autoremove-packages-that-relate-to-the-cu.patch:
  * debian/patches/0002-aptcc-Use-installed-version-to-determine-garbage.patch:
    - Correct autoremove behaviour to only autoremove packages that relate to
      the current transaction (LP: #1552792)

 -- Robert Ancell <robert.ancell@canonical.com>  Fri, 09 Nov 2018 14:24:04 +1300

packagekit (1.1.9-1ubuntu2.18.04.3) bionic; urgency=medium

  * Pass --no-restart-after-upgrade to dh_installsystemd to avoid PackageKit
    restarting while upgrading under PackageKit (LP: #1790613)

 -- Julian Andres Klode <juliank@ubuntu.com>  Mon, 15 Oct 2018 15:46:47 +0200

packagekit (1.1.9-1ubuntu2.18.04.2) bionic; urgency=medium

  * debian/patches/frontend-locking.diff:
    Implement frontend locking in a simple way. Will need some more
    work to upstream, and possibly some error checking. (LP: #1795614)
  * Bump libapt-pkg-dev build-dep to >= 1.6.5~ for frontend locking
  * debian/patches/aptcc-Fix-invalid-version-dereference-in-AptInf-prov.patch,
    aptcc-removing-duplicate-delete-call.patch:
    Fix invalid dereference and delete wrong (duplicate) "delete"
    statement in providesCodec (LP: #1790671)

 -- Julian Andres Klode <juliank@ubuntu.com>  Tue, 02 Oct 2018 16:02:20 +0200

packagekit (1.1.9-1ubuntu2.18.04.1) bionic; urgency=medium

  * debian/patches/0001-De-register-callbacks-on-PkClientHelper-finalize.patch:
  * debian/patches/0001-Fix-issues-with-debconf-helper-not-working.patch:
    - Fix debconf interaction (LP: #1722185)

 -- Robert Ancell <robert.ancell@canonical.com>  Mon, 21 May 2018 14:39:14 +1200

packagekit (1.1.9-1ubuntu2) bionic; urgency=medium

  * SECURITY UPDATE: authentication bypass
    - debian/patches/CVE-2018-1106.patch: do not set JUST_REINSTALL on any
      kind of auth failure in src/pk-transaction.c.
    - CVE-2018-1106

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Tue, 24 Apr 2018 10:13:27 -0400

packagekit (1.1.9-1ubuntu1) bionic; urgency=medium

  * Add might-fetch-non-archive.diff to prevent PackageKit from crashing
    when using the mirror method (LP: #1754265)

 -- Julian Andres Klode <juliank@ubuntu.com>  Wed, 21 Mar 2018 12:32:34 +0100

packagekit (1.1.9-1) unstable; urgency=medium

  * New upstream version: 1.1.9
  * Drop patches: Applied upstream
  * Adjust for dh compat level 11
  * Update symbols file
  * d/watch: Use https URL
  * d/rules: Drop obsolete dh modules

 -- Matthias Klumpp <mak@debian.org>  Mon, 12 Mar 2018 20:42:45 +0100

packagekit (1.1.7-1) unstable; urgency=medium

  [ Matthias Klumpp ]
  * New upstream version: 1.1.7
  * Drop all patches: Applied upstream
  * Add aptcc-fix-mimetype-search.patch: Don't fail when searching for mimetypes
    - See LP: #1719077
  * Bump standards and dh version
  * Fail on missing files
  * Add missing build-dependency on libappstream-dev

  [ Iain Lane ]
  * Always rebuild gtk-doc documentation

 -- Matthias Klumpp <mak@debian.org>  Sun, 24 Sep 2017 19:56:12 +0200

# For older changelog entries, run 'apt-get changelog packagekit-gtk3-module'
