python-apt (2.2.0) [PTS] [DDPO]

OLD: VCS is behind the version in the archive: 2.1.7 < 2.2.0.

Git: https://salsa.debian.org/apt-team/python-apt.git
Enter a full Vcs-* header, supported schemes are: Vcs-Bzr, Vcs-Cvs, Vcs-Darcs, Vcs-Git, Vcs-Hg, Vcs-Mtn, Vcs-Svn.
For Vcs-Git append -b branch to select the branch name; append [subdir] if the debian/ directory is not in the repository root.
The next upload will reset the information from the source package headers.
Branch: main
Path: debian/changelog
Browser: https://salsa.debian.org/apt-team/python-apt
Last scan: 2021-05-12 04:05:10+00
Next scan: 2021-05-18 03:59:00+00
Merge requests: 10
CI pipeline status: success

Debian changelog in Git:

python-apt (2.1.7) unstable; urgency=medium

  * SECURITY UPDATE: various memory and file descriptor leaks (LP: #1899193)
    - python/arfile.cc, python/generic.h, python/tag.cc, python/tarfile.cc:
      fix file descriptor and memory leaks
    - python/apt_instmodule.cc, python/apt_instmodule.h, python/arfile.h:
      Avoid reference cycle with control,data members in apt_inst.DebFile
      objects
    - tests/test_cve_2020_27351.py: Test cases for DebFile (others not easily
      testable)
  * Regression fixes for the updates merged too:
    - arfile.cc: Fix segmentation fault when opening fd, track lifetime correctly
      (Closes: #977000)
    - arfile: Regression: Collect file<->deb/ar reference cycles

 -- Julian Andres Klode <jak@debian.org>  Thu, 10 Dec 2020 15:35:32 +0100

This branch is 4 commits ahead of tag 2.1.7

Git log:

commit af7639f38a849600aec3482ec2a2198b0425b2a8
Author: Julian Andres Klode <jak@debian.org>
Date:   Thu Apr 29 09:47:21 2021 +0200

    debian/gbp.conf: Branch name is main

commit e0fa202191299bd8309ef5f08b9ddebb76e8aaec
Author: Julian Andres Klode <jak@debian.org>
Date:   Thu Apr 29 09:45:17 2021 +0200

    debfile: Pass `Name` instead of `Binary` to ExtractTar
    
    Passing the binary causes it to fail trying to find the `false`
    compressor when a binary for a given compressor is not installed.
    
    Gbp-Dch: full
    LP: #1926437

commit de5e5ccd06c22f98d2885b06f58f6e0947fe8f2a
Author: Julian Andres Klode <jak@debian.org>
Date:   Mon Apr 12 11:17:35 2021 +0200

    debian/rules: Re-enable PIE hardening
    
    We disabled that in 2016, but it does not seem necessary anymore,
    seems to break LTO and possibly reduces security.

commit 9f3127bdeb968c7d9bbec7c945c20f8543de02d4
Author: Helmut Grohne <helmut@subdivi.de>
Date:   Thu Jan 21 10:05:07 2021 +0100

    Annotate test dependencies with <!nocheck>
    
    Closes: #980719