apt (1.4.2) unstable; urgency=medium If periodic updates and unattended upgrades are enabled, the start of periodic updates are now distributed over 24 hour intervals (as in 1.2 to 1.4), whereas starting unattended-upgrade has been restricted to a time between 6 and 7 am. This only affects systems using systemd, other systems still use the classical hourly cron job. -- Julian Andres Klode &lt;jak(a)debian.org&gt; Thu, 04 May 2017 22:54:02 +0200 apt (1.4~beta1) unstable; urgency=medium Support for GPG signatures using the SHA1 or RIPE-MD/160 hash algorithms has been disabled. Repositories using Release files signed in such a way will stop working. This change has been made due to security considerations, especially with regards to possible further breakthroughs in SHA1 breaking during the lifetime of this APT release series. It is possible (but STRONGLY ADVISED AGAINST) to revert to the previous behaviour by setting the options APT::Hashes::SHA1::Weak "yes"; APT::Hashes::RIPE-MD/160::Weak "yes"; Note that setting these options only affects the verification of the overall repository signature. -- Julian Andres Klode &lt;jak(a)debian.org&gt; Fri, 25 Nov 2016 13:19:32 +0100 apt (1.2~exp1) experimental; urgency=medium [ Automatic removal of debs after install ] After packages are successfully installed by apt(8), the corresponding .deb package files will be removed from the /var/cache/apt/archives cache directory. This can be changed by setting the apt configuration option "Binary::apt::APT::Keep-Downloaded-Packages" to "true". E.g: # echo 'Binary::apt::APT::Keep-Downloaded-Packages "true";' \ Please note that the behavior of apt-get is unchanged. The downloaded debs will be kept in the cache directory after they are installed. To enable the behavior for other tools, you can set "APT::Keep-Downloaded-Packages" to false. [ Compressed indices ] If you use Acquire::gzipIndexes, or any other compressed index targets, those will now be compressed with the fastest supported algorithm, currently lz4. -- Michael Vogt &lt;mvo(a)debian.org&gt; Tue, 05 Jan 2016 19:22:16 +0100 apt (1.1~exp9) experimental; urgency=medium A new algorithm for pinning has been implemented, it now assigns a pin priority to a version instead of assigning a pin to a package. This might break existing corner cases of pinning, if they use multiple pins involving the same package name or patterns matching the same package name, but should overall lead to pinning that actually works as intended and documented. -- Julian Andres Klode &lt;jak(a)debian.org&gt; Mon, 17 Aug 2015 14:45:17 +0200 apt-listchanges (3.3) unstable; urgency=medium Short summary of the most important changes done since version 3.0 up to 3.3: - apt-listchanges was migrated to python3. The "gtk" frontend now requires the python3-gi package to work. - The "browser", "xterm-pager", and "xterm-browser" frontends will now try to drop root privileges before spawning external commands. This only works when upgrade was initiated from a regular user account with commands like sudo|su apt-get|aptitude upgrade|install|etc. - The way apt-listchanges cooperates with apt was slightly changed; please make sure to accept the new version of `/etc/apt/apt.conf.d/20listchanges' configuration file in case dpkg prompts about the file. - apt-listchanges no longer supports deprecated frontends (e.g. "w3m") or ancient (i.e. more than about 15 years old) *.deb packages. -- Robert Luberda &lt;robert(a)debian.org&gt; Mon, 15 Aug 2016 21:55:31 +0200 apt-listchanges (2.87) unstable; urgency=medium For better integration with package management system, apt-listchanges automatically switches to the non-interactive "text" frontend: - when the `-y'/`--assume-yes' option is passed to apt-get - or when DEBIAN_FRONTEND environment variable is set to "noninteractive". The new behavior can be disabled in the configuration file (or via the command-line parameters), refer to apt-listchanges(1) man page for details. The "mail" frontend can optionally send e-mails in the HTML format, see the description of `--email-format' option in the man page for more information. For the sake of consistency the `--all' and `--show_seen' options were renamed to `--show-all' and `--show-seen' respectively. -- Robert Luberda &lt;robert(a)debian.org&gt; Sat, 02 Apr 2016 20:24:43 +0200 freeradius (3.0.11+dfsg-1) experimental; urgency=medium Please see upstream’s “Upgrading to Version 3.0” guide which is available locally in /etc/freeradius/3.0/README.rst or online at https://github.com/FreeRADIUS/freeradius-server/blob/v3.0.x/raddb/README.rst -- Michael Stapelberg &lt;stapelberg(a)debian.org&gt; Thu, 15 Sep 2016 20:21:09 +0200 mutt (1.7.0-6) unstable; urgency=medium As of result of the switch to gpgme in 1.7.0-2, all pgp_* commands that reference a pgp/gnupg command are now ignored (unless crypt_use_gpgme is manually set to 'no'). If you had an --encrypt-to in those commands, to encrypt outgoing mail to yourself, then you will have to set pgp_encrypt_self=yes to maintain the same behavior. Starting from this version of mutt, $locale is not an option anymore, you will have to use $attribution_locale instead, which hich controls the translation of the "On {date}, {user} wrote" reply string. More details on https://www.mail-archive.com/mutt-dev@mutt.org/msg11544.html. As of this version mailto_allow will also include In-Reply-To, Cc and References by default, to change it set mailto_allow in your ~/.muttrc. -- Antonio Radici &lt;antonio(a)debian.org&gt; Sun, 25 Sep 2016 08:48:10 +0100 mutt (1.7.0-2) unstable; urgency=medium Starting from this version, we enable 'crypt_use_gpgme=yes' by default. The GPGME delegates all crypto support to gnupg, which is designed to hold your crypto data securely. The drawback is that inline signatures are no longer supported in favour of PGP/MIME. If you need to sign your email with inline signatures please use 'set crypt_use_gpgme=no' in your .muttrc. To solve #828751 we also had to add '--pinentry-mode loopback' to all commands in gpg.rc, that breaks compatibility with gpg v1, if you are still using gpg v1 please remove that option from the invocations of the command in /etc/Muttrc.d/gpg.rc -- Antonio Radici &lt;antonio(a)debian.org&gt; Wed, 07 Sep 2016 21:02:51 +0100 mutt (1.6.2-1) unstable; urgency=medium The mutt package now incorporates the NeoMutt patchset, which includes a number of important security, performance and stability fixes. It also includes a number of UI improvements and a plethora of new features, including many previously shipped by Debian. Among these is the functionality of both the mutt-patched (sidebar, NNTP) and the mutt-kz (notmuch) packages, that are now both obsolete and replaced by the mutt package. More information about NeoMutt can be found on its website: http://www.neomutt.org/ The sidebar patch has been polished up and merged upstream in what will eventually be Mutt 1.7.0 -- and then backported again by NeoMutt. For compatibility with upstream's default and since there is no mutt-patched package anymore, the sidebar is now off by default. Moreover, this new version renamed the sidebar's configuration options. To keep the old behavior, use this in your .muttrc: set mail_check_stats=yes set sidebar_visible=yes set sidebar_format="%B%* %S%?N?(%N)?%?F?[%F]?" set sidebar_indent_string=" " and optionally: set sidebar_folder_indent=yes set sidebar_short_path=yes The "file_charset" option has been renamed to "attach_charset", as part of its inclusion upstream. -- Faidon Liambotis &lt;paravoid(a)debian.org&gt; Mon, 25 Jul 2016 18:45:08 +0300 openldap (2.4.44+dfsg-1) unstable; urgency=medium The slapd package no longer includes OpenSLP support. The openslp-dfsg package is being retired due to lack of maintenance and security concerns. Please see <https://bugs.debian.org/795428> for more information. -- Ryan Tandy &lt;ryan(a)nardis.ca&gt; Tue, 15 Mar 2016 03:59:27 +0000 postfix (3.1.4-1) unstable; urgency=medium Starting with postfix 3.0, Debian's custom dynamically loadable module support has been replaced with a new upstream implementation. To support this change, some files in /etc/postfix required updates. If prompted during install to accept or reject changes, take care not to reject changes due to the new configuration. Failure to do so may lead to a non-working system. Starting with Debian 9, Codename Stretch, postfix is shipped with a systemd unit file for native systemd integration (the old sysv init script is also provided for non-systemd deployments). Manipulation of Postfix instances using the new unit files is described in README.Debian. -- Scott Kitterman &lt;scott(a)kitterman.com&gt; Mon, 02 Jan 2017 14:05:46 -0500 smartmontools (6.4+svn4214-1) unstable; urgency=medium Previous versions of the smartmontools package included a tool update-smart-drivedb which downloaded updated drive definitions from the smartmontools website and stored them at /var/lib/smartmontools/drivedb/drivedb.h This tool did not download the definitions in a secure manner and so the feature has been removed in this version. Future drive DB updates will be propagated via normal Debian package updates, including backports. If you already have a drivedb.h file at that location, smartctl will continue to use it. -- Jonathan Dowland &lt;jmtd(a)debian.org&gt; Mon, 01 Feb 2016 21:19:47 +0000 vim (2:8.0.0022-1) unstable; urgency=medium Vim now ships with a defaults.vim file which, when the user has no vimrc, enables some options that have historically been disabled by default. This is described in more detail at ":help defaults.vim". Since defaults.vim is loaded when the user's vimrc would typically be loaded, it will override any settings in /etc/vim/vimrc(.local). In order to disable the loading of defaults.vim, add let g:skip_defaults_vim = 1 to /etc/vim/vimrc(.local). -- James McCoy &lt;jamessan(a)debian.org&gt; Tue, 04 Oct 2016 20:28:02 -0400 vim (2:7.4.2330-1) unstable; urgency=medium The Python language bindings have been switched from python2 to python3. If you have plugins/addons that use Python, they may need to be updated to support python3. Similarly, python3 specific packages may need to be installed to re-enable plugins (e.g., python-powerline is replaced by python3-powerline) or plugin features. -- James McCoy &lt;jamessan(a)debian.org&gt; Wed, 07 Sep 2016 22:12:11 -0400 findutils (4.5.12-1) experimental; urgency=low The GNU extension find -perm +xyz has been deprecated, find now exits with an error when this syntax is used. Please switch over to find -perm /xyz which has been supported since 2005. See http://savannah.gnu.org/bugs/?38474 for upstream discussion of the issue. -- Andreas Metzler &lt;ametzler(a)debian.org&gt; Sat, 28 Sep 2013 08:46:13 +0200