[SRU] Update apt/xenial to 1.2.14

[Julian Andres Klode]

(This is a template for now, so I can close the bug in the 1.2.14 upload)

[Impact]
We intend to upload APT 1.2.14 to xenial under the new "micro upstream release" policy.

Apart from fixing bug 1573547, it also updates translations fixes the following other bugs:

[[1.2.13]]

Segmentation fault fixes:
* fail instead of segfault on unreadable config files (Closes: 824503)

Fixes for 3rd party programs using libapt and C++ locale API:
* prevent C++ locale number formatting in text APIs (Closes: #825396)

Fix for hurd (not really affecting us here, but upstream):
* apt-key: change to / before find to satisfy its CWD needs.
  Thanks to Samuel Thibault for 'finding' the culprit! (Closes: 826043)

Leak fixes:
* do not hang on piped input in PipedFileFdPrivate
* don't leak an FD in lz4 (de)compression
* don't leak FD in AutoProxyDetect command return parsing

[[1.2.14]]
Regression fix from 1.2.13:
  * do not error if auto-detect-proxy cmd has no output (Closes: 827713)
Huge apt-ftparchive performance regression fix from 1.1:
  * Reinstate caching of file hashes in apt-ftparchive (Closes: #806924)
Tiny bug fixes, about 2 lines each:
  * source: if download is skipped, don't try to unpack
  * ensure filesize of deb is included in the hashes list

[Test case]
The releases follow new upstream micro release rule and thus are assumed to be tested by our integration test suite. There are two exceptions which cannot be tested:

* prevent C++ locale number formatting in text APIs
* apt-key: change to / before find to satisfy its CWD needs

The first has no affected code in the archive (but maybe 3rd party code), the second only affects hurd.

[Regression Potential]
Very low. The release has been tested by a thorough integration test suite on Travis CI, Debian autopkgtests, and has been in Debian unstable since 2016-06-22.

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Julian Andres Klode (juliank)]

Moving this to the xenial series where it belongs.

[Martin Pitt (pitti)]

Hello Julian, or anyone else affected,

Accepted apt into xenial-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/apt/1.2.14 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-needed to verification-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

[Martin Pitt (pitti)]

For verifying this we should run a (manual or automatic) dist-upgrade, to verify that this works in "big" scenarios.

[Bruno Nova (brunonova)]

I've updated apt to 1.2.14 and it seems to be working OK.
I ran a dist-upgrade after several days without updating, and all is well.

Bash autocompletion is also more complete now (LP: #1598384 and LP: #1573547).

[Julian Andres Klode (juliank)]

We should probably drop the 1.2.14 SRU - there is a regression in the proxy autodetection code in which it now reads output scripts write on stderr. Fix is:

https://anonscm.debian.org/git/apt/apt.git/commit/?id=0ecceb5bb9cc8727c117195945b7116aceb984fe

This is already fixed in 1.3.1, and I'll collect this and the other bug fixes since 1.2.14 soon and publish 1.2.15

We could also merge just the regression fix for now in a 1.2.14ubuntu<something> to go ahead with the 1.2.14 SRU.

[Launchpad Janitor (janitor)]

This bug was fixed in the package apt - 1.2.15

---------------
apt (1.2.15) xenial; urgency=medium

  New micro release with bug fixes up to (and including) 1.3.1 (LP: #1638021)

  [ Julian Andres Klode ]
  * methods/ftp: Cope with weird PASV responses.
    Thanks to Lukasz Stelmach for the initial patch (Closes: #420940)
  * Fix buffer overflow in debListParser::VersionHash() (Closes: #828812)
  * cache: Bump minor version to 6
  * indextargets: Check that cache could be built before using it
    (Closes: #829651)
  * gpgv: Unlink the correct temp file in error case
  * fileutl: empty file support: Avoid fstat() on -1 fd and check result
  * Ignore SIGINT and SIGQUIT for Pre-Install hooks
  * install-progress: Call the real ::fork() in our fork() method
  * Accept --autoremove as alias for --auto-remove
  * apt-inst: debfile: Pass comp. Name to ExtractTar, not Binary
  * changelog: Respect Dir setting for local changelog getting
  * Fix segfault and out-of-bounds read in Binary fields
  * Merge translations from 1.3~rc3
  * TagFile: Fix off-by-one errors in comment stripping
  * Base256ToNum: Fix uninitialized value
  * VersionHash: Do not skip too long dependency lines
  * Do not read stderr from proxy autodetection scripts

  [ Nicolas Le Cam ]
  * Use the ConditionACPower feature of systemd in the apt-daily service
    (Closes: #827930)

  [ David Kalnischkies ]
  * close server if parsing of header field failed
  * don't do atomic overrides with failed files (Closes: 828908)
  * if reading of autobit state failed, let write fail
  * write auto-bits before calling dpkg & again after if needed
  * factor out Pkg/DepIterator prettyprinters into own header
  * protect only the latest same-source providers from autoremove
  * reinstalling local deb file is no downgrade
  * do not treat same-version local debs as downgrade
  * avoid 416 response teardown binding to null pointer
  * don't change owner/perms/times through file:// symlinks
  * report all instead of first error up the acquire chain
  * keep trying with next if connection to a SRV host failed
  * call flush on the wrapped writebuffered FileFd
  * verify hash of input file in rred
  * use proper warning for automatic pipeline disable
  * rred: truncate result file before writing to it (Closes: #831762)
  * if the FileFd failed already following calls should fail, too
  * pass --force-remove-essential to dpkg only if needed
  * allow user@host (aka: no password) in URI parsing
  * drop incorrect const attribute from DirectoryExists (LP: 1473674)
  * http(s): allow empty values for header fields (Closes: 834048)
  * don't try pipelining if server closes connections (Closes: #832113)
  * don't loop on pinning pkgs from absolute debs by regex (Closes: 835818)
  * try not to call memcpy with length 0 in hash calculations
  * abort connection on '.' target replies in SRV

  [ Andrew Patterson ]
  * Add kernels with "+" in the package name to APT::NeverAutoRemove
    (Closes: #830159)

  [ Mert Dirik ]
  * Turkish program translation update (Closes: 832039)

  [ Zhou Mo ]
  * zh_CN.po: update simplified chinese translation

 -- Julian Andres Klode <email address hidden> Mon, 31 Oct 2016 15...