* apt-pkg/depcache.cc:
  - prefer to install packages which have an already installed M-A:same
    sibling while choosing providers (LP: #1130419)
merged lp:~donkult/apt/sid
releasing version 0.9.7.8~exp1
include two missing patches to really fix bug #696225, thanks to
Guillem Jover
merged lp:~mvo/apt/hash-order
releasing version 0.9.7.8~exp2
various simple changes to fix cppcheck warnings
* apt-pkg/pkgcachegen.cc:
  - do not store the MD5Sum for every description language variant as
    it will be the same for all so it can be shared to save cache space
handle language tags for descriptions are unique strings to be shared
factor version string creation out of NewDepends, so we can easily reuse
version strings e.g. for implicit multi-arch dependencies
* SECURITY UPDATE: InRelease verification bypass
  - CVE-2013-1051

* apt-pkg/deb/debmetaindex.cc,
  test/integration/test-bug-595691-empty-and-broken-archive-files,
  test/integration/test-releasefile-verification:
  - disable InRelease downloading until the verification issue is
    fixed, thanks to Ansgar Burchardt for finding the flaw
* apt-pkg/indexcopy.cc:
  - rename RunGPGV to ExecGPGV and move it to apt-pkg/contrib/gpgv.cc
* apt-pkg/contrib/gpgv.cc:
  - ExecGPGV is a method which should never return, so mark it as such
    and fix the inconsistency of returning in error cases
don't close stdout/stderr if it is also the statusfd
* apt-pkg/acquire-item.cc:
  - keep the last good InRelease file around just as we do it with
    Release.gpg in case the new one we download isn't good for us
split out a method to strip whitespaces only on the right side
  - if ExecGPGV deals with a clear-signed file it will split this file
    into data and signatures, pass it to gpgv for verification and
    recombines it after that in a known-good way without unsigned blocks
    and whitespaces resulting usually in more or less the same file as
    before, but later code can be sure about the format
* apt-pkg/deb/debmetaindex.cc:
  - reenable InRelease by default
merged from davids bundle
add testcase and update changelog
ensure that we fclose/unlink/free in the new gpg-code as soon as possible