Rev 27 | Details | Compare with Previous | Last modification | View Log | RSS feed
Rev | Author | Line No. | Line |
---|---|---|---|
35 | magnus | 1 | libtar (1.2.16-1+deb7u2) wheezy-security; urgency=low |
2 | |||
3 | * [SECURITY] CVE-2013-4420.patch: Strip out leading slashes and any |
||
4 | pathname prefix containing ".." components (Closes: #731860). This is |
||
5 | done in th_get_pathname() (as well as to symlink targets when |
||
6 | extracting symlinks), not merely when extracting files, which means |
||
7 | applications calling that function will not see the stored |
||
8 | filename. There is no way to disable this behaviour, but it can be |
||
9 | expected that one will be provided when the issue is solved upstream. |
||
10 | |||
11 | -- Magnus Holmgren <holmgren@debian.org> Sun, 16 Feb 2014 19:12:18 +0100 |
||
12 | |||
27 | magnus | 13 | libtar (1.2.16-1+deb7u1) wheezy-security; urgency=low |
14 | |||
15 | * [SECURITY] size_t-overflow_cve-2013-4397.patch: Fix CVE-2013-4397: |
||
16 | Integer overflow (Closes: #725938). |
||
17 | |||
18 | -- Magnus Holmgren <holmgren@debian.org> Thu, 10 Oct 2013 20:23:17 +0200 |
||
19 | |||
10 | magnus | 20 | libtar (1.2.16-1) unstable; urgency=low |
8 | magnus | 21 | |
22 | * New upstream: Chris Frey has stepped up with the consent of the |
||
23 | original author, Mark Roth, and published an "official unofficial" git |
||
24 | repo at http://repo.or.cz/w/libtar.git, which I will use for the time |
||
25 | being. |
||
10 | magnus | 26 | * Updated debian/watch to look for tags and corresponding snapshot |
27 | tarballs at above URL. |
||
8 | magnus | 28 | * All patches have been incorporated or (in the case of |
29 | autoreconf.patch) made obsolete upstream. |
||
9 | magnus | 30 | * debian/rules: Add build-indep and build-arch targets. |
11 | magnus | 31 | * Updated debian/copyright. |
12 | magnus | 32 | * Use dpkg-buildflags to set CFLAGS et al. |
13 | magnus | 33 | * debian/control: Add VCS fields; bump Standards-Version to 3.9.3. |
8 | magnus | 34 | |
13 | magnus | 35 | -- Magnus Holmgren <holmgren@debian.org> Sat, 23 Jun 2012 01:03:41 +0200 |
8 | magnus | 36 | |
6 | magnus | 37 | libtar (1.2.11-8) unstable; urgency=low |
38 | |||
39 | * libtool.patch: Set SHELL to the configured shell in those Makefile.in |
||
40 | where libtool is used; otherwise libtool fails when /bin/sh is dash |
||
41 | but bash is expected (Closes: #621935). |
||
42 | * man_hyphen_minus.patch (new): Escape hyphens that should be minus |
||
43 | signs in man pages. |
||
44 | * Rename libtar as libtar0 to follow policy. |
||
45 | |||
46 | -- Magnus Holmgren <holmgren@debian.org> Sun, 24 Apr 2011 21:11:52 +0200 |
||
47 | |||
5 | magnus | 48 | libtar (1.2.11-7) unstable; urgency=low |
49 | |||
50 | * New maintainer (Closes: #526618). |
||
51 | * Change source format to 3.0 (quilt), clean up Debian diff and split |
||
52 | into several patches: |
||
53 | * libtool.patch: Using libtool to build dynamic library; |
||
54 | * autoreconf.patch: Changes needed to call autoreconf (bug 511741); |
||
55 | * memleak.patch: Fix memory leaks; |
||
56 | * bad_ptrtoint.patch: Document stupidity of tartype_t in libtar.c |
||
57 | (bug 309945). |
||
58 | * Increase Debhelper compat level to 7. |
||
59 | * Use dh_autoreconf to avoid having to keep track of files to clean. |
||
60 | * memleak2.patch (new): Applied instead of memleak.patch. Fix memory |
||
61 | leak by making th_get_pathname() return a pointer to a static buffer |
||
62 | instead of a pointer to a copy of a local buffer (LP: #41804). |
||
63 | * Add homepage field and watch file (in case there is ever a new |
||
64 | upstream release). |
||
65 | * Upgrade to Standards-Version 3.9.1. |
||
66 | |||
67 | -- Magnus Holmgren <holmgren@debian.org> Sat, 26 Mar 2011 23:10:25 +0100 |
||
68 | |||
3 | magnus | 69 | libtar (1.2.11-6) unstable; urgency=low |
70 | |||
71 | * Fix autotools usage (Closes: #511741) |
||
72 | |||
73 | -- Julien Danjou <acid@debian.org> Sat, 02 May 2009 11:33:06 +0200 |
||
74 | |||
75 | libtar (1.2.11-5) unstable; urgency=low |
||
76 | |||
77 | * New maintainer (Closes: #465889) |
||
78 | * Add missing binary-indep target in debian/rules (Closes: #395714) |
||
79 | * Use ${binary:Version} instead of Source-Version |
||
80 | * Bump standard version |
||
81 | * Switch to debhelper 5 |
||
82 | |||
83 | -- Julien Danjou <acid@debian.org> Wed, 02 Apr 2008 07:06:55 +0200 |
||
84 | |||
85 | libtar (1.2.11-4) unstable; urgency=low |
||
86 | |||
87 | * Always include the newest libtool.m4. (Closes: #313612) |
||
88 | |||
89 | -- James Morrison <phython@debian.org> Sun, 28 Aug 2005 09:41:47 -0700 |
||
90 | |||
91 | libtar (1.2.11-3) unstable; urgency=low |
||
92 | |||
93 | * Document stupidity of tartype_t in libtar.c. (Closes: #309945) |
||
94 | |||
95 | -- James Morrison <phython@debian.org> Sat, 11 Jun 2005 18:23:15 -0400 |
||
96 | |||
97 | libtar (1.2.11-2) unstable; urgency=low |
||
98 | |||
99 | * Move libtar-dev to libdevel. (Closes: #188207) |
||
100 | * Fix potential memory leak. |
||
101 | |||
102 | -- James Morrison <phython@debian.org> Sun, 25 Jul 2004 12:59:08 -0700 |
||
103 | |||
104 | libtar (1.2.11-1) unstable; urgency=low |
||
105 | |||
106 | * New Upstream release. |
||
107 | |||
108 | -- James Morrison <phython@debian.org> Sat, 5 Apr 2003 14:03:19 -0500 |
||
109 | |||
110 | libtar (1.2.10-1) unstable; urgency=low |
||
111 | |||
112 | * New Upstream release. |
||
113 | (Closes: #166602) New upstream uses autoconf 2.5x |
||
114 | * Remove dependency on automake. Hopefully upstream will except this |
||
115 | use of libtool. |
||
116 | * Remove all -static and -shared targets from debian/rules. |
||
117 | * Use dh_install instead of dh_movefiles. |
||
118 | * - |
||
119 | |||
120 | -- James Morrison <phython@debian.org> Sat, 5 Apr 2003 14:03:16 -0500 |
||
121 | |||
122 | libtar (1.2.5-4) unstable; urgency=low |
||
123 | |||
124 | * New maintainer. (Closes: #154597) |
||
125 | * WSG_ENCAP is now defined. (Closes: #147764) |
||
126 | * libtar-dev depends on libc-dev instead of libc6-dev. |
||
127 | |||
128 | -- James Morrison <phython@debian.org> Wed, 14 Aug 2002 23:44:16 -0400 |
||
129 | |||
130 | libtar (1.2.5-3) unstable; urgency=low |
||
131 | |||
132 | * Modify build commands to acomadate change in autoconf (Closes #147764) |
||
133 | |||
134 | -- Glenn McGrath <bug1@debian.org> Thu, 23 May 2002 01:06:16 +1000 |
||
135 | |||
136 | libtar (1.2.5-2) unstable; urgency=low |
||
137 | |||
138 | * Fix build problem (Closes #135360) |
||
139 | |||
140 | -- Glenn McGrath <bug1@debian.org> Sun, 24 Feb 2002 06:29:31 +1100 |
||
141 | |||
142 | libtar (1.2.5-1) unstable; urgency=low |
||
143 | |||
144 | * New upstream version |
||
145 | * Change section of libtar-dev to devel and libtar to libs |
||
146 | |||
147 | -- Glenn McGrath <bug1@debian.org> Fri, 22 Feb 2002 04:23:15 +1100 |
||
148 | |||
149 | libtar (1.2.4-2) unstable; urgency=low |
||
150 | |||
151 | * Change section from devel to libs |
||
152 | |||
153 | -- Glenn McGrath <bug1@debian.org> Sat, 2 Feb 2002 12:12:32 +1100 |
||
154 | |||
155 | libtar (1.2.4-1) unstable; urgency=low |
||
156 | |||
157 | * Initial Release. (closes #128042) |
||
158 | |||
159 | -- Glenn McGrath <bug1@debian.org> Sat, 5 Jan 2002 13:24:37 +1100 |
||
160 |