Subversion Repositories

?revision_form?Rev ?revision_input??revision_submit??revision_endform?

Rev 36 | Only display areas with differences | Ignore whitespace | Details | Blame | Last modification | View Log | RSS feed

Rev 36 Rev 37
1
libtar (1.2.20-4) unstable; urgency=high
1
libtar (1.2.20-4) unstable; urgency=high
2
2
3
  * no_maxpathlen.patch: Half of the part of the patch modifying
3
  * no_maxpathlen.patch: Half of the part of the patch modifying
4
    compat/dirname.c was missing, causing libtar's dirname to always
4
    compat/dirname.c was missing, causing libtar's dirname to always
5
    return NULL (except in special circumstances). Actually make it work
5
    return NULL (except in special circumstances). Actually make it work
6
    (Closes: #745352). (The reason that libtar doesn't use libc's
6
    (Closes: #745352). (The reason that libtar doesn't use libc's
7
    dirname() and basename() on some or most platforms is that the code
7
    dirname() and basename() on some or most platforms is that the code
8
    doesn't work with destructive versions of these functions).
8
    doesn't work with destructive versions of these functions).
9
9
10
 -- Magnus Holmgren <holmgren@debian.org>  Sat, 03 May 2014 20:39:02 +0200
10
 -- Magnus Holmgren <holmgren@debian.org>  Sat, 03 May 2014 20:39:02 +0200
11
11
12
libtar (1.2.20-3) unstable; urgency=low
12
libtar (1.2.20-3) unstable; urgency=low
13
13
14
  * no_maxpathlen.patch: Fix two grave bugs in the patch. First,
14
  * no_maxpathlen.patch: Fix two grave bugs in the patch. First,
15
    th_get_pathname would only allocate as much memory as was needed for
15
    th_get_pathname would only allocate as much memory as was needed for
16
    the first filename encountered, causing heap corruption when/if
16
    the first filename encountered, causing heap corruption when/if
17
    encountering longer filenames later. Second, two variables were mixed
17
    encountering longer filenames later. Second, two variables were mixed
18
    up in tar_append_tree(). Also, fix a potential memory leak and trim
18
    up in tar_append_tree(). Also, fix a potential memory leak and trim
19
    the patch a bit.
19
    the patch a bit.
20
  * [SECURITY] CVE-2013-4420.patch: When the prefix field is in use, the
20
  * [SECURITY] CVE-2013-4420.patch: When the prefix field is in use, the
21
    safer_name_suffix() function should certainly be applied to the
21
    safer_name_suffix() function should certainly be applied to the
22
    combination of it and the name field, not just on the name field.
22
    combination of it and the name field, not just on the name field.
23
  * th_get_size-unsigned-int.patch: Make the th_get_size() macro cast the
23
  * th_get_size-unsigned-int.patch: Make the th_get_size() macro cast the
24
    result from oct_to_int() to unsigned int. This is the right fix for
24
    result from oct_to_int() to unsigned int. This is the right fix for
25
    bug #725938 on 64-bit systems, where a specially crafted tar file
25
    bug #725938 on 64-bit systems, where a specially crafted tar file
26
    would not cause an integer overflow, but a memory allocation of almost
26
    would not cause an integer overflow, but a memory allocation of almost
27
    16 exbibytes, which would certainly fail outright without harm.
27
    16 exbibytes, which would certainly fail outright without harm.
28
28
29
 -- Magnus Holmgren <holmgren@debian.org>  Sat, 15 Feb 2014 23:51:51 +0100
29
 -- Magnus Holmgren <holmgren@debian.org>  Sat, 15 Feb 2014 23:51:51 +0100
30
30
31
libtar (1.2.20-2) unstable; urgency=low
31
libtar (1.2.20-2) unstable; urgency=low
32
32
33
  * no_static_buffers.patch: avoid using a static buffer in
33
  * no_static_buffers.patch: avoid using a static buffer in
34
    th_get_pathname(). Taken from upstream. Needed for no_maxpathlen.patch.
34
    th_get_pathname(). Taken from upstream. Needed for no_maxpathlen.patch.
35
  * no_maxpathlen.patch: Fix FTBFS on Hurd by dynamically allocating path
35
  * no_maxpathlen.patch: Fix FTBFS on Hurd by dynamically allocating path
36
    names (Closes: #657116). Thanks to Svante Signell and Petter
36
    names (Closes: #657116). Thanks to Svante Signell and Petter
37
    Reinholdtsen.
37
    Reinholdtsen.
38
  * [SECURITY] CVE-2013-4420.patch: Strip out leading slashes and any
38
  * [SECURITY] CVE-2013-4420.patch: Strip out leading slashes and any
39
    pathname prefix containing ".." components (Closes: #731860). This is
39
    pathname prefix containing ".." components (Closes: #731860). This is
40
    done in th_get_pathname() (as well as to symlink targets when
40
    done in th_get_pathname() (as well as to symlink targets when
41
    extracting symlinks), not merely when extracting files, which means
41
    extracting symlinks), not merely when extracting files, which means
42
    applications calling that function will not see the stored
42
    applications calling that function will not see the stored
43
    filename. There is no way to disable this behaviour, but it can be
43
    filename. There is no way to disable this behaviour, but it can be
44
    expected that one will be provided when the issue is solved upstream.
44
    expected that one will be provided when the issue is solved upstream.
45
  * Bump Standards-Version to 3.9.5.
45
  * Bump Standards-Version to 3.9.5.
46
46
47
 -- Magnus Holmgren <holmgren@debian.org>  Sat, 15 Feb 2014 21:49:37 +0100
47
 -- Magnus Holmgren <holmgren@debian.org>  Sat, 15 Feb 2014 21:49:37 +0100
48
48
49
libtar (1.2.20-1) unstable; urgency=high
49
libtar (1.2.20-1) unstable; urgency=high
50
50
51
  * [SECURITY] New upstream release. Fixes CVE-2013-4397: Integer
51
  * [SECURITY] New upstream release. Fixes CVE-2013-4397: Integer
52
    overflow (Closes: #725938).
52
    overflow (Closes: #725938).
53
  * Bump Standards-Version to 3.9.4.
53
  * Bump Standards-Version to 3.9.4.
54
54
55
 -- Magnus Holmgren <holmgren@debian.org>  Thu, 10 Oct 2013 19:20:49 +0200
55
 -- Magnus Holmgren <holmgren@debian.org>  Thu, 10 Oct 2013 19:20:49 +0200
56
56
57
libtar (1.2.19-1) unstable; urgency=low
57
libtar (1.2.19-1) unstable; urgency=low
58
58
59
  * New upstream release.
59
  * New upstream release.
60
60
61
 -- Magnus Holmgren <holmgren@debian.org>  Sun, 05 May 2013 17:59:29 +0200
61
 -- Magnus Holmgren <holmgren@debian.org>  Sun, 05 May 2013 17:59:29 +0200
62
62
63
libtar (1.2.16-1) unstable; urgency=low
63
libtar (1.2.16-1) unstable; urgency=low
64
64
65
  * New upstream: Chris Frey has stepped up with the consent of the
65
  * New upstream: Chris Frey has stepped up with the consent of the
66
    original author, Mark Roth, and published an "official unofficial" git
66
    original author, Mark Roth, and published an "official unofficial" git
67
    repo at http://repo.or.cz/w/libtar.git, which I will use for the time
67
    repo at http://repo.or.cz/w/libtar.git, which I will use for the time
68
    being.
68
    being.
69
  * Updated debian/watch to look for tags and corresponding snapshot
69
  * Updated debian/watch to look for tags and corresponding snapshot
70
    tarballs at above URL.
70
    tarballs at above URL.
71
  * All patches have been incorporated or (in the case of
71
  * All patches have been incorporated or (in the case of
72
    autoreconf.patch) made obsolete upstream.
72
    autoreconf.patch) made obsolete upstream.
73
  * debian/rules: Add build-indep and build-arch targets.
73
  * debian/rules: Add build-indep and build-arch targets.
74
  * Updated debian/copyright.
74
  * Updated debian/copyright.
75
  * Use dpkg-buildflags to set CFLAGS et al.
75
  * Use dpkg-buildflags to set CFLAGS et al.
76
  * debian/control: Add VCS fields; bump Standards-Version to 3.9.3.
76
  * debian/control: Add VCS fields; bump Standards-Version to 3.9.3.
77
77
78
 -- Magnus Holmgren <holmgren@debian.org>  Sat, 23 Jun 2012 01:03:41 +0200
78
 -- Magnus Holmgren <holmgren@debian.org>  Sat, 23 Jun 2012 01:03:41 +0200
79
79
80
libtar (1.2.11-8) unstable; urgency=low
80
libtar (1.2.11-8) unstable; urgency=low
81
81
82
  * libtool.patch: Set SHELL to the configured shell in those Makefile.in
82
  * libtool.patch: Set SHELL to the configured shell in those Makefile.in
83
    where libtool is used; otherwise libtool fails when /bin/sh is dash
83
    where libtool is used; otherwise libtool fails when /bin/sh is dash
84
    but bash is expected (Closes: #621935).
84
    but bash is expected (Closes: #621935).
85
  * man_hyphen_minus.patch (new): Escape hyphens that should be minus
85
  * man_hyphen_minus.patch (new): Escape hyphens that should be minus
86
    signs in man pages.
86
    signs in man pages.
87
  * Rename libtar as libtar0 to follow policy.
87
  * Rename libtar as libtar0 to follow policy.
88
88
89
 -- Magnus Holmgren <holmgren@debian.org>  Sun, 24 Apr 2011 21:11:52 +0200
89
 -- Magnus Holmgren <holmgren@debian.org>  Sun, 24 Apr 2011 21:11:52 +0200
90
90
91
libtar (1.2.11-7) unstable; urgency=low
91
libtar (1.2.11-7) unstable; urgency=low
92
92
93
  * New maintainer (Closes: #526618).
93
  * New maintainer (Closes: #526618).
94
  * Change source format to 3.0 (quilt), clean up Debian diff and split
94
  * Change source format to 3.0 (quilt), clean up Debian diff and split
95
    into several patches:
95
    into several patches:
96
    * libtool.patch: Using libtool to build dynamic library;
96
    * libtool.patch: Using libtool to build dynamic library;
97
    * autoreconf.patch: Changes needed to call autoreconf (bug 511741);
97
    * autoreconf.patch: Changes needed to call autoreconf (bug 511741);
98
    * memleak.patch: Fix memory leaks;
98
    * memleak.patch: Fix memory leaks;
99
    * bad_ptrtoint.patch: Document stupidity of tartype_t in libtar.c 
99
    * bad_ptrtoint.patch: Document stupidity of tartype_t in libtar.c 
100
      (bug 309945).
100
      (bug 309945).
101
  * Increase Debhelper compat level to 7.
101
  * Increase Debhelper compat level to 7.
102
  * Use dh_autoreconf to avoid having to keep track of files to clean.
102
  * Use dh_autoreconf to avoid having to keep track of files to clean.
103
  * memleak2.patch (new): Applied instead of memleak.patch. Fix memory
103
  * memleak2.patch (new): Applied instead of memleak.patch. Fix memory
104
    leak by making th_get_pathname() return a pointer to a static buffer
104
    leak by making th_get_pathname() return a pointer to a static buffer
105
    instead of a pointer to a copy of a local buffer (LP: #41804).
105
    instead of a pointer to a copy of a local buffer (LP: #41804).
106
  * Add homepage field and watch file (in case there is ever a new
106
  * Add homepage field and watch file (in case there is ever a new
107
    upstream release).
107
    upstream release).
108
  * Upgrade to Standards-Version 3.9.1.
108
  * Upgrade to Standards-Version 3.9.1.
109
109
110
 -- Magnus Holmgren <holmgren@debian.org>  Sat, 26 Mar 2011 23:10:25 +0100
110
 -- Magnus Holmgren <holmgren@debian.org>  Sat, 26 Mar 2011 23:10:25 +0100
111
111
112
libtar (1.2.11-6) unstable; urgency=low
112
libtar (1.2.11-6) unstable; urgency=low
113
113
114
  * Fix autotools usage (Closes: #511741)
114
  * Fix autotools usage (Closes: #511741)
115
115
116
 -- Julien Danjou <acid@debian.org>  Sat, 02 May 2009 11:33:06 +0200
116
 -- Julien Danjou <acid@debian.org>  Sat, 02 May 2009 11:33:06 +0200
117
117
118
libtar (1.2.11-5) unstable; urgency=low
118
libtar (1.2.11-5) unstable; urgency=low
119
119
120
  * New maintainer (Closes: #465889)
120
  * New maintainer (Closes: #465889)
121
  * Add missing binary-indep target in debian/rules (Closes: #395714)
121
  * Add missing binary-indep target in debian/rules (Closes: #395714)
122
  * Use ${binary:Version} instead of Source-Version
122
  * Use ${binary:Version} instead of Source-Version
123
  * Bump standard version
123
  * Bump standard version
124
  * Switch to debhelper 5
124
  * Switch to debhelper 5
125
125
126
 -- Julien Danjou <acid@debian.org>  Wed, 02 Apr 2008 07:06:55 +0200
126
 -- Julien Danjou <acid@debian.org>  Wed, 02 Apr 2008 07:06:55 +0200
127
127
128
libtar (1.2.11-4) unstable; urgency=low
128
libtar (1.2.11-4) unstable; urgency=low
129
129
130
  * Always include the newest libtool.m4.  (Closes: #313612)
130
  * Always include the newest libtool.m4.  (Closes: #313612)
131
131
132
 -- James Morrison <phython@debian.org>  Sun, 28 Aug 2005 09:41:47 -0700
132
 -- James Morrison <phython@debian.org>  Sun, 28 Aug 2005 09:41:47 -0700
133
133
134
libtar (1.2.11-3) unstable; urgency=low
134
libtar (1.2.11-3) unstable; urgency=low
135
135
136
  * Document stupidity of tartype_t in libtar.c.  (Closes: #309945)
136
  * Document stupidity of tartype_t in libtar.c.  (Closes: #309945)
137
137
138
 -- James Morrison <phython@debian.org>  Sat, 11 Jun 2005 18:23:15 -0400
138
 -- James Morrison <phython@debian.org>  Sat, 11 Jun 2005 18:23:15 -0400
139
139
140
libtar (1.2.11-2) unstable; urgency=low
140
libtar (1.2.11-2) unstable; urgency=low
141
141
142
  * Move libtar-dev to libdevel. (Closes: #188207)
142
  * Move libtar-dev to libdevel. (Closes: #188207)
143
  * Fix potential memory leak.
143
  * Fix potential memory leak.
144
144
145
 -- James Morrison <phython@debian.org>  Sun, 25 Jul 2004 12:59:08 -0700
145
 -- James Morrison <phython@debian.org>  Sun, 25 Jul 2004 12:59:08 -0700
146
146
147
libtar (1.2.11-1) unstable; urgency=low
147
libtar (1.2.11-1) unstable; urgency=low
148
148
149
  * New Upstream release.
149
  * New Upstream release.
150
150
151
 -- James Morrison <phython@debian.org>  Sat,  5 Apr 2003 14:03:19 -0500
151
 -- James Morrison <phython@debian.org>  Sat,  5 Apr 2003 14:03:19 -0500
152
152
153
libtar (1.2.10-1) unstable; urgency=low
153
libtar (1.2.10-1) unstable; urgency=low
154
154
155
  * New Upstream release.
155
  * New Upstream release.
156
     (Closes: #166602) New upstream uses autoconf 2.5x
156
     (Closes: #166602) New upstream uses autoconf 2.5x
157
  * Remove dependency on automake.  Hopefully upstream will except this
157
  * Remove dependency on automake.  Hopefully upstream will except this
158
    use of libtool.
158
    use of libtool.
159
  * Remove all -static and -shared targets from debian/rules.
159
  * Remove all -static and -shared targets from debian/rules.
160
  * Use dh_install instead of dh_movefiles.
160
  * Use dh_install instead of dh_movefiles.
161
  * -
161
  * -
162
162
163
 -- James Morrison <phython@debian.org>  Sat,  5 Apr 2003 14:03:16 -0500
163
 -- James Morrison <phython@debian.org>  Sat,  5 Apr 2003 14:03:16 -0500
164
164
165
libtar (1.2.5-4) unstable; urgency=low
165
libtar (1.2.5-4) unstable; urgency=low
166
166
167
  * New maintainer. (Closes: #154597)
167
  * New maintainer. (Closes: #154597)
168
  * WSG_ENCAP is now defined.  (Closes: #147764)
168
  * WSG_ENCAP is now defined.  (Closes: #147764)
169
  * libtar-dev depends on libc-dev instead of libc6-dev. 
169
  * libtar-dev depends on libc-dev instead of libc6-dev. 
170
170
171
 -- James Morrison <phython@debian.org>  Wed, 14 Aug 2002 23:44:16 -0400
171
 -- James Morrison <phython@debian.org>  Wed, 14 Aug 2002 23:44:16 -0400
172
172
173
libtar (1.2.5-3) unstable; urgency=low
173
libtar (1.2.5-3) unstable; urgency=low
174
174
175
  * Modify build commands to acomadate change in autoconf (Closes #147764)
175
  * Modify build commands to acomadate change in autoconf (Closes #147764)
176
176
177
 -- Glenn McGrath <bug1@debian.org>  Thu, 23 May 2002 01:06:16 +1000
177
 -- Glenn McGrath <bug1@debian.org>  Thu, 23 May 2002 01:06:16 +1000
178
178
179
libtar (1.2.5-2) unstable; urgency=low
179
libtar (1.2.5-2) unstable; urgency=low
180
180
181
  * Fix build problem (Closes #135360)
181
  * Fix build problem (Closes #135360)
182
182
183
 -- Glenn McGrath <bug1@debian.org>  Sun, 24 Feb 2002 06:29:31 +1100
183
 -- Glenn McGrath <bug1@debian.org>  Sun, 24 Feb 2002 06:29:31 +1100
184
184
185
libtar (1.2.5-1) unstable; urgency=low
185
libtar (1.2.5-1) unstable; urgency=low
186
186
187
  * New upstream version
187
  * New upstream version
188
  * Change section of libtar-dev to devel and libtar to libs
188
  * Change section of libtar-dev to devel and libtar to libs
189
189
190
 -- Glenn McGrath <bug1@debian.org>  Fri, 22 Feb 2002 04:23:15 +1100
190
 -- Glenn McGrath <bug1@debian.org>  Fri, 22 Feb 2002 04:23:15 +1100
191
191
192
libtar (1.2.4-2) unstable; urgency=low
192
libtar (1.2.4-2) unstable; urgency=low
193
193
194
  * Change section from devel to libs 
194
  * Change section from devel to libs 
195
195
196
 -- Glenn McGrath <bug1@debian.org>  Sat,  2 Feb 2002 12:12:32 +1100
196
 -- Glenn McGrath <bug1@debian.org>  Sat,  2 Feb 2002 12:12:32 +1100
197
197
198
libtar (1.2.4-1) unstable; urgency=low
198
libtar (1.2.4-1) unstable; urgency=low
199
199
200
  * Initial Release. (closes #128042)
200
  * Initial Release. (closes #128042)
201
201
202
 -- Glenn McGrath <bug1@debian.org>  Sat,  5 Jan 2002 13:24:37 +1100
202
 -- Glenn McGrath <bug1@debian.org>  Sat,  5 Jan 2002 13:24:37 +1100
203
203