Rev 43 | Rev 45 | Go to most recent revision | Only display areas with differences | Ignore whitespace | Details | Blame | Last modification | View Log | RSS feed
| Rev 43 | Rev 44 | ||
|---|---|---|---|
| 1 | libtar (1.2.20-6) unstable; urgency=low |
1 | libtar (1.2.20-6) unstable; urgency=low |
| 2 | 2 | ||
| 3 | * Drop libtar/Makefile from examples, since it makes the build |
3 | * Drop libtar/Makefile from examples, since it makes the build |
| 4 | unreproducible (saves $SHELL) and isn't enough to compile libtar.c |
4 | unreproducible (saves $SHELL) and isn't enough to compile libtar.c |
| 5 | anyway. |
5 | anyway. |
| - | 6 | * Bump Standards-Version to 3.9.8. |
|
| 6 | 7 | ||
| 7 | -- Magnus Holmgren <holmgren@debian.org> Mon, 01 Aug 2016 22:52:29 +0200 |
8 | -- Magnus Holmgren <holmgren@debian.org> Mon, 01 Aug 2016 22:52:44 +0200 |
| 8 | 9 | ||
| 9 | libtar (1.2.20-5) unstable; urgency=low |
10 | libtar (1.2.20-5) unstable; urgency=low |
| 10 | 11 | ||
| 11 | * oldgnu_prefix.patch: Detect old-style GNU headers correctly (Closes: |
12 | * oldgnu_prefix.patch: Detect old-style GNU headers correctly (Closes: |
| 12 | #763119). Those appear in incremental archives and use the bytes that |
13 | #763119). Those appear in incremental archives and use the bytes that |
| 13 | the new-style headers use for the prefix field for other fields. |
14 | the new-style headers use for the prefix field for other fields. |
| 14 | Thanks to Steinar H. Gunderson. |
15 | Thanks to Steinar H. Gunderson. |
| 15 | * testsuite.patch: Add a simple test (Closes: #737258). |
16 | * testsuite.patch: Add a simple test (Closes: #737258). |
| 16 | * Bump Standards-Version to 3.9.7. |
17 | * Bump Standards-Version to 3.9.7. |
| 17 | 18 | ||
| 18 | -- Magnus Holmgren <holmgren@debian.org> Fri, 25 Mar 2016 19:12:23 +0100 |
19 | -- Magnus Holmgren <holmgren@debian.org> Fri, 25 Mar 2016 19:12:23 +0100 |
| 19 | 20 | ||
| 20 | libtar (1.2.20-4) unstable; urgency=high |
21 | libtar (1.2.20-4) unstable; urgency=high |
| 21 | 22 | ||
| 22 | * no_maxpathlen.patch: Half of the part of the patch modifying |
23 | * no_maxpathlen.patch: Half of the part of the patch modifying |
| 23 | compat/dirname.c was missing, causing libtar's dirname to always |
24 | compat/dirname.c was missing, causing libtar's dirname to always |
| 24 | return NULL (except in special circumstances). Actually make it work |
25 | return NULL (except in special circumstances). Actually make it work |
| 25 | (Closes: #745352). (The reason that libtar doesn't use libc's |
26 | (Closes: #745352). (The reason that libtar doesn't use libc's |
| 26 | dirname() and basename() on some or most platforms is that the code |
27 | dirname() and basename() on some or most platforms is that the code |
| 27 | doesn't work with destructive versions of these functions). |
28 | doesn't work with destructive versions of these functions). |
| 28 | 29 | ||
| 29 | -- Magnus Holmgren <holmgren@debian.org> Sat, 03 May 2014 20:39:02 +0200 |
30 | -- Magnus Holmgren <holmgren@debian.org> Sat, 03 May 2014 20:39:02 +0200 |
| 30 | 31 | ||
| 31 | libtar (1.2.20-3) unstable; urgency=low |
32 | libtar (1.2.20-3) unstable; urgency=low |
| 32 | 33 | ||
| 33 | * no_maxpathlen.patch: Fix two grave bugs in the patch. First, |
34 | * no_maxpathlen.patch: Fix two grave bugs in the patch. First, |
| 34 | th_get_pathname would only allocate as much memory as was needed for |
35 | th_get_pathname would only allocate as much memory as was needed for |
| 35 | the first filename encountered, causing heap corruption when/if |
36 | the first filename encountered, causing heap corruption when/if |
| 36 | encountering longer filenames later. Second, two variables were mixed |
37 | encountering longer filenames later. Second, two variables were mixed |
| 37 | up in tar_append_tree(). Also, fix a potential memory leak and trim |
38 | up in tar_append_tree(). Also, fix a potential memory leak and trim |
| 38 | the patch a bit. |
39 | the patch a bit. |
| 39 | * [SECURITY] CVE-2013-4420.patch: When the prefix field is in use, the |
40 | * [SECURITY] CVE-2013-4420.patch: When the prefix field is in use, the |
| 40 | safer_name_suffix() function should certainly be applied to the |
41 | safer_name_suffix() function should certainly be applied to the |
| 41 | combination of it and the name field, not just on the name field. |
42 | combination of it and the name field, not just on the name field. |
| 42 | * th_get_size-unsigned-int.patch: Make the th_get_size() macro cast the |
43 | * th_get_size-unsigned-int.patch: Make the th_get_size() macro cast the |
| 43 | result from oct_to_int() to unsigned int. This is the right fix for |
44 | result from oct_to_int() to unsigned int. This is the right fix for |
| 44 | bug #725938 on 64-bit systems, where a specially crafted tar file |
45 | bug #725938 on 64-bit systems, where a specially crafted tar file |
| 45 | would not cause an integer overflow, but a memory allocation of almost |
46 | would not cause an integer overflow, but a memory allocation of almost |
| 46 | 16 exbibytes, which would certainly fail outright without harm. |
47 | 16 exbibytes, which would certainly fail outright without harm. |
| 47 | 48 | ||
| 48 | -- Magnus Holmgren <holmgren@debian.org> Sat, 15 Feb 2014 23:51:51 +0100 |
49 | -- Magnus Holmgren <holmgren@debian.org> Sat, 15 Feb 2014 23:51:51 +0100 |
| 49 | 50 | ||
| 50 | libtar (1.2.20-2) unstable; urgency=low |
51 | libtar (1.2.20-2) unstable; urgency=low |
| 51 | 52 | ||
| 52 | * no_static_buffers.patch: avoid using a static buffer in |
53 | * no_static_buffers.patch: avoid using a static buffer in |
| 53 | th_get_pathname(). Taken from upstream. Needed for no_maxpathlen.patch. |
54 | th_get_pathname(). Taken from upstream. Needed for no_maxpathlen.patch. |
| 54 | * no_maxpathlen.patch: Fix FTBFS on Hurd by dynamically allocating path |
55 | * no_maxpathlen.patch: Fix FTBFS on Hurd by dynamically allocating path |
| 55 | names (Closes: #657116). Thanks to Svante Signell and Petter |
56 | names (Closes: #657116). Thanks to Svante Signell and Petter |
| 56 | Reinholdtsen. |
57 | Reinholdtsen. |
| 57 | * [SECURITY] CVE-2013-4420.patch: Strip out leading slashes and any |
58 | * [SECURITY] CVE-2013-4420.patch: Strip out leading slashes and any |
| 58 | pathname prefix containing ".." components (Closes: #731860). This is |
59 | pathname prefix containing ".." components (Closes: #731860). This is |
| 59 | done in th_get_pathname() (as well as to symlink targets when |
60 | done in th_get_pathname() (as well as to symlink targets when |
| 60 | extracting symlinks), not merely when extracting files, which means |
61 | extracting symlinks), not merely when extracting files, which means |
| 61 | applications calling that function will not see the stored |
62 | applications calling that function will not see the stored |
| 62 | filename. There is no way to disable this behaviour, but it can be |
63 | filename. There is no way to disable this behaviour, but it can be |
| 63 | expected that one will be provided when the issue is solved upstream. |
64 | expected that one will be provided when the issue is solved upstream. |
| 64 | * Bump Standards-Version to 3.9.5. |
65 | * Bump Standards-Version to 3.9.5. |
| 65 | 66 | ||
| 66 | -- Magnus Holmgren <holmgren@debian.org> Sat, 15 Feb 2014 21:49:37 +0100 |
67 | -- Magnus Holmgren <holmgren@debian.org> Sat, 15 Feb 2014 21:49:37 +0100 |
| 67 | 68 | ||
| 68 | libtar (1.2.20-1) unstable; urgency=high |
69 | libtar (1.2.20-1) unstable; urgency=high |
| 69 | 70 | ||
| 70 | * [SECURITY] New upstream release. Fixes CVE-2013-4397: Integer |
71 | * [SECURITY] New upstream release. Fixes CVE-2013-4397: Integer |
| 71 | overflow (Closes: #725938). |
72 | overflow (Closes: #725938). |
| 72 | * Bump Standards-Version to 3.9.4. |
73 | * Bump Standards-Version to 3.9.4. |
| 73 | 74 | ||
| 74 | -- Magnus Holmgren <holmgren@debian.org> Thu, 10 Oct 2013 19:20:49 +0200 |
75 | -- Magnus Holmgren <holmgren@debian.org> Thu, 10 Oct 2013 19:20:49 +0200 |
| 75 | 76 | ||
| 76 | libtar (1.2.19-1) unstable; urgency=low |
77 | libtar (1.2.19-1) unstable; urgency=low |
| 77 | 78 | ||
| 78 | * New upstream release. |
79 | * New upstream release. |
| 79 | 80 | ||
| 80 | -- Magnus Holmgren <holmgren@debian.org> Sun, 05 May 2013 17:59:29 +0200 |
81 | -- Magnus Holmgren <holmgren@debian.org> Sun, 05 May 2013 17:59:29 +0200 |
| 81 | 82 | ||
| 82 | libtar (1.2.16-1) unstable; urgency=low |
83 | libtar (1.2.16-1) unstable; urgency=low |
| 83 | 84 | ||
| 84 | * New upstream: Chris Frey has stepped up with the consent of the |
85 | * New upstream: Chris Frey has stepped up with the consent of the |
| 85 | original author, Mark Roth, and published an "official unofficial" git |
86 | original author, Mark Roth, and published an "official unofficial" git |
| 86 | repo at http://repo.or.cz/w/libtar.git, which I will use for the time |
87 | repo at http://repo.or.cz/w/libtar.git, which I will use for the time |
| 87 | being. |
88 | being. |
| 88 | * Updated debian/watch to look for tags and corresponding snapshot |
89 | * Updated debian/watch to look for tags and corresponding snapshot |
| 89 | tarballs at above URL. |
90 | tarballs at above URL. |
| 90 | * All patches have been incorporated or (in the case of |
91 | * All patches have been incorporated or (in the case of |
| 91 | autoreconf.patch) made obsolete upstream. |
92 | autoreconf.patch) made obsolete upstream. |
| 92 | * debian/rules: Add build-indep and build-arch targets. |
93 | * debian/rules: Add build-indep and build-arch targets. |
| 93 | * Updated debian/copyright. |
94 | * Updated debian/copyright. |
| 94 | * Use dpkg-buildflags to set CFLAGS et al. |
95 | * Use dpkg-buildflags to set CFLAGS et al. |
| 95 | * debian/control: Add VCS fields; bump Standards-Version to 3.9.3. |
96 | * debian/control: Add VCS fields; bump Standards-Version to 3.9.3. |
| 96 | 97 | ||
| 97 | -- Magnus Holmgren <holmgren@debian.org> Sat, 23 Jun 2012 01:03:41 +0200 |
98 | -- Magnus Holmgren <holmgren@debian.org> Sat, 23 Jun 2012 01:03:41 +0200 |
| 98 | 99 | ||
| 99 | libtar (1.2.11-8) unstable; urgency=low |
100 | libtar (1.2.11-8) unstable; urgency=low |
| 100 | 101 | ||
| 101 | * libtool.patch: Set SHELL to the configured shell in those Makefile.in |
102 | * libtool.patch: Set SHELL to the configured shell in those Makefile.in |
| 102 | where libtool is used; otherwise libtool fails when /bin/sh is dash |
103 | where libtool is used; otherwise libtool fails when /bin/sh is dash |
| 103 | but bash is expected (Closes: #621935). |
104 | but bash is expected (Closes: #621935). |
| 104 | * man_hyphen_minus.patch (new): Escape hyphens that should be minus |
105 | * man_hyphen_minus.patch (new): Escape hyphens that should be minus |
| 105 | signs in man pages. |
106 | signs in man pages. |
| 106 | * Rename libtar as libtar0 to follow policy. |
107 | * Rename libtar as libtar0 to follow policy. |
| 107 | 108 | ||
| 108 | -- Magnus Holmgren <holmgren@debian.org> Sun, 24 Apr 2011 21:11:52 +0200 |
109 | -- Magnus Holmgren <holmgren@debian.org> Sun, 24 Apr 2011 21:11:52 +0200 |
| 109 | 110 | ||
| 110 | libtar (1.2.11-7) unstable; urgency=low |
111 | libtar (1.2.11-7) unstable; urgency=low |
| 111 | 112 | ||
| 112 | * New maintainer (Closes: #526618). |
113 | * New maintainer (Closes: #526618). |
| 113 | * Change source format to 3.0 (quilt), clean up Debian diff and split |
114 | * Change source format to 3.0 (quilt), clean up Debian diff and split |
| 114 | into several patches: |
115 | into several patches: |
| 115 | * libtool.patch: Using libtool to build dynamic library; |
116 | * libtool.patch: Using libtool to build dynamic library; |
| 116 | * autoreconf.patch: Changes needed to call autoreconf (bug 511741); |
117 | * autoreconf.patch: Changes needed to call autoreconf (bug 511741); |
| 117 | * memleak.patch: Fix memory leaks; |
118 | * memleak.patch: Fix memory leaks; |
| 118 | * bad_ptrtoint.patch: Document stupidity of tartype_t in libtar.c |
119 | * bad_ptrtoint.patch: Document stupidity of tartype_t in libtar.c |
| 119 | (bug 309945). |
120 | (bug 309945). |
| 120 | * Increase Debhelper compat level to 7. |
121 | * Increase Debhelper compat level to 7. |
| 121 | * Use dh_autoreconf to avoid having to keep track of files to clean. |
122 | * Use dh_autoreconf to avoid having to keep track of files to clean. |
| 122 | * memleak2.patch (new): Applied instead of memleak.patch. Fix memory |
123 | * memleak2.patch (new): Applied instead of memleak.patch. Fix memory |
| 123 | leak by making th_get_pathname() return a pointer to a static buffer |
124 | leak by making th_get_pathname() return a pointer to a static buffer |
| 124 | instead of a pointer to a copy of a local buffer (LP: #41804). |
125 | instead of a pointer to a copy of a local buffer (LP: #41804). |
| 125 | * Add homepage field and watch file (in case there is ever a new |
126 | * Add homepage field and watch file (in case there is ever a new |
| 126 | upstream release). |
127 | upstream release). |
| 127 | * Upgrade to Standards-Version 3.9.1. |
128 | * Upgrade to Standards-Version 3.9.1. |
| 128 | 129 | ||
| 129 | -- Magnus Holmgren <holmgren@debian.org> Sat, 26 Mar 2011 23:10:25 +0100 |
130 | -- Magnus Holmgren <holmgren@debian.org> Sat, 26 Mar 2011 23:10:25 +0100 |
| 130 | 131 | ||
| 131 | libtar (1.2.11-6) unstable; urgency=low |
132 | libtar (1.2.11-6) unstable; urgency=low |
| 132 | 133 | ||
| 133 | * Fix autotools usage (Closes: #511741) |
134 | * Fix autotools usage (Closes: #511741) |
| 134 | 135 | ||
| 135 | -- Julien Danjou <acid@debian.org> Sat, 02 May 2009 11:33:06 +0200 |
136 | -- Julien Danjou <acid@debian.org> Sat, 02 May 2009 11:33:06 +0200 |
| 136 | 137 | ||
| 137 | libtar (1.2.11-5) unstable; urgency=low |
138 | libtar (1.2.11-5) unstable; urgency=low |
| 138 | 139 | ||
| 139 | * New maintainer (Closes: #465889) |
140 | * New maintainer (Closes: #465889) |
| 140 | * Add missing binary-indep target in debian/rules (Closes: #395714) |
141 | * Add missing binary-indep target in debian/rules (Closes: #395714) |
| 141 | * Use ${binary:Version} instead of Source-Version
|
142 | * Use ${binary:Version} instead of Source-Version
|
| 142 | * Bump standard version |
143 | * Bump standard version |
| 143 | * Switch to debhelper 5 |
144 | * Switch to debhelper 5 |
| 144 | 145 | ||
| 145 | -- Julien Danjou <acid@debian.org> Wed, 02 Apr 2008 07:06:55 +0200 |
146 | -- Julien Danjou <acid@debian.org> Wed, 02 Apr 2008 07:06:55 +0200 |
| 146 | 147 | ||
| 147 | libtar (1.2.11-4) unstable; urgency=low |
148 | libtar (1.2.11-4) unstable; urgency=low |
| 148 | 149 | ||
| 149 | * Always include the newest libtool.m4. (Closes: #313612) |
150 | * Always include the newest libtool.m4. (Closes: #313612) |
| 150 | 151 | ||
| 151 | -- James Morrison <phython@debian.org> Sun, 28 Aug 2005 09:41:47 -0700 |
152 | -- James Morrison <phython@debian.org> Sun, 28 Aug 2005 09:41:47 -0700 |
| 152 | 153 | ||
| 153 | libtar (1.2.11-3) unstable; urgency=low |
154 | libtar (1.2.11-3) unstable; urgency=low |
| 154 | 155 | ||
| 155 | * Document stupidity of tartype_t in libtar.c. (Closes: #309945) |
156 | * Document stupidity of tartype_t in libtar.c. (Closes: #309945) |
| 156 | 157 | ||
| 157 | -- James Morrison <phython@debian.org> Sat, 11 Jun 2005 18:23:15 -0400 |
158 | -- James Morrison <phython@debian.org> Sat, 11 Jun 2005 18:23:15 -0400 |
| 158 | 159 | ||
| 159 | libtar (1.2.11-2) unstable; urgency=low |
160 | libtar (1.2.11-2) unstable; urgency=low |
| 160 | 161 | ||
| 161 | * Move libtar-dev to libdevel. (Closes: #188207) |
162 | * Move libtar-dev to libdevel. (Closes: #188207) |
| 162 | * Fix potential memory leak. |
163 | * Fix potential memory leak. |
| 163 | 164 | ||
| 164 | -- James Morrison <phython@debian.org> Sun, 25 Jul 2004 12:59:08 -0700 |
165 | -- James Morrison <phython@debian.org> Sun, 25 Jul 2004 12:59:08 -0700 |
| 165 | 166 | ||
| 166 | libtar (1.2.11-1) unstable; urgency=low |
167 | libtar (1.2.11-1) unstable; urgency=low |
| 167 | 168 | ||
| 168 | * New Upstream release. |
169 | * New Upstream release. |
| 169 | 170 | ||
| 170 | -- James Morrison <phython@debian.org> Sat, 5 Apr 2003 14:03:19 -0500 |
171 | -- James Morrison <phython@debian.org> Sat, 5 Apr 2003 14:03:19 -0500 |
| 171 | 172 | ||
| 172 | libtar (1.2.10-1) unstable; urgency=low |
173 | libtar (1.2.10-1) unstable; urgency=low |
| 173 | 174 | ||
| 174 | * New Upstream release. |
175 | * New Upstream release. |
| 175 | (Closes: #166602) New upstream uses autoconf 2.5x |
176 | (Closes: #166602) New upstream uses autoconf 2.5x |
| 176 | * Remove dependency on automake. Hopefully upstream will except this |
177 | * Remove dependency on automake. Hopefully upstream will except this |
| 177 | use of libtool. |
178 | use of libtool. |
| 178 | * Remove all -static and -shared targets from debian/rules. |
179 | * Remove all -static and -shared targets from debian/rules. |
| 179 | * Use dh_install instead of dh_movefiles. |
180 | * Use dh_install instead of dh_movefiles. |
| 180 | * - |
181 | * - |
| 181 | 182 | ||
| 182 | -- James Morrison <phython@debian.org> Sat, 5 Apr 2003 14:03:16 -0500 |
183 | -- James Morrison <phython@debian.org> Sat, 5 Apr 2003 14:03:16 -0500 |
| 183 | 184 | ||
| 184 | libtar (1.2.5-4) unstable; urgency=low |
185 | libtar (1.2.5-4) unstable; urgency=low |
| 185 | 186 | ||
| 186 | * New maintainer. (Closes: #154597) |
187 | * New maintainer. (Closes: #154597) |
| 187 | * WSG_ENCAP is now defined. (Closes: #147764) |
188 | * WSG_ENCAP is now defined. (Closes: #147764) |
| 188 | * libtar-dev depends on libc-dev instead of libc6-dev. |
189 | * libtar-dev depends on libc-dev instead of libc6-dev. |
| 189 | 190 | ||
| 190 | -- James Morrison <phython@debian.org> Wed, 14 Aug 2002 23:44:16 -0400 |
191 | -- James Morrison <phython@debian.org> Wed, 14 Aug 2002 23:44:16 -0400 |
| 191 | 192 | ||
| 192 | libtar (1.2.5-3) unstable; urgency=low |
193 | libtar (1.2.5-3) unstable; urgency=low |
| 193 | 194 | ||
| 194 | * Modify build commands to acomadate change in autoconf (Closes #147764) |
195 | * Modify build commands to acomadate change in autoconf (Closes #147764) |
| 195 | 196 | ||
| 196 | -- Glenn McGrath <bug1@debian.org> Thu, 23 May 2002 01:06:16 +1000 |
197 | -- Glenn McGrath <bug1@debian.org> Thu, 23 May 2002 01:06:16 +1000 |
| 197 | 198 | ||
| 198 | libtar (1.2.5-2) unstable; urgency=low |
199 | libtar (1.2.5-2) unstable; urgency=low |
| 199 | 200 | ||
| 200 | * Fix build problem (Closes #135360) |
201 | * Fix build problem (Closes #135360) |
| 201 | 202 | ||
| 202 | -- Glenn McGrath <bug1@debian.org> Sun, 24 Feb 2002 06:29:31 +1100 |
203 | -- Glenn McGrath <bug1@debian.org> Sun, 24 Feb 2002 06:29:31 +1100 |
| 203 | 204 | ||
| 204 | libtar (1.2.5-1) unstable; urgency=low |
205 | libtar (1.2.5-1) unstable; urgency=low |
| 205 | 206 | ||
| 206 | * New upstream version |
207 | * New upstream version |
| 207 | * Change section of libtar-dev to devel and libtar to libs |
208 | * Change section of libtar-dev to devel and libtar to libs |
| 208 | 209 | ||
| 209 | -- Glenn McGrath <bug1@debian.org> Fri, 22 Feb 2002 04:23:15 +1100 |
210 | -- Glenn McGrath <bug1@debian.org> Fri, 22 Feb 2002 04:23:15 +1100 |
| 210 | 211 | ||
| 211 | libtar (1.2.4-2) unstable; urgency=low |
212 | libtar (1.2.4-2) unstable; urgency=low |
| 212 | 213 | ||
| 213 | * Change section from devel to libs |
214 | * Change section from devel to libs |
| 214 | 215 | ||
| 215 | -- Glenn McGrath <bug1@debian.org> Sat, 2 Feb 2002 12:12:32 +1100 |
216 | -- Glenn McGrath <bug1@debian.org> Sat, 2 Feb 2002 12:12:32 +1100 |
| 216 | 217 | ||
| 217 | libtar (1.2.4-1) unstable; urgency=low |
218 | libtar (1.2.4-1) unstable; urgency=low |
| 218 | 219 | ||
| 219 | * Initial Release. (closes #128042) |
220 | * Initial Release. (closes #128042) |
| 220 | 221 | ||
| 221 | -- Glenn McGrath <bug1@debian.org> Sat, 5 Jan 2002 13:24:37 +1100 |
222 | -- Glenn McGrath <bug1@debian.org> Sat, 5 Jan 2002 13:24:37 +1100 |
| 222 | 223 | ||