Rev 47 | Rev 49 | Go to most recent revision | Only display areas with differences | Ignore whitespace | Details | Blame | Last modification | View Log | RSS feed
Rev 47 | Rev 48 | ||
---|---|---|---|
1 | libtar (1.2.20-7) unstable; urgency=low |
1 | libtar (1.2.20-7) unstable; urgency=low |
2 | 2 | ||
3 | * no_strip.patch: make install must not strip binaries; it breaks cross |
3 | * no_strip.patch: make install must not strip binaries; it breaks cross |
4 | compilation and is against policy with regard to build options. |
4 | compilation and is against policy with regard to build options. |
5 | * Pass --build and --host to configure as appropriate to enable cross |
5 | * Pass --build and --host to configure as appropriate to enable cross |
6 | compilation (Closes: #839883). |
6 | compilation (Closes: #839883). |
- | 7 | * Change Homepage to http://repo.or.cz/w/libtar.git since www.feep.net |
|
- | 8 | is gone. |
|
7 | 9 | ||
8 | -- Magnus Holmgren <holmgren@debian.org> Tue, 11 Oct 2016 22:29:38 +0200 |
10 | -- Magnus Holmgren <holmgren@debian.org> Tue, 11 Oct 2016 23:12:49 +0200 |
9 | 11 | ||
10 | libtar (1.2.20-6) unstable; urgency=low |
12 | libtar (1.2.20-6) unstable; urgency=low |
11 | 13 | ||
12 | * Drop libtar/Makefile from examples, since it makes the build |
14 | * Drop libtar/Makefile from examples, since it makes the build |
13 | unreproducible (saves $SHELL) and isn't enough to compile libtar.c |
15 | unreproducible (saves $SHELL) and isn't enough to compile libtar.c |
14 | anyway. |
16 | anyway. |
15 | * Bump Standards-Version to 3.9.8. |
17 | * Bump Standards-Version to 3.9.8. |
16 | 18 | ||
17 | -- Magnus Holmgren <holmgren@debian.org> Mon, 01 Aug 2016 22:52:44 +0200 |
19 | -- Magnus Holmgren <holmgren@debian.org> Mon, 01 Aug 2016 22:52:44 +0200 |
18 | 20 | ||
19 | libtar (1.2.20-5) unstable; urgency=low |
21 | libtar (1.2.20-5) unstable; urgency=low |
20 | 22 | ||
21 | * oldgnu_prefix.patch: Detect old-style GNU headers correctly (Closes: |
23 | * oldgnu_prefix.patch: Detect old-style GNU headers correctly (Closes: |
22 | #763119). Those appear in incremental archives and use the bytes that |
24 | #763119). Those appear in incremental archives and use the bytes that |
23 | the new-style headers use for the prefix field for other fields. |
25 | the new-style headers use for the prefix field for other fields. |
24 | Thanks to Steinar H. Gunderson. |
26 | Thanks to Steinar H. Gunderson. |
25 | * testsuite.patch: Add a simple test (Closes: #737258). |
27 | * testsuite.patch: Add a simple test (Closes: #737258). |
26 | * Bump Standards-Version to 3.9.7. |
28 | * Bump Standards-Version to 3.9.7. |
27 | 29 | ||
28 | -- Magnus Holmgren <holmgren@debian.org> Fri, 25 Mar 2016 19:12:23 +0100 |
30 | -- Magnus Holmgren <holmgren@debian.org> Fri, 25 Mar 2016 19:12:23 +0100 |
29 | 31 | ||
30 | libtar (1.2.20-4) unstable; urgency=high |
32 | libtar (1.2.20-4) unstable; urgency=high |
31 | 33 | ||
32 | * no_maxpathlen.patch: Half of the part of the patch modifying |
34 | * no_maxpathlen.patch: Half of the part of the patch modifying |
33 | compat/dirname.c was missing, causing libtar's dirname to always |
35 | compat/dirname.c was missing, causing libtar's dirname to always |
34 | return NULL (except in special circumstances). Actually make it work |
36 | return NULL (except in special circumstances). Actually make it work |
35 | (Closes: #745352). (The reason that libtar doesn't use libc's |
37 | (Closes: #745352). (The reason that libtar doesn't use libc's |
36 | dirname() and basename() on some or most platforms is that the code |
38 | dirname() and basename() on some or most platforms is that the code |
37 | doesn't work with destructive versions of these functions). |
39 | doesn't work with destructive versions of these functions). |
38 | 40 | ||
39 | -- Magnus Holmgren <holmgren@debian.org> Sat, 03 May 2014 20:39:02 +0200 |
41 | -- Magnus Holmgren <holmgren@debian.org> Sat, 03 May 2014 20:39:02 +0200 |
40 | 42 | ||
41 | libtar (1.2.20-3) unstable; urgency=low |
43 | libtar (1.2.20-3) unstable; urgency=low |
42 | 44 | ||
43 | * no_maxpathlen.patch: Fix two grave bugs in the patch. First, |
45 | * no_maxpathlen.patch: Fix two grave bugs in the patch. First, |
44 | th_get_pathname would only allocate as much memory as was needed for |
46 | th_get_pathname would only allocate as much memory as was needed for |
45 | the first filename encountered, causing heap corruption when/if |
47 | the first filename encountered, causing heap corruption when/if |
46 | encountering longer filenames later. Second, two variables were mixed |
48 | encountering longer filenames later. Second, two variables were mixed |
47 | up in tar_append_tree(). Also, fix a potential memory leak and trim |
49 | up in tar_append_tree(). Also, fix a potential memory leak and trim |
48 | the patch a bit. |
50 | the patch a bit. |
49 | * [SECURITY] CVE-2013-4420.patch: When the prefix field is in use, the |
51 | * [SECURITY] CVE-2013-4420.patch: When the prefix field is in use, the |
50 | safer_name_suffix() function should certainly be applied to the |
52 | safer_name_suffix() function should certainly be applied to the |
51 | combination of it and the name field, not just on the name field. |
53 | combination of it and the name field, not just on the name field. |
52 | * th_get_size-unsigned-int.patch: Make the th_get_size() macro cast the |
54 | * th_get_size-unsigned-int.patch: Make the th_get_size() macro cast the |
53 | result from oct_to_int() to unsigned int. This is the right fix for |
55 | result from oct_to_int() to unsigned int. This is the right fix for |
54 | bug #725938 on 64-bit systems, where a specially crafted tar file |
56 | bug #725938 on 64-bit systems, where a specially crafted tar file |
55 | would not cause an integer overflow, but a memory allocation of almost |
57 | would not cause an integer overflow, but a memory allocation of almost |
56 | 16 exbibytes, which would certainly fail outright without harm. |
58 | 16 exbibytes, which would certainly fail outright without harm. |
57 | 59 | ||
58 | -- Magnus Holmgren <holmgren@debian.org> Sat, 15 Feb 2014 23:51:51 +0100 |
60 | -- Magnus Holmgren <holmgren@debian.org> Sat, 15 Feb 2014 23:51:51 +0100 |
59 | 61 | ||
60 | libtar (1.2.20-2) unstable; urgency=low |
62 | libtar (1.2.20-2) unstable; urgency=low |
61 | 63 | ||
62 | * no_static_buffers.patch: avoid using a static buffer in |
64 | * no_static_buffers.patch: avoid using a static buffer in |
63 | th_get_pathname(). Taken from upstream. Needed for no_maxpathlen.patch. |
65 | th_get_pathname(). Taken from upstream. Needed for no_maxpathlen.patch. |
64 | * no_maxpathlen.patch: Fix FTBFS on Hurd by dynamically allocating path |
66 | * no_maxpathlen.patch: Fix FTBFS on Hurd by dynamically allocating path |
65 | names (Closes: #657116). Thanks to Svante Signell and Petter |
67 | names (Closes: #657116). Thanks to Svante Signell and Petter |
66 | Reinholdtsen. |
68 | Reinholdtsen. |
67 | * [SECURITY] CVE-2013-4420.patch: Strip out leading slashes and any |
69 | * [SECURITY] CVE-2013-4420.patch: Strip out leading slashes and any |
68 | pathname prefix containing ".." components (Closes: #731860). This is |
70 | pathname prefix containing ".." components (Closes: #731860). This is |
69 | done in th_get_pathname() (as well as to symlink targets when |
71 | done in th_get_pathname() (as well as to symlink targets when |
70 | extracting symlinks), not merely when extracting files, which means |
72 | extracting symlinks), not merely when extracting files, which means |
71 | applications calling that function will not see the stored |
73 | applications calling that function will not see the stored |
72 | filename. There is no way to disable this behaviour, but it can be |
74 | filename. There is no way to disable this behaviour, but it can be |
73 | expected that one will be provided when the issue is solved upstream. |
75 | expected that one will be provided when the issue is solved upstream. |
74 | * Bump Standards-Version to 3.9.5. |
76 | * Bump Standards-Version to 3.9.5. |
75 | 77 | ||
76 | -- Magnus Holmgren <holmgren@debian.org> Sat, 15 Feb 2014 21:49:37 +0100 |
78 | -- Magnus Holmgren <holmgren@debian.org> Sat, 15 Feb 2014 21:49:37 +0100 |
77 | 79 | ||
78 | libtar (1.2.20-1) unstable; urgency=high |
80 | libtar (1.2.20-1) unstable; urgency=high |
79 | 81 | ||
80 | * [SECURITY] New upstream release. Fixes CVE-2013-4397: Integer |
82 | * [SECURITY] New upstream release. Fixes CVE-2013-4397: Integer |
81 | overflow (Closes: #725938). |
83 | overflow (Closes: #725938). |
82 | * Bump Standards-Version to 3.9.4. |
84 | * Bump Standards-Version to 3.9.4. |
83 | 85 | ||
84 | -- Magnus Holmgren <holmgren@debian.org> Thu, 10 Oct 2013 19:20:49 +0200 |
86 | -- Magnus Holmgren <holmgren@debian.org> Thu, 10 Oct 2013 19:20:49 +0200 |
85 | 87 | ||
86 | libtar (1.2.19-1) unstable; urgency=low |
88 | libtar (1.2.19-1) unstable; urgency=low |
87 | 89 | ||
88 | * New upstream release. |
90 | * New upstream release. |
89 | 91 | ||
90 | -- Magnus Holmgren <holmgren@debian.org> Sun, 05 May 2013 17:59:29 +0200 |
92 | -- Magnus Holmgren <holmgren@debian.org> Sun, 05 May 2013 17:59:29 +0200 |
91 | 93 | ||
92 | libtar (1.2.16-1) unstable; urgency=low |
94 | libtar (1.2.16-1) unstable; urgency=low |
93 | 95 | ||
94 | * New upstream: Chris Frey has stepped up with the consent of the |
96 | * New upstream: Chris Frey has stepped up with the consent of the |
95 | original author, Mark Roth, and published an "official unofficial" git |
97 | original author, Mark Roth, and published an "official unofficial" git |
96 | repo at http://repo.or.cz/w/libtar.git, which I will use for the time |
98 | repo at http://repo.or.cz/w/libtar.git, which I will use for the time |
97 | being. |
99 | being. |
98 | * Updated debian/watch to look for tags and corresponding snapshot |
100 | * Updated debian/watch to look for tags and corresponding snapshot |
99 | tarballs at above URL. |
101 | tarballs at above URL. |
100 | * All patches have been incorporated or (in the case of |
102 | * All patches have been incorporated or (in the case of |
101 | autoreconf.patch) made obsolete upstream. |
103 | autoreconf.patch) made obsolete upstream. |
102 | * debian/rules: Add build-indep and build-arch targets. |
104 | * debian/rules: Add build-indep and build-arch targets. |
103 | * Updated debian/copyright. |
105 | * Updated debian/copyright. |
104 | * Use dpkg-buildflags to set CFLAGS et al. |
106 | * Use dpkg-buildflags to set CFLAGS et al. |
105 | * debian/control: Add VCS fields; bump Standards-Version to 3.9.3. |
107 | * debian/control: Add VCS fields; bump Standards-Version to 3.9.3. |
106 | 108 | ||
107 | -- Magnus Holmgren <holmgren@debian.org> Sat, 23 Jun 2012 01:03:41 +0200 |
109 | -- Magnus Holmgren <holmgren@debian.org> Sat, 23 Jun 2012 01:03:41 +0200 |
108 | 110 | ||
109 | libtar (1.2.11-8) unstable; urgency=low |
111 | libtar (1.2.11-8) unstable; urgency=low |
110 | 112 | ||
111 | * libtool.patch: Set SHELL to the configured shell in those Makefile.in |
113 | * libtool.patch: Set SHELL to the configured shell in those Makefile.in |
112 | where libtool is used; otherwise libtool fails when /bin/sh is dash |
114 | where libtool is used; otherwise libtool fails when /bin/sh is dash |
113 | but bash is expected (Closes: #621935). |
115 | but bash is expected (Closes: #621935). |
114 | * man_hyphen_minus.patch (new): Escape hyphens that should be minus |
116 | * man_hyphen_minus.patch (new): Escape hyphens that should be minus |
115 | signs in man pages. |
117 | signs in man pages. |
116 | * Rename libtar as libtar0 to follow policy. |
118 | * Rename libtar as libtar0 to follow policy. |
117 | 119 | ||
118 | -- Magnus Holmgren <holmgren@debian.org> Sun, 24 Apr 2011 21:11:52 +0200 |
120 | -- Magnus Holmgren <holmgren@debian.org> Sun, 24 Apr 2011 21:11:52 +0200 |
119 | 121 | ||
120 | libtar (1.2.11-7) unstable; urgency=low |
122 | libtar (1.2.11-7) unstable; urgency=low |
121 | 123 | ||
122 | * New maintainer (Closes: #526618). |
124 | * New maintainer (Closes: #526618). |
123 | * Change source format to 3.0 (quilt), clean up Debian diff and split |
125 | * Change source format to 3.0 (quilt), clean up Debian diff and split |
124 | into several patches: |
126 | into several patches: |
125 | * libtool.patch: Using libtool to build dynamic library; |
127 | * libtool.patch: Using libtool to build dynamic library; |
126 | * autoreconf.patch: Changes needed to call autoreconf (bug 511741); |
128 | * autoreconf.patch: Changes needed to call autoreconf (bug 511741); |
127 | * memleak.patch: Fix memory leaks; |
129 | * memleak.patch: Fix memory leaks; |
128 | * bad_ptrtoint.patch: Document stupidity of tartype_t in libtar.c |
130 | * bad_ptrtoint.patch: Document stupidity of tartype_t in libtar.c |
129 | (bug 309945). |
131 | (bug 309945). |
130 | * Increase Debhelper compat level to 7. |
132 | * Increase Debhelper compat level to 7. |
131 | * Use dh_autoreconf to avoid having to keep track of files to clean. |
133 | * Use dh_autoreconf to avoid having to keep track of files to clean. |
132 | * memleak2.patch (new): Applied instead of memleak.patch. Fix memory |
134 | * memleak2.patch (new): Applied instead of memleak.patch. Fix memory |
133 | leak by making th_get_pathname() return a pointer to a static buffer |
135 | leak by making th_get_pathname() return a pointer to a static buffer |
134 | instead of a pointer to a copy of a local buffer (LP: #41804). |
136 | instead of a pointer to a copy of a local buffer (LP: #41804). |
135 | * Add homepage field and watch file (in case there is ever a new |
137 | * Add homepage field and watch file (in case there is ever a new |
136 | upstream release). |
138 | upstream release). |
137 | * Upgrade to Standards-Version 3.9.1. |
139 | * Upgrade to Standards-Version 3.9.1. |
138 | 140 | ||
139 | -- Magnus Holmgren <holmgren@debian.org> Sat, 26 Mar 2011 23:10:25 +0100 |
141 | -- Magnus Holmgren <holmgren@debian.org> Sat, 26 Mar 2011 23:10:25 +0100 |
140 | 142 | ||
141 | libtar (1.2.11-6) unstable; urgency=low |
143 | libtar (1.2.11-6) unstable; urgency=low |
142 | 144 | ||
143 | * Fix autotools usage (Closes: #511741) |
145 | * Fix autotools usage (Closes: #511741) |
144 | 146 | ||
145 | -- Julien Danjou <acid@debian.org> Sat, 02 May 2009 11:33:06 +0200 |
147 | -- Julien Danjou <acid@debian.org> Sat, 02 May 2009 11:33:06 +0200 |
146 | 148 | ||
147 | libtar (1.2.11-5) unstable; urgency=low |
149 | libtar (1.2.11-5) unstable; urgency=low |
148 | 150 | ||
149 | * New maintainer (Closes: #465889) |
151 | * New maintainer (Closes: #465889) |
150 | * Add missing binary-indep target in debian/rules (Closes: #395714) |
152 | * Add missing binary-indep target in debian/rules (Closes: #395714) |
151 | * Use ${binary:Version} instead of Source-Version |
153 | * Use ${binary:Version} instead of Source-Version |
152 | * Bump standard version |
154 | * Bump standard version |
153 | * Switch to debhelper 5 |
155 | * Switch to debhelper 5 |
154 | 156 | ||
155 | -- Julien Danjou <acid@debian.org> Wed, 02 Apr 2008 07:06:55 +0200 |
157 | -- Julien Danjou <acid@debian.org> Wed, 02 Apr 2008 07:06:55 +0200 |
156 | 158 | ||
157 | libtar (1.2.11-4) unstable; urgency=low |
159 | libtar (1.2.11-4) unstable; urgency=low |
158 | 160 | ||
159 | * Always include the newest libtool.m4. (Closes: #313612) |
161 | * Always include the newest libtool.m4. (Closes: #313612) |
160 | 162 | ||
161 | -- James Morrison <phython@debian.org> Sun, 28 Aug 2005 09:41:47 -0700 |
163 | -- James Morrison <phython@debian.org> Sun, 28 Aug 2005 09:41:47 -0700 |
162 | 164 | ||
163 | libtar (1.2.11-3) unstable; urgency=low |
165 | libtar (1.2.11-3) unstable; urgency=low |
164 | 166 | ||
165 | * Document stupidity of tartype_t in libtar.c. (Closes: #309945) |
167 | * Document stupidity of tartype_t in libtar.c. (Closes: #309945) |
166 | 168 | ||
167 | -- James Morrison <phython@debian.org> Sat, 11 Jun 2005 18:23:15 -0400 |
169 | -- James Morrison <phython@debian.org> Sat, 11 Jun 2005 18:23:15 -0400 |
168 | 170 | ||
169 | libtar (1.2.11-2) unstable; urgency=low |
171 | libtar (1.2.11-2) unstable; urgency=low |
170 | 172 | ||
171 | * Move libtar-dev to libdevel. (Closes: #188207) |
173 | * Move libtar-dev to libdevel. (Closes: #188207) |
172 | * Fix potential memory leak. |
174 | * Fix potential memory leak. |
173 | 175 | ||
174 | -- James Morrison <phython@debian.org> Sun, 25 Jul 2004 12:59:08 -0700 |
176 | -- James Morrison <phython@debian.org> Sun, 25 Jul 2004 12:59:08 -0700 |
175 | 177 | ||
176 | libtar (1.2.11-1) unstable; urgency=low |
178 | libtar (1.2.11-1) unstable; urgency=low |
177 | 179 | ||
178 | * New Upstream release. |
180 | * New Upstream release. |
179 | 181 | ||
180 | -- James Morrison <phython@debian.org> Sat, 5 Apr 2003 14:03:19 -0500 |
182 | -- James Morrison <phython@debian.org> Sat, 5 Apr 2003 14:03:19 -0500 |
181 | 183 | ||
182 | libtar (1.2.10-1) unstable; urgency=low |
184 | libtar (1.2.10-1) unstable; urgency=low |
183 | 185 | ||
184 | * New Upstream release. |
186 | * New Upstream release. |
185 | (Closes: #166602) New upstream uses autoconf 2.5x |
187 | (Closes: #166602) New upstream uses autoconf 2.5x |
186 | * Remove dependency on automake. Hopefully upstream will except this |
188 | * Remove dependency on automake. Hopefully upstream will except this |
187 | use of libtool. |
189 | use of libtool. |
188 | * Remove all -static and -shared targets from debian/rules. |
190 | * Remove all -static and -shared targets from debian/rules. |
189 | * Use dh_install instead of dh_movefiles. |
191 | * Use dh_install instead of dh_movefiles. |
190 | * - |
192 | * - |
191 | 193 | ||
192 | -- James Morrison <phython@debian.org> Sat, 5 Apr 2003 14:03:16 -0500 |
194 | -- James Morrison <phython@debian.org> Sat, 5 Apr 2003 14:03:16 -0500 |
193 | 195 | ||
194 | libtar (1.2.5-4) unstable; urgency=low |
196 | libtar (1.2.5-4) unstable; urgency=low |
195 | 197 | ||
196 | * New maintainer. (Closes: #154597) |
198 | * New maintainer. (Closes: #154597) |
197 | * WSG_ENCAP is now defined. (Closes: #147764) |
199 | * WSG_ENCAP is now defined. (Closes: #147764) |
198 | * libtar-dev depends on libc-dev instead of libc6-dev. |
200 | * libtar-dev depends on libc-dev instead of libc6-dev. |
199 | 201 | ||
200 | -- James Morrison <phython@debian.org> Wed, 14 Aug 2002 23:44:16 -0400 |
202 | -- James Morrison <phython@debian.org> Wed, 14 Aug 2002 23:44:16 -0400 |
201 | 203 | ||
202 | libtar (1.2.5-3) unstable; urgency=low |
204 | libtar (1.2.5-3) unstable; urgency=low |
203 | 205 | ||
204 | * Modify build commands to acomadate change in autoconf (Closes #147764) |
206 | * Modify build commands to acomadate change in autoconf (Closes #147764) |
205 | 207 | ||
206 | -- Glenn McGrath <bug1@debian.org> Thu, 23 May 2002 01:06:16 +1000 |
208 | -- Glenn McGrath <bug1@debian.org> Thu, 23 May 2002 01:06:16 +1000 |
207 | 209 | ||
208 | libtar (1.2.5-2) unstable; urgency=low |
210 | libtar (1.2.5-2) unstable; urgency=low |
209 | 211 | ||
210 | * Fix build problem (Closes #135360) |
212 | * Fix build problem (Closes #135360) |
211 | 213 | ||
212 | -- Glenn McGrath <bug1@debian.org> Sun, 24 Feb 2002 06:29:31 +1100 |
214 | -- Glenn McGrath <bug1@debian.org> Sun, 24 Feb 2002 06:29:31 +1100 |
213 | 215 | ||
214 | libtar (1.2.5-1) unstable; urgency=low |
216 | libtar (1.2.5-1) unstable; urgency=low |
215 | 217 | ||
216 | * New upstream version |
218 | * New upstream version |
217 | * Change section of libtar-dev to devel and libtar to libs |
219 | * Change section of libtar-dev to devel and libtar to libs |
218 | 220 | ||
219 | -- Glenn McGrath <bug1@debian.org> Fri, 22 Feb 2002 04:23:15 +1100 |
221 | -- Glenn McGrath <bug1@debian.org> Fri, 22 Feb 2002 04:23:15 +1100 |
220 | 222 | ||
221 | libtar (1.2.4-2) unstable; urgency=low |
223 | libtar (1.2.4-2) unstable; urgency=low |
222 | 224 | ||
223 | * Change section from devel to libs |
225 | * Change section from devel to libs |
224 | 226 | ||
225 | -- Glenn McGrath <bug1@debian.org> Sat, 2 Feb 2002 12:12:32 +1100 |
227 | -- Glenn McGrath <bug1@debian.org> Sat, 2 Feb 2002 12:12:32 +1100 |
226 | 228 | ||
227 | libtar (1.2.4-1) unstable; urgency=low |
229 | libtar (1.2.4-1) unstable; urgency=low |
228 | 230 | ||
229 | * Initial Release. (closes #128042) |
231 | * Initial Release. (closes #128042) |
230 | 232 | ||
231 | -- Glenn McGrath <bug1@debian.org> Sat, 5 Jan 2002 13:24:37 +1100 |
233 | -- Glenn McGrath <bug1@debian.org> Sat, 5 Jan 2002 13:24:37 +1100 |
232 | 234 |