Change log for dpkg package in Debian

175 of 135 results
Published in sid-release on 2020-07-08
dpkg (1.20.5) unstable; urgency=medium

  [ Guillem Jover ]
  * Revert change to prefix the specs file spec string self_spec with +
    instead of *. The prefix is supposed to go in the text itself
    instead of the spec name, which already had it. This change only
    apparently fixed the issue at hand because gcc started parsing it as
    the «[SUFFIX]:» case, completely disabling the PIE handling.
    Thanks to Thorsten Glaser <email address hidden>.
  * Perl modules:
    - Dpkg::Source::Package::V1: Explicitly initialize constructor options to
      their implicit values, otherwise other code end up assuming different
      defaults. This is required here too as this class does not call the
      initialization from its parent.
  * Build system:
    - Detect the GNU program variants for make, patch and tar in the CPAN
      distribution to replace in the Dpkg module.
    - Set DEB_BUILD_ARCH to a dummy “amd64” in the CPAN distribution tests
      to not require a dpkg(1) in the system.
  * Test suite:
    - Only print the Dpkg::Path::check_directory_traversal() error on failure.

  [ Updated scripts translations ]
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Wed, 08 Jul 2020 05:40:39 +0200
Superseded in sid-release on 2020-07-08
dpkg (1.20.4) unstable; urgency=medium

  [ Guillem Jover ]
  * Improve PIE flags support:
    - Prefix the specs file spec string self_spec with + instead of *.
      This way we do not override any previous setting, otherwise when
      passing the -specs options twice (f.ex. to compile and link), only the
      last one will take effect, which can break the build. Closes: #870383
  * Perl modules:
    - Dpkg::Source::Package: Explicitly initialize constructor options to
      their implicit values, otherwise other code end up assuming different
      defaults. Closes: #964017
    - Dpkg::OpenPGP: Use a temporary directory for the GnuPG homedir in
      verify_signature(), to make sure we do not write to the user home
      directory, except for the trustkeys.db file if present.
    - Dpkg::Path: Refactor new check_directory_traversal() function out of
      Dpkg::Source::Package->extract().
    - Dpkg::Path: Do not do partial matches for directory traversal checks,
      expect a trailing slash after the base directory name.
    - Dpkg::Path: Catch uncanonicanizable pathnames with a proper error.
      Closes: #964111
    - Dpkg::Path: Do not consider missing symlink targets a directory
      traversal attempt. Closes: #964234
    - Dpkg::Path: Allow /dev/null for directory traversals.
      Reported by Holger Levsen <email address hidden>.
  * Build system:
    - Add Module::Signature as configure recommends for CPAN.
  * Test suite:
    - Use File::Path::make_path() instead of chained mkdir() in Dpkg_Path.t.
    - Add unit tests for Dpkg::Path::check_directory_traversal().

  [ Updated programs translations ]
  * German (Sven Joachim).

 -- Guillem Jover <email address hidden>  Tue, 07 Jul 2020 07:57:48 +0200
Superseded in sid-release on 2020-07-07
dpkg (1.20.3) unstable; urgency=medium

  [ Guillem Jover ]
  * Perl modules:
    - Dpkg::OpenPGP: Pass --no-options to gpg in verify_signature().
      Reported by Bertrand Marc <email address hidden>. Closes: #963839
    - Dpkg::Build::Info: Clarify by giving context to the
      get_build_env_whitelist() deprecation warning. Closes: #963844
      Reported by Sven Joachim <email address hidden>.
    - Dpkg::Source::Package: Fix check_original_tarball_signature() to make
      import_key() honor require_valid_signature, which should default to
      false. Reported by Mattia Rizzolo <email address hidden>.
    - Dpkg::OpenPGP: Use a temporary directory for the GnuPG homedir in
      import_key(), to make sure we do not write to the user home directory,
      which might be read-only or non-existent. Closes: #963944
      Reported by Mattia Rizzolo <email address hidden>.
  * Code internals:
    - libdpkg: Print a notice if we cannot write to the log file.
  * Build system:
    - Improve error diagnosis for configure version fetching script.
      Prompted by Norbert Preining <email address hidden>.

  [ Updated programs translations ]
  * German (Sven Joachim).

 -- Guillem Jover <email address hidden>  Mon, 29 Jun 2020 12:37:51 +0200
Superseded in sid-release on 2020-06-29
dpkg (1.20.2) unstable; urgency=medium

  * dpkg: Do not include the architecture with --robot --version.
  * update-alternatives: Create alternatives directory (/etc/alternatives)
    if it is missing, to help with installation bootstrapping.
    Reported by Johannes Schauer <email address hidden>.
  * update-alternatives: Create the log directory if it is missing.
  * Perl modules:
    - Dpkg::Source::Package: Turn the missing expected tarball signature
      error into a warning for now, as it is causing unintended fallout,
      and does not play nice (yet) with tarballs repackaged by uscan(1).
      Closes: #963821
  * Code internals:
    - update-alternatives: Move log_msg() after make_path() so that we can use
      the latter.
    - update-alternatives: Add new xstrndup() and xdirname() functions.
  * Build system:
    - Set SHELL in the test environment.
    - Do not fail if po4a is not found, and search for it just once.
    - Fix name and section generation for translated man pages. This caused
      pod2man to get an empty --name argument and not output anything,
      resulting in generating empty man pages. Closes: #963794
  * Packaging:
    - Sort debian/dpkg-dev.manpages.
    - Install deb-src-symbols(5) in dpkg-dev package.

 -- Guillem Jover <email address hidden>  Sun, 28 Jun 2020 00:42:11 +0200
Superseded in sid-release on 2020-06-28
dpkg (1.20.1) unstable; urgency=medium

  [ Guillem Jover ]
  * Fix dpkg logging regression introduced in 1.20.0:
    - libdpkg: Use varbuf member .used instead of .size in log_message(),
      to avoid printing garbage.
    - libdpkg: Open the log file as write-only instead of read-only.
    Thanks to Roderich Schupp <email address hidden>. Closes: #953684
  * Unify and cleanup Makefile fragment files comments, including information
    about version of introduction.
  * Add new buildopts.mk Makefile fragment to support parsing DEB_BUILD_OPTIONS
    options with arguments, such as “parallel” as DEB_BUILD_OPTION_PARALLEL.
  * dpkg-genchanges: Handle empty Date fields from parsed debian/changelog.
    Based on a patch by Baptiste BEAUPLAT <email address hidden>. Closes: #956321
  * dpkg-source: Check that debian/tests/control has the required fields.
    Prompted by Felix Lechner <email address hidden>.
  * dpkg-deb, dpkg: Do not accept relative pathnames in DEBIAN/conffiles.
    Reported by Niels Thykier <email address hidden>.
  * dpkg-split: Fix off-by-one check in ar header padding, that was making
    parsing error out on valid archives. Regression introduced in dpkg 1.18.8.
  * libdpkg: Fix error message for ending version character in dependency
    parser:
    - Move the version unterminated case before the catchall.
    - Print the actual wrong character and print what is expected.
  * libdpkg: Do not use econtext->errmsg on out of context abort, as it might
    be uninitialized.
  * update-alternatives: Set the umask to 022 on program start.
    Reported by Paul Wise <email address hidden>.
  * dpkg-parsechangelog: Fix --show-field for multiline fields. We were not
    stripping trailing whitespace, and were not prefixing empty lines with
    a ‘.’, like when printing with the field names.
    Reported by Paul Wise <email address hidden>.
  * dpkg: Add a new --robot option to be used with --version.
  * dpkg, dpkg-query: Document missing options in --help output.
  * Unify ellipsis formatting in programs --help output.
  * Add Protected field support.
  * dpkg-realpath: New program, to be used by dpkg-maintscript-helper, and
    any maintainer script that needs a realpath that can handle pathnames
    relative to the dpkg root directory.
  * dpkg-realpath: Add support for DPKG_ROOT.
    Thanks to Helmut Grohne <email address hidden>.
  * dpkg-realpath: Add support for --root and --instdir options.
  * dpkg-maintscript-helper: Add support for DPKG_ROOT:
    - Add DPKG_ROOT support for conffiles.
      Thanks to David Kalnischkies <email address hidden>.
    - Add DPKG_ROOT support for symlink to and from directory switches.
      Based on a patch by Bastien ROUCARIÈS <email address hidden>.
    Closes: #832176
  * update-alternatives: Add DPKG_ROOT support, and new --root and --instdir
    options. Closes: #871808
  * Portability:
    - libdpkg: When using uselocale(), include <xlocale.h> for locale_t if
      the header is available. Needed on BSDs.
      Reported by Sirio Balmelli <email address hidden>.
  * Perl modules:
    - Dpkg: Add a LICENSE section to the POD.
    - Dpkg::Source::Package: Add new get_upstream_signing_key() method.
    - Dpkg::Source::Package: Check missing expected tarball signatures.
    - Dpkg::Source::Package::V1: Check version format matching source format.
    - Dpkg::Vendor::Debian: Add debian-nonupload.gpg keyring.
      Thanks to Taowa Munene-Tardif <email address hidden>. Closes: #956055
    - Dpkg::Vendor::Debian: Detect merged-usr-via-symlinks also with absolute
      pathnames. Reported by Adam Borowski <email address hidden>.
    - Dpkg::Build::Info: Avoid whitelist in function name.
    - Dpkg::Shlibs::SymbolFile: Avoid blacklist and whitelist terms.
  * Documentation:
    - man: Fix misused two-fonts macros.
      Thanks to Bjarni Ingi Gislason <email address hidden>. Closes: #955028
    - man: Trim trailing whitespace from output.
      Thanks to Bjarni Ingi Gislason <email address hidden>. Closes: #955030
    - man: Mention that dpkg(1) does not provide all back-end interfaces.
      Prompted by Elana Hashman <email address hidden>.
    - man: Clarify and fix file formats SYNOPSIS.
    - man: Clarify that deb-control(5) is a subset of deb-src-control(5).
      Closes: #958229
    - man: Unify warning and note admonitions formatting.
    - man: Remove useless commented out macros.
    - man: Fix unbalanced quotes in macro arguments.
    - man: Specify the indentation level for all following .IP macros, not
      just the first one.
    - man: Use .TP macros instead of hand-crafted formatting.
    - man: Fix font markup for some variable and literal strings.
    - dpkg-maintscript-helper: Add -?, --help and --version to --help output.
    - man: Fix apt and aptitude references.
      Reported by Helge Kreutzmann <email address hidden>.
    - man: Mark commands (eval) in bold and quote library names (libgcc).
      Reported by Helge Kreutzmann <email address hidden>.
    - man: Use UTF-8 quotes instead of ancient groff register variables.
    - man: Use literal double quotes instead of groff escape sequences.
    - man: Clarify that we resolve bug reports not bug report numbers.
      Reported by Helge Kreutzmann <email address hidden>.
    - man: Clarify POSIX shell eval command usage in dpkg-architecture(1).
    - man: Use item lists instead of verbatim or hand-crafted formatting.
    - man: Do not use verbatim formatting for text that is not an example.
    - man: Markup examples explicitly with .EX/.EE.
    - man: Fix indentation for a note admonition in dpkg-scansources(1).
    - man: Document that a 3.0 (quilt) patch cannot create or modify symlinks.
      Thanks to Johannes Schauer <email address hidden>.
    - man: Reword text to reduce length in verbatim code block.
    - man: Add semicolons before verbatim code blocks.
    - man: Update dselect methods provided. Several got removed in 1.20.0.
    - man: The Installed-Size field does not get its value from du(1) since
      1.18.0.
    - man: Fix dpkg-gencontrol -P description to not refer to dpkg-source.
      Reported by Jakub Wilk <email address hidden>.
    - man: Place description of override value column on its own paragraph.
    - man: Surround markup within verbatim blocks with .nf/.fi.
    - man: Balance font markup.
    - man: Do not nest font markup.
    - man: Use .ig/.. macros to disable text instead of commenting it out.
    - man: Do not mark end of sentence period with bold.
    - man: Add a missing comma after man page reference in SEE ALSO section.
    - man: Convert man pages from roff to POD.
    - man: Clarify the dpkg --no-act admonition.
    - man: Avoid whitelist term in dpkg-source man page.
  * Code internals:
    - Use $() in shell or qx() in perl instead of ``.
    - dpkg-split: Switch part number variables from unsigned int to int.
    - scripts: Refactor shell error handling into a shell library
    - Reformat shell code to follow the coding style.
    - update-alternatives: Parametrize option names in output strings.
    - update-alternatives: Move logging function close to output functions.
    - update-alternatives: Move argument parsing functions close to main().
    - update-alternatives: Add general purpose non-failing functions for
      administrative directory access.
    - update-alternatives: Add filesystem abstraction functions.
  * Build system:
    - Handle .git being a plain file when getting the dpkg tree version.
    - Add debian/changelog as a Changes file to the CPAN distribution.
    - Set DPKG_SERIES to 1.20.x when running the functional test suite.
    - When using po4a require at least po4a 0.59. Change the po4a --porefs
      argument from no longer supported “noline,wrap” to “file”, as wrapping
      is the default since po4a 0.58. We require po4a 0.59 as 0.58 had a
      regression in its --srcdir support.
    - Switch to set the po4a addendum in the po4a_paths section instead of
      repeating it for each man page.
    - Use po4a conditional addendum support, and remove empty addenda.
    - Use po4a mode=eof support in addenda.
    - Do not use make prerequisites on suffix rule definitions.
      Closes: #961850
    - Add man page number suffixes to the automake SUFFIXES variable.
    - Update false positive suppressions for cppcheck 2.1.
    - Install specifications and API contracts in docdir.
    - Add support for switching man pages from roff to POD format.
    - Fix shell files substitution for version variable.
  * Packaging:
    - Switch to debhelper compatibility level 13.
    - Remove debian/tmp prefix from manpages debhelper fragment files.
    - Handle missing localized man pages gracefully.
    - Install AUTHORS, THANKS, usertags, README.api and
      README.feature-removal-schedule only in dpkg.deb.
    - Rename debian/usertags to debian/README.bug-usertags.
    - Install specifications to /usr/share/doc/dpkg/ in the dpkg-dev package.
    - Detect merged-usr-via-symlinks also with absolute pathnames in
      bug-script. Reported by Adam Borowski <email address hidden>.
  * Test suite:
    - Rename deb-content test cases to make them more descriptive.
    - Skip autogenerated files from codespell.

  [ Updated programs translations ]
  * German (Sven Joachim).
  * Simplified Chinese (Boyuan Yang). Closes: #958437

  [ Updated scripts translations ]
  * German (Helge Kreutzmann).

  [ Updated man pages translations ]
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Sat, 27 Jun 2020 02:41:48 +0200
Deleted in experimental-release (Reason: None provided.)
dpkg (1.20.0) experimental; urgency=medium

  [ Guillem Jover ]
  * libdpkg: Do not generate a backup file for the available database.
    Closes: #343578
  * perl: Switch Getopt::Long from bundling to bundling_values. This means
    the few scripts using Getopt::Long will stop accepting options in the
    form «-ab» for «-a -b», which is not future-proof, as it does not allow
    these options to get new arguments without making them abiguous.
  * dpkg-buildpackage: Remove transient backwards R³ compatibility code.
  * buildtools.mk: Add support for nostrip in DEB_BUILD_OPTIONS when setting
    the STRIP variable.
  * dpkg-genbuildinfo: Do not include irrelevant packages in the Binary field.
  * dpkg: Do not clear selections for unknown packages. Closes: #927752
  * dpkg-shlibdeps: Add support for new Build-Depends-Packages, to be able
    to specify multiple packages. Closes: #926669
    Based on a patch by Frank Schaefer <email address hidden>.
  * perl: Remove support for versioned GnuPG 2 program and packages.
  * libdpkg: Clarify lock contender error message. Print the PID of the lock
    contender, and add a warning explaining that removing the lock file is
    never the correct solution.
  * dpkg-genchanges, dpkg-mergechangelogs: Remove support for ~vola
    versioning, as volatile.debian.org was decommissioned some time ago.
  * dpkg-genchanges, dpkg-mergechangelogs: Match ~deb also as a backport
    marker in versions. Closes: #934980
  * libdpkg, dpkg: Use new versiondescribe_c() for non-localizable call sites,
    such as when writing to a log, which should not be localized.
    Reported by Julien Cristau <email address hidden>.
  * dpkg-query: Try to use the package synopsis from the available file if
    not installed. Closes: #43573
  * dpkg-gencontrol: Take into account hardlinks when computing the
    Installed-Size substvar. Closes: #923475
    Patch co-authored with Sven Joachim <email address hidden>.
  * dpkg: Fix and clarify behavior for packages marked to be on “hold”. These
    need to be processed for configuration and triggers. Closes: #926472
  * dpkg: Use DPKG_ADMINDIR to set the admindir. Closes: #900071
  * dpkg-source: Remove backwards compatibility code for legacy build-profiles.
  * perl: Give more context on field parsing errors. Closes: #637060
  * dpkg-buildpackage: Add option to sanitize environment. Closes: #843776
  * update-alternatives: Cope with a missing administrative directory.
  * update-alternatives: Create the administrative directory on demand.
  * dpkg-split: Cope with a missing parts/ database directory.
  * dpkg-split: Create the parts/ database directory on demand.
  * libdpkg: Consider msdbrw_needsuperuser equivalent to msdbrw_write, so
    the same checks are performed on normal non --force-not-root operation.
  * libdpkg: Add support for bootstrapping the installation of dpkg:
    - Create the logfile with correct permissions, and remove the code
      setting up the logfile from the dpkg postinst.
    - Allow missing status and available databases, so that they get created
      on write, and remove the code setting them up from the dpkg postinst.
      Closes: #647911
    - Do not change the ownership of the triggers database directory. Either
      we are running as root:root which means the ownership should be correct
      already, or we are not which means we cannot change it anyway.
    - Create the dpkg database directory on demand.
    - Create the updates/ database directory on demand.
    - Create the info/ database directory on demand.
  * dpkg-architecture: Fix handling of exec failing in --command.
    Reported by Helmut Grohne <email address hidden>.
  * dpkg-buildpackage: Do not accept equal signs as part of the hook names.
    Reported by Daniel Shahaf <email address hidden>. Closes: #948291
  * dselect: Mark a string for translation.
  * dselect: Cleanup access methods:
    - Remove harddisk methods, as they were non-functional due to fdisk
      interface changes, and do not make sense anymore as we can expect users
      to mount any such filesystem on their own, to then use a filesystem
      method instead. Prompted by Helmut Grohne <email address hidden>.
    - Remove cdrom method superseded by the multi_cd method.
    - Remove nfs methods, as there is nothing special about NFS, and mounting
      these should just be left to the local admin, who can mount any other
      remote filesystem too.
    - Remove multi_mount method, as the multi_cd method can take care of
      mounting the necessary images or devices.
    - Replace changelog with correct copyright in file header.
  * dpkg, dselect: Stop using first-person singular in output messages.
  * libdpkg: Fix memory leak in parsedb context close.
  * buildtools.mk: Add QMAKE variable. Closes: #920878
  * po: Fix translation of --compare-versions. Closes: #951614
    Thanks to Boyuan Yang <email address hidden>.
  * Perl modules:
    - Dpkg::Source::Package: Verify original tarball signatures at build time.
    - Dpkg::BuildFlags: Add new unset() method.
      Requested by Daniel Schepler <email address hidden>.
    - Dpkg::Source::Package::V2: Emit a special patch header on
      single-debian-patch. Closes: #933152
    - Dpkg::Vendor::Debian: Only scan /usr/local/ directories that exist.
      Closes: #932967
    - Dpkg::Vendor::Debian: Do not set -Werror=implicit-function-declaration
      for C++. Closes: #939969
    - Dpkg::Deps: Check for valid virtual package version relations. Do not
      allow non-equal version relations in virtual provides. Closes: #930317
    - Dpkg: Remove internal lowercase variables $version, $progname,
      $admindir, $dpkglibdir and $pkgdatadir.
    - Dpkg::Changelog: Remove obsolete methods dpkg() and rfc822().
    - Dpkg::Changelog::Entry::Debian: Remove obsolete methods check_header()
      and check_trailer(). Hide variables $regex_header and $regex_trailer.
    - Dpkg::Changelog::Parse: Remove warnings of obsolete options forceplugin
      and libdir. Remove obsolete functions changelog_parse_debian() and
      changelog_parse_plugin().
    - Dpkg::Compression: Hide internal lowercase variables
      $default_compression, $default_compression_level and
      $compression_re_file_ext.
    - Dpkg::Deps::KnownFacts: Remove obsolete check_package() method.
    - Dpkg::Exit: Hide internal lowercase @handlers variable.
    - Dpkg::Gettext: Remove obsolete _g() function.
    - Dpkg::Source::Package: Hide internal lowercase variable
      @tar_ignore_default_pattern. Remove iternal lowercase variable alias
      $diff_ignore_default_regexp.
    - Dpkg::Substvars: Remove obsolete no_warn() method.
    - Dpkg::Index: Change default value for unique_tuple_key to 1.
    - Dpkg::Version: Remove deprecation warning from semantic change in
      bool overload.
    - Dpkg::Checksums: Remove obsolete 'program' property warning.
    - Dpkg::Conf: Remove obsolete methods and obsolete croak for method option.
    - Dpkg::Vendor: Remove obsolete 'keyrings' hook.
    - Dpkg::Exit: Unregister all signal handlers once we have executed them.
      Closes: #932841
    - Dpkg::Exit: Register exit handlers also for __DIE__.
    - Dpkg::Source::Package::V3::Native: Do not say v1.0 for 3.0 formats.
    - Dpkg::Dist::Files: On filename parse error say file instead of package.
    - Dpkg::Substvars: Add new vendor:Name and vendor:Id substvars.
    - Dpkg::Source::Package: Detect directory traversals under debian
      directory. Reported by Felix Lechner <email address hidden>.
  * Documentation:
    - man: Fix uncommon wording constructs.
    - man: Use a minus sign for a literal string.
    - man: Clarify that the pager is called via «$SHELL -c».
    - dpkg-shlibdeps: Document split_soname() function.
      Prompted by Christopher Crim <email address hidden>.
    - Dpkg::Changelog: Document methods provided by subclasses.
      Reported by Felix Lechner <email address hidden>.
    - man: Globally adjust left and disable hyphenation.
    - man: Split dselect(1) --color from --colour option items.
    - man: Describe the SONAME formats supported in deb-shlibs(5).
    - man: Move template symbol documentation into new deb-src-symbols(5).
    - Dpkg::Changelog::Parse: Remove $ sigil from option names in POD.
    - Dpkg: Say class instead of object when appropriate.
    - Dpkg::Changelog: Clarify that these classes inherit from some other
      base class, which will contain the missing documentation.
      Prompted by intrigeri <email address hidden>.
    - man: Clarify deb-changelog(5) format. Closes: #946780
    - man: Clarify debian/source/include-binaries format in dpkg-source(1).
      Prompted by Felix Lechner <email address hidden>.
    - man, doc: Clarify that the postinst "triggered" argument gets the
      trigger-name(s) as a space-separated list in the second argument.
      Prompted by Michael Biebl <email address hidden>.
    - dselect: Update the multicd README file.
    - doc, man: Mark T and I package instances to avoid misreadings.
  * Code internals:
    - Dpkg::Source::Package: Refactor original tarball handling.
    - perl: Use File::Copy instead of spawning mv/cp commands.
    - Dpkg::OpenPGP: Refactor signature verification into a new function.
    - Dpkg::OpenPGP: Make it possible to verify detached signatures.
    - Dpkg::OpenPGP: Add support for importing an OpenPGP key into a keyring.
    - Dpkg::BuildFlags: Remove unused hash keys.
    - libdpkg: Use the variable instead of a type as sizeof() argument.
    - libdpkg: Use the totalwritten variable for a consistency check.
    - dselect: Reduce scope of variable, to avoid it being unused in a branch.
    - dpkg-deb: Fold two adjacent if conditionals into a single one.
    - dpkg: Initialize flagdeppossi in check_conflict().
    - libdpkg: Add new C locale switch over support.
    - libdpkg: Add new versiondescribe_c() to force a C locale.
    - dselect: Make baselist::draw_column_*() col arguments const.
    - libdpkg: Use p instead of name in dpkg_arch_name_is_illegal().
    - dpkg: Remove redudant condition for sourcefile in updateavailable().
    - dpkg, update-alternatives: Make variables static.
    - libdpkg: Add missing symbols to the version map.
    - libdpkg: Fix fiemap memory layout usage that confuses gcc 10 to emit a
      warning.
    - libdpkg: Only use varbuf_printf() in pkg_format_show() when necessary.
      This should speed up «dpkg-query --show» formatting.
    - libdpkg: Fix package format string to be a string literal.
      This suppresses a gcc warning.
    - dpkg: Fix short lived memory leak in --force-help handling.
    - dpkg-split: Fix short lived file descriptor leak in --auto.
    - start-stop-daemon: Explicitly ignore uninmportant function return values.
    - start-stop-daemon: Fix memory leak on multiple --chuid arguments.
    - start-stop-daemon: Close the notification socket in the child.
    - libdpkg: Fix memory leaks in zlib and bz2 decompression functions.
    - libdpkg: Add new dir_make_path() and dir_make_path_parent() functions.
    - libdpkg: Add new atomic file flag to create the base path when missing.
    - libdpkg: Fix modstatdb_rw enum comments.
    - libdpkg, dpkg-query: Optimize db-fsys:Files virtual variable loading.
      We load either the entire db-fsys for all packages, possibly optimized
      per platform (such as by using fiemap), or the specific ones for the
      requested packages. This also fixes a problematic cast removing the
      constness of a variable.
    - Dpkg::Dist::Files: Document the two filename pattern formats.
    - update-alternatives: Remove redundant condition in argument parser.
    - update-alternatives: Move error context setup before calling setjmp(),
      so that cppcheck stops being confused.
    - test: Reformat 200_Dpkg_Shlibs.cpp for coding style conformance.
    - dpkg: Make it possible for the compiler to check printf() format
      string arguments on dependency printer.
    - dselect: Reorder branches in packagelist::deselect_one_of so that they
      are not duplicated.
    - dselect: Use nullptr instead of NULL.
    - dselect: Use static_cast<> instead of old-style type qualifier cast.
    - dselect: Do not use unnecessary old-style casts.
    - dselect: Fix variable types to avoid needing old-style casts.
    - libcompat: Disarm libselinux setexecfilecon() declaration for
      libcompat-test.
    - libdpkg: Define new VARBUF_OBJECT macro.
    - libdpkg: Add new ATOMIC_FILE_NORMAL enum value to avoid a cast in C++.
    - libdpkg: Use a new DPKG_NULL macro that works in C and C++.
    - libdpkg: Use a new DPKG_STATIC_CAST macro that works in C and C++.
    - libdpkg: Move printing of errno into dpkg_error_set().
    - libdpkg: Use a varbuf to store the problem messages per parsedb context.
    - libdpkg: Fix Doxygen comments.
  * Build system:
    - Bump minimal Perl version to 5.24.1.
    - Add a serial versioning to the m4 files.
    - Install m4 files into system aclocal directory.
    - Bump minimal gettext version to 0.19.8, to get the m4 files that can
      cross-build for musl-based systems.
    - Enable more compiler warnings.
    - Update Doxygen configuration from version 1.8.16.
  * Packaging:
    - Remove obsolete Breaks satisfied since oldstable.
    - Replace custom rule for 'configure' with call to dh_autoreconf.
      Thanks to Dan Streetman <email address hidden>. Closes: #939516
    - dselect: Remove methods state files on purge.
      Spotted by Sven Joachim <email address hidden>.
    - Switch to debhelper compatibility level 12.
    - Switch from debian/compat to debhelper-commpat in Build-Depends.
    - Bump Standards-Version to 4.5.0 (no changes required).
  * Test suite:
    - Remove perlcritic Documentation::RequirePodLinksIncludeText suppression.
    - Clarify cppcheck va_list_usedBeforeStarted suppression.
    - Skip build directories from codespell check.
    - Update stopwords for codespell 1.16.0.
    - Suppress new bogus cppcheck 1.90 false positives.
    - libdpkg: Remove redundant assignment in t-ehandle unit test.
    - Skip backup files from codespell check.
    - Ignore python-3.8 runtime warnings in codespell.

  [ Updated programs translations ]
  * German (Sven Joachim).
  * Portuguese (Miguel Figueiredo). Closes: #935695
  * Simplified Chinese (Mo Zhou). Closes: #942195, #945776

  [ Updated dselect translations ]
  * German (Sven Joachim).

  [ Updated scripts translations ]
  * German (Helge Kreutzmann).

  [ Updated man pages translations ]
  * German (Helge Kreutzmann). Closes: #931135

 -- Guillem Jover <email address hidden>  Sun, 08 Mar 2020 03:31:40 +0100
Published in buster-release on 2019-06-09
Published in sid-release on 2019-06-04
dpkg (1.19.7) unstable; urgency=medium

  [ Guillem Jover ]
  * dpkg: Fix off-by-one error in dpkg --abort-error. Closes: #924886
    Thanks to Tom Goulet <email address hidden>.
  * dpkg: Set the force defaults before loading the config file, otherwise we
    incorrectly override them. Regression introduced in dpkg 1.19.5.
    Closes: #928671
  * dpkg: Split the trigger dependtry into two, the second of which will be
    the one checking trigger cycles when deferring trigger processing due to
    unsatisfiable dependencies. Closes: #928429
  * dpkg-deb: Validate ar member magic before normalizing any of its fields.
  * dpkg-deb: Honor --nocheck when building packages with newlines in
    filenames. Regression introduced in dpkg 1.18.1. Closes: #929727
  * Documentation:
    - rootless-builds.txt: Expand what the builder means. Mention the
      dpkg-deb option to use to set the owner and group to root. And reword
      the prototyping section to be less confusing with what is currently
      implemented. Closes: #929019
    - README: Clarify when autopoint is needed. Closes: #929601
    - Fix typos in docs and output strings. Warned by codespell.

  [ Updated programs translations ]
  * Catalan (Guillem Jover).

  [ Updated dselect translations ]
  * Catalan (Guillem Jover).

  [ Updated scripts translations ]
  * Catalan (Guillem Jover).

  [ Updated man pages translations ]
  * Dutch (Frans Spiesschaert). Closes: #926665
  * French (Jean-Pierre Giraud). Closes: #929664

 -- Guillem Jover <email address hidden>  Mon, 03 Jun 2019 23:22:35 +0200
Superseded in buster-release on 2019-06-09
Superseded in sid-release on 2019-06-04
dpkg (1.19.6) unstable; urgency=medium

  [ Guillem Jover ]
  * libdpkg: Add a new TAR_FORMAT_UNKNOWN enum value.
  * libdpkg: Set tar_entry to zero on tar_entry_destroy(), to avoid double
    free()s and the subsequent crashes.
  * libdpkg: Handle non end-of-tape errors from tar_header_decode().
  * libdpkg: Use ERANGE instead of EINVAL for tar_atol8() out-of-range error.
  * dpkg-gencontrol: Check presence of package build dir before traversing it.
  * Perl modules:
    - Dpkg::Source::Package::V1: Change default build option style to -sa.
      Using -sA by default means the user might lose data on overwrite if
      there is already a directory with the same name laying around.
      Closes: #910737
    - Dpkg::Source::Package: Handle Format field being undefined. On source
      format 1.0, the default is for the debian/source/format file not being
      present, which means we'll start with an empty Format field name.
      Regression introduced in dpkg 1.19.3.
  * Packaging:
    - Update usertags.
    - Install a lintian profile for dpkg based on the debian profile, so that
      we can suppress Debian-specific tags, such as the controversial one on
      vendor-specific patch series files.
    - Add Breaks on lsb-base due to start-stop-daemon exposing breakage in
      the killproc function from /lib/lsb/init-functions. Closes: #923861
  * Test suite:
    - Stop requiring (pseudo-)root in the functional test suite.
    - Export and move TESTDATA definition close to the PATH definition.
    - Quote the 'yes' command to make a comment clearer.

  [ Updated programs translations ]
  * Dutch (Frans Spiesschaert). Closes: #924776

  [ Updated scripts translations ]
  * German (Helge Kreutzmann).

  [ Updated man pages translations ]
  * Dutch (Frans Spiesschaert). Closes: #924777
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Mon, 25 Mar 2019 15:08:26 +0100
Published in buster-release on 2019-02-26
Published in sid-release on 2019-02-24
dpkg (1.19.5) unstable; urgency=medium

  [ Guillem Jover ]
  * start-stop-daemon: Make sure that we get a meaningful errno on
    parse_unsigned(), so that the error messages always make sense.
  * start-stop-daemon: Add new fatalv() and fatale() functions and use the
    latter for system errors, so that we are explicit on whether we want to
    use errno for error reporting or not.
  * start-stop-daemon: Always refuse to parse a world-writable pidfile,
    except when that is /dev/null.
  * dpkg: Print the current set of enabled force options on --force-help.
  * dpkg: Parse and set new DPKG_FORCE environment variable for subprocesses.
    Closes: #666147
  * dpkg-statoverride: Add support for --force-* options.
  * dpkg-statoverride: Switch from --force option to new --force-<thing>
    options. Deprecate --force option which will be considered an alias for
    --force-all for now.
  * dpkg, dpkg-statoverride: Add new option --refuse-security-mac to control
    SELinux. See #811037.
  * dpkg: Clarify error on unknown system user/group in statoverride database.
    Closes: #920880
  * dpkg-buildpackage: Clarify the warning/error on short OpenPGP key IDs.
    Closes: #922039
  * dpkg-maintscript-helper: Restrict find for dir-to-symlink move to
    -maxdepth 1. Thanks to Ralf Treinen <email address hidden>. Closes: #922799
  * dpkg-genbuildinfo: Add support for a new Build-Tainted-By field in
    .buildinfo files. Suggested by Alexander E. Patrakov <email address hidden>.
  * libdpkg: Clarify field names in error and warning messages.
  * libdpkg: Optimize error handling. Move the error reporting outside the
    involved functions so that we do not need to call gettext if there is no
    error, which has a significant performance cost.
  * libdpkg: Merge nicknames table into fieldinfos, to stop penalizing the
    lookup of non-obsolete fieldnames.
  * libdpkg: Print a more accurate warning for Revision nicknames.
  * libdpkg: Increase the pkg-hash bins size to 65521, to improve hash table
    performance at the cost of a bit more memory usage.
  * libdpkg: Blank packages that are not-installed with unknown selection.
    Closes: #922410
  * libdpkg, dpkg: Print the dpkg database directory on access errors.
    Closes: #883700
  * Perl modules:
    - Dpkg::Vendor::Debian: Add support for merged-usr-via-symlinks tainted
      tag. Suggested by Alexander E. Patrakov <email address hidden>.
    - Dpkg::Vendor::Debian: Add support for usr-local-has-* tainted tags.
    - Dpkg::Source::Package: Add a missing use Dpkg::Source::Format.
      Diagnosed by Ian Jackson <email address hidden>.
      Closes: #921031
  * Documentation:
    - start-stop-daemon(1): Document behavior of --pidfile security checks.
      Closes: #921557
    - dpkg(1): Document the unknown selection state. Closes: #922407
  * Code internals:
    - dpkg: Move SELinux fallback label to the SELinux specific code path.
    - dpkg: Simplify maintscript_set_exec_context().
    - dpkg: Move force options support into its own file.
    - dpkg: Do not hardcode the program name in the --force-help output.
    - dpkg: Switch force options from individual variables to bit fields.
    - dpkg: Switch from a char to an enum to track the force options types.
    - dpkg: Switch to set the default force option from the forceinfos array.
    - libdpkg: New benchmark programs and infrastructure.
    - libdpkg: Add new dpkg_error_move() function.
    - libdpkg: Add new dpkg_has_error() function.
    - libdpkg: Move status names from parse errors to arguments.
    - libdpkg: Use va_arg copy instead of the original on a vasprintf() call.
    - libdpkg: Include <string.h> in pager.c.
      Reported by Y <email address hidden>. Closes: #922212
    - libdpkg: Use pkg_set_want() instead of a direct assignment.
  * Build system:
    - Check whether this dist is a release, based only on the version format.
      This will avoid having to do a two staged release to get a proper perl
      distribution tarball.
  * Packaging:
    - autopkgtest: Add file to Depends fields.
    - autopkgtest: Clarify behavior on root/non-root requirement.
    - Bump Standards-Version to 4.3.0 (no changes required).
    - Remove now unused assert usertag description.
    - Remove trailing whitespace from changelog.
    - Remove Origin and Bugs fields from control file.
    - Include a bug-script to report on tainted merged-usr-via-symlinks.
  * Test suite:
    - libdpkg: Fix unit test for file_slurp(). Closes: #920974
      Diagnosed by Frank Schaefer <email address hidden>.

  [ Updated programs translations ]
  * Dutch (Frans Spiesschaert). Closes: #921942
  * German (Sven Joachim).
  * Simplified Chinese (Zhou Mo). Closes: #920972

  [ Updated scripts translations ]
  * German (Helge Kreutzmann).

  [ Updated man pages translations ]
  * Dutch (Frans Spiesschaert). Closes: #921943
  * French (Jean-Pierre Giraud). Closes: #920905
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Sat, 23 Feb 2019 18:00:54 +0100
Superseded in buster-release on 2019-03-12
Superseded in sid-release on 2019-06-04
dpkg (1.19.4) unstable; urgency=medium

  * start-stop-daemon: Do not sanity check the pidfile when it is specified as
    /dev/null, as that implies the caller wants to start the program no matter
    what. Closes: #920242
  * Portability:
    - start-stop-daemon: Only use SO_PASSCRED if defined. Fixes build failure
      at least on GNU/Hurd.
  * Packaging:
    - autopkgtest: Pass --disable-nls and --disable-dselect to configure.
    - autopkgtest: Change Depends to «build-essential, autoconf, pkg-config».

 -- Guillem Jover <email address hidden>  Wed, 23 Jan 2019 13:06:39 +0100
Superseded in sid-release on 2019-01-27
dpkg (1.19.3) unstable; urgency=medium

  [ Guillem Jover ]
  * dpkg-source: Stop filtering @builddeps@ from Testsuite-Triggers field.
    Closes: #910734
  * dpkg-genchanges: Only reference binary packages being uploaded, which
    means that for a source-only upload, the Binary and Description fields
    should be empty. Closes: #818618
  * dpkg-scanpackages: Do not compute unnecessary checksums when using the
    --hash argument. Based on a patch by Chris Lamb <email address hidden>.
    Closes: #916456
  * dpkg-scanpackages: Emit a warning with the list of repeat packages.
    Prompted by Johannes Schauer <email address hidden>.
  * start-stop-daemon: Check whether standalone --pidfile use is secure.
    Prompted by Michael Orlitzky <email address hidden>.
  * start-stop-daemon: Print complete verbose lines, instead of partial lines
    with no newlines and a final print with a newline.
  * start-stop-daemon: Add new --notify-await and --notify-timeout options,
    which implement the systemd readiness protocol for services.
    Closes: #910707
  * update-alternatives: Add new --debug option.
  * update-alternatives: Fix removal of obsolete slaves from the linked list.
    Reported by Andreas Beckmann <email address hidden>. Closes: #916799
  * vendor.mk: Fix dpkg_vendor_derives_from macro documentation.
    Thanks to Colin Watson <email address hidden>. Closes: #913816
  * vendor.mk: Add support for an improved dpkg_vendor_derives_from macro.
    Version the macros so that both can be used, and default the unversioned
    one to the version 0 macro.
  * dpkg: Mark the package we are giving up on a trigger cycle as "istobe"
    normal, so that the dependency checks know they cannot expect this package
    to be processed anymore. Otherwise we ended up never detecting that we
    were not making progress, as we expected to process this package at a later
    point, when that would never happen anymore. This then was causing asserts
    in the process queue loop. Closes: #901127, #910819
  * dpkg: Reset progress_bytrigproc once we have injected it into the current
    package process queue iteration, so that we do not keep trying to process
    it, which might end up generating artificial trigger cycles, if
    dependencies are not satisfied yet.
  * dpkg: Convert one trigger processing required type into the new try-queued
    one, so that we stop skipping unsatisfiable dependency checks.
  * dpkg: Move trigproc cycle reset inside try-deferred conditional. We should
    only reset the cycle detection in case we are not bailing out from the
    processing with an error, otherwise we could come back to this package and
    detect an artificial trigger cycle.
  * dpkg: Introduce a new dependency try level for trigger processing. This
    completely defers trigger processing until after the dependency cycle
    breaking level, so to avoid generating artificial trigger cycles, when we
    end up trying to process triggers with yet unsatisifiable dependencies.
    Closes: #810724, #854478, #911620
  * dpkg: Fix --help output, to clarify which arguments are optional.
  * libdpkg: Add proper tar error handling. This makes the tar extractor
    track and report back parse errors, so that we can give more descriptive
    messages.
  * libdpkg: Detect unsupported tar entry types to give better error messages.
  * libdpkg: Add new db-fsys:Files and db-fsys:Last-Modified virtual fields.
  * Perl modules:
    - Dpkg::Changelog::Debian: Preserve modelines at EOF. Closes: #916056
      Thanks to Chris Lamb <email address hidden> for initial test cases.
    - Dpkg::File: Make file_slurp() also accept pathnames in addition to
      filehandles.
    - Dpkg::Vendor::Ubuntu: Fix buildflags override after default setting move.
      Based on a patch by Iain Lane <email address hidden> and
      Adam Conrad <email address hidden>. Closes: #915881
    - Dpkg::Shlibs::Objdump: Remove unused Dpkg::IPC import.
    - Dpkg::Shlibs::Objdump: Only select objdump program when going to use it.
    - Dpkg::Source::Package: Do not reinitialize fields member in constructor.
    - Dpkg::Source::Patch: Do not recommend --include-removal when not
      supported. Closes: #913012
    - Dpkg::Source::Package::V3::Bzr: Fix format name in output message.
    - Dpkg::Source::Package: Add a new format option to the new constructor.
      Prompted by James McCoy <email address hidden>.
    - Dpkg::Source::Package: Improve debian/source/format parsing and
      validation.
    - Dpkg::Source::Format: New public module.
      Prompted by Mattia Rizzolo <email address hidden>.
  * Documentation:
    - dpkg(1): Clarify --remove action. Closes: #914478
    - dpkg-query(1): Clarify --list option behavior when no arguments are
      specified. Closes: #917098
    - deb-control(5): Clarify by adding a reference to deb-src-control(5) and
      removing an invalid comment in the example.
      Prompted by Helmut Grohne <email address hidden>.
    - dpkg(1): Clarify databases used by --yet-to-unpack and --predep-package.
      Prompted by Johannes Schauer <email address hidden>.
    - Clarify character classes for various formats in man pages, by
      explicitly listing the character ranges within parenthesis.
      Prompted by Ian Jackson <email address hidden>.
    - dpkg-query(1): Document the version introducing the -f option.
    - dpkg-architecture(1): Add reference to the TERMS section in the
      VARIABLES section. Prompted by Axel Beckert <email address hidden>.
    - Fix POD for Dpkg::Interface::Storable derived method implementations.
    - Dpkg::Deps::Simple(3): Fix POD signature for new constructor.
  * Code internals:
    - dpkg-maintscript-helper: Use an explicit escape instead of a literal
      backslash.
    - Quote shell variables. Reported by Johannes Schauer <email address hidden>.
    - Switch perl code to use the new Dpkg::Source::Format module.
    - dpkg-source: Move source format selection earlier in the build.
    - dpkg-source: Use new format argument for Dpkg::Source::Package->new().
    - dpkg-shlibdeps: Remove unused variable.
    - dpkg-scanpackages: Unroll a single iteration loop.
    - start-stop-daemon: Compare foundany against 0 instead of treating it
      like a boolean.
    - start-stop-daemon: Switch code to use new info() and debug() functions.
    - update-alternatives: Use enums for actions instead of strings.
    - update-alternatives: Switch verbose selection into an enum.
    - dpkg: Negate tortoise_not_in_hare() function name and return value.
    - dpkg: Initialize trigcyclenode's next member once.
    - dpkg: Use common pattern of assigning as an iterator.
    - dpkg: Factor trigproc_new_cyclenode() out from check_trigger_cycle().
    - dpkg: Switch dependtry from an int to an enum.
    - dpkg: Move dependtry description from deferred_configure() to its
      declaration.
    - dpkg: Split trigger processing types into required, try-queued and
      try-deferred.
    - dpkg-query: Rename variable to avoid shadowing a local function.
    - When allocating use the variable instead of the type in sizeof().
    - dselect: Rename variable r to pkgbin.
    - libdpkg, dpkg: Rename r variables to fnn.
    - libdpkg: Rename ret variable to next.
    - libdpkg: Cleanup fsys module symbol names.
    - libdpkg: Rename pkg_db symbols to pkg_hash.
    - libdpkg: Add new warning printer setter function.
      Prompted by Julian Andres Klode <email address hidden>.
    - libdpkg: Add new DPKG_ERROR_OBJECT macro.
  * Build system:
    - get-version: Use a format string with printf.
    - run-script: Use $() instead of deprecated ``.
    - run-script: Remove unused PERL_PROFILE variable, PERL5OPT can be used
      instead, and does not require leaving an unquoted variable around.
    - run-script: Add «set -e».
    - Build.PL: Set environment variables only for CPAN tests.
    - Build.PL: Set locale for CPAN tests to C. Fixes CPAN#127314.
    - configure: Split AM_INIT_AUTOMAKE arguments into different lines.
  * Packaging:
    - Bump Standards-Version to 4.2.1 (no changes needed).
    - Switch to debhelper compatibility level 11.
    - Create the log file in postinst only if it does not exist.
      Prompted by Johannes Schauer <email address hidden>.
    - Add superficial autopkgtest functional tests.
  * Test suite:
    - Add new shellcheck author test.
    - Add descriptions for the shellcheck exclude codes.
    - Update cppcheck supressions.

  [ Updated programs translations ]
  * Dutch (Frans Spiesschaert). Closes: #912023
  * German (Sven Joachim).
  * Italian (Milo Casagrande). Closes: #915610
  * Portuguese (Miguel Figueiredo). Closes: #917813

  [ Updated scripts translations ]
  * German (Helge Kreutzmann).

  [ Updated man pages translations ]
  * Dutch (Frans Spiesschaert). Closes: #912024
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Tue, 22 Jan 2019 14:26:04 +0100
Superseded in buster-release on 2019-02-26
Superseded in sid-release on 2019-01-25
dpkg (1.19.2) unstable; urgency=medium

  [ Guillem Jover ]
  * dpkg: Fix --force-not-root for chown() and chmod() based syscalls, and
    give a more meaningful error message on chroot(). Closes: #614126
  * dpkg-divert, dpkg-statoverride: Add new --instdir and --root options,
    and make the commands honor the DPKG_ROOT environment variable.
  * libdpkg: Call the pager with «$SHELL -c» to respect POSIX. Closes: #910009
  * libdpkg: Do not spawn a pager if we are going to call «cat».
  * libdpkg: Honor DPKG_PAGER when spawning a pager.
    Suggested by Craig Sanders <email address hidden>.
  * libdpkg: Set LESS to “-FRSXMQ” if not already set, when spawning a pager.
  * libdpkg: Ignore SIGPIPE when setting up a pager, and then ignore EPIPE
    errors when writing to stdout, otherwise if we quit the pager early, the
    program will exit with an error code.
  * libdpkg: Set stdout to be fully buffered when using a pager.
  * dpkg, dpkg-query: Add new --no-pager option. For dpkg this is also a
    configuration option. Closes: #909754
  * Perl modules:
    - Dpkg::OpenPGP: Ignore Version field in enarmored output.
      Fixes CPAN#127217.
    - Dpkg::OpenPGP: Do not read the gpg user configuration file.
    - Dpkg::Source::Functions: Reimplement is_binary() w/o using diff(1).
    - Dpkg::Source::Package::V2: Split the BinaryFiles module into its own
      file, and give it a more generic name (Dpkg::Source::BinaryFiles).
    - Dpkg::Source::Package::V2: Move binary file detection to BinaryFiles
      module.
  * Documentation:
    - dpkg-buildpackage(1): Clarify --build=source explanation.
    - dsc(5): Clarify what “flattened” means in Testsuite-Triggers.
      Prompted by Mattia Rizzolo <email address hidden>.
    - dsc(5): Add a reference to where the source formats are described.
      Prompted by Manuel A. Fernandez Montecelo <email address hidden>.
    - dpkg-source(1): Improve documentation on vendor-specific series files.
    - deb-control(5): Document Build-Ids field.
      Prompted by Stuart Prescott <email address hidden>.
    - dpkg(1): Clarify which fields are affected by dependency options.
      Prompted by James Clarke <email address hidden>.
    - dpkg-query(1): Document the PAGER environment variable usage.
    - Dpkg(1): Add POD documentation about the module hierarchy and API.
  * Code internals:
    - dpkg-split: Use nfstrnsave() instead of nfmalloc() + memcpy().
    - libdpkg: Add new fsys-dir module.
    - libdpkg: Pass the file contents to the pager instead of the filename.
    - libdpkg: Add a pager kill switch, so that it can be forcefully disabled.
  * Build system:
    - Distribute a LICENSE file on CPAN.
    - Do not make the Build.PL script executable.
    - Generalize PACKAGE_CPAN_SIGN by setting PACKAGE_DIST_IS_RELEASE instead.
    - Add a release_status key to the CPAN metadata.
    - Fix typo in CPAN recommends key.
    - Improve test and author CPAN dependencies.
  * Packaging:
    - Break libapt-pkg5.0 instead of apt. Closes: #909959
      Analysis by Sven Joachim <email address hidden>.
  * Test suite:
    - Skip version checks involving «dpkg --compare-versions» if not available.
      This is relevant on CPAN or on non-dpkg-based systems.

  [ Updated programs translations ]
  * Polish (Łukasz Dulny).

  [ Updated man pages translations ]
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Mon, 08 Oct 2018 11:43:48 +0200
Superseded in sid-release on 2018-10-14
dpkg (1.19.1) unstable; urgency=medium

  [ Guillem Jover ]
  * Fix logic in dpkg-buildpackage to decide whether to run build targets,
    which broke tons of packages that are violating Debian policy MUSTs.
    Thanks to James Clarke <email address hidden>. Closes: #878899
  * Do not try to recompute hashes for the .dsc file when signing binary-only
    builds in dpkg-buildpackage. Reported by Ximin Luo <email address hidden>.
  * Pass the correct source stanza to the dpkg-buildpackage code parsing the
    Rules-Requires-Root field. This meant the field was being ignored.
  * Run dpkg-source directly from the current working directory in
    dpkg-buildpackage, instead of changing directory back and forth.
  * Setup and check rootcommand in dpkg-buildpackage only if it is going to
    be needed. Reported by Niels Thykier <email address hidden>.
  * Add color support to dpkg-maintscript-helper (a shell script).
  * Fix warning by including <sys/sysmacros.h> for makedev() in libdpkg.
  * Fix directory traversal with dpkg-deb --raw-extract, by guaranteeing
    that the DEBIAN pathname does not exist. Closes: #879982
    Reported by Jakub Wilk <email address hidden>.
  * Add new AS, STRIP, OBJCOPY, OBJDUMP, NM, AR and RANLIB buildtools
    variables to buildtools.mk. Prompted by Helmut Grohne <email address hidden>.
  * Restore rejecting negated architectures in Architecture field in
    dpkg-gencontrol and dpkg-genchanges. Regression introduced in dpkg 1.18.5.
  * Fix dpkg-gensymbols to print "error" instead of "warning" when these
    are fatal. Closes: #881488
  * Rename DPKG_GAIN_ROOT_CMD to DEB_GAIN_ROOT_CMD in the R³ support, as
    the variable is expected to be set by any builder, not just dpkg. And
    introduce ephemeral backwards compatibility even though there are no
    known users.
  * Do not set DEB_GAIN_ROOT_CMD in dpkg-buildpackage when the R³ value is
    <implementations-keywords>, following the specification.
  * Specify that DEB_GAIN_ROOT_CMD in R³ should preserve the environment.
    Proposed by Josh Triplett <email address hidden>.
  * Specify new DEB_RULES_REQUIRES_ROOT variable for R³ support.
  * Add new --rules-requires-root option to dpkg-buildpackage.
  * Declare R³ specification as "recommendation, stable" with version 1.0.
  * Export architecture variables by default from architecture.mk, as
    documented in dpkg-architecture(1). Closes: #888964
    Thanks to Jack Bates <email address hidden>
  * Increment the line number on dpkg --set-selections on unknown packages.
    Reported by Heinz Repp <email address hidden>. Closes: #888983
  * Switch a DEBIAN/conffile parsing assert() in dpkg due to empty lines
    into an ohshit(), because this is really a run-time error.
  * Fix assert() in dselect to expect the method lock file descriptor to be
    initialized, instead of non-zero.
  * Switch a fatal() call in start-stop-daemon into the new BUG() macro,
    because it is really an internal error.
  * Switch all assert() calls (except in update-alternatives) into internerr()
    or BUG() calls, to get way better reporting with variable contents and
    descriptions, and to make them always present independent of NDEBUG.
  * Add a new --no-rename option to dpkg-divert. This is the current default
    behavior, but it will make it possible to do a default switch in 1.20.x.
  * Warn when using dpkg-divert --add or --remove w/o --rename or --no-rename.
  * Warn when using dpkg-divert --rename on a file from an Essential package.
  * Use a single “struct filenamenode” definition for the entire code base.
    Closes: #746766
  * Add support for frontend locking. This makes it possible for frontends
    using this new protocol, to safely lock the dpkg database w/o risk of
    race conditions with other dpkg instances or frontends supporting the
    same protocol. Thanks to Julian Andres Klode <email address hidden>.
  * Do not emit perl warnings in dpkg-source --help on source formats w/o
    options.
  * Make dpkg-buildpackage validate OpenPGP signing key IDs length. Error out
    for short key IDs and warn for long key IDs.
  * On the dpkg conffile prompt, print the set of environment variables setup
    for the conffile shell, for easier discoverability.
  * Fix dpkg-buildpackage option --rules-file parsing. It was trying to parse
    it as --rules-target, which due to the ordering was a no-op.
  * Only check for fallback build targets presence on binary builds in
    dpkg-buildpackage.
  * Only check required build dependencies for known targets specified with
    dpkg-buildpackage --rules-target option.
    Reported by Johannes Schauer <email address hidden>.
  * Track package status dirtiness in dpkg to only log and report in status-fd
    when it has changed, removing duplication in output. Closes: #365921
  * Use Synopsis instead of Summary for the short Description, to unify the
    nomenclature and to make it more descriptive. Add a new binary:Synopsis
    virtual field to dpkg-query show format.
  * Add new dpkg-buildpackage --no-post-clean option, to be able to explicitly
    select the current default behavior.
  * Dump database package records in alphabetical order. This will give
    reproducible status and available database files, and make it possible
    to output other deb822 formatted data in a deterministic way.
  * Require both standard input and output to be connected to a terminal to
    use a pager.
  * Run dpkg-query --list output through a pager if we are on a terminal,
    instead of truncating it, to avoid data loss. Closes: #898603
  * Fix use after free in dpkg maintainer script handling. Regression
    introduced in dpkg 1.19.0.
  * Flush output for dpkg-query --status, --print-avail and --listfiles at
    the end, instead of after each stanza.
  * Add support for dumping all dpkg-query --status and --print-avail records
    from the database when no arguments are specified. Closes: #616342
  * Add new dpkg-gensymbols -l option to avoid having to abuse LD_LIBRARY_PATH
    for cross-build paths.
  * Check that DPKG_MAINTSCRIPT_PACKAGE is defined in dpkg-maintscript-helper.
    Closes: #907772
  * Switch dpkg-gencontrol and dpkg-genchanges to track automatically
    generated artifacts by using the Auto-Built-Package field from the binary
    package instead of hardcoding package name patterns (such as «-dbgsym$»).
  * Add new --reverse option to dpkg-parsechangelog, to list the changelog
    entries in reverse order.
  * Architecture support:
    - Add support for riscv64 CPU. Closes: #822914
      Thanks to Manuel A. Fernandez Montecelo <email address hidden>
    - Document the purpose and columns in the tupletable file.
  * Portability:
    - Add libcompat md5 module to the libcompat-test library, so that we
      always make sure it builds, even when we use an external implementation.
    - Convert libcompat md5 module to use C99 int types, instead of mapping
      them from the BSD types at configure time.
    - Use MD5_CTX instead of struct MD5Context, as the prevalent more portable
      type on system's <md5.h> headers.
    - Check for ldconfig command in dpkg only on platforms that do have it.
    - Fix file descriptor leak in start-stop-daemon on AIX.
    - libcompat: Add new strchrnul() implementation.
  * Perl modules:
    - Dpkg::Source::Package::V1: Check that $tarname is defined before use.
      Thanks to Christoph Biedl <email address hidden>.
      Closes: #879124
    - Dpkg::Vendor::Debian: Use proper %use_feature key. This was causing perl
      errors on paths not accepted for fixdebugpath.
      Reported by Mattia Rizzolo <email address hidden>, on IRC. Closes: #881051
    - Dpkg::Changelog: Print versions for incorrect changelog range warnings.
      Thanks to Paul Wise <email address hidden>.
    - Dpkg::Shlibs::SymbolFile: Check that $state->{seen} exists instead of
      $state being just defined. Fixes regression in dpkg-gensymbols symbols
      output. Thanks to Dmitry Shachnev <email address hidden>. Closes: #880166
    - Dpkg::Arch: Add new positive options argument to arch validators.
    - Dpkg::Vendor::Debian: Mark hurd-i386 as having gcc builtin PIE.
      Requested by Samuel Thibault <email address hidden>.
    - Dpkg::Source::Package::V2: Print one building line per existing tarball.
    - Dpkg::Source::Package: Print building lines for upstream tarball
      signatures. Closes: #888787
    - Dpkg::Deps: Turn virtualpkg tracking from an arrayyref into a hashref.
    - Dpkg::Vendor::Debian: Mark riscv64 as having gcc builtin PIE.
    - Dpkg::Shlibs::Objdump: Fix ELF program detection, for PIE binaries and
      executable libraries.
    - Dpkg::Version: Fix bool overload behavior back to be an is_valid()
      alias. Emit a specific perl warning until 1.20.x so that users can check
      whether the semantic change has any impact on the code, which can then
      be quiesced. Closes: #895004
    - Dpkg::Changelog::Parse: When detecting the changelog format, read the
      last 4KiB of the file instead of using «tail -n40», which should be
      both faster and more portable, as the default tail(1) is not POSIX
      compliant on all systems (c.f. Solaris).
    - Dpkg::Build::Types: Add new set_build_type_from_targets() function.
    - Dpkg::Shlibs::SymbolFile: Always assign a proper Dpkg::Version to the
      deprecated variable, otherwise the scalar value 0 can get confused
      on scalar context to denote it is *not* deprecated instead of being
      version 0.
    - Dpkg::Shlibs: Disable bool overload Dpkg::Version warnings.
    - Dpkg::Vendor::Debian: Inline _parse_feature_area() into
      _add_build_flags(), for a small speed up and line count reduction.
    - Dpkg::BuildFlags: Move default flags setting into the Dpkg::Vendor
      modules.
    - Dpkg::Gettext: Fix fallback textdomain() to honor its expected interface.
    - Dpkg::Deps: Split subpackages into their own separate modules.
    - Dpkg::Source: Do not change patch permissions if not necessary.
      Closes: #898010
    - Dpkg::Substvars: Reword used/unused warnings to clarify their meaning.
      Closes: #904258
    - Dpkg::Shlibs: Warn when using LD_LIBRARY_PATH with a private library
      directory which is a descendent of the current working directory.
    - Dpkg::Source::Package::V3::Quilt: Print series file used when applying
      patches.
    - Dpkg::OpenPGP: Return the destination path on successful ASCII armor
      conversion.
    - Dpkg::Control::Fields: Do not use & sigil for function calls.
    - Dpkg::Shlibs: Ignore nonexistent directories present in LD_LIBRARY_PATH.
    - Dpkg::Deps::KnownFacts: Satisfy :native with arch:all packages too.
      These are treated as native packages everywhere else in the multi-arch
      design, this was the only exception, which has become a source of
      packaging problems as of late. This was apparently an oversight in
      the original implementation. Closes: #854438
    - Dpkg::Vendor::Debian: Add fixfilepath support to reproducible feature.
    - Dpkg::Dist::Files: Add support for file attributes.
  * Documentation:
    - Update gettext minimal version in README.
    - Add a missing dot on the dpkg-buildflags(1) «lfs» feature paragraph.
      Spotted by Helge Kreutzmann <email address hidden>.
    - Document DPKG_COLORS environment variable for all programs using it.
    - Document DPKG_NLS environment variable for all programs using it.
    - Document the Testsuite and Testsuite-Triggers fields in
      deb-src-control(5). Prompted by Mattia Rizzolo <email address hidden>.
    - Update git URLs for move away from alioth.debian.org.
    - Fix set_build_type_from_options() description in Dpkg::Build::Types.
    - Clarify PIE build flag feature semantics. Closes: #900088
    - Clarify dpkg-buildpackage pre and post-clean options and their default
      state.
    - Add --build option equivalents for dpkg-buildpackage short build type
      options in --help output.
    - Fold dpkg-buildpackage --[no-]check-builddeps in --help into both -D
      and -d option descriptions.
    - Mark profiles as a replaceable item in dpkg-buildpackage --help output.
    - Update test suite requirements in README.
    - Document textdomain() and ngettext() replacement functions in
      Dpkg::Gettext POD.
    - Clarify arch-qualified dependency simplification in Dpkg::Deps POD.
    - Improve Dpkg::Deps modules and methods documentation.
    - Fix typo in deb-changes(5). Closes: #902616
    - Clarify awaiting state for interest and activate directives.
      Closes: #904060
    - Fix man page markup. Closes: #900033, #900035, #900040
      Thanks to Bjarni Ingi Gislason <email address hidden>.
    - Fix Doxygen comment for libdpkg dpkg_arch_find() function.
    - Document the dangers of using start-stop-daemon(8) only with --pidfile
      as matching option with the pid file owned by a non-privileged user.
  * Code internals:
    - Do not use stringy eval to define different sub implementations,
      just assign an anonymous sub to the typeglob.
    - Use memccpy() instead of strncpy() to quiesce a gcc-8 warning.
    - Change pkgbin_name_needs_arch() to never arch-qualify packages that
      have an empty or no architecture, which was already handled as part
      of varbuf_add_archqual().
    - libdpkg: Factor out cached arch-qualified package name generation into
      new pkgbin_name_archqual() function.
    - libdpkg: Add new pkg_name() and pkgbin_name() const variants.
    - libdpkg, dselect: Use new pkg_name_const() and pkgbin_name_const().
    - libdpkg: Rename struct pkginfo files member to archives.
    - dpkg: Call ensure_package_clientdata() defensively.
    - dpkg: For read-only state functions, check that clientdata is allocated
      before using it.
    - libdpkg: Move files list information from dpkg clientdata to pkginfo.
    - dpkg: Move ensure_package_clientdata() into its own file.
    - libdpkg: Move db-fsys code from src to lib/dpkg.
    - libdpkg: Rename pkg-db module to pkg-hash.
    - libdpkg: Simplify pkg_files_blank() by using a pointer to pointer to
      track the previous entry.
    - libdpkg: Factor out package files handling into its own module.
    - libdpkg: Switch to a new tiny struct to track file on-disk identity.
      This should reduce the run-time memory used.
    - libdpkg: Reset nfiles in files_db_reset().
    - libdpkg: Split push_cleanup() into push_cleanup_fallback().
    - Switch from strchr() + strlen() to strchrnul().
    - libdpkg: Change dpkg_error to track errno values.
    - libdpkg: Add new varbuf_new() and varbuf_free() functions.
    - libdpkg: Add new file_slurp() function.
    - libdpkg: Switch db-fsys to use the new file_slurp() function.
    - libdpkg: Add new pkg_infodb_reset_dir().
    - libdpkg: Add new m_dup() function.
    - libdpkg: Factor out package stanza printing into its own function.
    - libdpkg: Split pager specific code into its own module.
    - libdpkg: Add pager spawning and reaping support.
    - Use new pager spawning support instead of open-coding it, or piping it
      via a shell invocation, which required metacharacter escaping.
    - dpkg-query: Split enqperpackage() into each different action.
  * Build system:
    - Set distribution tarball format to ustar, instead of default v7 format.
    - Mark PO4A and POD2MAN as precious variables.
    - Automatically replace -Wno- with -W when testing compiler flags,
      instead of passing the positive form manually.
    - Enable clang -Wdocumentation warning if available.
    - Enable gcc-7 -Wregister warning if available.
    - Add CPAN distribution machinery for the perl modules. Closes: #821177
    - Add an autogen script to help people bootstrap the project.
    - Distribute the man.stamp from VPATH.
    - Preserve timestamps when distributing man pages.
    - Add a GitLab CI configuration file.
    - Disable C optimization levels when configuring for code coverage.
  * Packaging:
    - Install update-alternatives policykit-1 file.
    - Add Breaks to libdpkg-perl against pkg-kde-tools (<< 0.15.28~), as
      that package is using private modules with no API guarantees, that
      obviously broke due to recent changes in 1.19.0. Closes: #878919
    - Add Breaks on debhelper << 10.10.1~ to dpkg-dev, so that debhelper users
      wanting to use R³ support do not need a versioned dependency on dpkg-dev.
    - Add Breaks dgit << 3.13~ to libdpkg-perl, as older dgit versions assumed
      that Dpkg::Compression::Process was available, via implicit import
      from Dpkg::Source::Package.
      Reported by Ian Jackson <email address hidden>.
    - Bump Standards-Version to 4.1.1 (no changes needed).
    - Add bzip2 and xz-utils to Build-Depends, required by the functional test
      suite, but shadowed by dpkg-dev from the build system pulling those in.
    - Add versioned libncurses-dev as the first Build-Depends alternative.
      Thanks to Sven Joachim <email address hidden>.
    - Do not pass VERBOSE to test suite, as we are not using any automake
      test driver, so it does not get honored.
    - Rename maintainer-build DEB_BUILD_OPTIONS to new standardized terse.
    - Enable verbose test suite only in non-terse builds.
    - Add a Suggests on sensible-utils to libdpkg-perl.
    - Switch libdpkg-perl again to depend on perl:any, now that debootstrap
      in stable (stretch) supports arch-qualified dependencies.
    - Update libdpkg-perl public module list in package description.
    - Add Breaks on apt (<< 1.7~b) for --status-fd duplicate removals.
  * Test suite:
    - Skip Dpkg::OpenPGP test if gpg is not present.
    - Check POD in all perl scripts.
    - Consider *.PL also to be perl files.
    - Infer automatically the unit test data directory.
    - Infer automatically the unit test temp directory.
    - Add new po author test case (use i18nspector if available).
    - Add new test cases to clarify arch-qualified dependency simplification.
    - Add several TODO tests cases for dependency simplification.
    - Add new cppcheck author test.
    - Add support for new test_get_srcdir() test_get_builddir().
    - Add new unit tests for namevalue, fsys-hash and pkg-hash libdpkg modules.
    - Improve coverage of perl unit tests.
    - Delete fixup lines from i18nspector output instead of emptying them.
    - Add new codespell author test.
    - Add new test that the public libdpkg headers can be compiled with C++.

  [ Josh Triplett ]
  * Perl: Replace all calls to Cwd::cwd with Cwd::getcwd; the former calls
    /bin/pwd, while the latter uses the getcwd() syscall directly.

  [ Updated programs translations ]
  * Dutch (Frans Spiesschaert). Closes: #881401
  * German (Sven Joachim).
  * Italian (Milo Casagrande). Closes: #883085
  * Polish (Łukasz Dulny).
  * Simplified Chinese (Zhou Mo, Boyuan Yang). Closes: #900547, #890806
  * Spanish (Javier Fernández-Sanguino).
  * Traditional Chinese (Buo-ren Lin). Closes: #905887
  * Turkish (Mert Dirik). Closes: #886252

  [ Updated scripts translations ]
  * German (Helge Kreutzmann).

  [ Updated man pages translations ]
  * Dutch (Frans Spiesschaert). Closes: #881403
  * German (Helge Kreutzmann).
  * Simplified Chinese (Zhou Mo).

 -- Guillem Jover <email address hidden>  Wed, 26 Sep 2018 15:13:22 +0200
Published in stretch-release on 2018-07-14
dpkg (1.18.25) stretch; urgency=medium

  [ Guillem Jover ]
  * Parse start-stop-daemon usernames and groupnames starting with digits in
    -u and -c correctly. Reported by Bodo Eggert <email address hidden>.
  * Always use the binary version for the .buildinfo filename in
    dpkg-genbuildinfo. Reported by Raphaël Hertzog <email address hidden>.
    Closes: #869236
  * Fix integer overflow in deb(5) format version parser.
    Closes: #868356
  * Fix directory traversal with dpkg-deb --raw-extract, by guaranteeing
    that the DEBIAN pathname does not exist. Closes: #879982
    Reported by Jakub Wilk <email address hidden>.
  * Do not try to recompute hashes for the .dsc file when signing binary-only
    builds in dpkg-buildpackage. Reported by Ximin Luo <email address hidden>.
  * Architecture support:
    - Add support for riscv64 CPU. Closes: #822914
      Thanks to Manuel A. Fernandez Montecelo <email address hidden>
  * Perl modules:
    - Do not normalize args past a passthrough stop word in Dpkg::Getopt.
      Some commands pass some arguments through to another command, and
      those must not be normalized as that might break their invocation.
      Reported by Helmut Grohne <email address hidden>.
  * Documentation:
    - Update buildinfo information in dpkg-buildpackage man page to match
      the current implementation.
    - Use correct name for archname validator value in dpkg(1) man page.
      Reported by Niels Thykier <<email address hidden>.
    - Update git URLs for move away from alioth.debian.org.
  * Packaging:
    - Add versioned Build-Depends on tar, due to the --clamp-mtime option
      being used in Dpkg::Source::Archive which is used by dpkg-source,
      used by the test suite. Closes: #877330

  [ Updated programs translations ]
  * Dutch (Frans Spiesschaert).
  * German (Sven Joachim).
  * Italian (Pietro Battiston, Milo Casagrande).
  * Portuguese (Miguel Figueiredo).
  * Simplified Chinese (Zhou Mo, Boyuan Yang).
  * Spanish (Javier Fernandez-Sanguino).
  * Turkish (Mert Dirik).

  [ Updated man pages translations ]
  * Dutch (Frans Spiesschaert).
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Tue, 26 Jun 2018 12:28:08 +0200
Superseded in buster-release on 2019-03-12
Superseded in sid-release on 2019-06-04
dpkg (1.19.0.5) unstable; urgency=medium

  * Fix directory traversal with dpkg-deb --raw-extract, by guaranteeing
    that the DEBIAN pathname does not exist. Closes: #879982
    Reported by Jakub Wilk <email address hidden>.
  * Rename DPKG_GAIN_ROOT_CMD to DEB_GAIN_ROOT_CMD in the R³ support, as
    the variable is expected to be set by any builder, not just dpkg. And
    introduce ephemereal backwards compatibility even though there are no
    known users.
  * Do not set DEB_GAIN_ROOT_CMD in dpkg-buildpackage when the R³ value is
    <implementations-keywords>, following the specification.
  * Specify that DEB_GAIN_ROOT_CMD in R³ should preserve the environment.
    Proposed by Josh Triplett <email address hidden>.
  * Specify new DEB_RULES_REQUIRES_ROOT variable for R³ support.
  * Declare R³ specification as "recommendation, stable" with version 1.0.
  * Architecture support:
    - Add support for riscv64 CPU. Closes: #822914
      Thanks to Manuel A. Fernandez Montecelo <email address hidden>
  * Perl modules:
    - Dpkg::Vendor::Debian: Use proper %use_feature key. This was causing perl
      errors on paths not accapted for fixdebugpath.
      Reported by Mattia Rizzolo <email address hidden>, on IRC. Closes: #881051
    - Check that $state->{seen} exists instead of $state being just defined.
      Fixes regression in dpkg-gensymbols symbols output.
      Thanks to Dmitry Shachnev <email address hidden>. Closes: #880166
    - Mark hurd-i386 as having gcc builtin PIE in Dpkg::Vendor::Debian.
      Requested by Samuel Thibault <email address hidden>.

 -- Guillem Jover <email address hidden>  Wed, 17 Jan 2018 03:27:34 +0100
Superseded in buster-release on 2018-07-07
Superseded in sid-release on 2018-07-10
dpkg (1.19.0.4) unstable; urgency=medium

  * Perl modules:
    - Check that $tarname is defined before use in Dpkg::Source::Package::V1.
      Thanks to Christoph Biedl <email address hidden>.
      Closes: #879124
  * Packaging:
    - Add Breaks on debhelper << 10.10.1~ to dpkg-dev, so that debhelper users
      wanting to use R³ support do not need a versioned dependency on dpkg-dev.
    - Add Breaks dgit << 3.13~ to libdpkg-perl, as older dgit versions assumed
      that Dpkg::Compression::Process was available, via implicit import
      from Dpkg::Source::Package.
      Reported by Ian Jackson <email address hidden>.

 -- Guillem Jover <email address hidden>  Sun, 22 Oct 2017 23:47:08 +0200
Superseded in sid-release on 2017-10-23
dpkg (1.19.0.3) unstable; urgency=medium

  * Pass the correct source stanza to the dpkg-buildpackage code parsing the
    Rules-Requires-Root field. This meant the field was being ignored.
  * Setup and check rootcommand in dpkg-buildpackage only if it is going to
    be needed. Reported by Niels Thykier <email address hidden>.
  * Documentation:
    - Add a missing dot on the dpkg-buildflags(1) «lfs» feature paragraph.
      Spotted by Helge Kreutzmann <email address hidden>.
  * Packaging:
    - Comment out Rules-Requires-Root field until debhelper supports it.

 -- Guillem Jover <email address hidden>  Sat, 21 Oct 2017 16:01:15 +0200
Superseded in sid-release on 2017-10-22
dpkg (1.19.0.2) unstable; urgency=medium

  * Fix logic in dpkg-buildpackage to decide whether to run build targets,
    which broke tons of packages that are violating Debian policy MUSTs.
    Thanks to James Clarke <email address hidden>. Closes: #878899
  * Do not try to recompute hashes for the .dsc file when signing binary-only
    builds in dpkg-buildpackage. Reported by Ximin Luo <email address hidden>.
  * Packaging:
    - Add Breaks to libdpkg-perl against pkg-kde-tools (<< 0.15.28~), as
      that package is using private modules with no API guarantees, that
      obviously broke due to recent changes in 1.19.0. Closes: #878919

 -- Guillem Jover <email address hidden>  Wed, 18 Oct 2017 01:28:20 +0200
Superseded in sid-release on 2017-10-22
dpkg (1.19.0.1) unstable; urgency=medium

  * Packaging:
    - Install update-alternatives policykit-1 file.
  * Test suite:
    - Skip Dpkg::OpenPGP test if gpg is not present.

 -- Guillem Jover <email address hidden>  Tue, 17 Oct 2017 04:50:11 +0200
Superseded in sid-release on 2017-10-17
dpkg (1.19.0) unstable; urgency=medium

  [ Guillem Jover ]
  * Remove an unused variable in dpkg-shlibdeps.
    Thanks to Niels Thykier <email address hidden>.
  * Parse start-stop-daemon usernames and groupnames starting with digits in
    -u and -c correctly. Reported by Bodo Eggert <email address hidden>.
  * Cache the result of «dpkg-query --control-path» calls in dpkg-shlibdeps.
    Based on a patch by Niels Thykier <email address hidden>. Closes: #846405
  * Always use the binary version for the .buildinfo filename in
    dpkg-genbuildinfo. Reported by Raphaël Hertzog <email address hidden>.
    Closes: #869236
  * Fix integer overflow in deb(5) format version parser.
    Closes: #868356
  * Re-enable upstream tar signatures when building source format 1.0.
  * Make dpkg-deb --build sanity check the config maintainer script file type
    and permissions.
  * Add support to dpkg-deb for rootless builds, by setting the owner and
    group for the control.tar entries to root:root, and making it possible to
    do the same for the data.tar entries via the new --root-owner-group option.
    Based on a patch by Niels Thykier <email address hidden>. Closes: #291320
  * Make dpkg-buildpackage error out if --as-root is passed without
    --rules-target.
  * Add support for rootless builds in dpkg-buildpackage by honoring the
    Rules-Requires-Root (R³) field.
  * Add new dpkg-buildflags --query command, which is like --status but in
    deb822 format.
  * Remove long obsolete dselect floppy method.
  * Remove traces of non-US support from dselect methods.
  * Add support for a new Build-Kernel-Version field in .buildinfo files,
    that can be emitted with a new dpkg-genbuildinfo --always-include-kernel
    option. Closes: #873937
  * Make dpkg-genchanges honor substvars in .changes Description field.
    Closes: #856547
  * Add support for source package Description and substvars. This new
    field in the debian/control source stanza will be copied into the .dsc
    file, and will also be used to initialize the new source:Synopsis and
    source:Extended-Description substvars that will be available when
    generating the DEBIAN/control and .changes files. Closes: #555743
  * Add new “future” feature area in dpkg-buildflags:
    - Add new «lfs» feature, to be used instead of the getconf(1) interface
      which cannot support cross-building.
  * Add new buildtools.mk make fragment to support build tools variable
    setup, for both TOOL and TOOL_FOR_BUILD variables. Not included by
    default from default.mk.
  * Make --uniform-compression the new default dpkg-deb behavior. Add support
    for negating the option via --no-uniform-compression.
  * Clarify subprocess error message by shuffling words around.
  * Print the package name on maintainter script errors. Closes: #877521
  * Fix capitalization of Debian in dpkg-deb output messages.
  * Add a policikit file for running update-alternatives via pkexec.
    Propose by Boyuan Yang <email address hidden>.
  * Perl modules:
    - Switch from Dpkg::Util to List::Util, now that the module in the
      new required Perl contains the needed functions.
    - Add a new "unique_tuple_key" option to Dpkg::Index set_options() to
      set better default "get_key_func" options, which will become the default
      behavior in 1.20.x. Prompted by Johannes Schauer <email address hidden>.
    - Mark ppc64 and powerpc as having gcc builtin PIE in Dpkg::Vendor::Debian.
    - Make the Dpkg::Substvars warnings output deterministic.
      Thanks to Chris Lamb <email address hidden>. Closes: #870221
    - Remove unused POSIX module imports.
    - Use Errno module instead of the slow to import POSIX.
    - Remove unused Dpkg::Path from Dpkg::Vendor::Ubuntu.
    - Only load POSIX from Dpkg::Compression::FileHandle if we are going to
      use signal definitions, reducing the load time of many other modules.
    - Only load Dpkg::BuildOptions and Dpkg::Arch from Dpkg::Vendor-specific
      modules if we are going to use them, reducing the load time of many
      other modules.
    - Only load Term::ANSIColor from Dpkg::ErrorHandling if we are going to
      use colors, reducing the load time of many other modules.
    - Move color setup into report_pretty in Dpkg::ErrorHandling.
    - Move printforhelp initialization into usageerr() in Dpkg::ErrorHandling.
    - Avoid many function arguments in Dpkg::Shlibs::SymbolFile parse().
    - Avoid many function arguments in Dselect::Ftp do_connect().
    - Add new Dpkg::Interface::Storable option to disable compression support,
      so that we can load Dpkg::Compression::FileHandle only when enabled.
    - Disable decompression support for Dpkg::Vendor origin files.
    - Move file_lock() function into a new Dpkg::Lock module, to reduce the
      module load chain for several Dpkg modules.
    - Add support for new DPKG_NLS environment variable in Dpkg::Gettext,
      that when set to 0 will disable NLS (i18n) support in the Dpkg modules,
      and reduce the load chain.
    - Disable compression when using the default file in
      Dpkg::Changelog::Parse.
    - Mark all missing CTRL_INDEX_SRC and CTRL_INDEX_PKG fields as allowed
      in Dpkg::Control::FieldsCore.
    - Complete field order for CTRL_PKG_DEB and CTRL_FILE_STATUS types in
      Dpkg::Control::FieldsCore.
    - Switch to use lowercase field names for all internal field name
      handling in Dpkg::Control::FieldsCore, giving a significant speed up.
    - Remove dependency on Dpkg::Checksums from Dpkg::Control::FieldsCore.
    - Do not execute code when importing Dpkg::Control::FieldsCore.
    - Use substr instead of a regex to match the first line characters in
      when parsing control files in Dpkg::Control::HashCore.
    - Merge build flag methods into a single _add_build_flags private method
      in Dpkg::Vendor::Debian.
    - Do not use an intermediate variable in Dpkg::Control::HashCore::Tie
      STORE method.
    - Expect deb822 stanza delimiters more often than OpenPGP Armor Headers
      in Dpkg::Control::HashCore parse method.
    - Optimize trailing space matching on Dpkg::Control::HashCore parse
      method, by trimming it just once at the beginning of the iteration.
    - Optimize trailing space trimming on Dpkg::Control::HashCore parse
      method, by requiring that at least one whitespace is present.
    - Optimize first character matching in Dpkg::Control::HashCore parse
      method, by storing the first character in a variable.
    - Optimize field/value parsing in Dpkg::Control::HashCore parse method,
      by switching from a capturing regex to split() plus a checking regex.
    - Auto-convert binary signatures to OpenPGP ASCII Armor in
      Dpkg::Source::Package when building source packages.
    - Switch Dpkg::Source::Package::V3 modules to use find_command() instead
      of ad-hoc code.
    - Call source format prerequisites Dpkg::Source::Package method if
      present. Addresses: #877688
    - Unify Dpkg::ErrorHandling subprocess errors with the ones from libdpkg.
    - Do not emit a perl warning if gcc or dpkg is not found from Dpkg::Arch,
      the code already handles the commands not being present.
    - Do not unnecessarily require setting the host_arch in Dpkg::Deps.
      Closes: #856396
    - Do not normalize args past a passthrough stop word in Dpkg::Getopt.
      Some commands pass some arguments through to another command, and
      those must not be normalized as that might break their invocation.
      Reported by Helmut Grohne <email address hidden>.
  * Documentation:
    - Document currently accepted syntax for changelogs in deb-changelog(5).
      Closes: #858579
    - Mark source:Version substvar in bold in deb-substvars(5).
    - Clarify behavior for dpkg-maintscript-helper. Closes: #857852
    - Use <command-string> instead of <command> for -c argument value in
      dpkg-architecture(1). Reported by Johannes Schauer <email address hidden>.
    - Itemize the CTRL_* constants in the Dpkg::Index POD.
    - Update buildinfo information in dpkg-buildpackage man page to match
      the current implementation.
    - Add all source files to POTFILES.in files.
    - Move deb-version man page to section 7.
    - Remove reference to obsolete dpkg-cross(1).
    - Sort control field export markers by tool order in deb-src-control(5).
    - Document Package-Type and Enhances fields in deb-control(5).
    - Write the actual glyphs used to delimit dependency restrictions in
      deb-src-control(5).
    - Move Package-Type description just after the Package field in
      deb-src-control(5).
    - Move udeb-specific fields to the end of the list of fields in
      deb-src-control(5), and mention these are really udeb-specific.
    - Document that dependency fields in binary stanza can have restrictions
      in deb-src-control(5).
    - Clarify that the Testsuite field is comma-separarted.
    - Fix update-alternatives man page section in alternatives/README file
      reference. Closes: #872309
    - Use correct name for archname validator value in dpkg(1) man page.
      Reported by Niels Thykier <<email address hidden>.
    - Add new deb-src-rules(5) man page.
    - Document that trailing commas are valid in debian/control dependency
      fields, which get stripped when generating output files.
      Prompted by Mattia Rizzolo <email address hidden>.
    - Clarify that sanitize options should not be used for production builds.
    - Remove recommendation to use Pre-Depends for trigger directives from
      deb-triggers(5). Closes: #864882
    - Add new rootless build experimental draft specification.
      Initial proposal by Niels Thykier <email address hidden>, wording fixes
      and spec clarifications by Guillem Jover <email address hidden>.
    - Fix several function signature documentation.
  * Code internals:
    - Switch perl code to use -> operator for function variables.
    - Switch perl code from split() with /\s+/ to ' '.
  * Build system:
    - Require Perl 5.20.2, the version in Debian oldstable (jessie).
    - Use new gcc-7 -Wrestrict and -Wshift-negative-value warnings if
      available.
    - Do not override the default DEPENDENCIES for libdpkg, extend it instead.
    - Install perl man pages in section 3perl.
  * Packaging:
    - Remove preinst maintainer scripts for dselect and dpkg-dev, for an
      ancient /usr/share/doc symlink to directory switch. Closes: #867327
    - Remove now unused libio-string-perl Build-Depends, and versioned
      dpkg-dev as we do not use build profiles any more.
    - Set Rules-Requires-Root field to no.
    - Do not set redundant source compression to xz.
    - Bump Standards-Version to 4.1.0 (no changes needed).
    - Switch to debhelper compatibility level 10.
    - Split alternatives logrotate into its own configuration file to help
      downstreams and derivatives.
    - Remove ancient code recompressing the alternatives database backups
      from xz to gzip in the dpkg daily cron job.
    - Remove Replaces and Breaks for ancient transitions.
    - Remove workaround for ancient gcc lacking stackprotectorstrong support.
    - Remove maintainer script code to handle downgrades to pre-triggers and
      pre-multiarch dpkg versions.
    - Remove alternative logs when purging dpkg (!?).
    - Add support for DPKG_ROOT in dpkg maintainer scripts.
    - Add git and bzr to libdpkg-perl Suggests. Closes: #877688
  * Test suite:
    - Enable perlcritic Documentation::RequirePodSections and
      Miscellanea::ProhibitTies.
    - Disable perlcritic ValuesAndExpressions::ProhibitEscapedCharacter.
    - Add a new all_perl_modules function to Test::Dpkg.
    - Add a new module-version unit test to check that module $VERSION
      matches the newest entry in the CHANGES section.
    - Use Module::Metadata instead of grepping for $VERSION in pod-coverage.
    - Avoid many function arguments in Dpkg_Changelog.t check_options().
    - Add a new unit test for Dpkg::Control::FieldsCore.
    - Switch from IO::String to native open() scalar support.
    - Use UTC0 when setting TZ.

  [ Updated programs translations ]
  * German (Sven Joachim).
  * Italian (Pietro Battiston). Closes: #864509
  * Portuguese (Miguel Figueiredo). Closes: #868800
  * Simplified Chinese (Zhou Mo, Boyuan Yang). Closes: #867133, #877929

  [ Updated scripts translations ]
  * German (Helge Kreutzmann).

  [ Updated man pages translations ]
  * Dutch (Frans Spiesschaert). Closes: #862924
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Tue, 17 Oct 2017 01:51:16 +0200
Superseded in buster-release on 2018-02-04
Published in stretch-release on 2017-05-23
Superseded in sid-release on 2018-04-16
dpkg (1.18.24) unstable; urgency=medium

  [ Guillem Jover ]
  * Add missing symbols to the libdpkg map file.
  * Fix dpkg-shlibdeps to preserve the Dpkg::Shlibs::find_library() order
    when scanning symbols/shlibs files. This was causing generation of bogus
    dependencies when multiple packages provide the same SONAME on different
    directories. Regression introduced in dpkg 1.18.17. Closes: #860979
  * Make dpkg-maintscript-helper print all unowned files from a directory
    when printing the error message, to ease debugging those problems after
    the fact. Closes: #813454, #860238
    Based on a patch by Bastien ROUCARIÈS <email address hidden>.
  * Add duplicate prevention code for debian/files to dpkg-genbuildinfo, so
    that successive runs with different versions and equivalent build types
    do not generate multiple .buildinfo entries to be uploaded, which is
    similar to what dpkg-gencontrol is doing for .deb files.
  * Fix conffile takeover handling during unpack in dpkg on --root or
    on diversions. Closes: #837051, #858004
  * Fix digest inference for shared conffiles, causing bogus takeover
    unpack errors. Regression introduced in dpkg 1.16.9. Closes: #861217
  * Improve tar entry metadata parsing in dpkg:
    - Do not parse device numbers for non block nor char tar entry objects.
    - Make the existing octal parser more robust, by checking for the
      expected format of leading zeros or spaces, followed by any ASCII
      octal characters (0-7), followed by zero or more space or NULs.
    - Add support for base-256 encoded numeric fields, to support large
      values, for UID/GID, device number, size and even signed timestamps.
      This is necessary not only to be able to store larger values, but to
      cover packages that can already be generated by dpkg-deb, given that
      it uses the system GNU tar when building. Closes: #850834
  * Architecture support:
    - Add support for ARM64 ILP32. Closes: #824742
      Thanks to Wookey <email address hidden>.
  * Perl modules:
    - Remove obsolete hardening-wrapper support from Dpkg::Vendor::Ubuntu.
      Thanks to Adam Conrad <adconrad@0c3.net>.
    - Bump $Dpkg::Deps::VERSION to match the one documented in CHANGES.
    - Ignore by default debian/files.new and debian/files for all source
      formats in Dpkg::Source::Package, because these are generated files
      with well known pathnames, part of the public interface, and with
      dpkg-genbuildinfo always injecting .buildinfo entries into
      debian/files, this meant this could disrupt previous workflows based
      on not cleaning the source tree.
  * Documentation:
    - Many spelling fixes. Thanks to Josh Soref <email address hidden>.
    - Do not include mispellings in changelogs, as that makes detecting them
      more difficult.
  * Build system:
    - Use libexec variable for auxiliary internal programs, and set it to
      /usr/lib on Debian and derivatives.
    - Check that the detected tar is a GNU tar.
    - Check that the detected patch is a GNU patch, so that we get a directory
      traversal resistant patch implementation. This fixes CVE-2017-8283 by
      delegating those checks to patch(1), so that we trap blank-indented
      diff hunks trying to escape from the source tree.
  * Test suite:
    - Add a test case for blank-indented patches which were the cause for
      CVE-2017-8283.
    - Handle files with non-zero sizes in c-tarextract libdpkg test code.

  [ Updated programs translations ]
  * Catalan (Guillem Jover).
  * Czech (Miroslav Kure).

  [ Updated dselect translations ]
  * Catalan (Guillem Jover).

  [ Updated scripts translations ]
  * Catalan (Guillem Jover).

  [ Updated man pages translations ]
  * German (Helge Kreutzmann, David Rabel). Closes: #857449
  * Spanish (Javier Fernández-Sanguino).

 -- Guillem Jover <email address hidden>  Wed, 17 May 2017 13:16:25 +0200
Superseded in stretch-release on 2017-05-25
Superseded in sid-release on 2017-06-20
dpkg (1.18.23) unstable; urgency=medium

  * Handle unmatched arch-qualified virtual packages in dpkg-genbuildinfo,
    instead of letting perl die. Closes: #849944
  * Declare .buildinfo format as stable with version 1.0.
  * Do not depend on cxxabi.h to have declared __cxa_pure_virtual, use
    the same “__cxxabiv1” namespace as specified in the C++ ABI, instead
    of using the “abi” alias intended for use by userland.
    Thanks to Jörg Sonnenberger <email address hidden>.
  * Add a comment on any C code switch case that falls through. Fixes new
    gcc-7 warnings.
  * Use snprintf() instead of sprintf() in libdpkg when constructing the ar
    member header, as we might overflow depending on the input data.
  * Portability:
    - Do not redeclare sys_siglist in libcompat when the system does so.
      Thanks to Thomas Klausner <email address hidden>.
    - Rename err variable to ret in start-stop-daemon as the former is a
      function on BSDs.
    - Use 5-argument kvm_getprocs() call form on OpenBSD in start-stop-daemon.
    - Use correct struct kinfo_proc ruid submember name on NetBSD in
      start-stop-daemon.
    - Define _KMEMUSER for NetBSD to get declarations for various
      struct kinfo_proc members in start-stop-daemon.
  * Perl modules:
    - Do not special case EM_SPARC32PLUS for NetBSD in Dpkg::Shlibs::Objdump,
      the code has been fixed in NetBSD as that situation could not happen.
    - Fix read() error handling in Dpkg::Shlibs::Objdump::get_format() to
      gracefully ignore non-ELF files again. Closes: #854536
    - Emit an explicit warning from Dpkg::Shlibs::Objdump::Object::analyze()
      for unknown executable formats instead of relying on objdump doing so.
    - Do not parse bogus ELF binaries in Dpkg::Shlibs::Objdump::get_format().
      Reported by Niels Thykier <email address hidden>.
    - Add ‘.mnt-ignore’ to the default ignore lists in Dpkg::Source::Package,
      as we were already ignoring the ‘_MTN’ pathnames. Closes: #855450
      Thanks to Nicolas Boulenguez <email address hidden>.
    - Mark kfreebsd-amd64, kfreebsd-i386, sparc and sparc64 architectures as
      having gcc builtin PIE in Dpkg::Vendor::Debian.
    - Switch PIE handling in Dpkg::Vendor::Debian to have no default (!) and
      delegate the setting to gcc or an explicit request by a user. This is
      needed to cope with the general PIE brokenness situation in Debian, and
      the current specific brokenness of a Debian gcc patch mangling the dpkg
      build flags. Closes: #848129, #845550
  * Documentation:
    - Clarify the requirements for deb-conffile(5) pathnames. Closes: #854417
      Proposed by Dieter Adriaenssens <email address hidden>.
    - Document dpkg-source --before-build and --after-build in --help output.
    - Document dpkg-buildpackage --ignore-builtin-builddeps in --help output.
  * Build system:
    - Check <sys/proc.h> by also including <sys/param.h>, on several BSD
      systems the header is not self-contained.
    - Handle libmd implementations built into system libc, as found on some
      BSD systems.
    - Do not fail on missing compression libraries or headers on automatic
      detection mode. Regression introduced in dpkg 1.18.14.
  * Test suite:
    - Use the detected perl interpreter instead of a random one from PATH.

  [ Updated programs translations ]
  * Dutch (Frans Spiesschaert). Closes: #856325

  [ Updated scripts translations ]
  * German (Helge Kreutzmann).

  [ Updated man pages translations ]
  * Dutch (Frans Spiesschaer). Closes: #856326

 -- Guillem Jover <email address hidden>  Mon, 06 Mar 2017 05:41:11 +0100
Superseded in stretch-release on 2017-03-11
Superseded in sid-release on 2017-03-06
dpkg (1.18.22) unstable; urgency=medium

  [ Guillem Jover ]
  * Turn status file parser errors on bogus field blank lines into warnings,
    otherwise the system cannot be easily recovered from. Regression
    introduced in dpkg 1.16.1. Reported by Jay Freeman <email address hidden>.
  * Perl modules:
    - Mask ARM ABI bits in the ELF processor flags in Dpkg::Shlibs::Objdump.
      These are too unreliable to be used for exact matching. Closes: #853793

  [ Updated programs translations ]
  * Turkish (Mert Dirik). Closes: #853202

  [ Updated scripts translations ]
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Wed, 01 Feb 2017 05:48:58 +0100
Superseded in sid-release on 2017-02-04
dpkg (1.18.21) unstable; urgency=medium

  [ Guillem Jover ]
  * Revert "Generate Testsuite-Restrictions fields from the test restrictions
    in dpkg-source into .dsc files". This change is contentious and should
    have been discussed more widely. Given that this has been live only for
    a couple of days, the impact should be minimal, but still something to
    take into account once and if this gets reintroduced. Closes: #852820
  * Perl modules:
    - Map alternative or old ELF machine types to canonical ones. We need
      those to match on the encoded ABI, otherwise dpkg-shlibdeps will not
      be able to find the objects.

  [ Updated man pages translations ]
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Sun, 29 Jan 2017 20:29:58 +0100
Superseded in sid-release on 2017-01-30
dpkg (1.18.20) unstable; urgency=medium

  [ Guillem Jover ]
  * Add a new --no-sign option to dpkg-buildpackage, to make it possible to
    disable all signing in a future-proof way.
  * Make dpkg-buildpackage --unsigned-changes not sign .buildinfo either.
    This breaks the expectations of users and tools, because there was no
    way previously to request no signing at all. Closes: #852822
  * Perl modules:
    - Mask the machine bits for SH and MIPS in the ELF processor flags in
      Dpkg::Shlibs::Objdump. These do not define the ABI, and make the
      objects not match when they should, when looking for shared libraries
      from dpkg-shlibdeps.
    - Encode the ELF ABI as a big-endian byte stream, so that decoding for
      output gives meaningful results.
    - Disable the NFS-unsafe warning on Linux, as using flock() on NFS has
      been safe for some time now. Addresses: #677865 (on Linux)
  * Documentation:
    - Document the Built-For-Profile field in deb-changes(5).

  [ Updated scripts translations ]
  * German (Helge Kreutzmann).

  [ Updated man pages translations ]
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Sat, 28 Jan 2017 06:32:53 +0100
Superseded in sid-release on 2017-01-29
dpkg (1.18.19) unstable; urgency=medium

  [ Guillem Jover ]
  * Stop emitting Built-For-Profiles from dpkg-gencontrol. The information
    is already provided in .buildinfo files, and including it in the binary
    packages makes them unreproducible even when the profile used would not
    alter its contents. Closes: #831524
  * Do not allow empty epochs and revisions in versions. When there's at
    least one colon or one dash, we should expect epoch and revision numbers.
  * Always set SOURCE_DATE_EPOCH in dpkg-buildpackage and dpkg-source. Use
    the current date if the changelog does not have one. Closes: #849081
  * Refactor update-alternatives pathname existence check into a new function.
  * Avoid useless repeated lstat()s in update-alternatives.
  * Only check for debian/tests/control file once in dpkg-source.
  * Generate Testsuite-Restrictions fields from the test restrictions in
    dpkg-source into .dsc files. Closes: #847926
    Based on a patch by Iain Lane <email address hidden>.
  * Improve the ELF ABI mismatch detector in dpkg-shlibdeps, by parsing the
    ELF header ourselves. While still not perfect (things like linux-i386 and
    hurd-i386 will still match), it will filter lots of previously matching
    objects that should have been ignored, and will work even when objdump
    does not know about the specific object details. Closes: #849913
  * Add initial support for DEB_BUILD_OPTIONS to dpkg-genbuildinfo. This will
    make it possible to enable or disable specific features that should be
    recorded in the .buildinfo file. For now only “all” and “path” are
    supported. Closes: #848705
  * Add again the architecture from the filename to .changes files for any
    artifact with one. This reverts the change introduced in dpkg 1.18.11.
  * Fold the filtering and checksumming of files to distribute in a .changes
    file in dpkg-genchanges into the initial loop. This way we do not include
    architectures for artifacts we are not going to distribute, and do not
    unnecessarily recompute the checksums for artifacts like the sources.
  * Do not compute the architecture list twice in dpkg-genchanges.
  * Include .buildinfo files also for source-only uploads in dpkg-genchanges.
    Closes: #846164
  * Fix check for expected number of binary artifacts in dpkg-genchanges, to
    only take into account the artifacts that we are distributing.
  * Fix parsing of Pre-Depends and Depends in dpkg-genbuildinfo, so that
    the code parses both and not just the first to appear in the stanza.
    Based on a patch by Johannes Schauer <email address hidden>.
  * Add support for signed .buildinfo files to dpkg-buildpackage. Add new
    -ui and --unsigned-buildinfo options. Closes: #843925
  * Portability:
    - On GNU/Hurd try to use the new process executable name attribute from
      libps, to properly match on start-stop-daemon --exec.
  * Perl modules:
    - Fix Debian architecture wildcard parsing so that matching four-tuple
      matchings work. Missed in dpkg 1.18.11.
      Reported by Julian Andres Klode <email address hidden>.
    - Add new import tags for Dpkg::Arch.
    - Abort on EOF in patch name prompt in Dpkg::Source::Package::V2,
      instead of getting into an infinite loop. Closes: #851441
    - Call anonymous subs via -> operator instead of casting with &, and fix
      bogus POD documentation to match the code.
    - Add new Auto-Built-Package field to Dpkg::Control::Fields.
    - Add a new debug() reporting function, and switch code to use it.
    - Add new Dpkg::BuildOption parse_features() method refactored from
      Dpkg::Vendor::Debian.
  * Documentation:
    - Cleanup software requirements in README.
    - Move control member file references from dpkg(1) to deb(5).
    - Fix typos in docs and code comments.
    - Document Auto-Built-Package field in deb-control(5).
  * Build system:
    - Disable disk pre-allocation by default, but let the builder re-enable
      it via a new configure option. This has been causing major performance
      issues on "modern" filesystems.
  * Packaging:
    - Add debsig-verify to dpkg Suggests. The code optionally supports this
      specific signed .deb verification program.
      Prompted by Stuart Prescott <email address hidden>.
  * Test suite:
    - Generate and check all currently possible architecture wildcards.
    - Correctly iterate over all default and passed .dsc template substvars.

  [ Updated programs translations ]
  * Dutch (Frans Spiesschaert). Closes: #851889
  * German (Sven Joachim).

  [ Updated scripts translations ]
  * German (Helge Kreutzmann).

  [ Updated man pages translations ]
  * Dutch (Frans Spiesschaer). Closes: #851891
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Fri, 27 Jan 2017 05:43:36 +0100
Superseded in stretch-release on 2017-03-27
Superseded in sid-release on 2017-08-15
dpkg (1.18.18) unstable; urgency=medium

  [ Guillem Jover ]
  * Documentation:
    - Document DPKG_DATADIR in an ENVIRONMENT section in dpkg-architecture(1).
    - Add a rationale for the purpose of Testsuite-Triggers in dsc(5).
      Prompted by Mattia Rizzolo <email address hidden>.
  * Packaging:
    - Revert the perl to perl:any dependency change in libdpkg-perl, as that
      breaks debootstrap in stable (jessie), testing (stretch) and unstable,
      which do not support arch-qualified dependencies. We'll have to live
      with the Multi-Arch hinter being unhappy for now.

  [ Updated man pages translations ]
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Tue, 20 Dec 2016 13:53:12 +0100
Superseded in sid-release on 2016-12-20
dpkg (1.18.17) unstable; urgency=medium

  [ Guillem Jover ]
  * Handle empty versions on validation in dpkg-maintscript-helper as they
    are optional. Regression introduced in dpkg 1.18.16. Closes: #848422
  * Validate versions too in dpkg-maintscript-helper symlink_to_dir and
    dir_to_symlink commands.
  * Improve logic to identify packages owning a library in dpkg-shlibdeps,
    by handling the same library appearing more than once on the filesystem
    Thanks to Raphaël Hertzog <email address hidden>. Closes: #843073
  * Documentation:
    - Clarify that dpkg-buildpackage does not run «dpkg-source --before-build»
      when using the -T option. Closes: #649531
    - Document that dpkg sets DPKG_ADMINDIR on maintainer script environment.
  * Packaging:
    - Do not let dh_perl insert a dependency for libdpkg-perl, because it
      emits perl instead of perl:any. Instead hardcode a perl:any dependency
      to comply with the perl policy and make the Multi-Arch hinter happy.

  [ Updated scripts translations ]
  * German (Helge Kreutzmann).

  [ Updated man pages translations ]
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Mon, 19 Dec 2016 02:43:10 +0100
Superseded in sid-release on 2016-12-22
dpkg (1.18.16) unstable; urgency=medium

  [ Guillem Jover ]
  * Add support for specifying multiple targets on «dpkg-buildpackage -T»
    which will be run successively. Closes: #671074
  * Reject empty upstream versions in C and perl code. These are not permitted
    by deb-version(5), but the code was letting those through.
  * Use lzma_cputhreads() instead of sysconf(_SC_NPROCESSORS_ONLN) as the
    former is way more portable.
  * Automatically decrease xz encoder threads to try to not exceed available
    memory limits. This should alleviated the insane requirements of memory
    needed on 32-bit architectures with many cores, which results in more
    than the userspace addressable memory, when using settings such as
    -z9 and/or -Sextreme in dpkg-deb. Closes: #846564
  * Add new dpkg --validate-<thing> commands to validate the syntax of
    various <thing>s, where the current list is «pkgname», «trigname»,
    «archname» and «version».
  * Use the new dpkg --validate-version command in dpkg-maintscript-helper,
    instead of abusing the --compare-versions command to perform version
    validation. Closes: #844701
  * Allow readlink(2) to return a size smaller than stat(2) in dpkg. Some
    bogus filesystems do not return the actual symlink size in st_size,
    which contradicts POSIX. But allowing the case where the returned size
    is smaller than the one used to allocate memory is harmless, although
    suspect. Let it through, but still print a warning so that users can
    install stuff but are reminded they need to get a fixed filesystem in
    place. This has affected at least ecryptfs in the past and now
    file-based encryption support in ext4 on Android N.
  * Add new dpkg-query virtual field source:Upstream-Version. Closes: #84434
  * Perl modules:
    - Whitelist DPKG_GENSYMBOLS_CHECK_LEVEL, DPKG_ROOT, DPKG_ADMINDIR and
      DPKG_DATADIR environment variables in Dpkg::Build::Info.
  * Documentation:
    - State the current working directory used when running dpkg-buildpackage
      hooks.
    - Add a new ENVIRONMENT section to dpkg-gensymbols(1) and document
      DPKG_GENSYMBOLS_CHECK_LEVEL there.
    - Fix bogus description of --force-confmiss in dpkg(1). Regression
      introduced in 1.16.4. Reported by Sven Joachim <email address hidden>.
      Closes: #846395
    - Update dpkg-parsechangelog parser options. The options specific to
      the changelog parser program did not get updated when the parser got
      switched to be a perl module. Missed in dpkg 1.18.8.
  * Build system:
    - Enable compression libs also in automatic check mode in configure.
    - Honor DPKG_DATADIR again in the installed Dpkg modules. This was an
      explicit public interface, documented in the man page.

  [ Updated programs translations ]
  * Dutch (Frans Spiesschaert). Closes: #848378
  * Simplified Chinese (Zhou Mo). Closes: #844955

  [ Updated scripts translations ]
  * German (Helge Kreutzmann).
  * Swedish (Martin Bagge). Closes: #847220

  [ Updated man pages translations ]
  * Dutch (Frans Spiesschaert). Closes: #848379
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Sat, 17 Dec 2016 00:25:53 +0100
Superseded in stretch-release on 2016-12-26
Superseded in sid-release on 2016-12-17
dpkg (1.18.15) unstable; urgency=medium

  [ Guillem Jover ]
  * Improve PIE flags support:
    - Do not enable PIE when linking static programs. glibc-based systems
      do not support this combination and produce very bogus output.
      Proposed by Szabolcs Nagy <email address hidden>. Closes: #843714
  * On source builds add 'source' to the Architecture field in the
    .buildinfo file in dpkg-genbuildinfo.
  * Add new Build-Date field to .buildinfo files.
  * Generate deterministic .buildinfo filenames in dpkg-genbuildinfo,
    following the same pattern as used for .changes files.
  * Bump .buildinfo Format to version 0.2.
  * Change dpkg-buildpackage -j and -J on “auto” mode to fallback to serial
    execution when we cannot infer the number of online processors on
    unsupported or exotic systems. This should be a safer mode of operation.
    Proposed by Simon McVittie <email address hidden>.
  * Only preallocate disk size in dpkg for unpacked files bigger than 16 KiB.
    Closes: #824636
  * Perl modules:
    - Validate architecture arguments in Dpkg::Deps deps_parse().
      Prompted by Johannes Schauer <email address hidden>.
  * Documentation:
    - Escape dashes in field names in dpkg-buildinfo(1).
  * Test suite:
    - Mark partially documented POD modules as TAP TODO.

  [ Updated man pages translations ]
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Wed, 16 Nov 2016 03:28:05 +0100
Superseded in stretch-release on 2016-11-21
Superseded in sid-release on 2016-11-16
dpkg (1.18.14) unstable; urgency=medium

  [ Guillem Jover ]
  * Improve PIE flags support:
    - Rename the spec name cc1_options to self_spec.
      Suggested by James Clarke <email address hidden>
    - Do not set PIE options if they have been negated, and do not reset
      them if they have been requested.
    Closes: #843791, #843826
  * Fix use after free error in dpkg. It was trying to print messages that
    had already been freed as part of the database memory pool, causing in
    some cases segfaults when reporting the error summary at the end.
    Regression introduced in dpkg 1.18.11. Closes: #843874
  * Change default color behavior to auto.
  * Perl modules:
    - Fix confusing date parse error message in Dpkg::Changelog::Entry::Debian
      when the date contains “May”. Closes: #843829
      Thanks to Nishanth Aravamudan <email address hidden>.
    - New module Dpkg::Build::Info module refactored from dpkg-genbuildinfo.
      Requested by Johannes Schauer <email address hidden>.
  * Documentation:
    - Improve the DEB_BUILD_OPTIONS description in dpkg-buildpackage(1).
      And mention the parallel option there.
    - Explicitly mention in dpkg-buildpackage(1) that setting the number
      of parallel jobs to 1, restores the serial behavior.
      Prompted by Thorsten Glaser <email address hidden>.
  * Packaging:
    - List public Dpkg::Control::Tests module in libdpkg-perl description.
  * Test suite:
    - Do not fail tests on missing fakeroot, just skip them.
  * Build system:
    - Fix inversion logic in libmd configure check when requested explicitly.
    - Do not consider the compressor libraries available in configure if the
      headers are not usable.
    - Fix DPKG_BUILD_RELEASE_DATE to require DPKG_PROG_PERL, as it uses perl.
    - Change DPKG_BUILD_RELEASE_DATE to use perl instead of date(1) to
      format the timestamp, as the former is more portable.

  [ Updated man pages translations ]
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Fri, 11 Nov 2016 02:26:08 +0100
Superseded in sid-release on 2016-11-11
dpkg (1.18.13) unstable; urgency=medium

  * Improve PIE flags support:
    - Retroactively document in the changelog that PIE is enabled by default
      on all supported architectures regardless of gcc doing so itself on a
      subset of them.
    - When emitting PIE flags on architectures where gcc does not inject
      those itself, do it via a specs file too, so that maintainers can
      use them unconditionally regardless of the object being compiled
      or linked.
    - When injecting -no-pie for linking via the gcc specs file also
      inject -fno-PIE.
    - Update the documentation.
  * Perl modules:
    - Do not try to load non-files in Dpkg::Dist::Files load_dir method.
      Fixes test failures on non-Linux architectures. Closes: #843436
  * Packaging:
    - Add missing Breaks on old libdpkg-perl to dpkg. Closes: #843429
      Thanks to Sven Joachim <email address hidden>.
    - Ship deb-src-files(5) man page in dpkg-dev.
  * Build system:
    - Use deterministic dates for generated man pages. Closes: #843469
      Thanks to Reiner Herrmann <email address hidden>.

 -- Guillem Jover <email address hidden>  Mon, 07 Nov 2016 03:28:42 +0100
Superseded in sid-release on 2016-11-07
dpkg (1.18.12) unstable; urgency=medium

  * Build system:
    - Set umask to 0022 for functional test suite.
  * Documentation:
    - Rename FILE FORMATS section to FILES in dpkg-source(1).
    - Use "dpkg suite" as the manual item in man pages .TH macro.
    - Use %VERSION% in dpkg-statoverride(1) source item in man page .TH macro.
    - Document environment variables used by source format modules in
      dpkg-source(1).

 -- Guillem Jover <email address hidden>  Sun, 06 Nov 2016 05:36:20 +0100
Superseded in stretch-release on 2016-11-16
Superseded in sid-release on 2016-11-07
dpkg (1.18.10) unstable; urgency=medium

  [ Guillem Jover ]
  * Fix a short-lived memory leak in dpkg archive argument parsing.
  * When activating file triggers on conffile purge, use the conffile name
    instead of the real pathname it might refer to. This fixes a segfault
    when using --instdir, or when the conffile has been moved around and
    replaced with a symlink to the target.
    Regression introduced in dpkg 1.18.8. Closes: #830267
  * Perl modules:
    - Disable fixdebugpath feature on unsafe characters in the path.
    - Generate reproducible source tarballs by using the new GNU tar
      --clamp-mtime option in Dpkg::Source::Archive, to make sure no file
      in source packages has an mtime later than the changelog entry time.
    - Enable fixdebugpath build flag feature by default.
      Thanks to Mattia Rizzolo <email address hidden>. Closes: #832179
    - Rename various private methods and functions with an underscore prefix
      and unified names.
    - Refactor perl modules directory list into a new function in Test::Dpkg.
  * Test suite:
    - Add new POD coverage author test for public perl modules.
  * Documentation:
    - Document Testsuite-Triggers in dsc(5).
    - Fix deb-changes(5) description to talk about .changes instead of .dsc.
      Reported by HW42 <email address hidden>.
    - Use debian/control as the SYNOPSIS in deb-src-control(5).
    - Add new deb-conffiles(5) man page.
    - Add references to deb-control(5) and deb-triggers(5) in dpkg(1).
    - Fix typos for repeated “the” word.
      Prompted by Valentin Samir <email address hidden> in #830989.
    - Fix misspelled -fdebug-prefix-map flag in dpkg-buildflags(1).
      Reported by Mattia Rizzolo <email address hidden>.
    - Remove mention of source format 1.0 supporting building with upstream
      tarball signatures from dpkg-source(1), as this was disabled in 1.18.8.
    - Document all public methods in Dpkg::Changelog::Entry::Debian.
    - Escape dashes in deb-changes(5) and dsc(5) man pages.
    - Fix typos in dpkg-shlibdeps(1). Closes: #832434
      Thanks to Carsten Leonhardt <email address hidden>.

  [ Updated programs translations ]
  * German (Sven Joachim).
  * Turkish (Mert Dirik). Closes: #832070

  [ Updated scripts translations ]
  * German (Helge Kreutzmann).

  [ Updated manpages translations ]
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Sun, 31 Jul 2016 12:57:02 +0200
Superseded in stretch-release on 2017-02-03
Superseded in sid-release on 2017-01-25
dpkg (1.18.9) unstable; urgency=medium

  * Require Dpkg::Control::Info in dpkg-buildpackage.
    Initially reported by Helmut Grohne <email address hidden>.
    Regression introduced in dpkg 1.18.8. Closes: #829542
  * Documentation:
    - Fix user configuration filename in dpkg-buildpackage(1).
      Thanks to Sven Joachim <email address hidden>. Closes: #829546

 -- Guillem Jover <email address hidden>  Mon, 04 Jul 2016 09:23:13 +0200
Superseded in sid-release on 2016-07-04
dpkg (1.18.8) unstable; urgency=medium

  [ Guillem Jover ]
  * Do not disable PIE buildflags on */kFreeBSD anymore. Closes: #823877
    Thanks to Steven Chamberlain <email address hidden>.
  * Add new long options in dpkg-buildpackage for any short option that is
    a useful configurable candidate.
  * Add configuration file support to dpkg-buildpackage, as buildpackage.conf
    under either the dpkg system or user configuration directories.
    Closes: #539692, #765494
  * Check that debian/tests/control is a regular file before parsing it.
  * Generate Testsuite-Triggers field from test dependencies in dpkg-source
    into .dsc files. Based on a patch by Martin Pitt <email address hidden>.
    Closes: #779559
  * Add new dpkg-source --no-overwrite-dir extraction option. Closes: #826334
  * Fix number of entries computation returned by sysctl() on */kFreeBSD in
    start-stop-daemon.
  * Set return buffer length for sysctl(2) calls on */kFreeBSD in
    start-stop-daemon.
  * Abstract ar archive handling behind a new struct dpkg_ar and functions.
  * On dpkg --force-chrootless only set changedir to instdir if defined.
    Thanks to Niall Walsh <email address hidden>. Closes: #824542
  * Set primary group to 0 in dpkg when running as root.
    Reported by Stuart Prescott <email address hidden>.
  * Activate file triggers for conffiles on purge, which has never happened
    before. Before dpkg 1.17.0, conffiles were triggered on removal, which
    was obviously wrong. Reported by Helmut Grohne <email address hidden>.
  * Fix strtol() errno check when parsing the COLUMNS envvar in dpkg-query.
    Thanks to Sven Joachim <email address hidden>. Closes: #827265
  * Use new GNU tar --clamp-mtime option in dpkg-deb to make sure no file in
    binary packages has an mtime later than the given time. Closes: #759886
  * Use the same timestamp for the ar container as for tarball mtime clamping
    in dpkg-deb.
  * Set ar timestamp and tar mtime clamping to SOURCE_DATE_EPOCH if defined
    in dpkg-deb. Base on a patch by Jérémy Bobbio <email address hidden>.
  * Preset build timestamp to latest changelog entry in dpkg-buildpackage,
    by setting SOURCE_DATE_EPOCH environment variable if it is not already
    defined. Based on a patch by Jérémy Bobbio <email address hidden>.
    Closes: #759999
  * Do not use the debian/rules build target fallback when building both
    architecture independent and dependent packages in dpkg-buipdpackage.
  * Use architecture «all» as part of the .changes filename when building
    architecture independent binaries and no architecture dependent binaries.
    Closes: #826161
  * Do not emit warnings from dpkg-genchanges for automatic debug symbol
    packages that are not found in debian/control.
  * Export SOURCE_DATE_EPOCH from pkg-info.mk makefile snippet.
    Closes: #824572
  * Architecture support:
    - Add TILE-Gx support to cputable. Closes: #823167
      Thanks to Helmut Grohne <email address hidden>.
  * Perl modules:
    - Use warnings::warnif() instead of carp() for deprecated warnings.
    - Add new format_range() method and deprecate dpkg() and rfc822() methods
      in Dpkg::Changelog.
    - Replace changelog program parsers with perl modules.
    - Add a getter for the Time::Piece object in Dpkg::Changelog.
    - Add new Timestamp field to Dpkg::Changelog output, which ends up on
      dpkg-parsechangelog's output.
    - Validate source version in set_version_substvars()'s Dpkg::Substvars
      method.
    - Revert "Dpkg::Conf: Switch implementation to be hash based", as this
      change broke backwards compatibility in multiple ways. The format_argv
      option was set by default, the order was not preserved, which was
      important for dpkg.cfg files, and duplicate option names stopped being
      supported. Add regression tests to avoid similar changes in the future.
      Closes: #824938
    - Add support for system and user config loading in Dpkg::Conf.
    - Add support for autopkgtest control files, with new CTRL_TESTS control
      type, new recognized fields to Dpkg::Control::Fields, and new modules
      Dpkg::Control::Tests and Dpkg::Control::Tests::Entry. Also update
      Dpkg::Index to support these.
    - Fix Dpkg::Deps so that architecture qualifiers only imply one another
      if they are the same. Closes: #745366, #827628
    - Add support for new environment variable DEB_BUILD_PATH to be able to
      control the path in the fixdebugpath feature in Dpkg::Vendor::Debian.
    - Preserve order when prepending shared library paths in Dpkg::Shlibs.
      This fixes the order of paths passed via dpkg-shlibdeps -l option.
      Closes: #823805
    - Check whether dependency restrictions are implied in Dpkg::Deps::Simple.
      Thanks to Ben Hutchings <email address hidden>. Closes: #827633
    - Disable upstream tar signature when building format 1.0 source packages
      in Dpkg::Source::Package::V1, as the current stable dpkg series do not
      support extracting them.
    - Preset Last-Update field in patch header template with current time in
      Dpkg::Source::Package::V2. Thanks to Daniel Shahaf <email address hidden>.
      Closes: #828146
  * Packaging:
    - Disable libmd usage in Debian and derivatives for now.
  * Build system:
    - Stop allowing to set deprecated bzip2 compressor as dpkg-deb default.
    - Use libmd automatically if available.
    - Uniformize library build options, from --with-zlib to --with-libz,
      --with-bz2 to --with-libbz2 and --with-selinux to --with-libselinux.
  * Test suite:
    - Bump perlcritic ValuesAndExpressions::RequireNumberSeparators minimum
      to 99999.
    - Add new pod-spell unit test.
    - Refactor common unit test checks for needed things into Test::Dpkg.
    - Accept perl's Lancaster Consensus AUTHOR_TESTING variable.
    - Add new minimum perl version unit test.
    - Add new synopsis unit test.
    - Add unit tests for dependency simplification with build profiles.
  * Documentation:
    - Improve dpkg-buildpackage(1) on environment expectations.
    - Clarify the format of the db:Status-Abbrev virtual field in
      dpkg-query(1). Closes: #824515
    - Document the tar entry size limitation for deb(5) format.
    - Document interaction between PIE and libraries in dpkg-buildflags(1).
      Based on text by Christian Seiler <email address hidden>.
    - Merge ENVIRONMENT sections in dpkg-buildflags(1).
    - Document various long options in dpkg-source --help output.
    - Move dpkg-source -q option from “Build options” to “General options”
      section in --help output.
    - Clarify shared library search order in dpkg-shlibdeps(1).
    - Remove most remaining AUTHOR sections from man an POD, as they are
      strongly discouraged, for being redundant, tending to get out-of-sync,
      and their format being inconsistent. In addition most got already
      removed in the past for the man pages.
    - Mark perlcritic as an optional author test dependency in the README.
    - Fix example code in Dpkg::Compression::FileHandle SYNOPSIS.

  [ Updated programs translations ]
  * German (Sven Joachim).
  * Simplified Chinese (Zhou Mo). Closes: #824873

  [ Updated scripts translations ]
  * German (Helge Kreutzmann).

  [ Updated manpages translations ]
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Sun, 03 Jul 2016 19:01:56 +0200
Published in wheezy-release on 2016-06-05
dpkg (1.16.18) wheezy; urgency=medium

  * Remove trailing space before handling blank line dot-separator in
    Dpkg::Control::Hash. Regression introduced in dpkg 1.16.16.
    Reported by Jakub Wilk <email address hidden>. Closes: #789580
  * Only use the SHELL environment variable for interactive shells.
    Closes: #788819
  * Move tar option --no-recursion before -T in dpkg-deb. With tar > 1.28 the
    --no-recursion option is now positional, and needs to be passed before
    the -T option, otherwise the tarball will end up with duplicated entries.
    Thanks to Richard Purdie <email address hidden>.
    Closes: #807940
  * Initialize Config-Version also for packages previously in triggers-pending
    state, otherwise we end up not passing the previously configured version
    to «postinst configure», which might consider this a first install instead
    of an upgrade. Closes: #801156
  * Fix memory leaks in dpkg infodb format upgrade logic.
  * Fix physical file offset comparison in dpkg. Closes: #808912
    Thanks to Yuri Gribov <email address hidden>.
  * Do not accept empty field names in dpkg. Closes: #769111
  * When sys_siglist is defined in the system, try to use NSIG as we cannot
    compute the array size with sizeof(). If NSIG is missing fallback to 32
    items. Prompted by Igor Pashev <email address hidden>.

 -- Guillem Jover <email address hidden>  Sun, 20 Mar 2016 10:23:24 +0100
Published in jessie-release on 2016-06-05
dpkg (1.17.27) jessie; urgency=medium

  [ Guillem Jover ]
  * Add more Conflicts for removed packages expecting dpkg to ship
    install-info. Namely ada-mode and octave2.1-info. Closes: #783657
    Thanks to Andreas Beckmann <email address hidden>.
  * Remove trailing space before handling blank line dot-separator in
    Dpkg::Control::HashCore. Regression introduced in dpkg 1.17.25.
    Reported by Jakub Wilk <email address hidden>. Closes: #789580
  * Only use the SHELL environment variable for interactive shells.
    Closes: #788819
  * Move tar option --no-recursion before -T in dpkg-deb. With tar > 1.28 the
    --no-recursion option is now positional, and needs to be passed before
    the -T option, otherwise the tarball will end up with duplicated entries.
    Thanks to Richard Purdie <email address hidden>.
    Closes: #807940
  * Initialize Config-Version also for packages previously in triggers-pending
    state, otherwise we end up not passing the previously configured version
    to «postinst configure», which might consider this a first install instead
    of an upgrade. Closes: #801156
  * Fix memory leak in dpkg infodb format upgrade logic.
  * Fix physical file offset comparison in dpkg. Closes: #808912
    Thanks to Yuri Gribov <email address hidden>.
  * Add kfreebsd-armhf support to ostable and triplettable. Closes: #796283
    Thanks to Steven Chamberlain <email address hidden>.
  * Add NIOS2 support to cputable. Thanks to Marek Vasut <email address hidden>.
  * Build system:
    - Set PERL5LIB globally for the test suite to the local modules directory,
      to avoid using the system modules. Regression introduced in dpkg 1.17.8.
      Reported by Jérémy Bobbio <email address hidden>. Closes: #801329
    - When sys_siglist is defined in the system, try to use NSIG as we cannot
      compute the array size with sizeof(). If NSIG is missing fallback to 32
      items. Prompted by Igor Pashev <email address hidden>.

  [ Updated scripts translations ]
  * German (Helge Kreutzmann). (Various fixes)

  [ Updated manpages translations ]
  * German (Helge Kreutzmann). (Various fixes)

 -- Guillem Jover <email address hidden>  Sun, 20 Mar 2016 11:40:28 +0100
Superseded in stretch-release on 2016-07-19
Superseded in sid-release on 2016-07-04
dpkg (1.18.7) unstable; urgency=medium

  [ Guillem Jover ]
  * Add new dpkg-source --require-strong-checksums option and change default.
    There is no point in erroring out on this condition when signature issues
    are only warnings, because we cannot guarantee we have functional keys
    for old signatures. Regression introduced in dpkg 1.18.5. Closes: #823428
  * Stop using several fixed sized buffers for program reporting, which in
    many cases could cause confusing truncation of long messages. Use heap
    allocated formatted strings instead:
    - In start-stop-daemon to report what to stop.
    - In dselect to print main and access methods menu entries.
    - In libdpkg command-line option parsing errors.
    - In libdpkg warning, notice and info reporting.
    - In libdpkg ohshit, ohshitv, ohshite and internerr. But in this case
      fallback to a fixed-size emergency buffer in case of allocation or
      formatting error, so that we can at least print something, even if
      truncated.
    Prompted by Manuel A. Fernandez Montecelo <email address hidden>.
  * Colorize all fatal-error printing codepaths in libdpkg.
  * Architecture support:
    - Bump the GNU triplet cpu from i386 to i686 to match toolchain changes.
      Thanks to Ben Hutchings <email address hidden>. Closes: #823619
    - Clarify column descriptions in architecture table files.
  * Perl modules:
    - Relax dependency restrictions parsing to allow again sloppy spaces
      around versions, architectures and profile restrictions.
      Regression introduced in 1.18.5. Closes: #823431
    - Add new require_strong_checksums option to Dpkg::Source::Package.
    - Add new tests_dep option to Dpkg::Deps deps_parse() to allow the
      otherwise invalid ‘@’ character in dependencies. To be used when
      parsing the debian/tests/control file.
  * Documentation:
    - Shorten example symbol names in dpkg-gensymbols to avoid a mandb
      warning due to unwrappable lines in translations.

  [ Updated scripts translations ]
  * German (Helge Kreutzmann).

  [ Updated manpages translations ]
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Mon, 09 May 2016 03:19:52 +0200
Superseded in sid-release on 2016-05-10
dpkg (1.18.6) unstable; urgency=medium

  [ Guillem Jover ]
  * Fix file queue tail assignment on file queue pop during unpack. This
    could mess up the file queue in some circumstances and leave behind
    files in the filesystem as «pathname».dpkg-new after configuration
    and without traces of the files in the dpkg database. Closes: #823288
  * Use m_strdup() instead of strdup() in dpkg recursive installation code.
  * Fix off-by-one array allocation in dpkg recursive installation code that
    can cause segfaults.
  * Rename sysctl() “name” variable to “mib”, to avoid a clash with the
    call site function argument with the same name in start-stop-daemon.
    This fixes a build failure on */kFreeBSD systems.
  * Initialize number of entries on initial process scan in start-stop-daemon
    on */kFreeBSD.
  * Packaging:
    - Bump Standards-Version to 3.9.8 (no changes needed).

  [ Updated programs translations ]
  * German (Sven Joachim).

 -- Guillem Jover <email address hidden>  Tue, 03 May 2016 20:17:05 +0200
Superseded in sid-release on 2016-05-04
dpkg (1.18.5) unstable; urgency=medium

  [ Guillem Jover ]
  * Print correct integer parse error for short-only command-line options.
    This affects «dpkg-deb -z». Closes: #809174
  * Do not abort when traversing symlinks to directories in dpkg-scanpackages
    and dpkg-scansources. Closes: #809219
  * Implement delete operator with size argument in dselect, required by the
    C++14 spec when the size-less delete operator is defined.
  * Use EACCES instead of EWOULDBLOCK for fcntl(2) F_SETLK in dselect.
  * Print the archive filename when dpkg cannot access it.
  * Check that all passed archive filenames to dpkg exist before queuing them.
    Closes: #809963
  * Use ohshit() instead of internerr() for unhandled dpkg-split exit codes.
    (i.e. do not abort). Closes: #812679
  * Detect non-regular file archive arguments earlier in dpkg.
  * Switch URLs in docs, code comments and packaging, from http:// or git://
    to https:// if the latter is available (round three). This includes the
    dpkg git repository, copyright format URL and examples in man pages among
    others.
  * Clarify where to find the GPL-2 license in debian/copyright.
  * Do not enable stack-protector on nios2 in Debian and derivatives (it is
    not supported by gcc yet).
  * Check first for build type to short-circuit boolean expressions in
    dpkg-genchanges.
  * Add source format backend-specific --help options support to dpkg-source.
  * Add MIPS R6 architectures to arch tables. Closes: #807340
    Thanks to YunQiang Su <email address hidden>.
  * Fix memory leak when unpacking conffiles.
  * Use fixed string matching for pathnames in dpkg-maintscript-helper.
    Thanks to Carsten Hey <email address hidden>.
  * Quote shell variables in dpkg-maintscript-helper.
    Thanks to Carsten Hey <email address hidden>.
  * Anchor pathnames in sed and grep regexes in dpkg-maintscript-helper.
    Thanks to Carsten Hey <email address hidden>.
  * Allow broken versions starting with a dash in dpkg-maintscript-helper.
    Thanks to Carsten Hey <email address hidden>.
  * Add a new treewalk module in libdpkg, with the nice properties of avoiding
    duplicate stat(2) calls, not calling find(1), and sorting the output w/o
    stalling on the entire input being slurped and sorted.
    - Use it to build the .deb data member in dpkg-deb.
    - Use it to build the .deb control member in dpkg-deb.
    Closes: #719845
    - Use it with dpkg --recursive option.
  * Unify start-stop-daemon --help output with the rest of the tools.
  * Search for debsig-verify in PATH instead of using an absolute path.
  * Do not error out when failing to open the SE label db on permissive mode.
    Closes: #811037
  * Rewrite the trigger deferred file parser from flex to manual. The format
    is very simple, and a simple hand-written parser is smaller and avoids a
    build dependency.
  * Be more strict when parsing the COLUMNS environment variable in dpkg-query.
  * Make the Architecture field mandatory on package builds.
  * Use new Dpkg::Arch functions to validate and parse architectures when
    building source packages. Closes: #784808
  * Do safe matching of directories containing conffiles in
    dpkg-maintscript-helper, instead of using a variable pathname as a regex
    with grep, which is susceptible to metacharacters acting as part of the
    regex. Proposed by Carsten Hey <email address hidden>.
  * Decouple local keyword declaration from command assignment in
    dpkg-maintscript-helper, which masks the command return value when
    using «set -e».
  * Make dpkg pass <new-version> to maintscript actions that cannot get it
    otherwise. These actions are now:
    - <new-postrm> failed-upgrade <old-version> <new-version>
    - <new-postrm> abort-install <old-version> <new-version>
    - <new-postrm> abort-upgrade <old-version> <new-version>
    - <new-preinst> install <old-version> <new-version>
    - <new-preinst> upgrade <old-version> <new-version>
    - <new-prerm> failed-upgrade <old-version> <new-version>
    Prompted by Andrey Utkin <email address hidden>.
  * Promote a print to a warning for missing control files in dpkg-deb.
  * Use info() instead of print in dpkg-buildpackage and dpkg-genchanges.
  * Add very basic color support to all dpkg namespaced programs, enabled by
    setting the environment variable DPKG_COLORS to “auto”, “always” or
    “never”, the latter being the default.
  * Add support for a new --build option to define build type by a
    comma-separated list of components (“source”, “any”, “all”, “binary” or
    “full”) in dpkg-genchanges and dpkg-buildpackage.
  * Add new -I option to dpkg-shlibdeps to ignore package build directories.
    Closes: #821025
  * Add new -O option to dpkg-genchanges.
  * Make dpkg export variable DPKG_ROOT in maintainer scripts. Closes: #804624
    Thanks to Helmut Grohne <email address hidden>.
  * Add new --force-script-chrootless option to dpkg.
    Thanks to Helmut Grohne <email address hidden>.
  * Portability:
    - Move DPKG_ADMINDIR environment variable name out from update-alternatives
      code, to make life easier for non-dpkg-based systems.
    - Move alternatives temporary extension out from update-alternatives code,
      to make life easier for non-dpkg-based systems.
    - Switch start-stop-daemon on */kFreeBSD to use the low-level sysctl(3)
      interface instead of libkvm-dev.
  * Perl modules:
    - Add new CTRL_REPO_RELEASE control block type to Dpkg::Control.
    - Add new CTRL_COPYRIGHT_HEADER, CTRL_COPYRIGHT_FILES and
      CTRL_COPYRIGHT_LICENSE control block types to Dpkg::Control.
    - Make patching a file multiple times fatal for the first quilt patch in
      Dpkg::Source. Reported by Apollon Oikonomopoulos <email address hidden>.
      Closes: #810720
    - Only warn once when a diff patches a file multiple times in
      Dpkg::Source::Patch, and fix the warning message to make it clear that
      the diff might be patching the file more than once, not just twice.
    - Check existence of search criteria in Dpkg::Index when checking with a
      regex or a string match. Closes: #780906
      Base on a patch by Daniel Dehennin <email address hidden>.
    - Add new functions to validate and parse architecture names in Dpkg::Arch.
    - Make the dependency parser more strict in Dpkg::Deps. Closes: #784806
    - Add strong digest marking support to Dpkg::Checksums.
    - Error out on source packages without any strong digests in
      Dpkg::Source::Package, used by dpkg-source --extract, which can still
      be disabled with --no-check.
    - Switch Dpkg::Conf implementation to be hash based, add two new accessors
      and a new option to the filter method to use the old behavior.
    - Do not parse entry multiple times in Dpkg::Changelog::Entry::Debian.
      Add new parse_header() and parse_trailer() methods, and deprecate
      check_header() and check_trailer() ones.
    - Use “GnuPG” instead of “gpg” in error messages to refer to the software
      in Dpkg::Source::Package.
    - Handle undef versions in Dpkg::Changelog from empty versions in
      changelog entry header lines.
    - Allow detached upstream orig tarball signatures when extracting
      version 1.0 non-native source packages.
    - Include upstream orig tarball signatures in source packages.
      See #759478.
    - Add fixdebugpath to reproducible feature in Dpkg::Vendor::Debian.
      Thanks to Daniel Kahn Gillmor <email address hidden>. Closes: #819194
  * Build system:
    - Fix building development documentation.
    - Remove unused UA_LIBS variable.
    - Split libps and libkvm detection into their own macros and variables.
    - Make it possible to build without system libmd.
    - Add a configuration summary to configure output.
    - Make git log invocation immune to local configuration.
    - Do not require passing the perl interpreter to run-script.
    - Quote dirname argument in run-script, to handle spaces in pathname.
      Reported by Carsten Hey <email address hidden>.
    - Use a single po4a opt argument instead of the same per language.
  * Packaging:
    - Enable all hardening flags, starting with gcc-5 there is no performance
      loss anymore when enabling PIE on i386.
  * Test suite:
    - Add a unit test to compile perl code with warnings.
    - Add a unit test for the trigger deferred parser.
  * Documentation:
    - Say value instead of option in deb-control(5).
    - Mark debian changelog format in bold in dpkg-parsechangelog(1).
    - Add references to man pages describing file formats.
    - Document missing Install-Size, Built-For-Profiles and Build-Profiles
      fields in man pages.
    - Add new dsc(5), deb-changelog(5) and deb-changes(5) man pages.
    - Remove Debian specific policy references.
    - Remove superfluous SEE ALSO references from dpkg-source(1).
    - Fix --remove and --purge summary formatting in dpkg(1).
    - Move --audit description just after --verify in dpkg(1).
    - Mark Maintainer field as bold in deb-src-control(5).
    - Fix reference to --record-avail instead of nonexistent --avail.
    - Add missing quotes in man pages.
    - Document Source field version in deb-control(5).
    - Add new deb822(5) man page.
    - Document and improve C/C++ programs exit codes in man pages.
    - Clarify dpkg --path-exclude/--path-include pathname filter behavior.
      Closes: #811267
    - Clarify that packages are only automatically forgotten by dpkg if they
      contain no user data, such as package selections. Closes: #813179
    - Fix documentation for package flags in dpkg(1).
    - Clarify that deb-symbols(5) documents the binary format subset, and
      the template symbol files are described in dpkg-gensymbols(1).
      Closes: #795163
    - Update field requirements of control file formats to match dpkg reality.
    - Document the format of the origins filename in deb-origin(5).
    - Add list of flags set by bug feature area to dpkg-buildflags(1).
    - Switch output encoding of man pages to UTF-8.
    - Move SEE ALSO section to the end of Dpkg::Changelog::Debian.
    - Clarify that i386 does not suffer performance loss due to PIE anymore
      since gcc >= 5 in dpkg-buildflags(1).
    - Document in deb822(5) that deb-origin(5) also supports comments.
    - Clarify which characters constitute the deb822(5) control files syntax
      by using Unicode code points and their printable characters.
      Based on a patch by Ben Finney <email address hidden>.
    - Remove wrong mention that deb-control(5) support comments.
    - Make explicit that deb-control(5) documents the binary control file.
    - Add missing value for Standards-Version field in dsc(5).
      Reported by Helge Kreutzmann <email address hidden>.

  [ Updated programs translations ]
  * Dutch (Frans Spiesschaert). Closes: #822797
  * German (Sven Joachim).
  * Japanese (Takuma Yamada). Closes: #819939
  * Portuguese (Miguel Figueiredo).
  * Simplified Chinese (Zhou Mo). Closes: #809517
  * Vietnamese (Trần Ngọc Quân).

  [ Updated dselect translations ]
  * Japanese (Takuma Yamada). Closes: #819940

  [ Updated scripts translations ]
  * German (Helge Kreutzmann).

  [ New manpages translations ]
  * Dutch (Frans Spiesschaert). Closes: #822798

  [ Updated manpages translations ]
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Mon, 02 May 2016 04:14:57 +0200
Superseded in wheezy-release on 2016-06-05
dpkg (1.16.17) wheezy-security; urgency=high

  [ Guillem Jover ]
  * Fix an off-by-one write access in dpkg-deb when parsing the .deb magic.
    Reported by Jacek Wielemborek <email address hidden>. Closes: #798324
  * Fix an off-by-one write access in dpkg-deb when parsing the old format
    .deb control member size. Thanks to Hanno Böck <email address hidden>.
    Fixes CVE-2015-0860.
  * Fix an off-by-one read access in dpkg-deb when parsing ar member names.
    Thanks to Hanno Böck <email address hidden>.

  [ Updated programs translations ]
  * Catalan (Jordi Mallach).

  [ Updated man page translations ]
  * Fix incorrect translation in German (Helge Kreutzmann)

 -- Guillem Jover <email address hidden>  Wed, 25 Nov 2015 22:34:58 +0100
Superseded in jessie-release on 2016-06-05
dpkg (1.17.26) jessie-security; urgency=high

  [ Guillem Jover ]
  * Fix an off-by-one write access in dpkg-deb when parsing the .deb magic.
    Reported by Jacek Wielemborek <email address hidden>. Closes: #798324
  * Fix an off-by-one write access in dpkg-deb when parsing the old format
    .deb control member size. Thanks to Hanno Böck <email address hidden>.
    Fixes CVE-2015-0860.
  * Fix an off-by-one read access in dpkg-deb when parsing ar member names.
    Thanks to Hanno Böck <email address hidden>.

  [ Updated programs translations ]
  * Catalan (Jordi Mallach).
  * Turkish (Mert Dirik). Closes: #785095

  [ Updated scripts translations ]
  * German (Helge Kreutzmann). (Various fixes)
  * Spanish (Santiago Vila). Closes: #799020

  [ Updated manpages translations ]
  * German (Helge Kreutzmann). (Various fixes)

 -- Guillem Jover <email address hidden>  Wed, 25 Nov 2015 22:54:54 +0100
Superseded in stretch-release on 2016-07-19
Superseded in sid-release on 2016-07-14
dpkg (1.18.4) unstable; urgency=medium

  [ Guillem Jover ]
  * Switch dpkg-scansources and dpkg-scanpackages to use File::Find instead
    of find(1), as the former is more portable with more consistent behavior,
    and always canonicalizes the pathnames. Closes: #800649
  * Initialize Config-Version also for packages previously in triggers-pending
    state, otherwise we end up not passing the previously configured version
    to «postinst configure», which might consider this a first install instead
    of an upgrade. Closes: #801156
  * Fix memory leaks in «dpkg --verify» and dpkg infodb format upgrade logic.
  * Merge all update-alternatives action handling into a single if-else-if
    block, to unify the code an allow a future switch into a shared library.
  * Perform any necessary cleanups on normal exit from dpkg-divert --add and
    --remove commands.
  * Make dpkg-architecture warning on non-matching GNU system type compiler
    agnostic.
  * Add ‘.gitreview’ to the default dpkg-source ignore lists.
  * Add support for DPKG_MAINTSCRIPT_DEBUG environment variable to dpkg.
  * Fix dpkg-checkbuilddeps exit code to be 1 instead of a random error value
    on unsatisfied dependencies. Regression introduced in dpkg 1.18.3.
  * Fix an off-by-one write access in dpkg-deb when parsing the old format
    .deb control member size. Thanks to Hanno Böck <email address hidden>.
    Fixes CVE-2015-0860.
  * Fix an off-by-one read access in dpkg-deb when parsing ar member names.
    Thanks to Hanno Böck <email address hidden>.
  * Add experimental multithreaded xz compression support in libdpkg, which
    requires xz >= 5.2.0.
  * Fix physical file offset comparison in dpkg. Closes: #808912
    Thanks to Yuri Gribov <email address hidden>.
  * Fix usage of dpkg-architecture -s after other action options.
    Reported by Niels Thykier <email address hidden>.
  * Add NIOS2 support to cputable. Thanks to Marek Vasut <email address hidden>.
  * On Debian and derivatives enable timeless build flag feature by default.
    Thanks to Paul Wise <email address hidden>. Closes: #805872
  * Perl modules:
    - Add support for Build-Essential field. Closes: #806315
  * Test suite:
    - Improve perl code test coverage.
  * Build system:
    - Set PERL5LIB globally for the test suite to the local modules directory,
      to avoid using the system modules. Regression introduced in dpkg 1.17.8.
      Reported by Jérémy Bobbio <email address hidden>. Closes: #801329
    - Use absolute buildir pathnames in PATH variable for the test suite.
    - Descend into scripts directory when cleaning up code coverage files.
    - Add new configure option --disable-devel-docs to select the kind of docs
      to generate, default for now is development documentation.
    - Try to use AM_GNU_GETTEXT_REQUIRE_VERSION to benefit from the latest
      installed gettext version, while guaranteeing a minimal required version.
  * Packaging:
    - Add missing Build-Depends for restriction formula support.
  * Documentation:
    - Move description for “target architecture” from the dpkg-architecture(1)
      ‘-A’ option to the TERMS section. Closes: #799046
    - Clarify that the md5sum check on «dpkg --verify» is performed on the
      file contents, and failures denote changed content. Closes: #760248
    - Document that dpkg-buildpacakge -nc -S implies -d.
    - Clarify role of Build-Depends in deb-src-control(5).
      Prompted by Johannes Schauer <email address hidden>.
    - Document supported feature areas.
    - Clarify in dpkg-query(1) when binary:Package gets arch-qualified.
      Closes: #801958
    - Add a subsection separating external from internal environment variables
      in dpkg(1).

  [ Updated programs translations ]
  * Dutch (Frans Spiesschaert). Closes: #800513
  * Japanese (Kenshi Muto). Closes: #799432
  * Turkish (Mert Dirik). Closes: #799875

  [ Updated scripts translations ]
  * German (Helge Kreutzmann).

  [ Updated manpages translations ]
  * German (Helge Kreutzmann, Julian R). Closes: #807156

 -- Guillem Jover <email address hidden>  Fri, 25 Dec 2015 13:20:26 +0100
Superseded in stretch-release on 2016-01-02
Superseded in sid-release on 2015-12-26
dpkg (1.18.3) unstable; urgency=medium

  [ Guillem Jover ]
  * Fix short-lived memory leaks in start-stop-daemon. As a side effect now
    a missing group after ‘:’ on --chuid is a fatal error.
  * Print the master and slave links in «update-alternatives --display».
  * Print the current best alternative in the head instead of the trail
    in «update-alternatives --display», with a two space indentation.
  * Reimplement «update-alternatives --all» as a fully built-in command
    instead of executing itself with --config per subtask.
  * Reimplement «update-alternatives --set-selections» as a fully built-in
    command instead of executing itself with --set or --auto per subtask.
  * Add kfreebsd-armhf support to ostable and triplettable. Closes: #796283
    Thanks to Steven Chamberlain <email address hidden>.
  * Fix «dpkg --verify» with --root.
  * Fix an off-by-one write access in dpkg-deb when parsing the .deb magic.
    Reported by Jacek Wielemborek <email address hidden>. Closes: #798324
  * Split overlong perl regexes into multiline extended regexes.
  * Switch dselect multicd method license from GPL2 to GPL2+, with consent
    from all its authors.
  * Fix inadvertent license change for lib/dpkg/utils.c from GPL2 to GPL2+.
  * Fix segfault when using «dpkg --no-act» with a synthetic --admindir.
    Reported by David Kalnischkies <email address hidden>.
  * Perl modules:
    - Only warn on invalid week days instead of aborting in
      Dpkg::Changelog::Entry::Debian. Regression introduced in dpkg 1.18.2.
      Reported by Jakub Wilk <email address hidden>.
    - Do not warn when removing an empty subdirectory on source package
      extraction in Dpkg::Source::Package::V2. Closes: #796671
    - Do not abort on parse errors from Time::Piece->strptime() for the
      changelog trailer date, just queue them so that the caller can decide
      if they should be warnings or actual errors. Closes: #795936
    - Validate the changelog trailer date, and catch and warn or error on
      bogus month names, such as unknown or unabbreviated ones.
  * Test suite:
    - Get the reference build flags from dpkg-buildflags.pl, instead of
      hardcoding them, which might not match depending on the architecture.
      Closes: #794694
    - Delete any environment variable starting with DEB_ in mk.t that might
      affect the test results.
  * Build system:
    - Add a new --with-devlibdir configure option for the C libdpkg library.
  * Packaging:
    - Remove unneeded --sourcedir options from dh_install calls.
    - Use the new --with-devlibdir configure option to only switch libdpkg-dev
      files to the multi-arch directory. Closes: #794977
  * Documentation:
    - Fix typos for --predep-package option name. Closes: #794688
    - Add missing dashes to package-list in deb-src-control(5).
    - Mark each individual required field as such, instead of using segregated
      sections.

  [ Updated programs translations ]
  * Catalan (Jordi Mallach).
  * French (Sébastien Poher). Closes: #798371
  * German (Sven Joachim).
  * Vietnamese (Trần Ngọc Quân).

  [ Updated dselect translations ]
  * French (Sébastien Poher). Closes: #798370

  [ Updated scripts translations ]
  * French (Sébastien Poher). Closes: #798369
  * German (Helge Kreutzmann).

  [ Updated manpages translations ]
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Mon, 21 Sep 2015 07:11:42 +0200
Superseded in wheezy-release on 2016-04-02
dpkg (1.16.16) wheezy-security; urgency=high

  [ Guillem Jover ]
  * Do not leak long tar names on bogus or truncated archives.
  * Do not leak the filepackages iterator when a directory is used by other
    packages.
  * Do not leak color string on «dselect --color».
  * Fix memory leaks when parsing alternatives.
  * Fix memory leaks in buffer_copy() on error conditions.
  * Fix possible out of bounds buffer read access in the error output on
    bogus ar member sizes.
  * Fix file triggers/Unincorp descriptor leak on subprocesses. Regression
    introduced with the initial triggers implementation in dpkg 1.14.17.
    Closes: #751021
  * Fix a descriptor leak on dselect subprocesses when --debug is used.
  * Do not run qsort() over the scandir() list in libcompat if it is NULL.
  * Fix off-by-one stack buffer overrun in start-stop-daemon on GNU/Linux and
    GNU/kFreeBSD if the executable pathname is longer than _POSIX_PATH_MAX.
    Although this should not have security implications as the buffer is
    surrounded by two arrays (so those catch accesses even if the stack
    grows up or down), and we are compiling with -fstack-protector anyway.
  * Add a workaround to start-stop-daemon for bogus OpenVZ Linux kernels that
    prepend, instead of appending, the " (deleted)" marker in /proc/PID/exe.
    Closes: #731530
  * Fix off-by-one error in libdpkg command argv size calculation.
    Based on a patch by Bálint Réczey <email address hidden>. Closes: #760690
  * Escape package and architecture names on control file parsing warning,
    as those get injected into a variable that is used as a format string,
    and they come from the package fields, which are under user control.
    Regression introduced in dpkg 1.16.0. Fixes CVE-2014-8625. Closes: #768485
    Reported by Joshua Rogers <email address hidden>.
  * Do not match partial field names in control files. Closes: #769119
    Regression introduced in dpkg 1.10.
  * Fix out-of-bounds buffer read accesses when parsing field and trigger
    names or checking package ownership of conffiles and directories.
    Reported by Joshua Rogers <email address hidden>.
  * Add powerpcel support to cputable. Thanks to Jae Junh <email address hidden>.
  * Fix OpenPGP Armor Header Line parsing in Dpkg::Control::Hash. We should
    only accept [\r\t ] as trailing whitespace, although RFC4880 does not
    clarify what whitespace really maps to, we should really match the GnuPG
    implementation anyway, as that's what we use to verify the signatures.
    Reported by Jann Horn <email address hidden>. Fixes CVE-2015-0840.

  [ Raphaël Hertzog ]
  * Drop myself from Uploaders.

  [ Updated scripts translations ]
  * Fix typos in German (Helge Kreutzmann)
  * Swedish (Peter Krefting).

  [ Updated man page translations ]
  * Fix typos in German (Helge Kreutzmann)
  * Swedish (Peter Krefting).

 -- Guillem Jover <email address hidden>  Thu, 09 Apr 2015 08:45:47 +0200
Superseded in stretch-release on 2017-03-19
Superseded in stretch-release on 2015-09-26
Superseded in sid-release on 2017-03-19
dpkg (1.18.2) unstable; urgency=low

  [ Guillem Jover ]
  * Fix plural form translations for single plural languages. Closes: #790025
  * Add new dpkg-buildpackage -J option, which is a safe version of -j.
  * Fix dpkg-gencontrol to add correct binary filename to debian/files,
    even when overriding the Package field value with the -D option.
    Reported by Niels Thykier <email address hidden>.
  * Move the implicit build-essential:native Build-Depends from
    dpkg-checkbuilddeps to a new vendor hook, as it is Debian-specific.
  * Add support for ignoring built-in build dependencies and conflicts
    with the new «dpkg-buildpackage --ignore-builtin-builddeps» and
    «dpkg-checkbuilddeps -I» options. Closes: #480638, #571671
  * When sys_siglist is defined in the system, try to use NSIG as we cannot
    compute the array size with sizeof(). If NSIG is missing fallback to 32
    items. Prompted by Igor Pashev <email address hidden>.
  * Use string_to_security_class() instead of a literal SECCLASS value in
    the setexecfilecon() libcompat function, as <selinux/flask.h> is now
    deprecated.
  * Switch libdpkg xz compressor to use CRC64 for integrity checks, to match
    the default on the command-line tool, which should provide slightly better
    detection against damaged data, at a negligible speed difference.
  * Only use the SHELL environment variable for interactive shells.
    Closes: #788819
  * Move tar option --no-recursion before -T in dpkg-deb. With tar > 1.28 the
    --no-recursion option is now positional, and needs to be passed before
    the -T option, otherwise the tarball will end up with duplicated entries.
    Thanks to Richard Purdie <email address hidden>.
  * Add an extra level of escaping for double $(evals) in architecture.mk
    and buildflags.mk, so that the variables are computed lazily again.
    Regression introduced in dpkg 1.16.2. Closes: #793330
  * Add binary packages Essential information to Package-List field in the
    .dsc file, as optional essential=yes entries. This allows precomputing
    the pseudo-essential set before starting an architecture bootstrap.
  * Perl modules:
    - Remove non-functional timezone name support from
      Dpkg::Changelog::Entry::Debian.
    - Use Time::Piece (part of the perl core distribution) instead of
      Date::Parse in Dpkg::Changelog::Entry::Debian. This reduces the build
      and run-time dependencies, and helps architecture bootstrapping.
    - Simplify distribution splitting in Dpkg::Changelog::Entry::Debian.
    - Add new function changelog_parse_plugin() in Dpkg::Changelog::Parse.
    - Add new function changelog_parse_debian() in Dpkg::Changelog::Parse, and
      use it in changelog_parse() instead of the external plugin parser when
      the input format is “debian”. This significantly speeds up the parsing.
    - Remove trailing space before handling blank line dot-separator in
      Dpkg::Control::HashCore. Regression introduced in dpkg 1.18.0.
      Reported by Jakub Wilk <email address hidden>. Closes: #789580
    - Allow the Maintainer field in CTRL_FILE_STATUS.
    - Import make_path from File::Path in Dpkg::Source::Package::V2.
      Regression introduced in dpkg 1.18.0. Closes: #789957
    - Make the BinaryFiles subpackage self-contained by explicitly importing
      File::Spec in Dpkg::Source::Package::V2.
    - Do not exclude pre-existing symlinks when unpacking the debian/ tarball
      in Dpkg::Source::Package::V2. Closes: #790073, #791535
    - Disable the thread sanitizer when the address sanitizer is enabled
      in Dpkg::Vendor::Debian as these are mutually incompatible, and make
      sanitize=+all not work at all.
    - Allow colons (:) in added filenames in Dpkg::Dist::Files, which can be
      present when the upstream version contains colons. Regression introduced
      in dpkg 1.18.0. Reported by Jakub Wilk <email address hidden>.
    - Future-proof tar invocations in Dpkg::Source::Archive for options that
      might become positional in the future, and by always placing function
      options first.
    - Make the dependency comparison deep by comparing not only the first
      dependency alternative, to get them sorted in a reproducible way.
      Based on a patch by Chris Lamb <email address hidden>. Closes: #792491
    - Support spaces in symbol names in Dpkg::Shlibs::Objdump. This is
      required by Go shared libraries. Closes: #785344
      Based on a patch by Michael Hudson-Doyle <email address hidden>.
  * Test suite:
    - Set SIGINT, SIGTERM and SIGPIPE to their default actions to get
      deterministic behavior.
    - Add test cases for the makefile snippets.
    - Delete DEB_VENDOR from the environment to get reliable results.
  * Packaging:
    - Make the libdpkg-dev package Multi-Arch:same.
    - Mark libio-string-perl as <!nocheck>.
  * Documentation:
    - Fix grammar in dpkg-architecture(1).
      Thanks to Chris Lamb <email address hidden>. Closes: #787616
    - Use the feature area name in the dpkg-buildflags(1) subsection title.
    - Document DPKG_HOOK_ACTION also in dpkg(1) ENVIRONMENT section.
    - Clarify when some features where added in man pages.
    - Document --yet-to-unpack, --predep-packages and all --assert-<feature>
      commands as supported in both «dpkg --help» and dpkg(1).
    - Document abitable in dpkg-architecture(1).
    - Clarify that an architecture wildcard is a Debian thing in
      dpkg-architecture(1).
    - Document multiarch triplet in dpkg-architecture(1) TERMS section.
    - Remove “my” keyword from Dpkg perl modules function prototypes.
    - Say FUNCTIONS instead of METHODS for Dpkg modules when appropriate.
    - Fix POD syntax inside verbatim paragraph in Dpkg::Changelog.
    - Document and mark Dpkg::Arch as a public module.
    - Fix Dpkg::Changelog::Parse::changelog_parse documentation.

  [ Updated programs translations ]
  * Dutch (Frans Spiesschaert). Closes: #789097
  * Simplified Chinese (Zhou Mo). Closes: #787986
  * Turkish (Mert Dirik). Closes: #788211
  * Vietnamese (Trần Ngọc Quân).

  [ Updated manpages translations ]
  * German (Helge Kreutzmann).

  [ Updated dselect translations ]
  * Dutch (Frans Spiesschaert). Closes: #789096

  [ Updated scripts translations ]
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Mon, 03 Aug 2015 15:40:21 +0200
Superseded in stretch-release on 2017-03-19
Superseded in sid-release on 2018-01-29
dpkg (1.18.1) unstable; urgency=low

  [ Guillem Jover ]
  * Cast c_isbits() c argument to an unsigned char when indexing the array.
    This fixes build failures on armel, armhf, ppc64el and s390x.
  * Do not allow pathnames with embedded newlines in dpkg-deb and dpkg.
    Closes: #720761
  * Fix setting the SE Linux context when a file has a statoverride.
    Closes: #786435
  * Set the SE Linux file context even when the file mode has no file type.
  * Make dpkg-buildpackage -j override any parallel option specified in
    DEB_BUILD_OPTIONS. Regression introduced in dpkg 1.14.15.
  * Honor Pre-Depends, Conflicts and Breaks for packages in unpacked and
    half states. Thanks to Ian Jackson <email address hidden>. Closes: #377860
  * Fix build failure on FreeBSD by actually using libmd if available.
  * Sort dpkg-scanpackages output by package name and version.
    Thanks to Maximilian Schwerin <email address hidden>.
  * Sort dpkg-scansources output by package name and version.
    Thanks to Maximilian Schwerin <email address hidden>.
  * Set the correct default compression value in dpkg-deb for control.tar.gz
    member. This meant using compression level 1 when using the zlib shared
    library to compress the control.tar member, and always failing when using
    the gzip command. Regression introduced in dpkg 1.17.6. Closes: #786654
  * Use the generated template file instead of the original one when looking
    for changes in dpkg-gensymbols. There's too much information not being
    preserved in the symbols files to be able to regenerate templates for
    them. Closes: #785937, #786840
  * Perl modules:
    - Add missing strict and warnings pragmas for submodules.
    - Use non-destructive substitutions inside map.
    - Use the state keyword to simplify the code.
    - Do not replace #PACKAGE# in template mode in Dpkg::Shlibs::SymbolFile.
  * Documentation:
    - Update current default source compressor from gzip to xz.
    - Remove spurious ‘=’ from parallel DEB_BUILD_OPTIONS without arguments
      in dpkg-buildpackage(1).

  [ Updated programs translations ]
  * German (Sven Joachim).
  * Simplified Chinese (Zhou Mo). Closes: #786377

  [ Updated manpages translations ]
  * German (Helge Kreutzmann).

  [ Updated dselect translations ]
  * German (Sven Joachim).

 -- Guillem Jover <email address hidden>  Sat, 30 May 2015 03:00:21 +0200
Superseded in stretch-release on 2015-06-14
Superseded in sid-release on 2015-06-07
dpkg (1.18.0) unstable; urgency=low

  [ Guillem Jover ]
  * Only trim trailing “/” and “/.” from «dpkg-query --search» arguments if
    they are a pathname, and not a pattern or a substring match.
  * Switch C/C++ code to use a new set of C locale character type functions
    independent of the current locale.
  * Add support for arch-bits and arch-endian dpkg-gensymbols tags.
    Closes: #630342
  * Switch perl code from legacy File::Path functions to new ones.
  * Fix perl uninitialized value usage in dpkg-scansources when the Binary
    field is missing.
  * Use dpkg-query instead of dpkg for --search in dpkg-shlibdeps so that
    the subprocesses get the correct admindir. Closes: #775258
  * Rework the Installed-Size field default value computation to make it
    reproducible regardless of the build system filesystem, and document
    how the value is computed and that it is just an approximation.
    Closes: #650077
  * Use strftime() instead of «date -R» in dpkg-genchanges, as the latter
    is not specified by POSIX and is not widely portable.
  * Warn on obsolete '<' and '>' operators in dpkg --compare-versions.
  * Trim end of line whitespace from dpkg and dselect config file parsers.
    Reported by Christoph Biedl <email address hidden>.
  * Do not silently eat a standalone ‘-’ in the libdpkg command-line parser.
  * Fix short-lived memory leaks in dpkg-deb and libdpkg. Closes: #769515
  * Fix «dpkg-deb -b» filename generation when the package does not contain
    an Architecture field. Regression introduced in dpkg 1.16.2.
  * Fix «dpkg --audit» to report missing and empty architecture fields.
    Regression introduced in dpkg 1.16.2.
  * Add support to dpkg-deb for reading the archive from standard input,
    except for --raw-extract which does not yet support it. Closes: #616614
    Based on a patch by Johannes Schauer <email address hidden>.
  * Add ‘.mailmap’ to the default dpkg-source ignore lists.
  * Set the SE Linux context on «dpkg-statoverride --update». Closes: #690361
  * Do not fail on dpkg-query -W and -l when multiple arguments match the
    same package. Closes: #588505
  * Change dpkg-maintscript-helper to handle symlinks and pathnames ending in
    slash. For the former error out, for the latter strip it. Closes: #771752
  * Support moving a conffile not being shipped anymore. Closes: #767003
    Thanks to Mathias Behrle <email address hidden>.
  * Add a new dpkg-buildflags sanitize feature area:
    - Add new “address”, “thread”, “leak” and “undefined” features, all
      disabled by default. Closes: #760741
  * Do not accept unknown user or group names on «dpkg-statoverride --add».
    Regression introduced in dpkg 1.17.11. Closes: #775124
  * Normalize dpkg-parsechangelog command-line parsing, so that «-ovalue»,
    «-o value», «--option=value» and «--option value» will all be accepted.
    Closes: #693951
  * Add dpkg --ctrl-tarfile forwarding command for dpkg-deb.
  * Disable dependency checks on dpkg-buildpackage -S -nc.
  * Make dependency checks fatal for dpkg-buildpackage -S.
  * Update amd64 GNU cpu regex in cputable to match amd64 too, in addition
    to x86_64. This is required for FreeBSD.
  * Use badusage() instead of ohshit() for command-line errors.
  * Use the original template symbols file when diffing in dpkg-gensymbols.
    We should not create a new template symbols file, because the output
    might change (different sorting order for example) relative to the
    original. Closes: #773718
  * Do not leak kvm descriptors in start-stop-daemon on GNU/kFreeBSD systems.
    Based on a patch by Jeff Epler <email address hidden>. Closes: #779467
  * Switch start-stop-daemon to use a monotonic clock if available. This
    makes the timeout checks resilient to abrupt system clock changes.
    Suggested by Jose M Calhariz <email address hidden>. Closes: #783014
  * Fix perl warning in dpkg-genchanges when parsing BY-HAND file entries.
    Regression introduced in dpkg 1.17.7. Closes: #781074
  * Use the checksums files list order when building the Files field to match
    the other Checksum fields in dpkg-genchanges.
  * Skip files based on the architecture from the filename in dpkg-genchanges.
  * Allow binary packages not found in debian/control in dpkg-genchanges,
    which could allow injecting debug .debs for example.
  * Annotate any non-deb binary descriptions (not just udebs) with their
    package type in dpkg-genchanges.
  * Remove outdated local copy of the Debian README.mirrors.txt file from
    dselect ftp access method, and print a message pointing to the current
    URL instead. Closes: #784966
  * Cleanup default dpkg-shlibdeps shared library directory search list:
    - Do not add cross-root directories (/<triplet>/ and /usr/<triplet>/).
    - Remove ancient multilib /emul/ia32-linux/ paths.
    - Reorder directory precedence to:
      «dpkg-shlibdeps -l» > ENV{LD_LIBRARY_PATHS} > cross-multiarch >
      DEFAULT_LIBRARY_PATH > ld.so.conf > DEFAULT_MULTILIB_PATH
  * When upgrading, copy over the cached arch-qualified package name. This
    fixes wrong output when cross-grading.
  * Consider foreign packages ambiguous in need of an arch-qualifier.
  * Perl modules:
    - Rename and deprecate Dpkg::Gettext _g function with new g_.
    - Assume in Dpkg::Arch that the abitable is always present, and bump
      libdpkg-perl Depends on dpkg to 1.16.3, the version introducing the file.
    - Remove support for GCC_TARGET environment variable from Dpkg::Shlibs.
      This was a temporary workaround for very old gcc toolchains. See #453267.
    - Prefer multiarch paths to multilib ones in Dpkg::Shlibs.
      Thanks to Helmut Grohne <email address hidden>. Closes: #772184
    - Enable sub-second timestamps in Dpkg::Source::Patch by using Time::HiRes.
    - Use TMPDIR instead of manually setting DIR on tempfile() call in
      Dpkg::Source::Package::V2.
    - Switch Dpkg::Checksums from using checksum programs to the more portable
      Digest modules. Obsolete the 'program' property, and add a 'name' one.
    - Add support for $DEFAULT_TEXT_DOMAIN to Dpkg::Gettext, so that the Dpkg
      perl modules can always produce localized messages.
    - Fix OpenPGP Armor Header Line parsing in Dpkg::Control::Hash. We should
      only accept [\r\t ] as trailing whitespace, although RFC4880 does not
      clarify what whitespace really maps to, we should really match the GnuPG
      implementation anyway, as that's what we use to verify the signatures.
      Reported by Jann Horn <email address hidden>. Fixes CVE-2015-0840.
    - Pass PATCH_GET environment varialbe instead of -g0 to the patch command
      in Dpkg::Source::Patch. This allows using non-GNU patch programs, like
      FreeBSD's patch.
    - Accept an %opts argument for the Dpkg::Control::Info constructor, and
      accept either passing a filename option as undef, or a scalar undef.
      Closes: #782019
    - Do not print on undef filehandle in Dpkg::Control::Info output().
      Thanks to Roderich Schupp <email address hidden>. Closes: #781887
    - Always sort the Dpkg::Dist::Files files list on output, instead of
      preserving the insertion order, which is not reproducible with parallel
      builds. Reported by Jérémy Bobbio <email address hidden>.
    - Add new filter() method to Dpkg::Substvars.
    - Kill the process when reaching timeout in Dpkg::IPC::wait_child().
  * Test suite:
    - Check perl code compilation, warnings and strictness.
    - Fix dpkg-divert unit test to work on BSD «rm -rf» that cannot traverse
      directories with mode 000.
    - Fix dpkg-divert unit test to work when there is no /dev/full.
    - Skip test cases when there is no c++filt available.
    - Add test cases for Dpkg::Conf and Dpkg::Checksums.
    - Handle libtool executables in progname unit test.
    - Do not use a timeout when testing cat I/O, speeds up test suite by 5s.
    - Reduce timeout test from 5 seconds to 1, to speed up test suite by 4s.
  * Build system:
    - Bump gettext version to 0.19:
      + Use --add-location=file in msgmerge and xgettext commands.
      + Use --porefs=noline for po4a command.
    - Wrap file references in man page PO files with po4a --porefs=wrap.
    - Fix support for cross-building dpkg:
      + Assume a working C99 snprintf on SUS >= v3.
      + Do not try to run the va_copy configure check, just check that the
        symbol is available.
    - Check that HAVE_DECL_SYS_SIGLIST is 0 instead of undefined, to fix a
      build failure on uclibc based systems. Closes: #777044
      Based on a patch by Alex Potapenko <email address hidden>.
    - Use single suffix rules instead of non-portable %-pattern rules.
    - Pass CC to the test suite, so that we can use a non-gcc compiler.
    - Call AM_PROG_AR to detect the correct system archiver to use.
    - Pass -Wall to automake in AM_INIT_AUTOMAKE, not implied by foreign.
  * Packaging:
    - Remove old trigger related Breaks and Conflicts from dpkg.
    - Only use stackprotectorstrong when building dpkg with gcc >= 4.9.
    - Switch to debhelper compatibility level 9.
    - Name each public-domain license with a different name.
    - Add missing public modules to dpkg-dev package description.
    - Get rid of backward compatibility pseudo-tags from bug reports.
    - Install doc/README.feature-removal-schedule only on affected packages
      and debian/usertags everywhere.
  * Documentation:
    - Document arch-qualifiers for dependency fields in deb-control(5) and
      deb-src-control(5). Reported by Johannes Schauer <email address hidden>.
      Closes: #768842
    - Document versioned Provides in deb-control(5).
    - Document the version when dpkg-deb --raw-extract got introduced.
    - Document dpkg --log format, add missing actions and describe the startup
      messages. Closes: #773398
    - Document when and how the dpkg-maintscript-helper package name argument
      is or should be arch-qualified. Closes: #776072
    - Fix and update Arch substvar description in deb-substvars(5).
    - Document that current build flag feature areas only work on Debian and
      derivatives in dpkg-buildflags(1).
    - Use “wildcard characters” instead of “wildchars” in dpkg-query(1).
    - Document dpkg-query --search behavior in man page. Closes: #775379
    - Document postinst “triggered” argument in debian/dpkg.postinst comment
      header.
    - Document Dpkg::IPC function signatures.
    - Document the obsolete --compare-versions '<' and '>' operators in the
      dpkg(1) man page. Thanks to Tomas Pospisek <email address hidden>.
      Closes: #776551
    - Move dpkg-divert, dpkg-statoverride and update-alternatives man pages
      from section 8 to 1, to match their installation path.
    - Capitalize dpkg-parsechangelog(1) option descriptions.
    - Mark dpkg-parsechangelog(1) --format values in bold.
    - Place short options before long ones in dpkg-mergechangelogs(1) and
      dselect(1) man pages.
    - Properly terminate a bold marking in dpkg(1).
    - Document in man pages the dpkg version when new features were introduced.
    - Document that timestamps are reset for files patched with source format
      “3.0 (quilt)” too.
    - Document in dpkg-buildpackage(1) that using dpkg-source is sometimes
      better than -S. Suggested by Johannes Schauer <email address hidden>.
    - Document dselect -? option.
    - Document in dpkg-buildflags(1) that DEB_VENDOR influences the execution.
    - Document that dpkg performs sanity checks on PATH.
    - Mark some words and commands as non-hyphenable in man pages.
    - Separate multi-line hanging tag paragraphs with .TQ in man pages.
    - Mark field names in bold in man pages.
    - Use various groff escape sequences for quoting characters.
    - Lowercase warning and note admonitions in start-stop-daemon(8).
    - Mark dselect(1) color attributes in bold.
    - Say output instead of display for dpkg-deb tar-file option in dpkg(1).
    - Say archive instead of filename for dpkg-deb option in dpkg(1).
    - Say control-field-name instead of control-file-field in dpkg-deb(1).
    - Fix option values and pathname markup in dpkg-deb(1).
    - Use .TQ to separate different but related options in dpkg(1).
    - Clarify that dpkg-buildpackage -jN forces parallel builds, regardless of
      the packaging or upstream build systems supporting them. Closes: #780866
    - Remove unneeded update-alternatives references from options descriptions.
    - Document that apt might expect Packages.xz too in dpkg-scanpackages(1).
    - Say METHODS instead of FUNCTIONS or OBJECT FOO in POD section titles.
    - Document dpkg version when perl module versions got bumped.
  * Output message fixes and improvements:
    - Remove trailing newline from string literal in warning calls.
    - Say “execute” instead of “exec” in Dpkg::Changelog::Parse error message.
    - Say “package” instead of “it” in dpkg-name warning message.
    - Uppercase field names in error messages.
    - Expand EOF and eof into “end of file” in error messages.
    - Use “<enter>” instead of “return” or “enter” in input prompts.
    - Say directory instead of dir in output messages.
    - Merge the same dpkg-scanpackages warning messages into a single line.
    - Clarify dpkg-genchanges changes description open error.
    - Add missing preposition in Dpkg::Source::Patch error message.
    - Improve available state sorting order strings in dselect panel.
    - Say “changelog-file” instead of “changelogfile” in --help output.
    - Say “command“ instead of “action“ for dselect.
    - Improve commands listing in «dselect --help» output, by printing them
      before options and listing them one on each line with a description.
    - Improve dselect color-spec --help output.
    - Move "(default)" annotations in scripts --help output after option
      description.
    - Consistently use proper quotation marks ("" or '', and not the
      unbalanced `' pair) all over the place.
    - Use syserr() instead of an ad-hoc error message in dpkg-scansources.
    - Say substvars instead of varlist in dpkg-shlibdeps error messages.
    - Fix error messages on invalid uid/git/mode command-line syntax errors
      in dpkg-statoverride, to not say they are from the statoverride file.
    - Fix error message on empty dsc file in dpkg-genchanges.
    - Mention “(^Z)” instead of “char” for the MSDOS end of file character.

  [ Raphaël Hertzog ]
  * Drop myself from Uploaders.

  [ Updated programs translations ]
  * Simplified Chinese (Zhou Mo). Closes: #782326
  * Turkish (Mert Dirik). Closes: #785096
  * Vietnamese (Trần Ngọc Quân).

  [ Updated scripts translations ]
  * German (Helge Kreutzmann).

  [ Updated manpages translations ]
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Mon, 18 May 2015 15:08:31 +0200
Superseded in stretch-release on 2015-06-14
Superseded in jessie-release on 2016-01-23
Superseded in sid-release on 2015-06-07
dpkg (1.17.25) unstable; urgency=medium


  [ Guillem Jover ]
  * Do not leak kvm descriptors in start-stop-daemon on GNU/kFreeBSD systems.
    Based on a patch by Jeff Epler <email address hidden>. Closes: #779467
  * Fix OpenPGP Armor Header Line parsing in Dpkg::Control::Hash. We should
    only accept [\r\t ] as trailing whitespace, although RFC4880 does not
    clarify what whitespace really maps to, we should really match the GnuPG
    implementation anyway, as that's what we use to verify the signatures.
    Reported by Jann Horn <email address hidden>. Fixes CVE-2015-0840.
  * Use correct versions in Conflicts for removed packages. Closes: #776984
  * Use backports friendly versions in Breaks/Conflicts.
    Reported by Thorsten Glaser <email address hidden>.
  * Fix perl warning in dpkg-genchanges when parsing BY-HAND file entries.
    Regression introduced in dpkg 1.17.7. Closes: #781074

  [ Updated programs translations ]
  * Dutch (Frans Spiesschaert). Closes: #779953
  * Hungarian (Úr Balázs).

 -- Guillem Jover <email address hidden>  Thu, 09 Apr 2015 23:40:47 +0200
Superseded in jessie-release on 2015-04-15
Superseded in sid-release on 2015-04-10
dpkg (1.17.24) unstable; urgency=low


  [ Guillem Jover ]
  * Add missing versioned Breaks on packages creating trigger cycles.
    Namely debian-security-support, doc-base, gitweb, grace, install-info,
    libapache2-mod-php5, libapache2-mod-php5filter, php5-fpm and xine-ui.
    Closes: #774794
  * Switch versioned Breaks for trigger cycles from <= to << relations (with
    the necessary version adjustments).
  * Add Conflicts for removed packages expecting dpkg to ship install-info.
    Namely octave3.2-info, octave3.0-info and polgen-doc. Closes: #776984
  * Do not accept unknown user or group names on «dpkg-statoverride --add».
    Regression introduced in dpkg 1.17.11. Closes: #775124
  * Check that HAVE_DECL_SYS_SIGLIST is 0 instead of undefined, to fix a
    build failure on uclibc based systems. Closes: #777044
    Based on a patch by Alex Potapenko <email address hidden>.
  * Disable dependency checks on trigger processing. There are still trigger
    cycles showing up this close to the Debian release, which are hard to
    detect automatically as they are caused by maintainer script actions.
    Requested by Niels Thykier <email address hidden> (Debian Release Manager).

  [ Raphaël Hertzog ]
  * Drop myself from Uploaders.

  [ Updated programs translations ]
  * All complete languages (shadow package).
  * Thai (Theppitak Karoonboonyanan).

  [ Updated manpages translations ]
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Sun, 22 Feb 2015 22:54:51 +0100
Superseded in jessie-release on 2015-03-02
Superseded in sid-release on 2015-02-23
dpkg (1.17.23) unstable; urgency=low


  [ Guillem Jover ]
  * Use a matching group instead of ${^MATCH} in s/// in dselect build script.
  * Skip tar extractor tests if tar is not GNU tar >= 1.27.
  * Reset the trigger cycle tracking on unsatisfied dependencies during
    trigger processing. Closes: #771730
  * Fix out-of-bounds buffer read accesses when parsing field and trigger
    names or checking package ownership of conffiles and directories.
    Reported by Joshua Rogers <email address hidden>.
  * Add versioned Breaks on packages creating trigger cycles. Namely auctex,
    apt-cudf, ccache, cups, distcc, fusionforge-plugin-mediawiki, gap-core,
    gxine, hoogle, icecc, libjs-protoaculous, mcollective, pypy, wordpress
    and xfonts-traditional.

  [ Updated programs translations ]
  * Basque (Iñaki Larrañaga Murgoitio). Closes: #771893
  * Catalan (Guillem Jover).
  * Czech (Miroslav Kure).
  * Esperanto (Felipe Castro).
  * French (Sébastien Poher).
  * Italian (Milo Casagrande).
  * Portuguese (Miguel Figueiredo).
  * Russian (Yuri Kozlov). Closes: #771691
  * Simplified Chinese (Zhou Mo). Closes: #771264
  * Spanish (Javier Fernández-Sanguino)
  * Swedish (Peter Krefting).
  * Thai (Theppitak Karoonboonyanan). Closes: #772965

  [ Updated scripts translations ]
  * Catalan (Guillem Jover).
  * Polish (Łukasz Dulny).
  * Russian (Yuri Kozlov). Closes: #772841

  [ Updated manpages translations ]
  * French (Sébastien Poher).
  * Italian (Beatrice Torracca). Closes: #771673

  [ Updated dselect translations ]
  * Catalan (Guillem Jover).
  * Czech (Miroslav Kure).
  * Norwegian Bokmål (Hans Fredrik Nordhaug).
  * Polish (Łukasz Dulny).
  * Portuguese (Miguel Figueiredo).
  * Russian (Yuri Kozlov). Closes: #771682
  * Spanish (Javier Fernández-Sanguino)
  * Vietnamese (Trần Ngọc Quân).

 -- Guillem Jover <email address hidden>  Tue, 23 Dec 2014 17:45:44 +0100
Superseded in jessie-release on 2015-01-07
Superseded in sid-release on 2014-12-28
dpkg (1.17.22) unstable; urgency=low


  [ Guillem Jover ]
  * Add version introducing --ctrl-tarfile in dpkg-deb(1) man page.
  * Bump minimal version for dir_to_symlink and symlink_to_dir commands
    to 1.17.14 in dpkg-maintscript-helper(1) man page. Closes: #769843
  * Reintroduce update-alternatives, dpkg-divert and dpkg-statoverride
    compatibility symlinks under /usr/sbin/. There are still packages
    using those paths, but the relevant lintian check did not list any,
    so this got removed prematurely.
  * Add Breaks on old man-db, fontconfig and readahead-fedora packages using
    awaiting triggers, as they produce trigger cycles. Closes: #768599
  * Escape package and architecture names on control file parsing warning,
    as those get injected into a variable that is used as a format string,
    and they come from the package fields, which are under user control.
    Regression introduced in dpkg 1.16.0. Fixes CVE-2014-8625. Closes: #768485
    Reported by Joshua Rogers <email address hidden>.
  * Do not match partial field names in control files. Closes: #769119
    Regression introduced in dpkg 1.10.
  * Fix build on Mac OS X. Regression introduced in dpkg 1.17.11.
    Reported by Dominyk Tiller <email address hidden>.
  * Normalize tar entry uid and gid from the current system only in dpkg
    unpack. Regression introduced in dpkg 1.17.14. Closes: #769211
  * Restore multiple processing instances check for packages and archives
    specified on the command-line. Regression introduced in dpkg 1.17.20.
  * Fail on trigger processing when it is required to progress. Trigger
    processing is sometimes required and sometimes opportunistic, and we
    should only fail on the former but ignore the latter. Closes: #768852
  * Do not ignore trigger cycles for direct dependencies, these are just
    normal trigger cycles, and as such should not be special cased.
  * Register all pending triggers for deferred processing when being called
    as «dpkg --configure pkgname…». This is a mostly conformant workaround
    for frontends like apt that do not correctly call «dpkg --configure -a»
    or «dpkg --triggers-only -a» after their normal runs, and leave packages
    in triggers-pending and triggers-awaited states. Closes: #766758

  [ Updated programs translations ]
  * Catalan (Guillem Jover).
  * Danish (Joe Dalton).
  * French (Sébastien Poher).
  * German (Sven Joachim).
  * Japanese (Kenshi Muto). Closes: #771255
  * Polish (Łukasz Dulny).
  * Simplified Chinese (Zhou Mo). Closes: #766724, #770280
  * Swedish (Peter Krefting).
  * Turkish (Mert Dirik).
  * Vietnamese (Trần Ngọc Quân)

  [ Updated scripts translations ]
  * French (Sébastien Poher).
  * German (Helge Kreutzmann).
  * Swedish (Peter Krefting).

  [ Updated manpages translations ]
  * French (Sébastien Poher). Closes: #767934
  * German (Helge Kreutzmann). Closes: #752123
  * Simplified Chinese (Zhou Mo). Closes: #767573
  * Swedish (Peter Krefting).

  [ Updated dselect translations ]
  * Danish (Joe Dalton).
  * Dutch (Frans Spiesschaert). Closes: #771237
  * French (Sébastien Poher). Closes: #767918
  * Japanese (Kenshi Muto). Closes: #771256
  * Swedish (Peter Krefting).

 -- Guillem Jover <email address hidden>  Fri, 28 Nov 2014 02:02:34 +0100
Superseded in stretch-release on 2016-02-24
Superseded in jessie-release on 2014-12-21
Superseded in sid-release on 2016-02-13
dpkg (1.17.21) unstable; urgency=low


  [ Guillem Jover ]
  * Get consistent git-style diff support, by adding (>= 2.7) to the dpkg-dev
    patch Depends, and a Breaks patch (<< 2.7) to libdpkg-perl.
  * Error out on obsolete Build-Profiles field syntax.
  * Document -g and -G options in dpkg-genchanges(1). Closes: #766568
  * Do not accept values bundled with long options in dpkg-parsechangelog.
    The parser was accepting things like «--count10», which is just broken.
    Instead allow only «--count=10» in addition to «--count 10».
  * Accept «-S value» in addition to «-Svalue» in dpkg-parsechangelog.
    Closes: #766559
  * Add support for new interest-await and activate-await trigger directives.
    And a new --await option to dpkg-trigger. This might allow possibly
    switching the default meaning after a transition period no shorter than
    two minor versions, so in 1.19.x or 1.20.x. Perhaps.
  * Do trigger cycle detection after dependency checks in dependtry <= 1,
    and before dependency cycle breaking in dependtry > 1. This makes sure
    to always catch trigger cycles, but still gives the opportunity to try
    to process triggers for packages that are not yet ready in the first
    dependtry, but which might be a bit later on, without wrongly detecting
    avoidable and bogus trigger cycles. Closes: #766557
  * Update features removal schedule:
    - The -u, --udeb dpkg-scanpackages options got removed, state that.
    - Remove the entry about obsolete fields, as these need to be preserved
      for backward compatibility, they are part of the external interface to
      be able to handle ancient binary packages.

  [ Updated programs translations ]
  * Catalan (Guillem Jover).
  * German (Sven Joachim). Closes: #766311
  * Simplified Chinese (Zhou Mo).

  [ Updated scripts translations ]
  * Catalan (Guillem Jover).

 -- Guillem Jover <email address hidden>  Sat, 25 Oct 2014 02:21:43 +0200
Superseded in sid-release on 2014-10-25
dpkg (1.17.20) unstable; urgency=low


  [ Guillem Jover ]
  * Add a requeueing insertion protection for process_queue().
  * Make sure to always switch to the next dependtry after we have made no
    progress for a while. Regression stemming from non future proof changes
    introduced with the initial triggers implementation in dpkg 1.14.17
    combined with changes in dpkg 1.17.19. Closes: #766242, #766322
  * Make the initial dependtry be 1 instead of 0. This gets rid of an unused
    dependtry step, which got accidentally introduced when the perl dpkg was
    rewritten in C, ages ago.
  * Allow detached upstream signatures for upstream orig.tar files in the
    .dsc file. Suggested by Daniel Kahn Gillmor <email address hidden>.
    Closes: #759478
  * Inline alternative status description into translatable string in
    update-alternatives. Required-by: #766311
  * Reword description for installed status in dpkg(1) man page.

  [ Updated programs translations ]
  * German (Sven Joachim).
  * Simplified Chinese (Zhou Mo).
  * Vietnamese (Trần Ngọc Quân).

 -- Guillem Jover <email address hidden>  Thu, 23 Oct 2014 00:43:05 +0200
Superseded in sid-release on 2014-10-23
dpkg (1.17.19) unstable; urgency=low


  [ Guillem Jover ]
  * Bump the Breaks on devscripts to 2.14.10 due to the new dpkg-architecture
    command-line parsing strictness introduced in 1.17.17. Closes: #764965
  * Create pidfiles even when start-stop-daemon is not asked to background
    the process itself. Although a bit of a dubious usage, because any error
    before executing the program will not be properly reported to the caller.
    Regression introduced in dpkg 1.17.14. Closes: #765110
  * Add new --remove-pidfile option to start-stop-daemon.
  * Mention --pid and --ppid in start-stop-daemon(8) man page DESCRIPTION.
  * Add invoke hooks for dpkg --add-architecture and --remove-architecture.
    Prompted by Helmut Grohne <email address hidden>.
  * Reverse --verify-format logic to actually accept 'rpm' as valid.
    Closes: #765907
  * Fix trigger dependency checks and cycle detection.
    Regression introduced in dpkg 1.17.17.
    Closes: #765434, #765668, #765734, #765781, #765789, #765952
  * Rework dependency problem debug and notice output on trigger processing.

  [ Updated programs translations ]
  * Italian (Milo Casagrande): Closes: #765748
  * Turkish (Mert Dirik). Closes: #764942
  * Simplified Chinese (lumin). Closes: #765693

  [ Updated scripts translations ]
  * German (Helge Kreutzmann).

  [ Updated manpages translations ]
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Mon, 20 Oct 2014 15:17:49 +0200
Superseded in sid-release on 2014-10-21
dpkg (1.17.18) unstable; urgency=low


  [ Guillem Jover ]
  * Handle empty minimum versions when initializing dependency versions,
    as the code is mapping the minimum version 0 to '' to avoid outputting
    useless versions. Regression introduced in dpkg 1.17.17. Closes: #764929

  [ Updated programs translations ]
  * Catalan (Guillem Jover).

  [ Updated dselect translations ]
  * Catalan (Guillem Jover).
  * German (Sven Joachim).

 -- Guillem Jover <email address hidden>  Sun, 12 Oct 2014 15:47:44 +0200
Superseded in sid-release on 2014-10-13
dpkg (1.17.17) unstable; urgency=low


  [ Guillem Jover ]
  * Add dpkg-vendor, Dpkg/File.pm and Dpkg/Util.pm to the list of files with
    translatable strings, so that they can be translated.
  * Fix some typos for versioned and mentioned in comments and changelogs.
  * Mark for translation and unify "rm cleanup" string in dpkg.
  * Mark for translation and improve dselect method handling error messages.
  * Defer trigger processing if the package does not fulfill dependencies.
    Closes: #671711
  * Do not write to the database when changing selections with --dry-run.
    Closes: #764673
  * Add missing imports from Dpkg::BuildProfiles in dpkg-genchanges.
    Regression introduced in dpkg 1.17.14. Closes: #764216
    Reported by Johannes Schauer <email address hidden>.
  * Initialize dependencies with the correct minimum version from a symbols
    file with multiple SONAMEs in dpkg-shlibdeps.
    Thanks to Jérémy Bobbio <email address hidden>. Closes: #764721
  * Perl modules:
    - Allow multiple whitespace in Dpkg::BuildProfiles::get_build_profiles()
      when parsing the DEB_BUILD_PROFILES environment variable.
      Thanks to Johannes Schauer <email address hidden>.
    - New Dpkg::Getopt private module.
    - Document public module Dpkg.
    - Document public module Dpkg::Gettext.
    - Mark Dpkg::BuildProfiles as a public module.
    - Document all public module versions in a CHANGES section.
    - Remove EXPORTED from POD section titles.
    - Document private modules as such in a CHANGES section.
  * Set the DEB_TARGET_* dpkg-architecture variables from architecture.mk.
    Missed in dpkg 1.17.14.
  * Initialize DEB_TARGET_ARCH variable without requiring DEB_HOST_ARCH,
    which is not being set at all when querying for DEB_TARGET_ variables.
  * Normalize dpkg-architecture command-line parsing, so that «--option=value»
    «--option value», «-ovalue» and «-o value» will all be accepted.
  * Add long option names for all dpkg-architecture short options.
  * Add support for --host-arch, --host-type, --target-arch and --target-type
    long options in dpkg-buildpackage. These will get passed through to
    dpkg-architecture. This restores the ability to specify the target
    architecture when building cross-compilers. Regression introduced in
    dpkg 1.17.14. Reported by Helmut Grohne <email address hidden>.
  * Do not modify the topic variable values in list functions in perl code.
  * List Dpkg::Exit and Dpkg::Interface::Storable as public modules in
    libdpkg-perl package description.

  [ Updated programs translations ]
  * German (Sven Joachim).
  * Vietnamese (Trần Ngọc Quân).

  [ Updated scripts translations ]
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Sun, 12 Oct 2014 04:59:09 +0200
Superseded in sid-release on 2014-10-12
dpkg (1.17.16) unstable; urgency=low


  * Set the copyright holder in the po4a calls for man pages.
  * Switch remaining topic to named variable in Dpkg::Source::Patch:analyze(),
    otherwise the loop was expecting values in one variable but storing them
    in another. Regression introduced in dpkg 1.17.14. Closes: #764206
  * Set umask to 0 when creating symlinks in tar test case, to normalize
    results. POSIX specifies that symlinks have undefined permissions in
    their mode, so their setting is system dependent. Linux does not honor
    the umask for symlinks, other systems like Hurd or kFreeBSD do.
    Regression introduced in dpkg 1.17.14. Closes: #764171

 -- Guillem Jover <email address hidden>  Mon, 06 Oct 2014 13:29:17 +0200
Superseded in sid-release on 2014-10-06
dpkg (1.17.15) unstable; urgency=low


  * Do not blacklist pie and stackprotector build flags on mips/mipsel.
    Thanks to Aurelien Jarno <email address hidden>. Closes: #763672
  * Fix build failures due to mismatched umask in libdpkg tar test case.
    Set it to a known value of 0022.

 -- Guillem Jover <email address hidden>  Mon, 06 Oct 2014 03:21:58 +0200
Superseded in stretch-release on 2015-05-31
Published in jessie-release on 2014-08-27
Superseded in sid-release on 2015-05-26
dpkg (1.17.13) unstable; urgency=low


  [ Guillem Jover ]
  * Remove unbalanced trailing single-quote in dpkg-deb error message.
    Reported by Trần Ngọc Quân <email address hidden>.
  * Remove architecture blacklist from hardening build flag option
    stackprotectorstrong. Thanks to Romain Francoise <email address hidden>.
  * Documentation:
    - Merge binary:Package descriptions in dpkg-query(1).
    - Split --remove and --purge options in dpkg(1). This also clarifies on
      which package states each option can operate. Closes: #576338
    - Remove duplicate “of the” in dpkg-maintscript-helper(1).
  * Fix dpkg-maintscript-helper dir_to_symlink to handle relative symlink
    targets. Thanks to Helmut Grohne <email address hidden>.
  * Fix dpkg-maintscript-helper symlink_to_dir to assure absolute pathnames
    arguments.
  * Fix dpkg-source not detecting modified files during --commit or -b.
    Regression introduced in dpkg 1.17.11. Closes: #758426
    Reported by Neil Williams <email address hidden>.
  * Only test the strerror() compatible code if sys_errlist and sys_nerr
    are present. This fixes a build failure on GNU/Hurd. Closes: #758199
  * Switch start-stop-daemon on GNU/kFreeBSD systems to use libkvm, instead
    of relying on linprocfs which is not the native procfs on kFreeBSD, and it
    is usually not mounted as FreeBSD programs do not expect it to be present.

  [ Updated programs translations ]
  * Czech (Miroslav Kure).
  * German (Sven Joachim).
  * Vietnamese (Trần Ngọc Quân).

  [ Updated manpages translations ]
  * French (Jean-Pierre Giraud, Vincent Thomas, Raphaël Hertzog).

  [ Updated scripts translations ]
  * French (Raphaël Hertzog).
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Tue, 19 Aug 2014 20:14:45 +0200
Superseded in stretch-release on 2015-05-31
Published in jessie-release on 2014-08-19
Superseded in sid-release on 2015-05-26
dpkg (1.17.12) unstable; urgency=low


  [ Guillem Jover ]
  * Only build the compatibility selinux code if libselinux is available or
    the user requested it. Also fixes build failures on non-Linux systems.
    Closes: #757637
  * Documentation:
    - Add a short description to each virtual field in dpkg-query(1), and
      mention the version they got introduced in dpkg.
    - Fix formatting of last paragraphs inside dselect(1) --color description.
  * Rework dselect columns code, to make it easier to maintain and read.
  * Add new architecture columns to dselect package list view. The new
    columns, shown by default, can be turned off with the new ‘A’ key,
    or bound to another key via the new “archdisplay” keybinding.
  * Fix a descriptor leak on dselect subprocesses when --debug is used.
  * Use «tar --format=gnu» when creating source archives. This makes sure we
    get a deterministic output format, regardless of what tar defaults to.
    Thanks to Jan Blunck <email address hidden>..
  * Use perl's length instead of defined when checking some environment
    variables, if we require them to have content.
  * Allow specifying the same build type option multiple times in
    dpkg-buildpackage and dpkg-genchanges. There seems to be scripts with
    such invocations in the wild. Closes: #757795

  [ Updated programs translations ]
  * German (Sven Joachim).

  [ Updated scripts translations ]
  * German (Helge Kreutzmann).

  [ Updated manpages translations ]
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Fri, 15 Aug 2014 03:30:39 +0200
Superseded in sid-release on 2014-08-16
dpkg (1.17.11) unstable; urgency=low


  [ Guillem Jover ]
  * Switch URLs in docs and code comments from http:// to https:// if the
    latter is available (round two). This includes the quilt patch header
    templates, and examples in man pages.
  * Update some dpkg git URLs to the new and newer (cgit switch) scheme.
  * Changes to libcompat:
    - Make the library testable.
    - Do not run qsort() over the scandir() list if it is NULL.
    - Add a setexecfilecon() compatibility function out from dpkg code.
  * Use SELinux setexecfilecon() if available in dpkg instead of ad-hoc code.
  * Replace obsolete <sys/fcntl.h> with <fcntl.h>, which fixes compilation on
    Android. Thanks to Fredrik Fornwall <email address hidden>. Closes: #752036
  * Fix file triggers/Unincorp descriptor leak on subprocesses. Regression
    introduced with the initial triggers implementation in dpkg 1.14.17.
    Closes: #751021
  * Do not disable the stack-protector build flags on arm64 in Debian and
    derivatives, the toolchain supports them now.
    Thanks to Adam Conrad <email address hidden>. Closes: #751032
  * When parsing the statoverride database from dpkg-statoverride do not
    consider it an error and refuse to operate at all if the user or group
    names are not known to the system, just preserve them. Closes: #563307
  * Do not write to the available file when unpacking binary packages. This
    information is not useful as dpkg has never recorded the archive path,
    so it has never been truly available for re-installation anyway.
  * Add versioned Provides support:
    - Add a new dpkg --assert-versioned-provides command.
    - Packages can provide a specific version, “virtual (= 1.0)” which will
      be honored, previously it would just be accepted when parsing.
    - Non-versioned virtual packages will not satisfy versioned dependencies.
    - Versioned virtual packages will satisfy non-versioned dependencies.
    Based on skeletal code by Ben Collins <email address hidden>.
    Closes: #7330, #24934, #112131, #134582, #180316
  * On removal check Depends and Pre-Depends for packages in unpacked and
    half-configured states too.
  * Add support for new hardening build flag stackprotectorstrong in Debian
    and derivatives, enabled by default. It will fallback to stackprotector
    when the former is not functional or disabled by the user.
    Thanks to Romain Francoise <email address hidden>.
  * Change «dpkg-deb --field» code to use the libdpkg deb822 parser instead
    of an ad-hoc one. This makes sure any field fixup and sanity check is
    performed on the input, and gets reflected on the output.
  * Add new dpkg-query virtual fields db:Status-Want, db:Status-Status and
    db:Status-Eflag to allow fine-grained access to the Status values.
  * Automatically add the Testsuite field in dpkg-source to the .dsc file.
  * Spell nocheck option in dpkg-scanpackages wait_child() call correctly.
    Spotted by James McCoy <email address hidden> (in devscripts).
  * Move the explanation of functional checks from --verify-format to the
    --verify command in the dpkg(1) man page. Closes: #747264
  * Improve dpkg-buildpackage(1) man page:
    - Mark DEB_CHECK_COMMAND environment variable in bold.
    - Add final item for done hook in the actions sequence.
    - Mention that -nc does not apply either when -F is specified.
    - Mention that the --FOO-option options can be used multiple times.
    - Fix a typo in the BUGS section.
  * Mark the “and” between the filenames as regular format in dpkg-source(1).
  * Add --format and --ignore-bad-version to dpkg-source --help output.
  * Clarify error message in Dpkg::Source::Quilt when patches fail to apply,
    to note that the patch might be malformed (besides not accepting patches
    with fuzz).
  * Try to preallocate the disk size for extracted files on unpack. This
    might help in avoiding filesystem fragmentation, and possibly improve
    performance on some filesystems.
  * Print the correct removed binary filename when building a source package
    with dpkg-source --include-removal. Closes: #755166
  * Add powerpcel support to cputable. Thanks to Jae Junh <email address hidden>.
  * Bump the i386 architecture GNU triplet to i586-linux-gnu to match the
    change in gcc. Somewhat reluctantly, as i386 wants to be its unique
    snowflake and use a GNU triplet not matching its baseline. This will
    cause problems when cross-building and using unmatched combinations of
    dpkg-dev and gcc. Closes: #751363
  * Update i386 architecture GNU cpu regex in cputable to match i786 too.
  * Remove unused pkglibdir variable from libdpkg.pc.in.
  * Perl modules:
    - Add new set_as_auto() method to Dpkg::Substvars.
    - Add support for sig and delete_sig spawn() options in Dpkg::IPC.
    - Add %opts to ensure_open() member in Dpkg::Compression::FileHandle.
    - Change find_command() to handle an empty or undef argument in Dpkg:Path.
  * Mark Format and Installed-Size as automatic substvars in dpkg-genchanges
    and dpkg-gencontrol respectively.
  * Warn on usage of deprecated Source-Version substvar.
  * Say OpenPGP instead of PGP when referring to the standard on code comments
    and output messages.
  * Add a hint to the “no dependency information found” error message in
    dpkg-shlibdeps, to check if the library is actually packaged.
    Thanks to Sylvestre Ledru <email address hidden>. Closes: #756230
  * Delete the current compressor SIGPIPE disposition in Dpkg::Source::Archive,
    which fixes ignoring SIGPIPE from the calling process. Closes: #756526
  * Ignore DEB_CHECK_COMMAND in dpkg-buildpackage if the command is not found.
  * Emit a warning when using the deprecated -is/-ip/-isp/-ips options in
    dpkg-gencontrol.
  * Only print build type once in dpkg-genchanges, instead of once for each
    specified -A or -B option and then yet another time for the general build
    type description.
  * Unify build options description in --help output for dpkg-buildpackage
    and dpkg-genchanges.
  * Only allow one build type option in dpkg-genchanges and dpkg-buildpackage.
  * Correctly filter the host architecture on the Architecture field in the
    generated .changes file from dpkg-genchanges, when the debian/files
    contains arch-specific packages but dpkg-genchanges was called with
    one of the build types excluding them.
  * Add new -g and -G options to dpkg-genchanges and dpkg-buildpackage for
    source plus arch-indep/specific builds. Closes: #756975
  * Fix dpkg --add-architecture and --remove-architecture to check that they
    get exactly one argument. Closes: #757254

  [ Updated programs translations ]
  * Danish (Joe Dalton). Closes: #754127
  * French (Jean-Baka Domelevo Entfellner, Julien Patriarca).
  * Portuguese (Miguel Figueiredo). Closes: #756920
  * Spanish (Guillem Jover): Fix «dpkg-query -l» header. Closes: #756209
  * Swedish (Peter Krefting).

  [ Updated scripts translations ]
  * Swedish (Peter Krefting).

  [ Updated manpages translations ]
  * Swedish (Peter Krefting).

 -- Guillem Jover <email address hidden>  Sat, 09 Aug 2014 17:16:27 +0200
Published in squeeze-release on 2014-07-19
dpkg (1.15.11) squeeze-security; urgency=high


  [ Guillem Jover ]
  * Test suite:
    - Add test cases for Dpkg::Source::Patch CVE-2014-0471 and CVE-2014-3127.
    - Add test case for patch disabling hunks; not security sensitive.
  * Correctly parse patch headers in Dpkg::Source::Patch, to avoid directory
    traversal attempts from hostile source packages when unpacking them.
    Reported by Javier Serrano Polo <email address hidden> as an unspecified
    directory traversal; meanwhile also independently found by me both
    #749183 and what was supposed to be #746498, which was later on published
    and ended up being just a subset of the other non-reported issue.
    Fixes CVE-2014-3864 and CVE-2014-3865. Closes: #746498, #749183

 -- Guillem Jover <email address hidden>  Thu, 05 Jun 2014 22:52:45 +0200
Superseded in wheezy-release on 2015-09-05
dpkg (1.16.15) wheezy-security; urgency=high


  [ Guillem Jover ]
  * Test suite:
    - Add test cases for Dpkg::Source::Patch CVE-2014-0471 and CVE-2014-3127.
    - Add test case for patch disabling hunks; not security sensitive.
  * Correctly parse patch headers in Dpkg::Source::Patch, to avoid directory
    traversal attempts from hostile source packages when unpacking them.
    Reported by Javier Serrano Polo <email address hidden> as an unspecified
    directory traversal; meanwhile also independently found by me both
    #749183 and what was supposed to be #746498, which was later on published
    and ended up being just a subset of the other non-reported issue.
    Fixes CVE-2014-3864 and CVE-2014-3865. Closes: #746498, #749183

  [ Updated programs translations ]
  * Merge translated strings from master.

  [ Updated scripts translations ]
  * German (Helge Kreutzmann).

  [ Updated man page translations ]
  * Merge translated strings from master.
  * Unfuzzy or update trivial translations (Guillem Jover).

 -- Guillem Jover <email address hidden>  Thu, 05 Jun 2014 22:24:36 +0200
Superseded in stretch-release on 2015-05-31
Published in jessie-release on 2014-06-11
Superseded in sid-release on 2015-06-01
dpkg (1.17.10) unstable; urgency=medium


  [ Guillem Jover ]
  * Use libtool to build the static libraries, which makes it possible to
    embed libcompat inside libdpkg, as required by some external programs
    linking against the latter. Closes: #746122
  * Fix word wrapping logic in dselect. Regression introduced in dpkg 1.17.3.
  * Fix possible out of bounds buffer read access in the error output on
    bogus ar member sizes.
  * Fix memory leaks in buffer_copy() on error conditions.
  * Test suite:
    - Improve C code coverage.
    - Add template test cases for most perl modules.
    - Add test cases for Dpkg::Deps OR relationships.
    - Add minimal test case for Dpkg::Source::Quilt.
    - Add test cases for Dpkg::Source::Patch CVE-2014-0471 and CVE-2014-3127.
    - Add test case for patch disabling hunks; not security sensitive.
  * Fix non-security sensitive TOCTOU race in triggers database loading.
  * Fix non-security sensitive TOCTOU race in update-alternative alternative
    database loading.
  * Fix non-security sensitive TOCTOU race in update-alternative rename code.
  * Add a workaround to start-stop-daemon for bogus OpenVZ Linux kernels that
    prepend, instead of appending, the " (deleted)" marker in /proc/PID/exe.
    Closes: #731530
  * Move dpkg-architecture -L argument to the Commands --help output section.
  * Make dpkg-maintscript-helper print only once that we are moving a
    conffile, and not on every interim state transition. Closes: #747370
  * Do not use global match variables in perl code.
  * Man pages:
    - Attempt to clarify and improve wording of some strange or confused
      constructs. Reported by Helge Kreutzmann.
    - Expand Vcs-* field names into each supported field name in
      deb-src-control(5) to make it easier to search for them.
    - Change control.tar.gz reference to simply control.tar in deb(5).
    - Document in dpkg-deb(1) -Z option that bzip2 and lzma are deprecated.
    - Add notes in dpkg-gensymbols(1) about symbol backward-compatibility.
      Based on a patch by Bernhard R. Link <email address hidden>.
      Closes: #746973
    - Document that dpkg-buildpackage(1) -j argument is optional.
    - Add current and deprecated media types to deb(5).
    - Document in dpkg(1) that --audit now does more than just searching for
      partially installed packages.
  * Add support for automatic parallel job selection in dpkg-buildpackage,
    matching currently active processors, when using -jauto. Closes: #748012
  * Perl modules:
    - Bump $VERSION for Dpkg::Patch, missed in 1.16.1.
    - Bump $VERSION for Dpkg::Deps, missed in 1.17.0.
    - Update and fix CHANGES POD sections for public modules.
    - Add missing Dpkg::Deps::Multiple profile_is_concerned() and
      reduce_profiles() methods, inherited by Dpkg::Deps::Union,
      Dpkg::Deps::AND and Dpkg::Deps::OR.
  * Do not mangle quilt series files with a missing newline on the last line.
    Closes: #584233
  * Quiesce tar warnings in cron job by redirecting stderr to /dev/null, as
    it seems --warning=none does not work correctly. Closes: #748544
  * Do not emit a trailing space from Dpkg::Control::Hash on a field's empty
    first line. Bump dpkg-dev Breaks on devscripts to 2.14.4, as previous
    versions expect a trailing space from dpkg-parsechangelog output.
    Based on a patch by Johannes Schauer <email address hidden>. Closes: #749044
  * Do not assume that sensible-editor is present on «dpkg-source --commit»,
    as that command is very Debian specific. Fallback to try VISUAL, EDITOR,
    or vi, if the previous commands are either unset or not found.
  * Use badusage() instead of ohshit() on dpkg --ignore-depends argument
    parsing errors.
  * Add per package dpkg --audit support.
  * Add support for DragonFlyBSD to ostable and triplettable.
    Thanks to Hleb Valoshka <email address hidden>.
  * Add support for DragonFlyBSD to start-stop-daemon. Closes: #734452
    Based on a patch by Hleb Valoshka <email address hidden>.
  * Correctly parse patch headers in Dpkg::Source::Patch, to avoid directory
    traversal attempts from hostile source packages when unpacking them.
    Reported by Javier Serrano Polo <email address hidden> as an unspecified
    directory traversal; meanwhile also independently found by me both
    #749183 and what was supposed to be #746498, which was later on published
    and ended up being just a subset of the other non-reported issue.
    Fixes CVE-2014-3864 and CVE-2014-3865. Closes: #746498, #749183

  [ Updated programs translations ]
  * Catalan (Guillem Jover).
  * Italian (Milo Casagrande). Closes: #750105

  [ Updated scripts translations ]
  * German (Helge Kreutzmann).

  [ Updated manpages translations ]
  * German (Helge Kreutzmann).

  [ Raphaël Hertzog ]
  * Let dpkg-source unpack additional tarballs in a deterministic order.
    Thanks to Samuel Bronson for the report. Closes: #747148

 -- Guillem Jover <email address hidden>  Thu, 05 Jun 2014 20:18:04 +0200
Superseded in jessie-release on 2014-06-11
Superseded in sid-release on 2014-06-06
dpkg (1.17.9) unstable; urgency=high


  [ Guillem Jover ]
  * Do not allow patch files with C-style encoded filenames. Closes: #746306
    Unconditionally fixes CVE-2014-0471.
  * Switch alternative database backups from xz to gzip. Closes: #746354
  * Do not leak long tar names on bogus or truncated archives.
  * Do not leak the filepackages iterator when a directory is used by other
    packages.
  * Fix short lived memory leaks in «dpkg-split --split».
  * Fix memory leak in unused Keybindings screen in dselect.
  * Do not leak color string on «dselect --color».
  * Fix memory leaks when parsing alternatives.
  * Fix off-by-one stack buffer overrun in start-stop-daemon on GNU/Linux and
    GNU/kFreeBSD if the executable pathname is longer than _POSIX_PATH_MAX.
    Although this should not have security implications as the buffer is
    surrounded by two arrays (so those catch accesses even if the stack
    grows up or down), and we are compiling with -fstack-protector anyway.
  * Mark the command_get_pager() tests on a tty as TODO for now, so that
    we do not get failures on build daemons.
  * Make test suite errors abort the build again. Closes: #746331

  [ Updated scripts translations ]
  * French (Steve Petruzzello). Closes: #746350
  * German (Helge Kreutzmann).

  [ Updated manpages translations ]
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Wed, 30 Apr 2014 05:45:20 +0200
Superseded in sid-release on 2014-05-01
dpkg (1.17.8) unstable; urgency=high


  [ Guillem Jover ]
  * Do not backup nonexistent database files from the cron.daily file.
    And stop emitting tar warnings. Closes: #745592, #745651
  * Test suite:
    - Improve Perl code coverage.
    - Improve C code coverage.
  * Handle space-only strings when parsing versions in libdpkg.
  * Document the environment requirements for the dpkg-maintscript-helper
    supports command in the man page. Closes: #739634
  * Improve wording for «dpkg --verify» and --verify-format in the man page.
    Closes: #733057
  * Switch test runner from Test::Harness to TAP::Harness.
  * Use the perl TAP::Harness for the C test suite instead of the automake
    tap-driver, to avoid requiring automake >= 1.12, currently not present
    in stable.
  * Enable failed test case reporting from the TAP::Harness, so that we get
    more meaningful reports on failure from the C test suite.
  * Correctly parse C-style diff filenames in Dpkg::Source::Patch, to avoid
    directory traversal attempts from hostile source packages when unpacking
    them. Reported by Jakub Wilk <email address hidden>. Fixes CVE-2014-0471.

  [ Updated programs translations ]
  * German (Sven Joachim).
  * Russian (Yuri Kozlov). Closes: #745869
  * Vietnamese (Trần Ngọc Quân).

 -- Guillem Jover <email address hidden>  Mon, 28 Apr 2014 13:33:11 +0200
Superseded in sid-release on 2014-05-02
dpkg (1.17.7) unstable; urgency=low


  [ Guillem Jover ]
  * Documentation:
    - Mention in deb-symbols(5), that the “main-dependency-template” is
      always used. Closes: #737731
    - Clarify in deb-control(5) «Multi-Arch: no» field omission.
    - Clarify in dpkg-buildpackage(1) --check-option description.
    - Document dpkg-query --control-path life expectancy. See: #699647
    - Fix indentation of “Extract options (with -x)” title in dpkg-source(1).
    - Improve symlink <-> directory switch information in
      dpkg-maintscript-helper(1). Closes: #739388
    - Add missing flags affected by hardening options to dpkg-buildflags(1).
  * Use exit instead of return to exit a subshell in dpkg-maintscript-helper.
    Thanks to Richard Levitte <email address hidden>. Closes: #738957
  * Localize $_ in Perl functions with while (<$fh>) style loops.
  * Perl test suite cleanup:
    - Switch test suite runner from ExtUtils::Command::MM to Test::Harness.
    - Enable colors in test suite runner.
    - Remove sequence number prefixes from test case filenames.
  * Do not generate perl warnings on nonexistent fields with
    «dpkg-parsechangelog --show».
  * Fix bogus message on dependency parse errors in dpkg-checkbuilddeps.
    Closes: #736778
  * Document is_pgp_signed as a public Dpkg::Control::Hash option.
    Closes: #735975
  * Do not generate perl warnings on undef versions in
    Dpkg::Deps::deps_compare(). See: #737731
  * Clarify dpkg-genchanges error message on binary builds without any binary
    artifact built. Closes: #726520
  * Improve dpkg-source warning message when ignoring file removals,
    by adding a hint about the --include-removal option.
    Thanks to Moritz Muehlenhoff <email address hidden>. Closes: #738310
  * Add a new dpkg-source extraction --ignore-bad-version option.
    Closes: #740883
  * Add Architecture and Build-Profiles information to Package-List field,
    as optional name=value1,value2 entries, with names «arch» and «profile».
    Use the now recognized field Build-Profiles from binary stanzas in the
    source control file to fill the «profile» value.
  * Do not interpret the .dsc filename as a regex when recomputing the
    md5sum for the .changes file after signing the .dsc. Closes: #742535
  * Cache vendor info Control::Hash objects in Dpkg::Vendor::get_vendor_info()
    when parsing the vendor file on each hook invocation.
  * If the vendor does not have a Dpkg::Vendor module, try loading a module
    from the parent vendors, before falling back to Dpkg::Vendor::Default.
    Closes: #735978
  * Set Ubuntu build flags for ppc64el instead of ppc64, as Ubuntu never ended
    up shipping a ppc64 architecture. Also honor noopt DEB_BUILD_OPTIONS flag.
    Thanks to Adam Conrad <<email address hidden>. Closes: #738691
  * Add OpenRISC or1k support to cputable.
    Thanks to Christian Svensson <email address hidden>. Closes: #736717
  * Add support for FCFLAGS, OBJCFLAGS and OBJCXXFLAGS build flags.
    Closes: #744326
  * Improvements and portability fixes to start-stop-daemon:
    - When using the Linux procfs switch to use /proc/PID/status instead of
      /proc/PID/stat to read the process name.
    - Add a generic KVM-based implementation to initialize the entire
      process list.
    - Fix FreeBSD KVM code to use current kinfo_proc layout.
    - Add a native FreeBSD pid_is_exec() method, which is more reliable than
      the KVM-based one, and means neither linprocfs nor procfs are required
      on such system anymore. Note that GNU/kFreeBSD is still using Linux
      procfs code (which ends up using linprocfs).
    - Fix OpenBSD KVM code to use current kinfo_proc layout.
    - Detect system specific headers at configure time instead of hardcoding
      their usage depending on system macros.
    - Add a new --ppid matching option to check for parent PID.
      Suggested by Alex Mestiashvili <email address hidden>.
    - On GNU/Hurd do not link unnecessarily against libshouldbeinlibc and
      libihash.
  * Set TAR preprocessor variable at build time instead of hardcoding it.
    This will allow non-GNU systems to easily use another value for their
    GNU tar, which is usually either gnutar or gtar.
  * Require compound literals support in the compiler at configure time.
  * Fix compound literals usage with compilers in C99 mode, by not assigning
    them to static variables.
  * Test suite cleanup:
    - Do not unnecessarily shut up stdout in t-subproc.
    - Test command_exec() exit code.
    - Test allocations with new test_alloc() instead of pass/fail macros.
    - Switch C test suite to use TAP.
  * Add support for Packages-files in dpkg --update-avail and --merge-avail
    from pipes, or standard input if the argument is omitted or is ‘-’.
    Closes: #357093, #367297
  * Error out on not-installed packages passed to «dpkg --verify».
  * Deprecate compressing .deb files with bzip2, by making dpkg-deb issue a
    warning, as the compressor has been superseded by xz when it comes to
    compression ratio, and in cases where higher compatibility or raw speed
    is desired gzip is still the better option. Although unpacking will be
    kept being supported to handle existing bzip2 compressed .deb files.
  * Use GNU tar's --no-unquote when using -T in dpkg-deb to avoid mangling
    filenames. Reported by Niels Thykier <email address hidden>. Closes: #743687
  * Backup all databases with user data, not just the status database.
  * Add Conflicts to dpkg against packages using install-info that were
    removed after lenny or squeeze, but may have survived upgrades to wheezy.
    Thanks to Andreas Beckmann <email address hidden>. Closes: #735159
  * Be verbose on «make check» errors by printing the test suite log.

  [ Updated dpkg translations ]
  * German (Sven Joachim).
  * Swedish (Peter Krefting).
  * Thai (Theppitak Karoonboonyanan). Closes: #745032
  * Vietnamese (Trần Ngọc Quân).

  [ Updated scripts translations ]
  * German (Helge Kreutzmann).
  * Swedish (Peter Krefting).

  [ Updated manpages translations ]
  * German (Helge Kreutzmann).
  * Italian (Beatrice Torracca). Closes: #742449
  * Swedish (Peter Krefting).

 -- Guillem Jover <email address hidden>  Mon, 21 Apr 2014 05:03:52 +0200
Superseded in jessie-release on 2014-05-02
Superseded in sid-release on 2014-04-22
dpkg (1.17.6) unstable; urgency=low


  [ Guillem Jover ]
  * Move signing in dpkg-buildpackage to the end of the build.
  * Add new --check-command and --check-option options to dpkg-buildpackage,
    and DEB_CHECK_COMMAND environment variable as a default value, to
    specify a package checker to use before the signing process.
  * Detect a missing gain-root-command even if dpkg-buildpackage is running
    as root.
  * Detect a missing sign-command in dpkg-buildpackage, before starting the
    build, to avoid a failure at the end of the process.
  * Remove trailing newlines from dpkg-deb warning message.
  * Change dpkg-deb conffile name length warning into an error, as dpkg will
    reject those packages at install time anyway.
  * Unify and clarify dpkg-deb and dpkg conffile name length error message.
    Closes: #108196
  * Add new start-stop-daemon --pid option. Closes: #253265
  * Mention Multi-Arch: no value in man pages. Closes: #732648
  * Correctly hyphenate binary-only and source-only in dpkg-buildpackage
    output messages.
  * Use makedev(3) when extracting .deb archives rather than ad-hoc
    computations, to be able to support large major/minor device numbers,
    supported on at least Linux, NetBSD and OpenBSD based systems.
    Thanks to Peter Chang <email address hidden>.
  * Turn the ARM Embedded ABI symbols blacklist into a regex, to stop having
    to keep up with the GNU toolchain, or other toolchains emitting different
    symbols.
  * Blacklist GOMP critical section symbols. Closes: #708033
  * Add support for Ignore-Blacklist-Groups field in symbols files, with the
    two available group values aeabi and gomp. Closes: #694524
  * Allow updating checksums in Dpkg::Checksums without erroring out.
  * Add shell hooks support to dpkg-buildpackage, based on the debuild
    implementation in devscripts 2.13.9. Closes: #476221
  * Add support for Testsuite source field.
  * Clarify error message about missing revision in non-native source package.
    Closes: #719348, #733746
  * Set default compression options in source format specific modules instead
    of dpkg-source. This makes sure the correct compression level is set, even
    for “3.0 (native)” packages with non-default compressors. Closes: #733326
  * Change default source package compressor for new formats (>= 2.0) to xz.
  * Ignore the same packages in «dpkg-query --list» when computing the
    column width as when printing the entries. Closes: #734114
  * Do not produce .deb archives with uncompressed gzip members on
    «dpkg-deb -Zgzip -z0», instead create them as non-compressed members,
    as if -Znone had been passed, as documented. Closes: #718295
  * Add support for .deb archives with a control member not compressed
    (control.tar) or compressed with xz (control.tar.xz).
  * Add support for creating uniformly compressed .deb archive members,
    with the new dpkg-deb option --uniform-compression.
  * Fix file descriptor leaks in diversions and statoverride databases.
    Closes: #734783
  * Allow missing prior-version argument in dpkg-maintscript-helper
    dir_to_symlink and symlink_to_dir commands. Closes: #733980

  [ Updated dpkg translations ]
  * Swedish (Peter Krefting).
  * Vietnamese (Trần Ngọc Quân).

  [ Updated scripts translations ]
  * German (Helge Kreutzmann).
  * Swedish (Peter Krefting).

  [ Updated manpages translations ]
  * German (Helge Kreutzmann).
  * Swedish (Peter Krefting).

 -- Guillem Jover <email address hidden>  Wed, 15 Jan 2014 05:29:45 +0100
Superseded in jessie-release on 2014-01-27
Superseded in sid-release on 2014-01-16
dpkg (1.17.5) unstable; urgency=low


  [ Guillem Jover ]
  * Switch non-tty output to be line buffered by default, and set it to fully
    buffered only for programs with precious and abundant output, not just
    progress reporting output (i.e. dpkg-query). This was causing out-of-order
    error and debug messages in relation to normal progress reporting, which
    could be very confusing. Regression introduced in dpkg 1.17.2.
  * Fix segfault in update-alternatives when adding or renaming slaves for
    an existing alternative. Regression introduced in dpkg 1.17.2.
    Closes: #731710
  * Fix dpkg-maintscript-helper symlink_to_dir and dir_to_symlink commands:
    - Always run postinst code regardless of prior-version, as the package
      might have been never configured before.
    - Be more strict when checking the expected state of paths.
    - Rename subcommand shell code to check-files-ownership.
    - Change dir_to_symlink switch code to use a staging empty directory,
      to avoid dpkg removing files from other packages, when removing the
      package old files during upgrade.
    - Bump minimal version in man page to 1.17.5.
    Closes: #731730
  * Mention gpg2 too as one of the default sign commands in dpkg-buildpackage.

  [ Updated dpkg translations ]
  * German (Sven Joachim).

  [ Updated scripts translations ]
  * German (Helge Kreutzmann).

  [ Updated manpages translations ]
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Thu, 12 Dec 2013 08:29:45 +0100
Superseded in sid-release on 2013-12-13
dpkg (1.17.4) unstable; urgency=low


  * Keep the diversions and statoverride database files open during dpkg
    runs, to avoid eager inode number reuse by the filesystem if these files
    get replaced multiple times in maintainer scripts, as we rely on the
    inode numbers being different when checking if the databases need to
    be reloaded. Regression introduced in 1.17.2. Closes: #731524
  * Add debug output to diversions and statoverride database loading code.
  * Reset the statoverrides information from the in-core database when
    reloading it from disk, otherwise removals in maintainer scripts will
    not be seen during the current dpkg run.
  * Get rid of dpkg-split global partqueue queue variable.
  * Use warningv() in dpkg instead of ad-hoc printing message when
    overriding with --force option.
  * Switch URLs in docs and code comments from http:// to https:// if the
    latter is available.

 -- Guillem Jover <email address hidden>  Sat, 07 Dec 2013 07:34:54 +0100
Superseded in sid-release on 2013-12-07
dpkg (1.17.3) unstable; urgency=low


  [ Guillem Jover ]
  * Check availability of warning flags at build time. Fixes a build failure
    on systems with old g++ compilers not accepting -Wc++11-compat.
  * Move DPKG_C_C99 call just after AC_PROG_CC, so that subsequent checks
    can take advantage of the possibly set flags to enable C99 features.
  * Improve configure C99 compiler check output.
  * Use C++11 nullptr instead of 0 or NULL, which is way more descriptive
    and has a better type. Check for C++11 compiler support, and fallback
    nullptr to 0 if unavailable.

  [ Updated programs translations ]
  * Vietnamese (Trần Ngọc Quân). Closes: #731409

 -- Guillem Jover <email address hidden>  Thu, 05 Dec 2013 10:19:38 +0100
Superseded in sid-release on 2013-12-06
dpkg (1.17.2) unstable; urgency=low


  [ Guillem Jover ]
  * Make Dpkg::Arch debwildcard_to_debtriplet() more robust by matching
    on exact 'any' strings, instead of substrings.
  * Add manpages-it Replaces to dselect and dpkg-dev. Closes: #717983
    Reported by Andreas Beckmann <email address hidden>.
  * Document default dpkg-deb compressor change to xz in man page.
    Thanks to Salvatore Bonaccorso <email address hidden>. Closes: #718437
  * Version manpages-it in Replaces with (<< 2.80-4), now that the package
    does not ship the overlapping paths any more.
  * Automatically prepend needed spaces for continuation --force-help lines.
  * Be more precise on deb format errors with data member in dpkg-deb.
  * Do not allow deb packages with control and data members swapped.
  * Clarify «dpkg-deb --extract» bad usage error message on missing arguments
    by printing all required arguments at once. Closes: #718899
  * Clarify the insertion order of _ members in deb(5) man page.
  * Fix use after free in alternative_parse_fileset() on update-alternatives.
    Reported by Pedro Ribeiro <email address hidden>.
  * Fix use after free in dpkg_arch_load_list() on libdpkg.
    Reported by Pedro Ribeiro <email address hidden>.
  * Fix theoretical stack buffer overflow in w_dependency() on libdpkg, not
    currently applicable. Reported by Pedro Ribeiro <email address hidden>.
  * Add ppc64el support to cputable. Closes: #718945
    Thanks to Jeff Bailey <email address hidden>.
  * Use dpkg-gencontrol -c argument as a fallback lock file in case
    debian/control does not exist. Closes: #667008
  * Pass the package reference count (i.e. number of present instances) to
    maintainer scripts via the new variable DPKG_MAINTSCRIPT_PACKAGE_REFCOUNT.
    Closes: #681370
  * Fix field names on error messages in libdpkg, by either capitalizing them
    or by renaming them to match reality.
  * Do not capitalize error and warning messages.
  * When ignoring invalid remove requests in dpkg consider that progress,
    reset the loop detector and avoid the assert. Closes: #143307
  * Activate all path components for file triggers on removal.
    Regression introduced in 1.17.0. Closes: #725437
  * Activate file triggers on disappearance more accurately, only when we know
    we are inevitably removing things.
  * Fix «dpkg-query --list» output when using multibyte character strings,
    to avoid unaligned columns and mojibake. Closes: #257505, #718541
    Based on a patch by Changwoo Ryu <email address hidden>.
  * Use fully buffered output on non-tty stdout.
    Reported by Shawn Landden <email address hidden>.
  * Recognize «start-stop-daemon -C» as documented. Closes: #719746
    Reported by Brian S. Julin <email address hidden>.
  * When update-alternatives is told to change slave links, do not warn that
    the link group is broken, just print a notice that the alternative is
    being updated due to the changes.
  * Add a new «dpkg --verify» command to check the integrity of packages
    installed files. Add a --verify-format option to excplicitly select the
    output format, currently only rpm compatible output is supported, but
    the default might change in the future. Closes: #187019
  * Improve dpkg “Preparing to replace” and “Unpacking” progress messages.
    Closes: #32427, #71106
  * Print the package version on main dpkg progress messages.
  * Do not store timestamps in gzip headers when using the command, to try to
    mimic the zlib behavior. This does not affect Debian as it's been using
    zlib for a very long time. Closes: #719844
  * Reset environment variables affecting compressor commands when not using
    the shared library implementations. Namely XZ_DEFAULTS, XZ_OPT, BZIP and
    BZIP2.
  * Use a simple list to track packages owning a file, instead of using a
    list of arrays of pointers which waste 10 pointers per non-shared file,
    instead of 1. This significantly reduces dpkg memory usage.
  * Honor new DEB_SIGN_KEYID environment variable in dpkg-buildpackage.
    Suggested by Harald Dunkel <email address hidden>. Closes: #615813, #719418
  * Always check subprocess exit codes in Dpkg::Source::Package modules.
    Reported by Ian Jackson <email address hidden>.
  * Add support for pie and stack-protector options to dpkg-buildflags FFLAGS,
    and update the man page to mention FFLAGS are a subset of CFLAGS.
    Closes: #726932
  * Improve and unify -O option handling in dpkg-genchanges, dpkg-gensymbols
    and dpkg-shlibdeps, by always taking an optional filename argument and
    describing in the man page the default output files.
  * Use “hyphen” instead of “dash” when we mean the ‘-’ character in the
    documentation and code comments.
  * Do not NULL-terminate the list in the compat scandir(), as this might
    cause a segfault in case the function returns 0 entries.
  * Always return from ensure_statoverrides() if file is NULL, otherwise
    we might get us to read garbage from memory or segfault.
  * Add new symlink_to_dir command to dpkg-maintscript-helper. Closes: #720712
    Based on a patch by Bastien ROUCARIÈS <email address hidden>.
  * Add new dir_to_symlink command to dpkg-maintscript-helper. Closes: #583585
  * Distinguish dpkg error reports between errors while processing packages
    and archives.
  * Fix crashes in the first call to gettext() after fork() on Mac OS X, by
    forcing the initialization at program start of the CoreFoundation cached
    values in libintl.
  * Set a default gettext domain for libdpkg code, so that other programs
    using a different domain can still get correct translations, like dselect.
  * Cleanup libdpkg-perl API:
    - Dpkg::Compression: Deprecate $default_compression_level,
      $default_compression and $compression_re_file_ext package variables.
    - Dpkg::Exit: Deprecate @handlers package variable.
    - Dpkg::Source::Package: Deprecate $diff_ignore_default_regexp and
      @tar_ignore_default_pattern package variables.
    - Dpkg::Changelog::Entry::Debian: Deprecate $regex_header and
      $regex_trailer package variables.
  * Add GnuPG 2.x support. Add gnupg2 and gpgv2 as alternative Recommends to
    gnupg and gpgv (to not pull them by default), but prefer gpgv2 over gpgv,
    and gpg2 over gpg at run-time if they are available.
  * Switch dpkg conflictor tracking from a fixed-size array to a queue,
    fixing several related issues, due to conflictors not being removed from
    the array after processing them. dpkg could fill it due to additions in
    previous package processing producing very confusing error messages; and
    a theoretical problem where a package could get appended to be removed,
    then reinstalled as a new version, to get removed again when revisiting
    the array in a subsequent package processing. Closes: #726112
  * Do not accept empty field names in dpkg.
  * Do not accept an initial hyphen in field names.
  * Add experimental build profiles support:
    - Add support for <!profile.name> build-time restrictions in dependencies.
    - Add support for DEB_BUILD_PROFILES environment variable.
    - Add new option -P to dpkg-buildpackage and dpkg-checbuilddeps.
    - Add new Built-For-Profiles output field in .deb and .changes files.
    Based on a patch by Patrick "P. J." McDermott <email address hidden>,
    Wookey <email address hidden> and Johannes Schauer <email address hidden>.
    Closes: #661538
  * Bump Standards-Version to 3.9.5.
  * Document interactions of dpkg-source --extend-diff-ignore and -i in the
    man page. Closes: #729874

  [ Updated programs translations ]
  * German (Sven Joachim).
  * Vietnamese (Trần Ngọc Quân).

  [ Updated scripts translations ]
  * German (Helge Kreutzmann).

  [ Updated manpages translations ]
  * French (Christian Perrier): fix incorrectly translated sentence,
    thanks to Fabien Givors.
  * German (Helge Kreutzmann).

 -- Guillem Jover <email address hidden>  Thu, 05 Dec 2013 04:56:31 +0100
Superseded in wheezy-release on 2014-07-12
Superseded in jessie-release on 2013-12-23
dpkg (1.16.12) stable; urgency=low


  * Fix value caching in Dpkg::Arch by not shadowing the variables.
    Closes: #724949

 -- Guillem Jover <email address hidden>  Mon, 30 Sep 2013 16:52:37 +0200
175 of 135 results