Change log for zlib package in Debian

zlib (1:1.3.dfsg-3.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Rename libraries for 64-bit time_t transition.  Closes: #1063242

 -- Benjamin Drung <email address hidden>  Fri, 01 Mar 2024 12:59:44 +0000

zlib (1:1.3.dfsg-3.1~exp1) experimental; urgency=medium

  * Non-maintainer upload.
  * Rename libraries for 64-bit time_t transition.

 -- Steve Langasek <email address hidden>  Mon, 05 Feb 2024 20:15:48 +0000

zlib (1:1.3.dfsg-3) unstable; urgency=low

  * Update the version of texlive-binaries we break since they still had
    broken version checks (closes: #1056312).

 -- Mark Brown <email address hidden>  Thu, 23 Nov 2023 13:02:20 +0000

zlib (1:1.3.dfsg-2) unstable; urgency=low

  * Install library into /usr (closes: #1055938).
  * Backport patch for minizip CVE-2023-45853 (closes: #1054290).

 -- Mark Brown <email address hidden>  Fri, 17 Nov 2023 22:10:10 +0000

zlib (1:1.2.13.dfsg-3) unstable; urgency=low

  * Further fixes to the minizip integration, don't install the minizip
    headers in both -dev packages (closes: #1049384).

 -- Mark Brown <email address hidden>  Tue, 15 Aug 2023 14:35:28 +0100

zlib (1:1.2.13.dfsg-2) unstable; urgency=low

  * Build minizip packages since for some reason the minizip upstream
    appears to have decided to release via zlib's contrib directiory
    and do nothing separate, patch from Michael Gilbert adapted to fix
    build issues (closes: #956181).

 -- Mark Brown <email address hidden>  Tue, 15 Aug 2023 00:28:42 +0100

zlib (1:1.2.13.dfsg-1) unstable; urgency=low

  * New upstream release.
  * Remove non-DFSG sources for contrib/testzlib (closes: #1012674).
  * Policy 4.6.1 (no changes).

 -- Mark Brown <email address hidden>  Sat, 05 Nov 2022 12:24:46 +0000

zlib (1:1.2.11.dfsg-1+deb10u1) buster-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * Fix a bug that can crash deflate on some input when using Z_FIXED
    (CVE-2018-25032) (Closes: #1008265)

 -- Salvatore Bonaccorso <email address hidden>  Mon, 28 Mar 2022 16:54:02 +0200

zlib (1:1.2.11.dfsg-2+deb11u2) bullseye-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * Fix a bug when getting a gzip header extra field with inflate()
    (CVE-2022-37434) (Closes: #1016710)
  * Fix extra field processing bug that dereferences NULL state->head

 -- Salvatore Bonaccorso <email address hidden>  Tue, 23 Aug 2022 20:54:06 +0200

zlib (1:1.2.11.dfsg-4.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Fix a bug when getting a gzip header extra field with inflate()
    (CVE-2022-37434) (Closes: #1016710)
  * Fix extra field processing bug that dereferences NULL state->head

 -- Salvatore Bonaccorso <email address hidden>  Fri, 12 Aug 2022 22:15:03 +0200

zlib (1:1.2.11.dfsg-2+deb11u1) bullseye-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * Fix a bug that can crash deflate on some input when using Z_FIXED
    (CVE-2018-25032) (Closes: #1008265)

 -- Salvatore Bonaccorso <email address hidden>  Fri, 25 Mar 2022 22:45:28 +0100

zlib (1:1.2.11.dfsg-4) unstable; urgency=medium

  * Pick upstream patch for CVE-2018-25032 (closes: #1008265).

 -- Mark Brown <email address hidden>  Fri, 25 Mar 2022 23:32:05 +0000

zlib (1:1.2.11.dfsg-3) unstable; urgency=low

  * Add build-arch and build-indep (#999292).
  * Bump debhelper requirement to current.
  * Add win32 to the list of files excluded from the DFSG
    tarball (closes: #919598).
  * Tighten matching for 32 bit architectures using patch from
    Helmut Grohne (closes: #1006799).
  * Policy 4.0.0 (no changes).

 -- Mark Brown <email address hidden>  Fri, 18 Mar 2022 00:21:37 +0000

zlib (1:1.2.11.dfsg-2) unstable; urgency=low

  * Acknowledge previous NMUs (closes: #949388).
  * Remove zlib1g-dbg in favour of dbgsym (closes: #497831, #926161).
  * Rename stage1 to nobiarch, patch no longer applies due to
    uncoordinated NMUs (closes: #892762).
  * Debhelper has renamed -s to -a.
  * Policy 4.5.0 (no changes).

 -- Mark Brown <email address hidden>  Mon, 24 Feb 2020 21:07:12 +0000

zlib (1:1.2.11.dfsg-1.2) unstable; urgency=medium

  * Non-maintainer upload.
  * Fix ftbfs on mips64el caused by the previous NMU by
    remove it from 32-ARCHS to keep NMU minial.

 -- YunQiang Su <email address hidden>  Mon, 03 Feb 2020 12:00:47 +0800

zlib (1:1.2.11.dfsg-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Enable lib64 for mipsn32 mipsn32el mipsr6 mipsr6el mipsn32r6 mipsn32r6el x32
    help to add binutils-host64 for 32bit architectures (Closes: 949388)
  * Remove outdated binutils version requirement for mips/mipsel.

 -- YunQiang Su <email address hidden>  Tue, 28 Jan 2020 19:55:38 +0800

zlib (1:1.2.11.dfsg-1) unstable; urgency=low

  * New upstream release (closes: #883180).
  * Use debian/patches/series to cope with yet more tooling issues with
    patches format (closes: #896078).
  * Use DEP-5 format (closes: #862260).

 -- Mark Brown <email address hidden>  Mon, 25 Sep 2017 12:03:05 -0700

zlib (1:1.2.8.dfsg-5) unstable; urgency=low

  * Add loud warnings to the descriptions of all the multilib packages
    to try to discurage anyone from using them in error, the *only* user
    is the D compiler which does this because apparently D users will
    want to do cross builds but will be unable to install multilib
    packages.  No new packages should add usage, it is difficult to see
    any sensible use case (closes: #787956, #845793, #709623, #853087).

 -- Mark Brown <email address hidden>  Sun, 29 Jan 2017 17:22:23 +0000

zlib (1:1.2.8.dfsg-4) unstable; urgency=high

  * Apply upstream fix for CVE-2016-9840.

 -- Mark Brown <email address hidden>  Wed, 07 Dec 2016 15:43:42 +0000

zlib (1:1.2.8.dfsg-3) unstable; urgency=high

  * Apply upstream fix for CVE-2016-9841 (closes: #847270).
  * Apply upstream fix for CVE-2016-9842 (closes: #847274).
  * Apply upstream fix for CVE-2016-9843 (closes: #847275).
  * Standards version 3.9.8 (no changes).

 -- Mark Brown <email address hidden>  Wed, 07 Dec 2016 09:15:05 +0000

zlib (1:1.2.8.dfsg-2) unstable; urgency=low


  * Drop zlib-bin package as minizip has now been packaged separately,
    delay due to lack of notice regarding upload (closes: #753070).

 -- Mark Brown <email address hidden>  Sat, 16 Aug 2014 15:12:11 +0100

zlib (1:1.2.8.dfsg-1) unstable; urgency=low


  * New upstream release.
  * Policy 3.9.4.
  * Tweak version for gzseek64 and gztell64 (closes: #687076).
  * Install zconf.h in multiarch path (closes: #698648).

 -- Mark Brown <email address hidden>  Fri, 03 May 2013 16:30:36 +0100

zlib (1:1.2.7.dfsg-13) unstable; urgency=low


  * Yet more s390x cleanup.  Thanks to the s390x porters for thei
    prompt an efficient buildd monitoring (closes: #678511).

 -- Mark Brown <email address hidden>  Fri, 22 Jun 2012 16:55:56 +0100

Available diffs

• diff from 1:1.2.3.4.dfsg-3ubuntu4 (in Ubuntu) to 1:1.2.7.dfsg-13 (376.0 KiB)

zlib (1:1.2.7.dfsg-12) unstable; urgency=low


  * Clean up breakage from binnmu since with multiarch binnmus of zlib
    and other multiarch enabled library packages aren't actually
    installable.  Hopefully the multiarch people will get round to
    cleaning up the infrastructure at some point (closes: #678172).

 -- Mark Brown <email address hidden>  Wed, 20 Jun 2012 10:00:42 +0100

zlib (1:1.2.7.dfsg-11) unstable; urgency=low


  * Third time lucky.  I love double negative logic on strings.  It's a
    shame the patch for s390x didn't take care of s390...

 -- Mark Brown <email address hidden>  Tue, 22 May 2012 14:07:04 +0100

zlib (1:1.2.7.dfsg-10) unstable; urgency=low


  * Nope, here we go again... 

 -- Mark Brown <email address hidden>  Tue, 22 May 2012 11:22:36 +0100

zlib (1:1.2.7.dfsg-9) unstable; urgency=low


  * Let's try a different bodge for s390...

 -- Mark Brown <email address hidden>  Tue, 22 May 2012 10:07:49 +0100

zlib (1:1.2.7.dfsg-8) unstable; urgency=low


  * Yet another special case for s390.

 -- Mark Brown <email address hidden>  Mon, 21 May 2012 23:58:53 +0100

zlib (1:1.2.7.dfsg-7) unstable; urgency=low


  * Fix cross 32 builds.

 -- Mark Brown <email address hidden>  Mon, 21 May 2012 15:20:02 +0100

zlib (1:1.2.7.dfsg-6) unstable; urgency=low


  * Pass LDFLAGS to minizip too, but don't bother with TEST_LDFLAGS
    for the main build since it accomplishes nothing (closes: #672310).
  * Disallow simutaneous 64 and 32 bit cross package builds.

 -- Mark Brown <email address hidden>  Mon, 21 May 2012 10:25:15 +0100

zlib (1:1.2.7.dfsg-5) unstable; urgency=low


  * s390x doesn't actually have 32 bit, only 31 bit, and making the
    compiler options consistent is too hard. 

 -- Mark Brown <email address hidden>  Sun, 20 May 2012 22:55:16 +0100

zlib (1:1.2.7.dfsg-4) unstable; urgency=low


  * Move primary shared library to /lib for wpa_supplicant (closes: #591013).

 -- Mark Brown <email address hidden>  Sun, 20 May 2012 16:39:00 +0100

zlib (1:1.2.7.dfsg-2) unstable; urgency=low


  * Enable hardening flags, yet another release goal which we've
    suddenly decided to start work on close to the end of the release
    cycle.  Patch from Moritz Mühlenhoff (closes: #672310).

 -- Mark Brown <email address hidden>  Sat, 19 May 2012 19:52:14 +0100

zlib (1:1.2.7.dfsg-1) unstable; urgency=low


  * New upstream release.

 -- Mark Brown <email address hidden>  Thu, 03 May 2012 10:08:05 +0100

zlib (1:1.2.6.dfsg-2) unstable; urgency=low


  * Break texlive-binaries before 2009-12 due to gzeof() behaviour
    change (closes: #659681).

 -- Mark Brown <email address hidden>  Thu, 23 Feb 2012 23:28:27 +0000

zlib (1:1.2.6.dfsg-1) unstable; urgency=low


  * New upstream release.
  * OMG!!!!! MULTIARCH!!!#!!! (closes: #569697).
  * Break older libxml (closes: #589134).
  * Drop bzr repo, it's adding nothing and painful to use.

 -- Mark Brown <email address hidden>  Sun, 12 Feb 2012 02:05:41 +0000

zlib (1:1.2.5.dfsg-1) experimental; urgency=low


  * New upstream release.

 -- Mark Brown <email address hidden>  Thu, 13 May 2010 11:21:01 +0100

zlib (1:1.2.3.5.dfsg-1) experimental; urgency=low


  * New upstream release.
  * Remove most of the contrib directory so we don't have to waste time
    writing a copyright file for code we don't build (closes: #561432).

 -- Mark Brown <email address hidden>  Sun, 10 Jan 2010 22:27:09 +0000

zlib (1:1.2.3.4.dfsg-3) unstable; urgency=low


  * Only check for EOF on transparent streams if we have done a zero
    byte read to avoid reporting EOF early to applications.  This was
    breaking R.

 -- Mark Brown <email address hidden>  Mon, 28 Dec 2009 19:00:35 +0000

zlib (1:1.2.3.4.dfsg-2) unstable; urgency=low


  * Revert explict EOF indication to avoid triggering an infinite loop
    in man-db while rebuilding the caches (closes: #562518).

 -- Mark Brown <email address hidden>  Fri, 25 Dec 2009 15:02:23 +0000

zlib (1:1.2.3.4.dfsg-1) unstable; urgency=low


  * New upstream release.
  * This release contains refactored handling of 64 bit types which should
    stop warnings being generated in some configurations (closes: #439980).
  * This release also fixes handling of EOF in gzio (closes: #301283).
  * Fix symbol version for inflateUndermine.
  * Move -dbg to debug section.
  * Add upstream home page. 
  * Policy 3.8.3.

 -- Mark Brown <email address hidden>  Thu, 24 Dec 2009 17:35:16 +0000

zlib (1:1.2.3.3.dfsg-15) unstable; urgency=low


  * Using Conflicts instead of Replaces for the amd64 lib32 transition
    since that's the latest idea for making it work (closes: #539278).

 -- Mark Brown <email address hidden>  Tue, 04 Aug 2009 19:34:11 +0100

zlib (1:1.2.3.3.dfsg-14) unstable; urgency=low


  * amd64 has finally abandoned /emul/ia32-linux so install the 32 bit
    binaries in lib32 as for other architectures (closes: #533015).

 -- Mark Brown <email address hidden>  Thu, 25 Jun 2009 12:49:05 +0100

zlib (1:1.2.3.3.dfsg-13) unstable; urgency=low


  * Add LPIA to the list of unaligned architectures to reduce the Ubuntu
    diff a little (closes: #517403).

 -- Mark Brown <email address hidden>  Sun, 01 Mar 2009 20:43:18 +0000

zlib (1:1.2.3.3.dfsg-12) unstable; urgency=low


  * Apply patch from Arthur Loiret <email address hidden> implementing
    triarch support for MIPS (closes: #474097).

 -- Mark Brown <email address hidden>  Sun, 06 Apr 2008 19:09:18 +0100