Changelog
zsh (5.8-1) unstable; urgency=medium
* Switch to using the original upstream tar ball instead of generating a
minimal upstream tar ball from upstream's git repository. Drop most
generated files in the upstream tar ball during the clean target via
debian/clean.
+ Create a pristine-tar branch in the packaging git repository.
+ Fixes lintian warning orig-tarball-missing-upstream-signature.
+ [c75569cf] debian/clean: Add some more files from the original
upstream tar ball, but not in upstream git.
+ [d39a9ee3] debian/gbp.conf: Declare upstream-vcs-tag format.
+ [09ab1592] Drop the get-orig-source target, no more needed.
+ [2c079e6a] Get debian/source/options's extend-diff-ignore back in
sync with debian/clean to avoid unnecessary warnings.
+ [62fa1223] Add a debian/rules convenience target to restore files
from git which were removed in the clean target.
+ [1151b6d2] Update debian/pkg-zsh-workflow-new-upstream-release.md.
* [77d203f,94c033d2,2794556a] Import new upstream release 5.8.
+ Fixes CVE-2019-20044: When unsetting the PRIVILEGED option, the
shell sets its effective user and group IDs to match their
respective real IDs. On some platforms (including Linux), when the
RUID and EUID were both non-zero, it was possible to regain the
shell's former privileges by e.g. assigning to the EUID or EGID
parameter. (Closes: #951458)
* [c7b64d0b] Apply changes from Ubuntu's zsh 5.7.1-1ubuntu2 package, but
ignore all changes to debian/changelog and the Maintainer field.
+ This includes:
- debian/zshrc: Enable completions by default, unless
skip_global_compinit is set.
- Support cross-compiling:
+ Adjust upstream autoconf cross-compile default fallbacks.
+ Skip zcompile when cross-compiling.
+ Add libelf-dev build-dependency.
+ [1424bad8] debian/zshrc: Enable completions only on Ubuntu and
derivatives by default, so that the behaviour neither changes on
Debian nor on Ubuntu nor on according derivatives.
* [71ee4aef] Fix FTBFS if libncurses-dev provided the libncursesw5-dev
build-dependency. Thanks to Daniel Shahaf for helping to figure out
how to solve this issue properly.
* [cd532ebb] Add libgdbm-dev as build-dependency to build the zsh gdbm
module. Thanks to Daniel Shahaf and András Korn. (Closes: #951457)
* [867b565c] Add lintian override for "zsh-dev:
package-contains-no-arch-dependent-files" /usr/include/zsh/config.h
_is_ architecture-dependent, just not a binary.
* [303ea167] Retroactively list #924736 as fixed in previous upload.
* [236a9317] Declare adequate autopkgtest to be superficial.
* Upload to unstable again.
-- Axel Beckert <email address hidden> Sun, 16 Feb 2020 22:42:04 +0100
