Change log for freexl package in Ubuntu

freexl (2.0.0-1build2) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- Steve Langasek <email address hidden>  Sun, 31 Mar 2024 05:24:12 +0000

Available diffs

• diff from 2.0.0-1build1 to 2.0.0-1build2 (504 bytes)

freexl (2.0.0-1build1) noble; urgency=medium

  * No-change rebuild against libminizip1t64.

 -- Vladimir Petko <email address hidden>  Wed, 13 Mar 2024 16:25:07 +1300

Available diffs

• diff from 2.0.0-1 (in Debian) to 2.0.0-1build1 (316 bytes)

freexl (2.0.0-1) unstable; urgency=medium

  * New upstream release.
  * Bump Standards-Version to 4.6.2, no changes.
  * Bump debhelper compat to 13.
  * Strip pre-releases from symbols version.
  * Move from experimental to unstable.

 -- Bas Couwenberg <email address hidden>  Tue, 25 Jul 2023 14:39:19 +0200

Available diffs

• diff from 1.0.6-2 to 2.0.0-1 (256.2 KiB)

freexl (1.0.6-2) unstable; urgency=medium

  * Bump watch file version to 4.
  * Update lintian overrides.
  * Bump Standards-Version to 4.6.1, no changes.
  * Update upstream metadata.
  * Update uversionmangle to use lowercase RC.
  * Bump debhelper compat to 12, no changes.
  * Remove .la file, not installed.
  * Update watch file to fix download URLs.
  * Drop obsolete dh_strip override, dbgsym migration complete.
  * Add Rules-Requires-Root to control file.

 -- Bas Couwenberg <email address hidden>  Thu, 01 Dec 2022 09:09:08 +0100

Available diffs

• diff from 1.0.6-1 to 1.0.6-2 (3.4 KiB)

freexl (1.0.6-1) unstable; urgency=medium

  * New upstream release.
  * Bump Standards-Version to 4.5.0, no changes.
  * Add Build-Depends-Package field to symbols file.
  * Update gbp.conf to use --source-only-changes by default.
  * Drop Name field from upstream metadata.
  * Bump debhelper compat to 10, changes:
    - Drop --parallel option, enabled by default
    - Don't explicitly enable autoreconf, enabled by default
    - Drop dh-autoreconf build dependency
  * Fix typo in copyright file.

 -- Bas Couwenberg <email address hidden>  Sun, 02 Aug 2020 16:52:35 +0200

Available diffs

• diff from 1.0.5-3 to 1.0.6-1 (23.6 KiB)

freexl (1.0.0g-1ubuntu0.14.04.3) trusty-security; urgency=medium

  * SECURITY UPDATE: Imported changes from Debian's 1.0.0g-1+deb8u5 package
    - debian/patches/CVE-2017-2923_CVE-2017-2924.patch
    - debian/patches/security-fixes-1.0.5.patch
    - CVE-2017-2923 CVE-2017-2924 CVE-2017-7435 CVE-2017-7436 CVE-2017-7437
      CVE-2017-7438 CVE-2017-7439

 -- Mike Salvatore <email address hidden>  Tue, 25 Sep 2018 12:11:00 -0400

Available diffs

• diff from 1.0.0g-1ubuntu0.14.04.2 (in ~ubuntu-security/ubuntu/ppa) to 1.0.0g-1ubuntu0.14.04.3 (3.8 KiB)
• diff from 1.0.0g-1 (in Debian) to 1.0.0g-1ubuntu0.14.04.3 (5.3 KiB)

freexl (1.0.2-1ubuntu0.1) xenial-security; urgency=medium

  * SECURITY UPDATE: Imported changes from Debian's 1.0.2-2+deb9u2 package
    - debian/patches/CVE-2017-2923_CVE-2017-2924.patch: Imported from Debian
    - debian/patches/security-fixes-1.0.5.patch: Imported from Debian
    - CVE-2017-2923 CVE-2017-2924 CVE-2017-7435 CVE-2017-7436 CVE-2017-7437
      CVE-2017-7438 CVE-2017-7439

 -- Mike Salvatore <email address hidden>  Tue, 25 Sep 2018 11:05:08 -0400

Available diffs

• diff from 1.0.2-1 (in Debian) to 1.0.2-1ubuntu0.1 (3.9 KiB)

freexl (1.0.5-3) unstable; urgency=medium

  * Drop autopkgtest to test installability.
  * Add lintian override for testsuite-autopkgtest-missing.

 -- Bas Couwenberg <email address hidden>  Tue, 31 Jul 2018 14:07:01 +0200

Available diffs

• diff from 1.0.5-2 to 1.0.5-3 (490 bytes)

freexl (1.0.5-2) unstable; urgency=medium

  * Update watch file to use HTTPS.
  * Update Vcs-* URLs for Salsa.
  * Bump Standards-Version to 4.1.5, no changes.
  * Strip trailing whitespace from control & rules files.

 -- Bas Couwenberg <email address hidden>  Thu, 19 Jul 2018 16:13:03 +0200

Available diffs

• diff from 1.0.5-1 to 1.0.5-2 (1.1 KiB)

freexl (1.0.5-1) unstable; urgency=high

  * New upstream release. Fixes security issues:
    - https://bugzilla.redhat.com/show_bug.cgi?id=1547879
    - https://bugzilla.redhat.com/show_bug.cgi?id=1547883
    - https://bugzilla.redhat.com/show_bug.cgi?id=1547885
    - https://bugzilla.redhat.com/show_bug.cgi?id=1547889
    - https://bugzilla.redhat.com/show_bug.cgi?id=1547892
  * Bump Standards-Version to 4.1.3, no changes.
  * Strip trailing whitespace from changelog.
  * Update copyright-format URL to use HTTPS.
  * Drop obsolete dbg package.
  * Add lintian override for debian-watch-uses-insecure-uri.

 -- Bas Couwenberg <email address hidden>  Thu, 22 Feb 2018 21:58:18 +0100

Available diffs

• diff from 1.0.4-1 to 1.0.5-1 (3.9 KiB)

freexl (1.0.2-2+deb9u1build0.17.04.1) zesty-security; urgency=medium

  * fake sync from Debian

Available diffs

• diff from 1.0.2-2 (in Debian) to 1.0.2-2+deb9u1build0.17.04.1 (2.9 KiB)

freexl (1.0.4-1) unstable; urgency=medium

  * New upstream release.
    Fixes TALOS-2017-430 (CVE-2017-2923) & TALOS-2017-431 (CVE-2017-2924).
    (closes: #875690, #875691)

 -- Bas Couwenberg <email address hidden>  Fri, 15 Sep 2017 21:37:56 +0200

Available diffs

• diff from 1.0.3-1 to 1.0.4-1 (3.5 KiB)

freexl (1.0.3-1) unstable; urgency=medium

  * New upstream release.
  * Bump Standards-Version to 4.0.0, no changes.
  * Add autopkgtest to test installability.
  * Use pkg-info.mk variables instead of dpkg-parsechangelog output.

 -- Bas Couwenberg <email address hidden>  Sun, 23 Jul 2017 11:47:44 +0200

Available diffs

• diff from 1.0.2-2 to 1.0.3-1 (3.7 KiB)

freexl (1.0.2-2) unstable; urgency=medium

  * Update Vcs-* URLs to use HTTPS.
  * Bump Standards-Version to 3.9.8, no changes.
  * Enable all hardening buildflags.
  * Enable parallel builds.

 -- Bas Couwenberg <email address hidden>  Sun, 01 May 2016 03:10:57 +0200

Available diffs

• diff from 1.0.2-1 to 1.0.2-2 (908 bytes)

freexl (1.0.0g-1ubuntu0.14.04.2) trusty-security; urgency=medium

  * SECURITY UPDATE: Fix issues in previous security update (LP: #1516257)
    - afl-vulnerabilitities-regression.patch: Fix regression introduced by
      afl-vulnerabilitities.patch.
    - 32bit-multiplication-overflow.patch: Fix 32 bit multiplication overflow

 -- Bas Couwenberg <email address hidden>  Thu, 12 Nov 2015 22:04:49 +0100

Available diffs

• diff from 1.0.0g-1ubuntu0.14.04.1 to 1.0.0g-1ubuntu0.14.04.2 (1.4 KiB)

freexl (1.0.0h-1~exp1ubuntu1.1) vivid-security; urgency=medium

  * SECURITY UPDATE: Fix issues in previous security update (LP: #1516257)
    - afl-vulnerabilitities-regression.patch: Fix regression introduced by
      afl-vulnerabilitities.patch.
    - 32bit-multiplication-overflow.patch: Fix 32 bit multiplication overflow

 -- Bas Couwenberg <email address hidden>  Thu, 12 Nov 2015 22:04:49 +0100

Available diffs

• diff from 1.0.0h-1~exp1ubuntu1 to 1.0.0h-1~exp1ubuntu1.1 (1.4 KiB)

freexl (1.0.2-1) unstable; urgency=high

  * New upstream release.
    Fixes multiplication overflow on 32 bit platforms.
    See: https://groups.google.com/d/msg/spatialite-users/UZ7ivR6ASV0/K_8bjP1or_IJ
  * Update copyright file, changes:
    - Update copyright years for automake files
    - Drop .0 from GPL license shortnames
  * Use multi-line uscan option in watch file.

 -- Bas Couwenberg <email address hidden>  Wed, 15 Jul 2015 21:53:39 +0200

Available diffs

• diff from 1.0.1-2 to 1.0.2-1 (8.4 KiB)

freexl (1.0.1-2) unstable; urgency=medium

  * Include only C source examples.
    (closes: #783542)

 -- Bas Couwenberg <email address hidden>  Tue, 28 Apr 2015 08:14:32 +0200

Available diffs

• diff from 1.0.0h-1~exp1ubuntu1 (in ~ubuntu-security/ubuntu/ppa) to 1.0.1-2 (5.2 KiB)

freexl (1.0.0h-1~exp1ubuntu1) vivid; urgency=high

  * SECURITY UPDATE: Fix multiple vulnerabilities (LP: #1437087):
    - CVE 2015-2753: FreeXL before 1.0.0i allows remote attackers to cause a
      denial of service (stack corruption) or possibly execute arbitrary code
      via a crafted sector in a workbook.
    - CVE 2015-2754: FreeXL before 1.0.0i allows remote attackers to cause a
      denial of service (stack corruption) and possibly execute arbitrary code
      via a crafted workbook, related to a "premature EOF."
 -- Johan Van de Wauw <email address hidden>   Fri, 03 Apr 2015 21:55:42 +0200

Available diffs

• diff from 1.0.0h-1~exp1 (in Debian) to 1.0.0h-1~exp1ubuntu1 (1.7 KiB)

freexl (1.0.0g-1ubuntu0.14.10.1) utopic-security; urgency=high

   * SECURITY UPDATE: Fix multiple vulnerabilities allowing denial of service
     or possibly execute arbitrary code (LP: #1437087):
     - CVE 2015-2753: FreeXL before 1.0.0i allows remote attackers to cause a
       denial of service (stack corruption) or possibly execute arbitrary code
       via a crafted sector in a workbook.
     - CVE 2015-2754: FreeXL before 1.0.0i allows remote attackers to cause a
       denial of service (stack corruption) and possibly execute arbitrary code
       via a crafted workbook, related to a "premature EOF."
 -- Johan Van de Wauw <email address hidden>   Fri, 03 Apr 2015 22:47:20 +0200

Available diffs

• diff from 1.0.0g-1 (in Debian) to 1.0.0g-1ubuntu0.14.10.1 (1.7 KiB)

freexl (1.0.0g-1ubuntu0.14.04.1) trusty-security; urgency=high

   * SECURITY UPDATE: Fix multiple vulnerabilities allowing denial of service
     or possibly execute arbitrary code (LP: #1437087):
     - CVE 2015-2753: FreeXL before 1.0.0i allows remote attackers to cause a
       denial of service (stack corruption) or possibly execute arbitrary code
       via a crafted sector in a workbook.
     - CVE 2015-2754: FreeXL before 1.0.0i allows remote attackers to cause a
       denial of service (stack corruption) and possibly execute arbitrary code
       via a crafted workbook, related to a "premature EOF."
 -- Johan Van de Wauw <email address hidden>   Fri, 03 Apr 2015 22:47:20 +0200

Available diffs

• diff from 1.0.0g-1 (in Debian) to 1.0.0g-1ubuntu0.14.04.1 (1.7 KiB)

freexl (1.0.0h-1~exp1) experimental; urgency=medium


  * New upstream release.
  * Add upstream metadata.
  * Add gbp.conf to use pristine-tar by default.
  * Update copyright file, document autotools files & licenses.
  * Don't set default hardening options manually.
  * Don't append -lm to LDFLAGS, upstream does it since 1.0.0g.
  * Update Vcs-Browser URL to use cgit instead of gitweb.
  * Bump Standards-Version to 3.9.6, no changes.
  * Drop lintian overrides, shouldn't override pedantic tags.

 -- Bas Couwenberg <email address hidden>  Thu, 18 Dec 2014 21:16:44 +0100

Available diffs

• diff from 1.0.0g-1 to 1.0.0h-1~exp1 (10.9 KiB)

freexl (1.0.0g-1) unstable; urgency=low


  * New upstream release. 
  * Bump Standards-Version to 3.9.5, no changes required.
  * Add lintian override for debian-watch-may-check-gpg-signature,
    upstream doesn't provide signatures for verification.

 -- Bas Couwenberg <email address hidden>  Tue, 14 Jan 2014 11:18:32 +0100

Available diffs

• diff from 1.0.0f-2 to 1.0.0g-1 (2.2 KiB)

freexl (1.0.0f-2) unstable; urgency=low


  * Change Priority to optional, keep Priority extra for -dbg package.

 -- Bas Couwenberg <email address hidden>  Thu, 21 Nov 2013 23:08:31 +0100

Available diffs

• diff from 1.0.0f-1 to 1.0.0f-2 (595 bytes)

freexl (1.0.0f-1) unstable; urgency=low


  * New upstream version.
  * Add myself to Uploaders.
  * Update watch file, handle common mistakes.
  * Use dh-autoreconf for retooling.
  * Update Homepage URL.
  * Use canonical URLs for Vcs-* fields.
  * Multi-Arch: same dev and dbg packages.
  * Add lintian overrides for no upstream changelog, link to upstream timeline.
  * Update copyright file.
  * Move maintenance from collab-maint to pkg-grass.

 -- Bas Couwenberg <email address hidden>  Wed, 02 Oct 2013 18:42:35 +0200

Available diffs

• diff from 1.0.0d-1 to 1.0.0f-1 (51.9 KiB)

freexl (1.0.0d-1) unstable; urgency=low


  * New upstream version
  * Standards-Version bump to 3.9.4, no changes needed
  * debhelper Build-Dependency bumped to 9
  * Manually export LDFLAGS in debian/rules to fix linking issue with
    the library
  * Updated debian/copyright
  * Enable hardening build-flags in debian/rules

 -- David Paleino <email address hidden>  Thu, 11 Oct 2012 10:37:33 +0200

Available diffs

• diff from 1.0.0b-1 to 1.0.0d-1 (157.2 KiB)

freexl (1.0.0b-1) unstable; urgency=low


  * New upstream version (Closes: #650280)
  * Fixed debian/watch

 -- David Paleino <email address hidden>  Wed, 22 Feb 2012 19:47:55 +0100

Available diffs

• diff from 0.0.2~beta20110817-1 (in Ubuntu) to 1.0.0b-1 (652.6 KiB)

freexl (0.0.2~beta20110817-1) unstable; urgency=low

  * Initial release (Closes: #644087)
 -- Ubuntu Archive Auto-Sync <email address hidden>   Sat,  12 Nov 2011 07:24:38 +0000