Change log for gnome-autoar package in Ubuntu

gnome-autoar (0.4.4-2build4) noble; urgency=medium

  * No-change rebuild against libarchive13t64

 -- Steve Langasek <email address hidden>  Sun, 07 Apr 2024 07:06:27 +0000

Available diffs

• diff from 0.4.4-2build3 to 0.4.4-2build4 (319 bytes)

gnome-autoar (0.4.4-2build3) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- Steve Langasek <email address hidden>  Sun, 31 Mar 2024 01:12:34 +0000

Available diffs

• diff from 0.4.4-2build2 to 0.4.4-2build3 (316 bytes)

gnome-autoar (0.4.4-2build2) noble; urgency=medium

  * No-change rebuild against libglib2.0-0t64

 -- Steve Langasek <email address hidden>  Mon, 11 Mar 2024 22:42:52 +0000

Available diffs

• diff from 0.4.4-2 (in Debian) to 0.4.4-2build2 (621 bytes)
• diff from 0.4.4-2build1 to 0.4.4-2build2 (302 bytes)

gnome-autoar (0.4.4-2build1) noble; urgency=medium

  * No-change rebuild against libglib2.0-0t64

 -- Steve Langasek <email address hidden>  Fri, 08 Mar 2024 04:36:43 +0000

Available diffs

• diff from 0.4.4-2 (in Debian) to 0.4.4-2build1 (596 bytes)

gnome-autoar (0.4.4-2) unstable; urgency=medium

  * Release to unstable

 -- Jeremy Bícha <email address hidden>  Mon, 29 May 2023 18:06:30 -0400

Available diffs

• diff from 0.4.4-1 (in Ubuntu) to 0.4.4-2 (303 bytes)

gnome-autoar (0.4.4-1) experimental; urgency=medium

  * New upstream release
  * debian/libgnome-autoar-0-0.symbols: Add new symbol
  * Update standards version to 4.6.2, no changes needed

 -- Jeremy Bicha <email address hidden>  Mon, 27 Mar 2023 14:32:17 -0400

Available diffs

• diff from 0.4.3-1 (in Debian) to 0.4.4-1 (3.7 KiB)

gnome-autoar (0.4.3-1) unstable; urgency=medium

  * New upstream release
  * Bump Standards-Version to 4.6.0

 -- Jeremy Bicha <email address hidden>  Fri, 11 Feb 2022 08:19:21 -0500

Available diffs

• diff from 0.4.2-1 to 0.4.3-1 (2.1 KiB)

gnome-autoar (0.4.2-1) unstable; urgency=medium

  * New upstream release

 -- Jeremy Bicha <email address hidden>  Sun, 16 Jan 2022 08:12:07 -0500

Available diffs

• diff from 0.4.1-1 to 0.4.2-1 (4.8 KiB)

gnome-autoar (0.4.1-1) unstable; urgency=medium

  * New upstream release
  * debian/patches:
    - remove cherrypicks from upstream since they are in the new version

 -- Sebastien Bacher <email address hidden>  Thu, 11 Nov 2021 12:03:03 +0100

Available diffs

• diff from 0.4.0-1 to 0.4.1-1 (3.7 KiB)

gnome-autoar (0.4.0-1) unstable; urgency=medium

  * New upstream release
  * Build with meson
  * Cherry-pick 3 patches to fix build with meson 0.56
  * debian/libgnome-autoar-0.0.symbols: Add new symbol
  * Release to unstable

 -- Jeremy Bicha <email address hidden>  Sun, 22 Aug 2021 16:59:52 -0400

Available diffs

• diff from 0.3.3-1 to 0.4.0-1 (1.7 MiB)

gnome-autoar (0.3.3-1) experimental; urgency=medium

  * New upstream release
    - Fix extraction of one file archives (lp: #1929304)

 -- Sebastien Bacher <email address hidden>  Fri, 04 Jun 2021 10:58:31 +0200

Available diffs

• diff from 0.3.2-1 to 0.3.3-1 (3.3 KiB)

gnome-autoar (0.2.3-1ubuntu0.4) bionic-security; urgency=medium

  * SECURITY REGRESSION: Fix extracting one-file archives (LP: #1929304)
    - debian/patches/fix_one_file_archives.patch: don't create en empty
      folder when extracting with nautilus in
      gnome-autoar/autoar-extractor.c.
    - debian/patches/fix_one_file_archives2.patch: prevent redundant path
      name handling for equal prefixes in gnome-autoar/autoar-extractor.c.

 -- Marc Deslauriers <email address hidden>  Fri, 04 Jun 2021 07:03:33 -0400

Available diffs

• diff from 0.2.3-1ubuntu0.3 to 0.2.3-1ubuntu0.4 (1.9 KiB)

gnome-autoar (0.2.3-2ubuntu0.4) focal-security; urgency=medium

  * SECURITY REGRESSION: Fix extracting one-file archives (LP: #1929304)
    - debian/patches/fix_one_file_archives.patch: don't create en empty
      folder when extracting with nautilus in
      gnome-autoar/autoar-extractor.c.
    - debian/patches/fix_one_file_archives2.patch: prevent redundant path
      name handling for equal prefixes in gnome-autoar/autoar-extractor.c.

 -- Marc Deslauriers <email address hidden>  Fri, 04 Jun 2021 07:03:08 -0400

Available diffs

• diff from 0.2.3-2ubuntu0.3 to 0.2.3-2ubuntu0.4 (1.9 KiB)

gnome-autoar (0.3.1-1ubuntu0.1) hirsute-security; urgency=medium

  * SECURITY REGRESSION: Fix extracting one-file archives (LP: #1929304)
    - debian/patches/fix_one_file_archives.patch: don't create en empty
      folder when extracting with nautilus in
      gnome-autoar/autoar-extractor.c.
    - debian/patches/fix_one_file_archives2.patch: prevent redundant path
      name handling for equal prefixes in gnome-autoar/autoar-extractor.c.

 -- Marc Deslauriers <email address hidden>  Fri, 04 Jun 2021 06:58:43 -0400

Available diffs

• diff from 0.3.1-1 (in Debian) to 0.3.1-1ubuntu0.1 (2.1 KiB)

gnome-autoar (0.2.4-2ubuntu0.4) groovy-security; urgency=medium

  * SECURITY REGRESSION: Fix extracting one-file archives (LP: #1929304)
    - debian/patches/fix_one_file_archives.patch: don't create en empty
      folder when extracting with nautilus in
      gnome-autoar/autoar-extractor.c.
    - debian/patches/fix_one_file_archives2.patch: prevent redundant path
      name handling for equal prefixes in gnome-autoar/autoar-extractor.c.

 -- Marc Deslauriers <email address hidden>  Fri, 04 Jun 2021 07:02:45 -0400

Available diffs

• diff from 0.2.4-2ubuntu0.3 to 0.2.4-2ubuntu0.4 (1.9 KiB)

gnome-autoar (0.3.2-1) experimental; urgency=medium

  * New upstream release

 -- Sebastien Bacher <email address hidden>  Mon, 17 May 2021 16:20:30 +0200

Available diffs

• diff from 0.3.1-1 to 0.3.2-1 (5.5 KiB)

gnome-autoar (0.2.3-2ubuntu0.3) focal-security; urgency=medium

  * SECURITY UPDATE: more directory traversal issues
    - debian/patches/CVE-2021-28650-*.patch: apply multiple commits from
      0.3.1 to fix issues in gnome-autoar/autoar-extractor.c.
    - debian/patches/CVE-2020-36241.patch: removed, no longer needed.
    - debian/patches/CVE-2020-36241-2.patch: removed, no longer needed.
    - CVE-2021-28650

 -- Marc Deslauriers <email address hidden>  Wed, 05 May 2021 12:57:41 -0400

Available diffs

• diff from 0.2.3-2ubuntu0.2 to 0.2.3-2ubuntu0.3 (7.8 KiB)

gnome-autoar (0.2.3-1ubuntu0.3) bionic-security; urgency=medium

  * SECURITY UPDATE: more directory traversal issues
    - debian/patches/CVE-2021-28650-*.patch: apply multiple commits from
      0.3.1 to fix issues in gnome-autoar/autoar-extractor.c.
    - debian/patches/CVE-2020-36241.patch: removed, no longer needed.
    - debian/patches/CVE-2020-36241-2.patch: removed, no longer needed.
    - CVE-2021-28650

 -- Marc Deslauriers <email address hidden>  Wed, 05 May 2021 12:58:16 -0400

Available diffs

• diff from 0.2.3-1ubuntu0.2 to 0.2.3-1ubuntu0.3 (7.8 KiB)

gnome-autoar (0.2.4-2ubuntu0.3) groovy-security; urgency=medium

  * SECURITY UPDATE: more directory traversal issues
    - debian/patches/CVE-2021-28650-*.patch: apply multiple commits from
      0.3.1 to fix issues in gnome-autoar/autoar-extractor.c.
    - debian/patches/CVE-2020-36241.patch: removed, no longer needed.
    - debian/patches/CVE-2020-36241-2.patch: removed, no longer needed.
    - CVE-2021-28650

 -- Marc Deslauriers <email address hidden>  Wed, 05 May 2021 12:26:03 -0400

Available diffs

• diff from 0.2.4-2ubuntu0.2 to 0.2.4-2ubuntu0.3 (7.7 KiB)

gnome-autoar (0.3.1-1) experimental; urgency=medium

  * New upstream release
  * debian/control.in:
    - updated libarchive requirement

 -- Sebastien Bacher <email address hidden>  Mon, 15 Mar 2021 10:07:29 +0100

Available diffs

• diff from 0.3.0-1 to 0.3.1-1 (12.6 KiB)

gnome-autoar (0.2.3-1ubuntu0.2) bionic-security; urgency=medium

  * SECURITY REGRESSION: missing subfolder creation (LP: #1917812)
    - debian/patches/CVE-2020-36241-2.patch: do not fail if parent folders
      don't exist in gnome-autoar/autoar-extractor.c.

 -- Marc Deslauriers <email address hidden>  Mon, 08 Mar 2021 07:27:38 -0500

Available diffs

• diff from 0.2.3-1ubuntu0.1 to 0.2.3-1ubuntu0.2 (1.2 KiB)

gnome-autoar (0.2.3-2ubuntu0.2) focal-security; urgency=medium

  * SECURITY REGRESSION: missing subfolder creation (LP: #1917812)
    - debian/patches/CVE-2020-36241-2.patch: do not fail if parent folders
      don't exist in gnome-autoar/autoar-extractor.c.

 -- Marc Deslauriers <email address hidden>  Mon, 08 Mar 2021 07:27:13 -0500

Available diffs

• diff from 0.2.3-2ubuntu0.1 to 0.2.3-2ubuntu0.2 (1.2 KiB)

gnome-autoar (0.2.4-2ubuntu0.2) groovy-security; urgency=medium

  * SECURITY REGRESSION: missing subfolder creation (LP: #1917812)
    - debian/patches/CVE-2020-36241-2.patch: do not fail if parent folders
      don't exist in gnome-autoar/autoar-extractor.c.

 -- Marc Deslauriers <email address hidden>  Mon, 08 Mar 2021 07:23:33 -0500

Available diffs

• diff from 0.2.4-2ubuntu0.1 to 0.2.4-2ubuntu0.2 (1.2 KiB)

gnome-autoar (0.3.0-1) experimental; urgency=medium

  * New upstream version

 -- Sebastien Bacher <email address hidden>  Thu, 25 Feb 2021 22:03:10 +0100

Available diffs

• diff from 0.2.4-2ubuntu1 (in Ubuntu) to 0.3.0-1 (392.7 KiB)

gnome-autoar (0.2.3-2ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: directory traversal issue (LP: #1901240)
    - debian/patches/CVE-2020-36241.patch: do not extract files outside the
      destination dir in gnome-autoar/autoar-extractor.c.
    - CVE-2020-36241

 -- Marc Deslauriers <email address hidden>  Wed, 10 Feb 2021 13:59:00 -0500

Available diffs

• diff from 0.2.3-2 (in Debian) to 0.2.3-2ubuntu0.1 (2.2 KiB)

gnome-autoar (0.2.3-1ubuntu0.1) bionic-security; urgency=medium

  * SECURITY UPDATE: directory traversal issue (LP: #1901240)
    - debian/patches/CVE-2020-36241.patch: do not extract files outside the
      destination dir in gnome-autoar/autoar-extractor.c.
    - CVE-2020-36241

 -- Marc Deslauriers <email address hidden>  Wed, 10 Feb 2021 13:59:35 -0500

Available diffs

• diff from 0.2.3-1 (in Debian) to 0.2.3-1ubuntu0.1 (2.2 KiB)

gnome-autoar (0.2.4-2ubuntu1) hirsute; urgency=medium

  * SECURITY UPDATE: directory traversal issue (LP: #1901240)
    - debian/patches/CVE-2020-36241.patch: do not extract files outside the
      destination dir in gnome-autoar/autoar-extractor.c.
    - CVE-2020-36241

 -- Marc Deslauriers <email address hidden>  Wed, 10 Feb 2021 13:55:36 -0500

Available diffs

• diff from 0.2.4-2 (in Debian) to 0.2.4-2ubuntu1 (2.2 KiB)

gnome-autoar (0.2.4-2ubuntu0.1) groovy-security; urgency=medium

  * SECURITY UPDATE: directory traversal issue (LP: #1901240)
    - debian/patches/CVE-2020-36241.patch: do not extract files outside the
      destination dir in gnome-autoar/autoar-extractor.c.
    - CVE-2020-36241

 -- Marc Deslauriers <email address hidden>  Wed, 10 Feb 2021 13:55:36 -0500

Available diffs

• diff from 0.2.4-2 (in Debian) to 0.2.4-2ubuntu0.1 (2.2 KiB)

gnome-autoar (0.2.4-2) unstable; urgency=medium

  * Bump debhelper-compat to 13
  * Build-Depend on dh-sequence-gir and dh-sequence-gnome
  * Bump Standards-Version to 4.5.0

 -- Jeremy Bicha <email address hidden>  Sat, 02 May 2020 19:01:37 -0400

Available diffs

• diff from 0.2.4-1 to 0.2.4-2 (1.0 KiB)

gnome-autoar (0.2.4-1) unstable; urgency=medium

  * Team upload.

  [ Simon McVittie ]
  * New upstream release
    - Export upstream git tag instead of using a pre-prepared tarball
      since upstream have not released this version as a tarball
    - This version no longer uses gnome-common (Closes: #837596)
    - Build-depend on autoconf-archive instead of gnome-common
  * Use autogen.sh in dh_autoreconf, to regenerate gtk-doc files
  * Add superficial autopkgtests for the -dev packages
  * libgnome-autoar-gtk-0-dev: Add missing dependency on
    libgnome-autoar-0-dev
  * Standards-Version: 4.4.0 (no changes required)
  * Set Rules-Requires-Root to no
  * Use debhelper-compat 12
  * Disable static libraries at configure time instead of deleting them
    afterwards

  [ Debian Janitor ]
  * Set upstream metadata fields:
    Bug-Database, Bug-Submit, Repository, Repository-Browse.

 -- Andreas Henriksson <email address hidden>  Sun, 08 Mar 2020 19:02:23 +0100

Available diffs

• diff from 0.2.3-2 to 0.2.4-1 (389.2 KiB)

gnome-autoar (0.2.3-2) unstable; urgency=medium

  * Restore -Wl,-O1 to our LDFLAGS
  * Bump Standards-Version to 4.3.0

 -- Jeremy Bicha <email address hidden>  Sun, 23 Dec 2018 09:39:18 -0500

Available diffs

• diff from 0.2.3-1 to 0.2.3-2 (774 bytes)

gnome-autoar (0.2.3-1) unstable; urgency=medium

  * New upstream release

 -- Jeremy Bicha <email address hidden>  Sun, 25 Feb 2018 09:31:28 -0500

Available diffs

• diff from 0.2.2-3 to 0.2.3-1 (32.0 KiB)

gnome-autoar (0.2.2-3) unstable; urgency=medium

  * Update Vcs fields for migration to https://salsa.debian.org/
  * Bump debhelper compat to 11

 -- Jeremy Bicha <email address hidden>  Sat, 03 Feb 2018 21:57:41 -0500

Available diffs

• diff from 0.2.2-2 to 0.2.2-3 (1.2 KiB)

gnome-autoar (0.2.2-2) unstable; urgency=medium

  * Update Vcs fields for conversion to git
  * Add debian/gbp.conf
  * Bump Standards-Version to 4.1.2

 -- Jeremy Bicha <email address hidden>  Thu, 14 Dec 2017 12:40:15 -0500

Available diffs

• diff from 0.2.2-1 to 0.2.2-2 (825 bytes)

gnome-autoar (0.2.2-1) unstable; urgency=medium

  * New upstream release
  * debian/control.in: Build-depend on valac
  * debian/libgnome-autoar-0-dev.install:
    - Install vala bindings
  * Drop libgnome-autoar-common package since the new version does not
    install the currently unused gsettings schemas
  * Bump Standards-Version to 4.1.0

 -- Jeremy Bicha <email address hidden>  Wed, 30 Aug 2017 08:21:03 -0400

Available diffs

• diff from 0.2.2-0ubuntu1 (in Ubuntu) to 0.2.2-1 (862 bytes)

gnome-autoar (0.2.2-0ubuntu1) zesty; urgency=medium

  * New usptream release
  * debian/control.in:
    - Build-depend on valac
  * debian/libgnome-autoar-0-dev.install:
    - Install vala bindings
  * Drop libgnome-autoar-common package since the new version does not
    install the currently unused gsettings schemas

 -- Jeremy Bicha <email address hidden>  Sat, 01 Apr 2017 16:20:08 -0400

Available diffs

• diff from 0.1.1-4 (in Debian) to 0.2.2-0ubuntu1 (29.5 KiB)

gnome-autoar (0.1.1-4) unstable; urgency=medium

  * Add Build-Depends on gnome-common, required for autoreconf.
  * Use dh_gnome --no-gnome-versions as the package does not (yet) follow the
    typical GNOME versioning scheme.

 -- Michael Biebl <email address hidden>  Mon, 12 Sep 2016 19:26:31 +0200

Available diffs

• diff from 0.1.1-3 to 0.1.1-4 (728 bytes)

gnome-autoar (0.1.1-3) unstable; urgency=medium

  * Fix the typo in debian/control.in, not debian/control.

 -- Michael Biebl <email address hidden>  Mon, 05 Sep 2016 19:16:38 +0200