-
libarchive (3.7.2-2) unstable; urgency=medium
[ Luca Boccassi ]
* libarchive-dev: depend on -dev packages in an attempt to
fix pkg-config --static --libs
Addresses: 1056317; more work needed on libarchive's own
configure tests
[ Peter Pentchev ]
* Acknowledge Lukas Märdian 64-bit-time_t-related NMU. Thanks!
* Add the year 2024 to my debian/* copyright notice.
* Re-sort the dependencies lists in the debian/control file.
* Switch the pkg-config dependency over to pkgconf.
* Add the robust-error-reporting upstream patch. Closes: #1068047
-- Peter Pentchev <email address hidden> Sat, 30 Mar 2024 20:11:06 +0200
-
libarchive (3.7.2-1.1ubuntu3) noble; urgency=medium
* No-change rebuild for CVE-2024-3094
-- Steve Langasek <email address hidden> Sun, 31 Mar 2024 07:43:52 +0000
-
libarchive (3.7.2-1.1ubuntu2) noble; urgency=medium
* Rebuild against new time64_t renamed libraries.
-- Gianfranco Costamagna <email address hidden> Thu, 21 Mar 2024 00:19:38 +0100
-
libarchive (3.7.2-1.1ubuntu1) noble; urgency=medium
* Merge with Debian; remaining changes:
- Run dh_auto_test by default
libarchive (3.7.2-1.1) unstable; urgency=medium
* Non-maintainer upload.
* Rename libraries for 64-bit time_t transition. Closes: #1062224
-- Matthias Klose <email address hidden> Mon, 04 Mar 2024 06:00:54 +0100
-
libarchive (3.7.2-1ubuntu2) noble; urgency=medium
* armhf (-fstack-clash-protection) breakage rebuild
-- Mate Kukri <email address hidden> Thu, 23 Nov 2023 15:10:55 +0000
-
libarchive (3.7.2-1ubuntu1) noble; urgency=medium
* Merge with Debian unstable. Remaining changes:
- Run dh_auto_test by default
libarchive (3.7.2-1) unstable; urgency=medium
* Add the iso9660-hash patch to fix file ordering. Closes: #1051322
* Add the year 2023 to my debian/* copyright notice.
* Declare compatibility with version 1 of the dpkg build API:
- drop the implied Rules-Requires-Root declaration
- include dpkg's default.mk file for completeness
* Use dh-package-notes to record ELF package metadata.
* New upstream version:
- build and install the new bsdunzip tool in libarchive-tools
- drop the iconv-pkgconfig patch, applied upstream
- update the upstream copyright information
* Do not detect -amd64 versions in the watch file.
* Add the test-zstd-32bit upstream patch.
-- Mate Kukri <email address hidden> Fri, 17 Nov 2023 10:54:19 +0000
-
libarchive (3.6.2-1ubuntu1) lunar; urgency=medium
* Sync with Debian. Remaining change:
- Run dh_auto_test by default
libarchive (3.6.2-1) unstable; urgency=medium
[ Debian Janitor ]
* Set upstream metadata fields: Bug-Database.
* Update standards version to 4.6.0, no changes needed.
[ Peter Pentchev ]
* Declare compliance with Policy 4.6.2 with no changes.
* Fix the licensing of the blake2-related files.
Closes: #1023392
* New upstream version:
- fix a ZIP read vulnerability (CVE-2022-28066)
Closes: #1008953
- fix a memory allocation vulnerability (CVE-2022-36227)
Closes: #1024669
- refresh the typos patch
- remove a lot of libarchive internal functions from the shared
library's symbols file. These functions were never present in
any of the public-facing libarchive header files, so they should
not be referenced by any libarchive consumers. In version 3.6.2,
libarchive switched to a "hide internal symbols" policy, so that
these symbols are now not present in the shipped shared library.
- drop the optional internal symbols regular expressions, too;
now that libarchive hides its internal symbols, the appearance of
any names like that in the generated symbols file would be a bug
- add the iconv-pkgconfig patch to drop the reference to "iconv"
from the .pc file: on Debian systems, iconv(3) is part of glibc
-- Jeremy Bicha <email address hidden> Wed, 04 Jan 2023 15:32:25 -0500
