gcab (1.2-3~deb10u1) buster; urgency=medium
* Rebuild for Buster.
-- Stephen Kitt <skitt@debian.org> Fri, 23 Aug 2019 21:30:08 +0200
gcab (1.2-3) unstable; urgency=medium
* Apply upstream patch to fix corruption when extracting.
Closes: #931487. LP: #1835589.
-- Stephen Kitt <skitt@debian.org> Sat, 06 Jul 2019 10:18:07 +0200
gcab (1.2-2) unstable; urgency=medium
* Avoid needing PATH_MAX, so we can build on Hurd. Closes: #888640;
thanks to Paul Sonnenschein for the patch!
-- Stephen Kitt <skitt@debian.org> Sat, 22 Dec 2018 12:37:31 +0100
gcab (1.2-1) unstable; urgency=medium
* New upstream release, including the fix for the rewind regression.
-- Stephen Kitt <skitt@debian.org> Tue, 11 Dec 2018 22:14:38 +0100
gcab (1.1-4) unstable; urgency=medium
* Apply upstream patch to fix rewind regression. LP: #1801643, #1801644.
* Switch to a secure upstream URL in debian/watch.
* ddeb migration complete, drop the dh_strip override.
* Add “Build-Depends-Package” entry to libdcab-1.0-0.symbols.
* Set “Rules-Requires-Root: no”.
* Standards-Version 4.2.1, no further change required.
-- Stephen Kitt <skitt@debian.org> Mon, 05 Nov 2018 17:53:25 +0100
gcab (1.1-3) unstable; urgency=medium
* Migrate to Salsa.
* Standards-Version 4.1.4, no further change required.
-- Stephen Kitt <skitt@debian.org> Wed, 02 May 2018 20:28:11 +0200
gcab (1.1-2) unstable; urgency=medium
* Patch the build to avoid requiring git. Closes: #890111.
-- Stephen Kitt <skitt@debian.org> Sun, 11 Feb 2018 18:49:38 +0100
gcab (1.1-1) unstable; urgency=medium
* New upstream release.
-- Stephen Kitt <skitt@debian.org> Sat, 10 Feb 2018 22:26:53 +0100
gcab (1.0-1) unstable; urgency=medium
* New upstream release, merging a number of patches and switching to the
Meson build system.
* Use dh_missing instead of dh_install --list-missing.
-- Stephen Kitt <skitt@debian.org> Thu, 25 Jan 2018 19:55:45 +0100
gcab (0.7-7) unstable; urgency=high
* Switch to debhelper compatibility level 11.
* Apply upstream fix for CVE-2018-5345. Closes: #887776. This also fixes
the out-of-bounds read in cdata_finish(). Closes: #881922.
* Standards-Version 4.1.3, no change required.
-- Stephen Kitt <skitt@debian.org> Tue, 23 Jan 2018 14:25:04 +0100
gcab (0.7-6) unstable; urgency=medium
* Apply upstream fix to the fix for checksum calculations on big-endian
and little-endian platforms. LP: #1737723.
* Standards-Version 4.1.2, no change required.
-- Stephen Kitt <skitt@debian.org> Tue, 12 Dec 2017 20:36:48 +0100
gcab (0.7-5) unstable; urgency=medium
* Apply upstream fix for checksum calculations on big-endian platforms;
thanks to Mario Limonciello for the report and pointer to the patch.
Closes: #882013.
* Standards-Version 4.1.1, no further change required.
-- Stephen Kitt <skitt@debian.org> Mon, 20 Nov 2017 20:06:54 +0100
gcab (0.7-4) unstable; urgency=medium
* Add overrides for Lintian’s “spelling error” covering the use of “GNU
Public License” (which refers to the general concept here).
* Make gcab produce reproducible cabinets; thanks to Chris Lamb for the
patch. Closes: #872460.
* Fix an invalid libgcab-dev link in libgcab-doc.
-- Stephen Kitt <skitt@debian.org> Thu, 17 Aug 2017 22:43:03 +0200
gcab (0.7-3) unstable; urgency=medium
* Switch to debhelper compatibility level 10.
* As per the GObject-Introspection policy, the typelib package should be
gir1.2-gcab-1.0, not gir1.2-libgcab-1.0; rename the package
accordingly. The -dev package also needs a dependency on the typelib
package.
* Update debian/copyright.
* Standards-Version 4.0.0, no further change required.
-- Stephen Kitt <skitt@debian.org> Tue, 11 Jul 2017 12:35:49 +0200
gcab (0.7-2) unstable; urgency=medium
* Explicitly build-depend on intltool and pkg-config instead of relying
on gnome-common. Closes: #837853.
* Standards-Version 3.9.8, no change required.
-- Stephen Kitt <skitt@debian.org> Thu, 15 Sep 2016 23:02:12 +0200
gcab (0.7-1) unstable; urgency=medium
* New upstream release.
* Add unique license names for all the permissive licenses.
* Migrate to dbgsym debug packages.
* Switch to https: VCS URIs (see #810378).
* Add the Ubuntu patch to avoid integer overflows in zalloc.
* Standards-Version 3.9.7, no change required.
* Enable all hardening options.
-- Stephen Kitt <skitt@debian.org> Fri, 18 Mar 2016 12:46:01 +0100
gcab (0.6-1) unstable; urgency=medium
* New upstream release.
* Drop afl-fixes.patch, merged upstream.
-- Stephen Kitt <skitt@debian.org> Fri, 20 Mar 2015 20:11:15 +0100
gcab (0.5-1) unstable; urgency=medium
* New upstream release.
* Drop patches fix-glib-linking, fix-gtkdoc-tests, cve-2015-0552.patch,
merged upstream.
* m4/intltool.m4 is no longer shipped, remove it from
debian/copyright.
-- Stephen Kitt <skitt@debian.org> Thu, 12 Mar 2015 06:59:08 +0100
gcab (0.4-3) unstable; urgency=medium
* Fix all the crashes detected by AFL. Thanks to Jakub Wilk for the
suggestion! Closes: #775941.
* Fix hyphens in the manpage.
-- Stephen Kitt <skitt@debian.org> Sun, 25 Jan 2015 23:51:15 +0100
gcab (0.4-2) unstable; urgency=medium
* Indicate that libgcab/gcab-enums.* is licensed using LGPL-2.0+, not
2.1+ like the rest of the project. Thanks to Thorsten Alteholz for
pointing out that this should be indicated explicitly!
* Prevent path traversals; contents of cabinet files are always
extracted below the extraction point and cannot escape it. Closes:
#774580. This is CVE-2015-0552.
-- Stephen Kitt <skitt@debian.org> Tue, 06 Jan 2015 00:14:58 +0100
gcab (0.4-1) unstable; urgency=low
* Initial release. Closes: #771253.
-- Stephen Kitt <skitt@debian.org> Sat, 29 Nov 2014 00:12:00 +0100