-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 24 Nov 2019 14:43:50 +0100 Source: libsolv Architecture: source Version: 0.6.36-1 Distribution: unstable Urgency: medium Maintainer: Mike Gabriel <sunweaver@debian.org> Changed-By: Mike Gabriel <sunweaver@debian.org> Closes: 889509 923002 936923 Changes: libsolv (0.6.36-1) unstable; urgency=medium . [ Mihai Moldovan ] * Fix CMake module installation, prepare for DNF support (Closes: #889509). Details see below. . * New upstream release. - Fixes CVE-2018-20532 CVE-2018-20533 CVE-2018-20534. (Closes: #923002). * debian/patches: + Drop 1004_cmake-module-path-fix.patch. Breaks package, since Find* modules should actually be installed in the modules directory and this file does NOT provide version information. + Add 1005_install-cmake-module-into-libdir.patch. Installs FindLibSolv.cmake into ${libdir}/cmake/libsolv/. + Rename 1006_various-types.patch to 1006_various-typos.patch and refresh. + Add 3000_ext-repo_rpmdb_debian-style-home-dir-rpmdb.patch for RPMDB handling in home directories, compatible with Debian's rpm package. + Add 3010_ext-libsolvext.ver_add-rpm_state_create_real.patch for binary compatibility and exporting the newly inserted symbol. + Add 3020_tools-rpmdb2solve.c-add-homedir-functionality.patch, implementing homedir-based RPMDB support via the -H flag in the rpmdb2solve tool. + Add 9000_ext_repo_updateinfoxml.c_add-support-for-modular-data- aac9f0c2d791fa96bc9423231050f9e18fb973d6.patch to backport the modular updateinfo.xml functionality. * debian/libsolvext0.symbols: + Update. * debian/rules: + Enable Fedora comps support. + Add DEB_DH_MISSING_ARGS with --fail-missing, since the option is deprecated in dh_install and has been removed in compat 12. We'll keep it around due to using compat 10 for now. * debian/libsolv0-dev.install: + Install FindLibSolv.cmake correctly. * debian/copyright: + Add missing files/information. * debian/: + Add libsolv-tools.lintian-overrides. + Add libsolvext0.lintian-overrides. * debian/libsolv{-tools,ext0}.lintian-overrides: + Silence warning about modifying/reading the dpkg database directly. libsolv's capabilities are actually useful here. * debian/libsolv{,ext}0.symbols: + Add Build-Depends-Package tag mentioning libsolv0-dev package. . [ Mike Gabriel ] * debian/control: + Bump Standards-Version: to 4.4.1. No changes needed. + Add Rules-Requires-Root: field and set it to "no". * debian/*: + Drop Py2 python-solv bin.pkg. (Closes: #936923). Checksums-Sha1: d61b92b4e3a14f519d803cdec1f02f18a38eb813 2407 libsolv_0.6.36-1.dsc 677f26b2746ac33acec6f98148a619810362a076 647054 libsolv_0.6.36.orig.tar.gz b2d5b052115d806eed7c6b629a91634becdced7b 19564 libsolv_0.6.36-1.debian.tar.xz 28eb573a0ec83d47b5706c558f959e2347ba6e1e 8857 libsolv_0.6.36-1_source.buildinfo Checksums-Sha256: 464d6d1da3835b45b50e5e9c75a0c61f9fd7aecb416133cd47d6c4a1807a0b86 2407 libsolv_0.6.36-1.dsc 1f0cfbddf9166ecc703605309f6dc8cdf15d0e2aa06d91c61110a6e7387f223e 647054 libsolv_0.6.36.orig.tar.gz 2a03ffbc55ce97f74c65f1063ef85531c9febabe6576dea3a51396367fee0fe0 19564 libsolv_0.6.36-1.debian.tar.xz 3f5c7a44c36123afc89fe8e019a665f8c22e82dc7d7da78f5cfd2e5104d7669e 8857 libsolv_0.6.36-1_source.buildinfo Files: d4b96232a04d20dc26498fa7fc73c66f 2407 admin optional libsolv_0.6.36-1.dsc a540aae13702a8f068c6e88439f21a23 647054 admin optional libsolv_0.6.36.orig.tar.gz e8306b104f5fba7a6ec1b70d1956ae79 19564 admin optional libsolv_0.6.36-1.debian.tar.xz fb257bfdfad8ee673a497f999200ded3 8857 admin optional libsolv_0.6.36-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJJBAEBCAAzFiEEm/uu6GwKpf+/IgeCmvRrMCV3GzEFAl3akC8VHHN1bndlYXZl ckBkZWJpYW4ub3JnAAoJEJr0azAldxsxICEP/jBa81XNVS8ubnluH44b731yGukl imYHXn+lDg5FqxwotgIS2dvkD8mK14ZLa127QQiBW3jKJd4sLdImRmKGHys3fogN 3nyHhajw1jZY4UrvRoIO/g4hYkqSIwlsZj20UyjTMe5NAzD/RTU4mXpeAp0RH/nU 5+GEAXO7lTVixkgGpipXt0G1xnT0xwdx0L90gPz5hpU5CkLzN6akl6XYllqP4Sas 4OanBMmgFGtrHS7yFZMn/0s2l/vx7ywxHYuj4HSZCq7vGqCsuiaElbz/lbfqQsIx mIXA3gsTXm1ht1Cc9PFbDf1/CUpC9F0CZ9En4OxRWWAyOxRsnzAScb3A7tZrBfsV R9sLnuaOqPplv9m7V/LArYxMMZbGov7RDUIXM0eqp2AuFkATaT50g5s0ZGYcZtXg 53lPffwIvogz14Hyyn1gS+yww8OOXF44l/YGaSmFycDaIU342kqcWTb6mp5xJU2T NUiQ4SuMnYija+x5XTCnkNdHsQViilbiUGnbllNKfu95Arb+1ODmVhdSznaLvgpA EA96xVFqy5TntNnOam6GLT++gGExUVb0rV90rgtdsdawpCS9g4NatNpBcs9XXvyJ FI0Gs3jRzcMKpTcnj3lfNNGXt+8QeZ7kEoPGsaCDG14P+VrsYzdZlV5ncvvE7eTC LGldjMVWwB7dQkFb =qKby -----END PGP SIGNATURE-----