-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 16 Feb 2020 22:42:04 +0100 Source: zsh Binary: zsh zsh-common zsh-dbgsym zsh-dev zsh-doc zsh-static zsh-static-dbgsym Architecture: source all amd64 Version: 5.8-1 Distribution: unstable Urgency: medium Maintainer: Debian Zsh Maintainers <pkg-zsh-devel@lists.alioth.debian.org> Changed-By: Axel Beckert <abe@debian.org> Description: zsh - shell with lots of features zsh-common - architecture independent files for Zsh zsh-dev - shell with lots of features (development files) zsh-doc - zsh documentation - info/HTML format zsh-static - shell with lots of features (static link) Closes: 951457 951458 Changes: zsh (5.8-1) unstable; urgency=medium . * Switch to using the original upstream tar ball instead of generating a minimal upstream tar ball from upstream's git repository. Drop most generated files in the upstream tar ball during the clean target via debian/clean. + Create a pristine-tar branch in the packaging git repository. + Fixes lintian warning orig-tarball-missing-upstream-signature. + [c75569cf] debian/clean: Add some more files from the original upstream tar ball, but not in upstream git. + [d39a9ee3] debian/gbp.conf: Declare upstream-vcs-tag format. + [09ab1592] Drop the get-orig-source target, no more needed. + [2c079e6a] Get debian/source/options's extend-diff-ignore back in sync with debian/clean to avoid unnecessary warnings. + [62fa1223] Add a debian/rules convenience target to restore files from git which were removed in the clean target. + [1151b6d2] Update debian/pkg-zsh-workflow-new-upstream-release.md. . * [77d203f,94c033d2,2794556a] Import new upstream release 5.8. + Fixes CVE-2019-20044: When unsetting the PRIVILEGED option, the shell sets its effective user and group IDs to match their respective real IDs. On some platforms (including Linux), when the RUID and EUID were both non-zero, it was possible to regain the shell's former privileges by e.g. assigning to the EUID or EGID parameter. (Closes: #951458) . * [c7b64d0b] Apply changes from Ubuntu's zsh 5.7.1-1ubuntu2 package, but ignore all changes to debian/changelog and the Maintainer field. + This includes: - debian/zshrc: Enable completions by default, unless skip_global_compinit is set. - Support cross-compiling: + Adjust upstream autoconf cross-compile default fallbacks. + Skip zcompile when cross-compiling. + Add libelf-dev build-dependency. + [1424bad8] debian/zshrc: Enable completions only on Ubuntu and derivatives by default, so that the behaviour neither changes on Debian nor on Ubuntu nor on according derivatives. . * [71ee4aef] Fix FTBFS if libncurses-dev provided the libncursesw5-dev build-dependency. Thanks to Daniel Shahaf for helping to figure out how to solve this issue properly. * [cd532ebb] Add libgdbm-dev as build-dependency to build the zsh gdbm module. Thanks to Daniel Shahaf and András Korn. (Closes: #951457) * [867b565c] Add lintian override for "zsh-dev: package-contains-no-arch-dependent-files" /usr/include/zsh/config.h _is_ architecture-dependent, just not a binary. * [303ea167] Retroactively list #924736 as fixed in previous upload. * [236a9317] Declare adequate autopkgtest to be superficial. * Upload to unstable again. Checksums-Sha1: 887316791cee9f3c8bd28c3368627c3854d5515b 2717 zsh_5.8-1.dsc 966ea0498fb94140f3caf12af88e98b0e4d02078 3193284 zsh_5.8.orig.tar.xz acb1347f243ba867d7a1de9723828cb5f7fa2c4b 488 zsh_5.8.orig.tar.xz.asc 22ad0b45be9b2f69e6f1d6eba2c88ebe45cd7a00 86328 zsh_5.8-1.debian.tar.xz cd75a47a41baa5bb8d47e73e5254668f6ed86207 3936696 zsh-common_5.8-1_all.deb d0888c68902c076d9baab0186707eca706fee9e3 1650092 zsh-dbgsym_5.8-1_amd64.deb d9c5ae132ea978cce18940a8b9bea505c71ad4e0 286216 zsh-dev_5.8-1_amd64.deb 768a19e9b8a000cb8974873aadfb0553e7a38d22 2708712 zsh-doc_5.8-1_all.deb bed68cddb25299766de4882cd45eaab189dc277a 1443908 zsh-static-dbgsym_5.8-1_amd64.deb 8828d570d1ef777ced7718e5dbec90ac85292433 1112228 zsh-static_5.8-1_amd64.deb 0f4709b519f965f5cb1555c8d5aa9a4642494161 10014 zsh_5.8-1_amd64.buildinfo 72ff695ffee1cd599b38f6362d10e126d2b4ecec 899988 zsh_5.8-1_amd64.deb Checksums-Sha256: dde64433d6f05b1a02c8ec4530fb24e676f0c484fbec12fe994988b908b05abf 2717 zsh_5.8-1.dsc dcc4b54cc5565670a65581760261c163d720991f0d06486da61f8d839b52de27 3193284 zsh_5.8.orig.tar.xz f5653b4f4ed5c23cce19cd57503eb4cd77fd3fb4bcb56f9da318263ef4636105 488 zsh_5.8.orig.tar.xz.asc 4044176f5a654e5b80430c097288b43aa5f07b8552e8d9fac97765d646bd555c 86328 zsh_5.8-1.debian.tar.xz 05e5f1126353a24cd2c9cbfe676af72753e791a42719e2308820430fc5b00473 3936696 zsh-common_5.8-1_all.deb 991cd346031f75e7632daf6ab53caedb93916547bb5af674544d3ce93faf99f0 1650092 zsh-dbgsym_5.8-1_amd64.deb 42547e73f416821a6fa3be7046840b7aa8fe969abbd1d6434407c97c0b55877b 286216 zsh-dev_5.8-1_amd64.deb 8caca4549aeed9bea791564853aaa5f0227a2af608a2552fd13a04a9241565be 2708712 zsh-doc_5.8-1_all.deb 17b4695902c09f051a8452a19159dcda9545396262cda1e4ad5b42463ea9e38f 1443908 zsh-static-dbgsym_5.8-1_amd64.deb 5f69d0af06d0d9ccc03b8de7c30a38d13e72910d2bc263466fc8c3ad164392fe 1112228 zsh-static_5.8-1_amd64.deb 23d1e628755320d2e89a5cdf19c63412568c33fa127958607545d0cd54718807 10014 zsh_5.8-1_amd64.buildinfo 16b4c5f8a664056ce6e634c628bfa7198807d5cb1f6349899aff8819bf574bf3 899988 zsh_5.8-1_amd64.deb Files: ee6e24ab5ccdb15e458b967ae423484c 2717 shells optional zsh_5.8-1.dsc e02a5428620b3dd268800c7843b3dd4d 3193284 shells optional zsh_5.8.orig.tar.xz 79d276be0816de65dd97f62becd5be98 488 shells optional zsh_5.8.orig.tar.xz.asc 856daeeb127022901569492a80520a1b 86328 shells optional zsh_5.8-1.debian.tar.xz 9650531df113360a6bf7321852a2b886 3936696 shells optional zsh-common_5.8-1_all.deb 1b920505b31603de990ce41133091678 1650092 debug optional zsh-dbgsym_5.8-1_amd64.deb 94989417ef72896c040502eabb75d47f 286216 libdevel optional zsh-dev_5.8-1_amd64.deb d279dc33d00f80ae57a9206c52ed98ec 2708712 doc optional zsh-doc_5.8-1_all.deb 82fa07406e498e52c26a3ff405597fb5 1443908 debug optional zsh-static-dbgsym_5.8-1_amd64.deb 111a3dee9848d402d8578f81200141f3 1112228 shells optional zsh-static_5.8-1_amd64.deb 10ef0eb8b53f4eb6bb3c653383fd80a7 10014 shells optional zsh_5.8-1_amd64.buildinfo bbd076797ccf3840afe2e64a1e558e09 899988 shells optional zsh_5.8-1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERoyJeTtCmBnp12Ema+Zjx1o1yXUFAl5JvIsACgkQa+Zjx1o1 yXWKvxAAtcIfP/dN3u+xU8g0y/De82df8nNTC+trzJ0ue/wbbryOnz558ki81d1t ww/Nidtpn+9Vw1iyy41qCoFfVFNO7GwGickjb1lsMrJwfcOPCvFUMxR67K9apoYP EQITDBPsqVbN3ATFOYQeyt3vN1y102KBf+IDeb/SiRI9f+9B3CQoAHQFq1OKwFMt 6FIhUiqMRqguJV0kYF0Ip383CvrmmEypIo6SATaJCsbA/GnBUltw75c0lNdSCjyt C3b23kMe6uEuA3Bkj6QPWdhu4mX8dFgFgHHNqKChXxV6AWB2A+r34j5T8huEg/1S zL4tjPfsv2I1GxBLpTDrCfeEhQUlGfVFzisXTNCUUb4/P+Ad1rQ+FkjcuG55+Z1A GHn5C0HtSkI01jDvX/tgyn78BDMcUa4auEXbonMwa68I+6uvlxQ1Y6Q/RPvs1YSs deav4QBJwmS7eMn0TU2yoU/fK6TsotpyaTtyHc+SFJKL/F3Q8MXT8uMu6Ok1KaEM jr3J5NgkucDfX/qXQuEsioNx8K5H1KbamJURX7wWBEIEennHIEyn9pi6qL1UdPDj rEG8IBA8p+ZPTey4pfr2mqwCrsgMUIZTqwRC5bC7GbVQwEqG2twu8Id8K+bFISXn NYIkN1+V321rckC9hVL560D1nPelp9HxVK9Hf6xLuVwfnfhilMw= =YiOg -----END PGP SIGNATURE-----