-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 17 Jan 2018 03:27:34 +0100 Source: dpkg Binary: dpkg libdpkg-dev dpkg-dev libdpkg-perl dselect Architecture: source Version: 1.19.0.5 Distribution: unstable Urgency: medium Maintainer: Dpkg Developers <debian-dpkg@lists.debian.org> Changed-By: Guillem Jover <guillem@debian.org> Description: dpkg - Debian package management system dpkg-dev - Debian package development tools dselect - Debian package management front-end libdpkg-dev - Debian package management static library libdpkg-perl - Dpkg perl modules Closes: 822914 879982 880166 881051 Changes: dpkg (1.19.0.5) unstable; urgency=medium . * Fix directory traversal with dpkg-deb --raw-extract, by guaranteeing that the DEBIAN pathname does not exist. Closes: #879982 Reported by Jakub Wilk <jwilk@jwilk.net>. * Rename DPKG_GAIN_ROOT_CMD to DEB_GAIN_ROOT_CMD in the R³ support, as the variable is expected to be set by any builder, not just dpkg. And introduce ephemereal backwards compatibility even though there are no known users. * Do not set DEB_GAIN_ROOT_CMD in dpkg-buildpackage when the R³ value is <implementations-keywords>, following the specification. * Specify that DEB_GAIN_ROOT_CMD in R³ should preserve the environment. Proposed by Josh Triplett <josh@joshtriplett.org>. * Specify new DEB_RULES_REQUIRES_ROOT variable for R³ support. * Declare R³ specification as "recommendation, stable" with version 1.0. * Architecture support: - Add support for riscv64 CPU. Closes: #822914 Thanks to Manuel A. Fernandez Montecelo <mafm@debian.org> * Perl modules: - Dpkg::Vendor::Debian: Use proper %use_feature key. This was causing perl errors on paths not accapted for fixdebugpath. Reported by Mattia Rizzolo <mattia@debian.org>, on IRC. Closes: #881051 - Check that $state->{seen} exists instead of $state being just defined. Fixes regression in dpkg-gensymbols symbols output. Thanks to Dmitry Shachnev <mitya57@debian.org>. Closes: #880166 - Mark hurd-i386 as having gcc builtin PIE in Dpkg::Vendor::Debian. Requested by Samuel Thibault <sthibault@debian.org>. Checksums-Sha1: 9d0d80127c24c73e499f1970be6da55b75cd0907 1977 dpkg_1.19.0.5.dsc 75318234d1c37e12f32d8bf26cc7028238172552 4557428 dpkg_1.19.0.5.tar.xz 0a6c2dc188f73982249fee726b61ef0f9b138961 7291 dpkg_1.19.0.5_amd64.buildinfo Checksums-Sha256: e9b38875c17766fd6b55436233dc6c72658d0cd0c2e63b5ec1f1dc3afd8058bb 1977 dpkg_1.19.0.5.dsc 818046927a7f77c1bcbbad7d8dbc04cdf0f3e6ec4e1a4f9d313378ecc69d85b5 4557428 dpkg_1.19.0.5.tar.xz d635b92b73d53d173d04e1e8ca09f2de98bbe03b7c3685ca7d416acc0a9a1beb 7291 dpkg_1.19.0.5_amd64.buildinfo Files: bf9376ca5914092655c87d3247c7170b 1977 admin required dpkg_1.19.0.5.dsc 704ea5ca7a799bbb5a4de17a0fccae6c 4557428 admin required dpkg_1.19.0.5.tar.xz f563ff7f46afecb782afb655bd68274a 7291 admin required dpkg_1.19.0.5_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETz509DYFDBD1aWV0uXK/PqSuV6MFAlpeuz0ACgkQuXK/PqSu V6PG8Q/+JlXko2eaCH0SgLi2dHh/ofbctkUD+qn/t/umKiG61BmVFNrt2zj5SMb+ Oe0PMW90J/XuqnUGYqftDbr1LUuJPrg3lrwcRt1zJGFOeQoD/4qKMUkNKBQToA4C Ak7t+zhsSJAqblRlad2BnzLPHZixtlKBO1E6Bh1BjAeMMcGrqfJaKa8IGsPL6hAc G4Bb/uJcKuJpvdfQ0zn5gVeQv/J2e+v3MOD477EPyrRFB2Ha52duhtRgOUfmmvBf TxKTJyk83XhuA62OkrYYjYsh25PuZeyByhKpaOhsE3yFHDM4e1zXoJSgRRe2MNUJ suzsoYgK6Lc6lGlNqBir9/7wv/7P1v1mNnynTHWVpWZFtZDPfafWt7QDbFl/KTLU npocTpJ4ceXJzXtoGhkjDYsjMNcJOEcJfQJnzDhz5O3YJH3YjSTgX4blz0DeJS3J MMvaK2IHj7xowEHVHsBqBQlKKg5YNhRJy8u105Y3qbk6D3H4Iw7L4g70XntEqTb1 CFzgo3cOLRb1ZmI4B3F+w4QGATc1YvrP6UisQ+rjPOhbGJDBg9NC2vXjM6LIhikO U/WS1RiM56XfL1xfrvc2OTwVyaTITkW7MH8Rj0EoI+CFMbm+J5KgTWZt6G31ViMF 7l34qHDXuSFjCBwPPAKa10a1xt9taXpEdEm3n3NCkIAYQPiEtm8= =mDXq -----END PGP SIGNATURE-----