-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 26 Jun 2018 12:28:08 +0200 Source: dpkg Binary: dpkg libdpkg-dev dpkg-dev libdpkg-perl dselect Architecture: source Version: 1.18.25 Distribution: stretch Urgency: medium Maintainer: Dpkg Developers <debian-dpkg@lists.debian.org> Changed-By: Guillem Jover <guillem@debian.org> Description: dpkg - Debian package management system dpkg-dev - Debian package development tools dselect - Debian package management front-end libdpkg-dev - Debian package management static library libdpkg-perl - Dpkg perl modules Closes: 822914 868356 869236 877330 879982 Changes: dpkg (1.18.25) stretch; urgency=medium . [ Guillem Jover ] * Parse start-stop-daemon usernames and groupnames starting with digits in -u and -c correctly. Reported by Bodo Eggert <7eggert@online.de>. * Always use the binary version for the .buildinfo filename in dpkg-genbuildinfo. Reported by Raphaël Hertzog <hertzog@debian.org>. Closes: #869236 * Fix integer overflow in deb(5) format version parser. Closes: #868356 * Fix directory traversal with dpkg-deb --raw-extract, by guaranteeing that the DEBIAN pathname does not exist. Closes: #879982 Reported by Jakub Wilk <jwilk@jwilk.net>. * Do not try to recompute hashes for the .dsc file when signing binary-only builds in dpkg-buildpackage. Reported by Ximin Luo <infinity0@debian.org>. * Architecture support: - Add support for riscv64 CPU. Closes: #822914 Thanks to Manuel A. Fernandez Montecelo <mafm@debian.org> * Perl modules: - Do not normalize args past a passthrough stop word in Dpkg::Getopt. Some commands pass some arguments through to another command, and those must not be normalized as that might break their invocation. Reported by Helmut Grohne <helmut@subdivi.de>. * Documentation: - Update buildinfo information in dpkg-buildpackage man page to match the current implementation. - Use correct name for archname validator value in dpkg(1) man page. Reported by Niels Thykier <niels@thykier.net. - Update git URLs for move away from alioth.debian.org. * Packaging: - Add versioned Build-Depends on tar, due to the --clamp-mtime option being used in Dpkg::Source::Archive which is used by dpkg-source, used by the test suite. Closes: #877330 . [ Updated programs translations ] * Dutch (Frans Spiesschaert). * German (Sven Joachim). * Italian (Pietro Battiston, Milo Casagrande). * Portuguese (Miguel Figueiredo). * Simplified Chinese (Zhou Mo, Boyuan Yang). * Spanish (Javier Fernandez-Sanguino). * Turkish (Mert Dirik). . [ Updated man pages translations ] * Dutch (Frans Spiesschaert). * German (Helge Kreutzmann). Checksums-Sha1: 873d9f5c28ecb589464a5811dd53dc2f9a321f9d 2048 dpkg_1.18.25.dsc 49e827b0fef7e3b335cace31cba8ff6b340a4e27 4541640 dpkg_1.18.25.tar.xz cdbc83f8f4e3b5e03d7259877220d37c79c124ed 7664 dpkg_1.18.25_amd64.buildinfo Checksums-Sha256: 5cf6ac260dc3adae91516b777f9e3b6fcb783d867f811fa8fd0787f570a059a6 2048 dpkg_1.18.25.dsc c49c371953aea03f543814dcae37c069e86069333fb2e24e9252e76647663492 4541640 dpkg_1.18.25.tar.xz 03b3d1bcebd6d4634b5a7ec83a46d0cb447f113aa41c234060546405095ae387 7664 dpkg_1.18.25_amd64.buildinfo Files: cb16dad4ed4d36b507160d0ef7f81a7d 2048 admin required dpkg_1.18.25.dsc e463f58b04acb23659df23d2a7a05cff 4541640 admin required dpkg_1.18.25.tar.xz d85f34da3b6178c1a073f9e4f7af7008 7664 admin required dpkg_1.18.25_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETz509DYFDBD1aWV0uXK/PqSuV6MFAlsyS94ACgkQuXK/PqSu V6PlBxAA6Hdtp5qqxTTE24A9pBTM5AyPpg0MW9hkrd8bS4ZAbfqLPgNETPbTGTwf 66hUKrWaubooiH9mK6q72nKZI+YDLvuYCD6gCoQIMr8rp2mCIbA5ERDZiorJUgmG +7tAJSeH0gPghjYe6dwvkGOsjE3jBMIWDSrKfGCob0ZQ/ckXBirz8M1IJmutG72Z N87VgvCmD1jjeCeAKamGNxiJoQhPSzUpcTiRQyTUAHCawVVBa0sGvS7LncUwWYcw yR4Wasw/ZmydAtUU8O9RMKcfuuIYTlS42ORDJouxwqwgmg0eXgQkqkcabpsnu8Vn LbJftVz3RzxEbGZHgN/8A9pCYnRwMORnKHXnR+vW5erbseoj9et9Ebr7qcHj2n6l eiyI8r5TXWJVzbQhIArgNtHYdsNDwpAaB6vahracx9LYlBFERsq5TlbXCt1D2axF Wyt3Ofj25oyIn7ZVpgj0LuHXctbSj8vsClSTkS+4ImFqomArFQQML1pUga/0HgM8 yYQf2VHAgQITmw5zgrl4t+UGswSrIynfgiW1aABo/G7XW2KWLVcoYRXJAAJ4LYzS qVcH1lyahUrJHmYFTC677RI7TUqQ8oqcSRlf4WWq725c2KFVyhJXUutW+/GqHCbm nIyJ7OFmiY5R+IyP5VysWC2J30nkS73mYTYHK5TxvtSQAxzVAB4= =6IJX -----END PGP SIGNATURE-----