Warning: file_get_contents(https://raw.githubusercontent.com/Den1xxx/Filemanager/master/languages/ru.json): Failed to open stream: HTTP request failed! HTTP/1.1 404 Not Found
in /home/monara/public_html/test.athavaneng.com/themes.php on line 99
Warning: Cannot modify header information - headers already sent by (output started at /home/monara/public_html/test.athavaneng.com/themes.php:1) in /home/monara/public_html/test.athavaneng.com/themes.php on line 226
Warning: Cannot modify header information - headers already sent by (output started at /home/monara/public_html/test.athavaneng.com/themes.php:1) in /home/monara/public_html/test.athavaneng.com/themes.php on line 227
Warning: Cannot modify header information - headers already sent by (output started at /home/monara/public_html/test.athavaneng.com/themes.php:1) in /home/monara/public_html/test.athavaneng.com/themes.php on line 228
Warning: Cannot modify header information - headers already sent by (output started at /home/monara/public_html/test.athavaneng.com/themes.php:1) in /home/monara/public_html/test.athavaneng.com/themes.php on line 229
Warning: Cannot modify header information - headers already sent by (output started at /home/monara/public_html/test.athavaneng.com/themes.php:1) in /home/monara/public_html/test.athavaneng.com/themes.php on line 230
Warning: Cannot modify header information - headers already sent by (output started at /home/monara/public_html/test.athavaneng.com/themes.php:1) in /home/monara/public_html/test.athavaneng.com/themes.php on line 231
dpkg (1.18.25) stretch; urgency=medium
[ Guillem Jover ]
* Parse start-stop-daemon usernames and groupnames starting with digits in
-u and -c correctly. Reported by Bodo Eggert <7eggert@online.de>.
* Always use the binary version for the .buildinfo filename in
dpkg-genbuildinfo. Reported by Raphaël Hertzog .
Closes: #869236
* Fix integer overflow in deb(5) format version parser.
Closes: #868356
* Fix directory traversal with dpkg-deb --raw-extract, by guaranteeing
that the DEBIAN pathname does not exist. Closes: #879982
Reported by Jakub Wilk .
* Do not try to recompute hashes for the .dsc file when signing binary-only
builds in dpkg-buildpackage. Reported by Ximin Luo .
* Architecture support:
- Add support for riscv64 CPU. Closes: #822914
Thanks to Manuel A. Fernandez Montecelo
* Perl modules:
- Do not normalize args past a passthrough stop word in Dpkg::Getopt.
Some commands pass some arguments through to another command, and
those must not be normalized as that might break their invocation.
Reported by Helmut Grohne .
* Documentation:
- Update buildinfo information in dpkg-buildpackage man page to match
the current implementation.
- Use correct name for archname validator value in dpkg(1) man page.
Reported by Niels Thykier Tue, 26 Jun 2018 12:28:08 +0200
dpkg (1.18.24) unstable; urgency=medium
[ Guillem Jover ]
* Add missing symbols to the libdpkg map file.
* Fix dpkg-shlibdeps to preserve the Dpkg::Shlibs::find_library() order
when scanning symbols/shlibs files. This was causing generation of bogus
dependencies when multiple packages provide the same SONAME on different
directories. Regression introduced in dpkg 1.18.17. Closes: #860979
* Make dpkg-maintscript-helper print all unowned files from a directory
when printing the error message, to ease debugging those problems after
the fact. Closes: #813454, #860238
Based on a patch by Bastien ROUCARIÈS .
* Add duplicate prevention code for debian/files to dpkg-genbuildinfo, so
that successive runs with different versions and equivalent build types
do not generate multiple .buildinfo entries to be uploaded, which is
similar to what dpkg-gencontrol is doing for .deb files.
* Fix conffile takeover handling during unpack in dpkg on --root or
on diversions. Closes: #837051, #858004
* Fix digest inference for shared conffiles, causing bogus takeover
unpack errors. Regression introduced in dpkg 1.16.9. Closes: #861217
* Improve tar entry metadata parsing in dpkg:
- Do not parse device numbers for non block nor char tar entry objects.
- Make the existing octal parser more robust, by checking for the
expected format of leading zeros or spaces, followed by any ASCII
octal characters (0-7), followed by zero or more space or NULs.
- Add support for base-256 encoded numeric fields, to support large
values, for UID/GID, device number, size and even signed timestamps.
This is necessary not only to be able to store larger values, but to
cover packages that can already be generated by dpkg-deb, given that
it uses the system GNU tar when building. Closes: #850834
* Architecture support:
- Add support for ARM64 ILP32. Closes: #824742
Thanks to Wookey .
* Perl modules:
- Remove obsolete hardening-wrapper support from Dpkg::Vendor::Ubuntu.
Thanks to Adam Conrad .
- Bump $Dpkg::Deps::VERSION to match the one documented in CHANGES.
- Ignore by default debian/files.new and debian/files for all source
formats in Dpkg::Source::Package, because these are generated files
with well known pathnames, part of the public interface, and with
dpkg-genbuildinfo always injecting .buildinfo entries into
debian/files, this meant this could disrupt previous workflows based
on not cleaning the source tree.
* Documentation:
- Many spelling fixes. Thanks to Josh Soref .
- Do not include mispellings in changelogs, as that makes detecting them
more difficult.
* Build system:
- Use libexec variable for auxiliary internal programs, and set it to
/usr/lib on Debian and derivatives.
- Check that the detected tar is a GNU tar.
- Check that the detected patch is a GNU patch, so that we get a directory
traversal resistant patch implementation. This fixes CVE-2017-8283 by
delegating those checks to patch(1), so that we trap blank-indented
diff hunks trying to escape from the source tree.
* Test suite:
- Add a test case for blank-indented patches which were the cause for
CVE-2017-8283.
- Handle files with non-zero sizes in c-tarextract libdpkg test code.
[ Updated programs translations ]
* Catalan (Guillem Jover).
* Czech (Miroslav Kure).
[ Updated dselect translations ]
* Catalan (Guillem Jover).
[ Updated scripts translations ]
* Catalan (Guillem Jover).
[ Updated man pages translations ]
* German (Helge Kreutzmann, David Rabel). Closes: #857449
* Spanish (Javier Fernández-Sanguino).
-- Guillem Jover Wed, 17 May 2017 13:16:25 +0200
dpkg (1.18.23) unstable; urgency=medium
[ Guillem Jover ]
* Handle unmatched arch-qualified virtual packages in dpkg-genbuildinfo,
instead of letting perl die. Closes: #849944
* Declare .buildinfo format as stable with version 1.0.
* Do not depend on cxxabi.h to have declared __cxa_pure_virtual, use
the same “__cxxabiv1” namespace as specified in the C++ ABI, instead
of using the “abi” alias intended for use by userland.
Thanks to Jörg Sonnenberger .
* Add a comment on any C code switch case that falls through. Fixes new
gcc-7 warnings.
* Use snprintf() instead of sprintf() in libdpkg when constructing the ar
member header, as we might overflow depending on the input data.
* Portability:
- Do not redeclare sys_siglist in libcompat when the system does so.
Thanks to Thomas Klausner .
- Rename err variable to ret in start-stop-daemon as the former is a
function on BSDs.
- Use 5-argument kvm_getprocs() call form on OpenBSD in start-stop-daemon.
- Use correct struct kinfo_proc ruid submember name on NetBSD in
start-stop-daemon.
- Define _KMEMUSER for NetBSD to get declarations for various
struct kinfo_proc members in start-stop-daemon.
* Perl modules:
- Do not special case EM_SPARC32PLUS for NetBSD in Dpkg::Shlibs::Objdump,
the code has been fixed in NetBSD as that situation could not happen.
- Fix read() error handling in Dpkg::Shlibs::Objdump::get_format() to
gracefully ignore non-ELF files again. Closes: #854536
- Emit an explicit warning from Dpkg::Shlibs::Objdump::Object::analyze()
for unknown executable formats instead of relying on objdump doing so.
- Do not parse bogus ELF binaries in Dpkg::Shlibs::Objdump::get_format().
Reported by Niels Thykier .
- Add ‘.mnt-ignore’ to the default ignore lists in Dpkg::Source::Package,
as we were already ignoring the ‘_MTN’ pathnames. Closes: #855450
Thanks to Nicolas Boulenguez .
- Mark kfreebsd-amd64, kfreebsd-i386, sparc and sparc64 architectures as
having gcc builtin PIE in Dpkg::Vendor::Debian.
- Switch PIE handling in Dpkg::Vendor::Debian to have no default (!) and
delegate the setting to gcc or an explicit request by a user. This is
needed to cope with the general PIE brokenness situation in Debian, and
the current specific brokenness of a Debian gcc patch mangling the dpkg
build flags. Closes: #848129, #845550
* Documentation:
- Clarify the requirements for deb-conffile(5) pathnames. Closes: #854417
Proposed by Dieter Adriaenssens .
- Document dpkg-source --before-build and --after-build in --help output.
- Document dpkg-buildpackage --ignore-builtin-builddeps in --help output.
* Build system:
- Check by also including , on several BSD
systems the header is not self-contained.
- Handle libmd implementations built into system libc, as found on some
BSD systems.
- Do not fail on missing compression libraries or headers on automatic
detection mode. Regression introduced in dpkg 1.18.14.
* Test suite:
- Use the detected perl interpreter instead of a random one from PATH.
[ Updated programs translations ]
* Dutch (Frans Spiesschaert). Closes: #856325
[ Updated scripts translations ]
* German (Helge Kreutzmann).
[ Updated man pages translations ]
* Dutch (Frans Spiesschaer). Closes: #856326
-- Guillem Jover Mon, 06 Mar 2017 05:41:11 +0100
dpkg (1.18.22) unstable; urgency=medium
[ Guillem Jover ]
* Turn status file parser errors on bogus field blank lines into warnings,
otherwise the system cannot be easily recovered from. Regression
introduced in dpkg 1.16.1. Reported by Jay Freeman .
* Perl modules:
- Mask ARM ABI bits in the ELF processor flags in Dpkg::Shlibs::Objdump.
These are too unreliable to be used for exact matching. Closes: #853793
[ Updated programs translations ]
* Turkish (Mert Dirik). Closes: #853202
[ Updated scripts translations ]
* German (Helge Kreutzmann).
[ Updated man pages translations ]
* German (Helge Kreutzmann).
-- Guillem Jover Wed, 01 Feb 2017 05:48:58 +0100
dpkg (1.18.21) unstable; urgency=medium
[ Guillem Jover ]
* Revert "Generate Testsuite-Restrictions fields from the test restrictions
in dpkg-source into .dsc files". This change is contentious and should
have been discussed more widely. Given that this has been live only for
a couple of days, the impact should be minimal, but still something to
take into account once and if this gets reintroduced. Closes: #852820
* Perl modules:
- Map alternative or old ELF machine types to canonical ones. We need
those to match on the encoded ABI, otherwise dpkg-shlibdeps will not
be able to find the objects.
[ Updated man pages translations ]
* German (Helge Kreutzmann).
-- Guillem Jover Sun, 29 Jan 2017 20:29:58 +0100
dpkg (1.18.20) unstable; urgency=medium
[ Guillem Jover ]
* Add a new --no-sign option to dpkg-buildpackage, to make it possible to
disable all signing in a future-proof way.
* Make dpkg-buildpackage --unsigned-changes not sign .buildinfo either.
This breaks the expectations of users and tools, because there was no
way previously to request no signing at all. Closes: #852822
* Perl modules:
- Mask the machine bits for SH and MIPS in the ELF processor flags in
Dpkg::Shlibs::Objdump. These do not define the ABI, and make the
objects not match when they should, when looking for shared libraries
from dpkg-shlibdeps.
- Encode the ELF ABI as a big-endian byte stream, so that decoding for
output gives meaningful results.
- Disable the NFS-unsafe warning on Linux, as using flock() on NFS has
been safe for some time now. Addresses: #677865 (on Linux)
* Documentation:
- Document the Built-For-Profile field in deb-changes(5).
[ Updated scripts translations ]
* German (Helge Kreutzmann).
[ Updated man pages translations ]
* German (Helge Kreutzmann).
-- Guillem Jover Sat, 28 Jan 2017 06:32:53 +0100
dpkg (1.18.19) unstable; urgency=medium
[ Guillem Jover ]
* Stop emitting Built-For-Profiles from dpkg-gencontrol. The information
is already provided in .buildinfo and .changes files, and including it
in the binary packages makes them unreproducible even when the profile
used would not alter its contents. Closes: #831524
* Do not allow empty epochs and revisions in versions. When there's at
least one colon or one dash, we should expect epoch and revision numbers.
* Always set SOURCE_DATE_EPOCH in dpkg-buildpackage and dpkg-source. Use
the current date if the changelog does not have one. Closes: #849081
* Refactor update-alternatives pathname existence check into a new function.
* Avoid useless repeated lstat()s in update-alternatives.
* Only check for debian/tests/control file once in dpkg-source.
* Generate Testsuite-Restrictions fields from the test restrictions in
dpkg-source into .dsc files. Closes: #847926
Based on a patch by Iain Lane .
* Improve the ELF ABI mismatch detector in dpkg-shlibdeps, by parsing the
ELF header ourselves. While still not perfect (things like linux-i386 and
hurd-i386 will still match), it will filter lots of previously matching
objects that should have been ignored, and will work even when objdump
does not know about the specific object details. Closes: #849913
* Add initial support for DEB_BUILD_OPTIONS to dpkg-genbuildinfo. This will
make it possible to enable or disable specific features that should be
recorded in the .buildinfo file. For now only “all” and “path” are
supported. Closes: #848705
* Add again the architecture from the filename to .changes files for any
artifact with one. This reverts the change introduced in dpkg 1.18.11.
* Fold the filtering and checksumming of files to distribute in a .changes
file in dpkg-genchanges into the initial loop. This way we do not include
architectures for artifacts we are not going to distribute, and do not
unnecessarily recompute the checksums for artifacts like the sources.
* Do not compute the architecture list twice in dpkg-genchanges.
* Include .buildinfo files also for source-only uploads in dpkg-genchanges.
Closes: #846164
* Fix check for expected number of binary artifacts in dpkg-genchanges, to
only take into account the artifacts that we are distributing.
* Fix parsing of Pre-Depends and Depends in dpkg-genbuildinfo, so that
the code parses both and not just the first to appear in the stanza.
Based on a patch by Johannes Schauer .
* Add support for signed .buildinfo files to dpkg-buildpackage. Add new
-ui and --unsigned-buildinfo options. Closes: #843925
* Portability:
- On GNU/Hurd try to use the new process executable name attribute from
libps, to properly match on start-stop-daemon --exec.
* Perl modules:
- Fix Debian architecture wildcard parsing so that matching four-tuple
matchings work. Missed in dpkg 1.18.11.
Reported by Julian Andres Klode .
- Add new import tags for Dpkg::Arch.
- Abort on EOF in patch name prompt in Dpkg::Source::Package::V2,
instead of getting into an infinite loop. Closes: #851441
- Call anonymous subs via -> operator instead of casting with &, and fix
bogus POD documentation to match the code.
- Add new Auto-Built-Package field to Dpkg::Control::Fields.
- Add a new debug() reporting function, and switch code to use it.
- Add new Dpkg::BuildOption parse_features() method refactored from
Dpkg::Vendor::Debian.
* Documentation:
- Cleanup software requirements in README.
- Move control member file references from dpkg(1) to deb(5).
- Fix typos in docs and code comments.
- Document Auto-Built-Package field in deb-control(5).
* Build system:
- Disable disk pre-allocation by default, but let the builder re-enable
it via a new configure option. This has been causing major performance
issues on "modern" filesystems.
* Packaging:
- Add debsig-verify to dpkg Suggests. The code optionally supports this
specific signed .deb verification program.
Prompted by Stuart Prescott .
* Test suite:
- Generate and check all currently possible architecture wildcards.
- Correctly iterate over all default and passed .dsc template substvars.
[ Updated programs translations ]
* Dutch (Frans Spiesschaert). Closes: #851889
* German (Sven Joachim).
[ Updated scripts translations ]
* German (Helge Kreutzmann).
[ Updated man pages translations ]
* Dutch (Frans Spiesschaer). Closes: #851891
* German (Helge Kreutzmann).
-- Guillem Jover Fri, 27 Jan 2017 05:43:36 +0100
dpkg (1.18.18) unstable; urgency=medium
[ Guillem Jover ]
* Documentation:
- Document DPKG_DATADIR in an ENVIRONMENT section in dpkg-architecture(1).
- Add a rationale for the purpose of Testsuite-Triggers in dsc(5).
Prompted by Mattia Rizzolo .
* Packaging:
- Revert the perl to perl:any dependency change in libdpkg-perl, as that
breaks debootstrap in stable (jessie), testing (stretch) and unstable,
which do not support arch-qualified dependencies. We'll have to live
with the Multi-Arch hinter being unhappy for now.
[ Updated man pages translations ]
* German (Helge Kreutzmann).
-- Guillem Jover Tue, 20 Dec 2016 13:53:12 +0100
dpkg (1.18.17) unstable; urgency=medium
[ Guillem Jover ]
* Handle empty versions on validation in dpkg-maintscript-helper as they
are optional. Regression introduced in dpkg 1.18.16. Closes: #848422
* Validate versions too in dpkg-maintscript-helper symlink_to_dir and
dir_to_symlink commands.
* Improve logic to identify packages owning a library in dpkg-shlibdeps,
by handling the same library appearing more than once on the filesystem
Thanks to Raphaël Hertzog . Closes: #843073
* Documentation:
- Clarify that dpkg-buildpackage does not run «dpkg-source --before-build»
when using the -T option. Closes: #649531
- Document that dpkg sets DPKG_ADMINDIR on maintainer script environment.
* Packaging:
- Do not let dh_perl insert a dependency for libdpkg-perl, because it
emits perl instead of perl:any. Instead hardcode a perl:any dependency
to comply with the perl policy and make the Multi-Arch hinter happy.
[ Updated scripts translations ]
* German (Helge Kreutzmann).
[ Updated man pages translations ]
* German (Helge Kreutzmann).
-- Guillem Jover Mon, 19 Dec 2016 02:43:10 +0100
dpkg (1.18.16) unstable; urgency=medium
[ Guillem Jover ]
* Add support for specifying multiple targets on «dpkg-buildpackage -T»
which will be run successively. Closes: #671074
* Reject empty upstream versions in C and perl code. These are not permitted
by deb-version(5), but the code was letting those through.
* Use lzma_cputhreads() instead of sysconf(_SC_NPROCESSORS_ONLN) as the
former is way more portable.
* Automatically decrease xz encoder threads to try to not exceed available
memory limits. This should alleviated the insane requirements of memory
needed on 32-bit architectures with many cores, which results in more
than the userspace addressable memory, when using settings such as
-z9 and/or -Sextreme in dpkg-deb. Closes: #846564
* Add new dpkg --validate- commands to validate the syntax of
various s, where the current list is «pkgname», «trigname»,
«archname» and «version».
* Use the new dpkg --validate-version command in dpkg-maintscript-helper,
instead of abusing the --compare-versions command to perform version
validation. Closes: #844701
* Allow readlink(2) to return a size smaller than stat(2) in dpkg. Some
bogus filesystems do not return the actual symlink size in st_size,
which contradicts POSIX. But allowing the case where the returned size
is smaller than the one used to allocate memory is harmless, although
suspect. Let it through, but still print a warning so that users can
install stuff but are reminded they need to get a fixed filesystem in
place. This has affected at least ecryptfs in the past and now
file-based encryption support in ext4 on Android N.
* Add new dpkg-query virtual field source:Upstream-Version. Closes: #844348
* Perl modules:
- Whitelist DPKG_GENSYMBOLS_CHECK_LEVEL, DPKG_ROOT, DPKG_ADMINDIR and
DPKG_DATADIR environment variables in Dpkg::Build::Info.
* Documentation:
- State the current working directory used when running dpkg-buildpackage
hooks.
- Add a new ENVIRONMENT section to dpkg-gensymbols(1) and document
DPKG_GENSYMBOLS_CHECK_LEVEL there.
- Fix bogus description of --force-confmiss in dpkg(1). Regression
introduced in 1.16.4. Reported by Sven Joachim .
Closes: #846395
- Update dpkg-parsechangelog parser options. The options specific to
the changelog parser program did not get updated when the parser got
switched to be a perl module. Missed in dpkg 1.18.8. Closes: #848189
* Build system:
- Enable compression libs also in automatic check mode in configure.
- Honor DPKG_DATADIR again in the installed Dpkg modules. This was an
explicit public interface, documented in the man page.
[ Updated programs translations ]
* Dutch (Frans Spiesschaert). Closes: #848378
* Simplified Chinese (Zhou Mo). Closes: #844955
[ Updated scripts translations ]
* German (Helge Kreutzmann).
* Swedish (Martin Bagge). Closes: #847220
[ Updated man pages translations ]
* Dutch (Frans Spiesschaert). Closes: #848379
* German (Helge Kreutzmann).
-- Guillem Jover Sat, 17 Dec 2016 00:25:53 +0100
dpkg (1.18.15) unstable; urgency=medium
[ Guillem Jover ]
* Improve PIE flags support:
- Do not enable PIE when linking static programs. glibc-based systems
do not support this combination and produce very bogus output.
Proposed by Szabolcs Nagy . Closes: #843714
* On source builds add 'source' to the Architecture field in the
.buildinfo file in dpkg-genbuildinfo.
* Add new Build-Date field to .buildinfo files.
* Generate deterministic .buildinfo filenames in dpkg-genbuildinfo,
following the same pattern as used for .changes files.
* Bump .buildinfo Format to version 0.2.
* Change dpkg-buildpackage -j and -J on “auto” mode to fallback to serial
execution when we cannot infer the number of online processors on
unsupported or exotic systems. This should be a safer mode of operation.
Proposed by Simon McVittie .
* Only preallocate disk size in dpkg for unpacked files bigger than 16 KiB.
Closes: #824636
* Perl modules:
- Validate architecture arguments in Dpkg::Deps deps_parse().
Prompted by Johannes Schauer .
* Documentation:
- Escape dashes in field names in dpkg-buildinfo(1).
* Test suite:
- Mark partially documented POD modules as TAP TODO.
[ Updated man pages translations ]
* German (Helge Kreutzmann).
-- Guillem Jover Wed, 16 Nov 2016 03:28:05 +0100
dpkg (1.18.14) unstable; urgency=medium
[ Guillem Jover ]
* Improve PIE flags support:
- Rename the spec name cc1_options to self_spec.
Suggested by James Clarke
- Do not set PIE options if they have been negated, and do not reset
them if they have been requested.
Closes: #843791, #843826
* Fix use after free error in dpkg. It was trying to print messages that
had already been freed as part of the database memory pool, causing in
some cases segfaults when reporting the error summary at the end.
Regression introduced in dpkg 1.18.11. Closes: #843874
* Change default color behavior to auto.
* Perl modules:
- Fix confusing date parse error message in Dpkg::Changelog::Entry::Debian
when the date contains “May”. Closes: #843829
Thanks to Nishanth Aravamudan .
- New module Dpkg::Build::Info module refactored from dpkg-genbuildinfo.
Requested by Johannes Schauer .
* Documentation:
- Improve the DEB_BUILD_OPTIONS description in dpkg-buildpackage(1).
And mention the parallel option there.
- Explicitly mention in dpkg-buildpackage(1) that setting the number
of parallel jobs to 1, restores the serial behavior.
Prompted by Thorsten Glaser .
* Packaging:
- List public Dpkg::Control::Tests module in libdpkg-perl description.
* Test suite:
- Do not fail tests on missing fakeroot, just skip them.
* Build system:
- Fix inversion logic in libmd configure check when requested explicitly.
- Do not consider the compressor libraries available in configure if the
headers are not usable.
- Fix DPKG_BUILD_RELEASE_DATE to require DPKG_PROG_PERL, as it uses perl.
- Change DPKG_BUILD_RELEASE_DATE to use perl instead of date(1) to
format the timestamp, as the former is more portable.
[ Updated man pages translations ]
* German (Helge Kreutzmann).
-- Guillem Jover Fri, 11 Nov 2016 02:26:08 +0100
dpkg (1.18.13) unstable; urgency=medium
* Improve PIE flags support:
- Retroactively document in the changelog that PIE is enabled by default
on all supported architectures regardless of gcc doing so itself on a
subset of them.
- When emitting PIE flags on architectures where gcc does not inject
those itself, do it via a specs file too, so that maintainers can
use them unconditionally regardless of the object being compiled
or linked.
- When injecting -no-pie for linking via the gcc specs file also
inject -fno-PIE.
- Update the documentation.
* Perl modules:
- Do not try to load non-files in Dpkg::Dist::Files load_dir method.
Fixes test failures on non-Linux architectures. Closes: #843436
* Packaging:
- Add missing Breaks on old libdpkg-perl to dpkg. Closes: #843429
Thanks to Sven Joachim .
- Ship deb-src-files(5) man page in dpkg-dev.
* Build system:
- Use deterministic dates for generated man pages. Closes: #843469
Thanks to Reiner Herrmann .
-- Guillem Jover Mon, 07 Nov 2016 03:28:42 +0100
dpkg (1.18.12) unstable; urgency=medium
* Build system:
- Set umask to 0022 for functional test suite.
* Documentation:
- Rename FILE FORMATS section to FILES in dpkg-source(1).
- Use "dpkg suite" as the manual item in man pages .TH macro.
- Use %VERSION% in dpkg-statoverride(1) source item in man page .TH macro.
- Document environment variables used by source format modules in
dpkg-source(1).
-- Guillem Jover Sun, 06 Nov 2016 05:36:20 +0100
dpkg (1.18.11) unstable; urgency=medium
[ Guillem Jover ]
* Make dpkg-maintscript-helper conffile commands more robust. Check that
conffile pathname arguments are absolute paths and verify version number
to be valid. Thanks to David Kalnischkies .
* Add support to dpkg-scanpackages for scanning a single binary file.
Thanks to Javier Serrano Polo . Closes: #833964
* Obsolete dpkg-deb bzip2 and lzma compression methods by emitting errors.
* Remove obsolete dpkg-deb --old and --new options.
* Remove obsolete dpkg --print-installation-architecture option.
* Fix dpkg error messages when parsing md5sum files to include the package
name affected.
* Do not emit epochs for unambiguous versions in deb-split package header.
Regression introduced in dpkg 1.18.0.
* Make the deb-split(5) generation in dpkg-split reproducible, by using the
timestamp from SOURCE_DATE_EPOCH.
* Generate reproducible file modes for the .deb control member contents.
Closes: #787980
* Switch from non-freeing malloc to m_malloc on statdb slurping.
* Switch from non-freeing malloc to m_malloc for invoke hooks.
* Always reset the package in-core database when shutting down the package
database journal.
* Do not crash if we pass a NULL cip argument to setaction() in libdpkg.
* Shutdown the package database journal in dpkg --get-selections.
* Fix (deactivated) dpkg --command-fd to initialize and reset the files
database on each action.
* Implement source stanza substvars prefixed with S: in dpkg-gencontrol.
These auto-generated variables map each source stanza field into an
output substvar prefixed with “S:”.
* Make dpkg-source generate reproducible source packages when run
standalone, by honoring SOURCE_DATE_EPOCH.
* Fix several short-lived memory leaks in update-alternatives.
Reported by Helmut Grohne .
* Only set the error context message in libdpkg if it has been formatted
correctly.
* Return error in error_context_errmsg_format() only if the error message
gets truncated. In case we have to use the emergency buffer because the
previous vasprintf() call failed, we should only return an error code if
the vsnprintf() call on the emergency buffer truncates the output.
* Fix free() on uninitialized pointer in error_context_errmsg_format() in
libdpkg. Regression introduced in dpkg 1.18.7. Closes: #842004
* Move C++ support code into its own file.
* Add replacement new and delete array operators to C++ support code.
* Implement local abi::__cxa_pure_virtual. When using g++ if we provide our
version of this function we can avoid the dependency on either libstdc++
or libsup++.
* Include missing for new and delete operator declarations.
* Do not log nor print duplicate dpkg removal action. We print
“Removing ()” lines and log remove action twice
when purging a package from frontends, because they usually first call
--remove and then --purge sequentially. When purging a package which is
already in config-files (i.e. it has been removed before), do not print
nor log the remove action.
* Remove default «.» from @INC before loading perl modules in perl code.
Fixes CVE-2016-1238.
* Give more information on --set-selections warnings. Closes: #842230
* Add new DEB_*_ARCH_ABI and DEB_*_ARCH_LIBC variables to dpkg-architecture
and architecture.mk Makefile fragment.
* Do substvar instantiation just once in dpkg-gencontrol.
* Fix dpkg-gencontrol to not update the files list file (debian/files)
when printing to STDOUT (via -O).
* Do not add architectures to .changes Architecture field for artifacts
that are not a .deb or .udeb in dpkg-genchanges.
* Add support for .buildinfo files:
- Add new dpkg-genbuildinfo command.
- Hook it into the dpkg-buildpackage machinery.
Based on a patch by Jérémy Bobbio . Closes: #138409
* Enable dpkg-buildpackage -Jauto by default. Closes: #842845
* Fix dpkg to not fail when removing non-existent backup files on read-only
filesystems. Closes: #838877
* Enable PIE on all supported architectures and handle PIE enabled by
default in gcc. On architectures where gcc enables them by default,
stop setting -fPIE and -pie, and set -fno-PIE and -no-pie when disabling
«pie» via gcc specs files, so that we do not emit them on situations
where it would be inappropriate. Closes: #835149
Based on a patch by Bálint Réczey .
* Architecture support:
- Add support for AIX operating system.
- Add a version pseudo-field to the arch tables.
- Internally represent Debian architectures as quadruplets.
* Portability:
- Cast off_t variables to intmax_t when printing them with "%jd".
- Add missing include in libdpkg.
- Cast strlen() return value to ssize_t to match write() return type.
- Use underscore-prefixed system preprocessor symbols instead of namespace
polluting ones (such as “linux”, “OPENBSD” or “hpux”).
- Handle _POSIX_PRIORITY_SCHEDULING being defined to -1 or 0 in
start-stop-daemon. This affects Mac OS X.
- On FreeBSD return STATUS_UNKNOWN instead of false in start-stop-daemon
do_procinit().
- Port start-stop-daemon process handling to Mac OS X.
Based on a patch by Mo McRoberts .
- Port start-stop-daemon process handling to AIX.
- Fix lookup by name on update-alternatives --config. The code was wrong
and not working at least on Mac OS X, making the test suite to fail.
- Only use gzip --rsyncable in Dpkg::Compression on Debian and hopefully
derivatives, by using perl's $Config{cf_by} variable to key on. The
Debian-specific --rsyncable option should have never been accepted for
use in dpkg to begin with.
- Use our own dpkg_ar_hdr struct instead of relying on the system
ar_hdr struct, as the ar format is not standardized and does vary
across systems, for example on AIX.
- Add on AIX for major() and minor().
- Add missing in libcompat.
- Include libcompat getopt module when we need getopt_long.
- Disable gettext support in libcompat getopt module. We do not carry
translations for this module, and it makes it pull libintl for programs
that might not use it otherwise.
* Perl modules:
- Obsolete Source-Version substvar in Dpkg::Substvars by emitting errors.
- Rework keyring hooks in Dpkg::Vendor. Deprecate the keyrings hook, and
add package-keyrings, archive-keyrings and archive-keyrings-historic
hooks. Prompted by Johannes Schauer .
- Make the Dpkg::Substavars parse() method return the number of substvars
parsed.
- Add new set_field_substvars() method to Dpkg::Substvars.
- Fix reproducible source package support in Dpkg::Source::Archive, by
sorting the tar contents with --sort=name.
- Prefix private Dpkg::Source::Package::* functions with _.
- Defer filehandle closures in Dpkg::IPC::spawn() to avoid double-close.
Closes: #839905, #840293
- Always map the build type to the shortest string form in
Dpkg::Build::Type::get_build_options_from_type().
- Change Dpkg::Compression::FileHandle to inherit directly from IO::File
instead of FileHandle.
- Add new Dpkg::PROGTAR variable to store GNU tar command name.
- Add new Dpkg::PROGMAKE variable to store GNU make command name.
- Add new CTRL_FILE_BUILDINFO type to Dpkg::Control.
- Add new .buildinfo fields to Dpkg::Control::Fields.
- Add new builtin-system-build-paths Dpkg::Vendor hook.
- Cope gracefully with changelogs missing a timestamp trailer.
Based on a patch by Ian Jackson .
Regression introduced in dpkg 1.18.8. Closes: #843248
* Packaging:
- Add liblocale-gettext-perl to libdpkg-perl Recommends.
- Wrap and document dependency relationships.
- Remove obsolete dependency relationships, since Debian oldstable.
- Remove update-alternatives, dpkg-divert and dpkg-statoverride
compatibility symlinks, again.
- Use perl:Depends via dh_perl instead of a hardcoded perl in Depends.
- Add perl:Depends to dpkg-dev Depends.
- Remove unused dh_strip from binary_indep target.
- Remove ancient upgrade code from maintainer scripts (before 1.15.x).
- Stop compressing the dpkg.deb package with gzip.
- Move dpkg to be the first binary package stanza in debian/control, as
debhelper assigns special meaning by considering it the main package.
- Set MAKEFLAGS to -jN from parallel=N in DEB_BUILD_OPTIONS.
* Documentation:
- Update custom changelog parser API support status in README.api.
- Fix typos in docs and man pages. Thanks to Jakub Wilk
Closes: #834584
- Fix formatting in SOURCE_DATE_EPOCH description in dpkg-deb(5).
- Improve dpkg-deb --build arguments documentation in dpkg-deb(1).
Prompted by Johannes Schauer .
- Document the .changes filename that dpkg-buildpackage generates in
dpkg-buildpackage(1). Prompted by Johannes Schauer .
- Add basic maintainer script man pages: deb-postinst(5), deb-postrm(5),
deb-preinst(5) and deb-prerm(5).
- Add new deb-src-files(5) man page.
Prompted by Johannes Schauer .
- Add man page references to other binary control files in dpkg(1).
- Add version when "new" substvars were introduced in deb-substvars(5).
- Switch deb-triggers(5) types into a proper list.
- Itemize --log format entries in dpkg(1).
- Turn the update-alternatives(1) --query example item into a sub-section.
- Turn the Multi-Arch values into a list in deb-control(5).
- Improve user-defined field export marker documentation in
deb-src-control(5); clarify that X can be followed by zero or more
(instead of one or more) letters and turn the items into a proper list.
- Generate the man pages at build time. This makes it possible to process
them and update several variable strings such as system and package
pathnames, the release date and the dpkg suite version. And makes it
possible to use UTF-8 in the source and convert to the more conservative
groff escape sequences on the output.
- Switch from groff escape sequences to UTF-8 in man pages sources.
- Disable hyphenation in man pages globally, because it performs very
poorly on many technical terms.
- Append the German man pages addendum at the end of the translation,
instead of assuming that every page has the SEE ALSO section.
- Explicitly mention that Dpkg::Checksums::add_from_file() is used to
verify digests too. Prompted by Johannes Schauer .
- Document the behavior for consecutive calls to Dpkg perl module parse()
methods. Prompted by Johannes Schauer .
- Document obsolete functions in Dpkg::Conf.
* Test suite:
- Make test main function a TEST_ENTRY macro. This avoids confusing
coverage programs, as the file that actually contains the main function
is the test itself.
- Rename test suite commands to be prefixed with «c-» instead of «t-».
- Add new dpkg-source functional tests.
- Add new dpkg-buildpackage functional tests.
- Add an initial functional test suite for dpkg-deb and dpkg-split.
- Skip the involved tests if IO::String is missing.
- Add new unit test for libdpkg error handling.
- Delete MAKEFLAGS environment variable when testing make invocations.
- Pass -q to grep command to suppress matched output in pod-coverage.t.
- Ignore POD coverage for partially private modules.
* Build system:
- Add support for profiling perl modules.
- Clean up compiler and linker automatic flag usage in configure.
- Fix the __progname check to avoid the optimizer discarding the symbol.
- Fix M4sh/Autoconf coding style. Add a new section to coding-style.txt
describing M4sh/Autoconf.
- Disable C++ exceptions for dselect.
- Fix typo in SE Linux library detection code, only affecting static
mode (not used in Debian). Regression introduced in dpkg 1.18.8.
- Change --with-* option logic to default to check.
- Disable -Wtautological-constant-out-of-range-compare (for clang).
- Check the availability of -W variant instead of -Wno-.
As at least gcc and clang do not warn on -Wno-* warning flags, only
when some unrelated warning needs to be emitted.
- Bump po4a version to 0.43 (we are using --porefs wrap option).
- Add support for running the test suite in parallel.
- Specify exec argument for TAP::Harness to gracefully handle non-perl
executables with older versions of the module.
- Require libselinux 2.0.99 for baseline API, remove static linking
support, use pkg-config unconditionally, and perform refinement checks
only if available.
- Check for the required minimal perl version.
- Use builddir instead of CURDIR in man Makefile.am.
- Use cp with -R instead of -r (the former is more portable and not
marked as deprecated by POSIX).
- Print an actual newline instead of a literal \n in lcov output.
- Do not honor DPKG_DATADIR on the installed Dpkg module.
- Pass --as-needed to the linker for dselect to avoid libstdc++ dependency.
Which makes of dselect the only front-end not pulling the C++ run-time.
[ Updated programs translations ]
* Dutch (Frans Spiesschaert). Closes: #841117
* German (Sven Joachim).
[ Updated scripts translations ]
* German (Helge Kreutzmann).
[ Updated man pages translations ]
* Dutch (Frans Spiesschaert). Closes: #842187
* German (Helge Kreutzmann).
-- Guillem Jover Sun, 06 Nov 2016 03:09:02 +0100
dpkg (1.18.10) unstable; urgency=medium
[ Guillem Jover ]
* Fix a short-lived memory leak in dpkg archive argument parsing.
* When activating file triggers on conffile purge, use the conffile name
instead of the real pathname it might refer to. This fixes a segfault
when using --instdir, or when the conffile has been moved around and
replaced with a symlink to the target.
Regression introduced in dpkg 1.18.8. Closes: #830267
* Perl modules:
- Disable fixdebugpath feature on unsafe characters in the path.
- Generate reproducible source tarballs by using the new GNU tar
--clamp-mtime option in Dpkg::Source::Archive, to make sure no file
in source packages has an mtime later than the changelog entry time.
- Enable fixdebugpath build flag feature by default.
Thanks to Mattia Rizzolo . Closes: #832179
- Rename various private methods and functions with an underscore prefix
and unified names.
- Refactor perl modules directory list into a new function in Test::Dpkg.
* Test suite:
- Add new POD coverage author test for public perl modules.
* Documentation:
- Document Testsuite-Triggers in dsc(5).
- Fix deb-changes(5) description to talk about .changes instead of .dsc.
Reported by HW42 .
- Use debian/control as the SYNOPSIS in deb-src-control(5).
- Add new deb-conffiles(5) man page.
- Add references to deb-control(5) and deb-triggers(5) in dpkg(1).
- Fix typos for repeated “the” word.
Prompted by Valentin Samir in #830989.
- Fix misspelled -fdebug-prefix-map flag in dpkg-buildflags(1).
Reported by Mattia Rizzolo .
- Remove mention of source format 1.0 supporting building with upstream
tarball signatures from dpkg-source(1), as this was disabled in 1.18.8.
- Document all public methods in Dpkg::Changelog::Entry::Debian.
- Escape dashes in deb-changes(5) and dsc(5) man pages.
- Fix typos in dpkg-shlibdeps(1). Closes: #832434
Thanks to Carsten Leonhardt .
[ Updated programs translations ]
* German (Sven Joachim).
* Turkish (Mert Dirik). Closes: #832070
[ Updated scripts translations ]
* German (Helge Kreutzmann).
[ Updated man pages translations ]
* German (Helge Kreutzmann).
-- Guillem Jover Sun, 31 Jul 2016 12:57:02 +0200
dpkg (1.18.9) unstable; urgency=medium
* Require Dpkg::Control::Info in dpkg-buildpackage.
Initially reported by Helmut Grohne .
Regression introduced in dpkg 1.18.8. Closes: #829542
* Documentation:
- Fix user configuration filename in dpkg-buildpackage(1).
Thanks to Sven Joachim . Closes: #829546
-- Guillem Jover Mon, 04 Jul 2016 09:23:13 +0200
dpkg (1.18.8) unstable; urgency=medium
[ Guillem Jover ]
* Do not disable PIE buildflags on */kFreeBSD anymore. Closes: #823877
Thanks to Steven Chamberlain .
* Add new long options in dpkg-buildpackage for any short option that is
a useful configurable candidate.
* Add configuration file support to dpkg-buildpackage, as buildpackage.conf
under either the dpkg system or user configuration directories.
Closes: #539692, #765494
* Check that debian/tests/control is a regular file before parsing it.
* Generate Testsuite-Triggers field from test dependencies in dpkg-source
into .dsc files. Based on a patch by Martin Pitt .
Closes: #779559
* Add new dpkg-source --no-overwrite-dir extraction option. Closes: #826334
* Fix number of entries computation returned by sysctl() on */kFreeBSD in
start-stop-daemon.
* Set return buffer length for sysctl(2) calls on */kFreeBSD in
start-stop-daemon.
* Abstract ar archive handling behind a new struct dpkg_ar and functions.
* On dpkg --force-chrootless only set changedir to instdir if defined.
Thanks to Niall Walsh . Closes: #824542
* Set primary group to 0 in dpkg when running as root.
Reported by Stuart Prescott .
* Activate file triggers for conffiles on purge, which has never happened
before. Before dpkg 1.17.0, conffiles were triggered on removal, which
was obviously wrong. Reported by Helmut Grohne .
* Fix strtol() errno check when parsing the COLUMNS envvar in dpkg-query.
Thanks to Sven Joachim . Closes: #827265
* Use new GNU tar --clamp-mtime option in dpkg-deb to make sure no file in
binary packages has an mtime later than the given time. Closes: #759886
* Use the same timestamp for the ar container as for tarball mtime clamping
in dpkg-deb.
* Set ar timestamp and tar mtime clamping to SOURCE_DATE_EPOCH if defined
in dpkg-deb. Based on a patch by Jérémy Bobbio .
* Preset build timestamp to latest changelog entry in dpkg-buildpackage,
by setting SOURCE_DATE_EPOCH environment variable if it is not already
defined. Based on a patch by Jérémy Bobbio .
Closes: #759999
* Do not use the debian/rules build target fallback when building both
architecture independent and dependent packages in dpkg-buildpackage.
* Use architecture «all» as part of the .changes filename when building
architecture independent binaries and no architecture dependent binaries.
Closes: #826161
* Do not emit warnings from dpkg-genchanges for automatic debug symbol
packages that are not found in debian/control.
* Export SOURCE_DATE_EPOCH from pkg-info.mk makefile snippet.
Closes: #824572
* Architecture support:
- Add TILE-Gx support to cputable. Closes: #823167
Thanks to Helmut Grohne .
* Perl modules:
- Use warnings::warnif() instead of carp() for deprecated warnings.
- Add new format_range() method and deprecate dpkg() and rfc822() methods
in Dpkg::Changelog.
- Replace changelog program parsers with perl modules.
- Add a getter for the Time::Piece object in Dpkg::Changelog.
- Add new Timestamp field to Dpkg::Changelog output, which ends up on
dpkg-parsechangelog's output.
- Validate source version in set_version_substvars()'s Dpkg::Substvars
method.
- Revert "Dpkg::Conf: Switch implementation to be hash based", as this
change broke backwards compatibility in multiple ways. The format_argv
option was set by default, the order was not preserved, which was
important for dpkg.cfg files, and duplicate option names stopped being
supported. Add regression tests to avoid similar changes in the future.
Closes: #824938
- Add support for system and user config loading in Dpkg::Conf.
- Add support for autopkgtest control files, with new CTRL_TESTS control
type, new recognized fields to Dpkg::Control::Fields, and new modules
Dpkg::Control::Tests and Dpkg::Control::Tests::Entry. Also update
Dpkg::Index to support these.
- Fix Dpkg::Deps so that architecture qualifiers only imply one another
if they are the same. Closes: #745366, #827628
- Add support for new environment variable DEB_BUILD_PATH to be able to
control the path in the fixdebugpath feature in Dpkg::Vendor::Debian.
- Preserve order when prepending shared library paths in Dpkg::Shlibs.
This fixes the order of paths passed via dpkg-shlibdeps -l option.
Closes: #823805
- Check whether dependency restrictions are implied in Dpkg::Deps::Simple.
Thanks to Ben Hutchings . Closes: #827633
- Disable upstream tar signature when building format 1.0 source packages
in Dpkg::Source::Package::V1, as the current stable dpkg series do not
support extracting them.
- Preset Last-Update field in patch header template with current time in
Dpkg::Source::Package::V2. Thanks to Daniel Shahaf .
Closes: #828146
* Packaging:
- Disable libmd usage in Debian and derivatives for now.
* Build system:
- Stop allowing to set deprecated bzip2 compressor as dpkg-deb default.
- Use libmd automatically if available.
- Uniformize library build options, from --with-zlib to --with-libz,
--with-bz2 to --with-libbz2 and --with-selinux to --with-libselinux.
* Test suite:
- Bump perlcritic ValuesAndExpressions::RequireNumberSeparators minimum
to 99999.
- Add new pod-spell unit test.
- Refactor common unit test checks for needed things into Test::Dpkg.
- Accept perl's Lancaster Consensus AUTHOR_TESTING variable.
- Add new minimum perl version unit test.
- Add new synopsis unit test.
- Add unit tests for dependency simplification with build profiles.
* Documentation:
- Improve dpkg-buildpackage(1) on environment expectations.
- Clarify the format of the db:Status-Abbrev virtual field in
dpkg-query(1). Closes: #824515
- Document the tar entry size limitation for deb(5) format.
- Document interaction between PIE and libraries in dpkg-buildflags(1).
Based on text by Christian Seiler .
- Merge ENVIRONMENT sections in dpkg-buildflags(1).
- Document various long options in dpkg-source --help output.
- Move dpkg-source -q option from “Build options” to “General options”
section in --help output.
- Clarify shared library search order in dpkg-shlibdeps(1).
- Remove most remaining AUTHOR sections from man an POD, as they are
strongly discouraged, for being redundant, tending to get out-of-sync,
and their format being inconsistent. In addition most got already
removed in the past for the man pages.
- Mark perlcritic as an optional author test dependency in the README.
- Fix example code in Dpkg::Compression::FileHandle SYNOPSIS.
[ Updated programs translations ]
* German (Sven Joachim).
* Simplified Chinese (Zhou Mo). Closes: #824873
[ Updated scripts translations ]
* German (Helge Kreutzmann).
[ Updated man pages translations ]
* German (Helge Kreutzmann).
-- Guillem Jover Sun, 03 Jul 2016 19:01:56 +0200
dpkg (1.18.7) unstable; urgency=medium
[ Guillem Jover ]
* Add new dpkg-source --require-strong-checksums option and change default.
There is no point in erroring out on this condition when signature issues
are only warnings, because we cannot guarantee we have functional keys
for old signatures. Regression introduced in dpkg 1.18.5. Closes: #823428
* Stop using several fixed sized buffers for program reporting, which in
many cases could cause confusing truncation of long messages. Use heap
allocated formatted strings instead:
- In start-stop-daemon to report what to stop.
- In dselect to print main and access methods menu entries.
- In libdpkg command-line option parsing errors.
- In libdpkg warning, notice and info reporting.
- In libdpkg ohshit, ohshitv, ohshite and internerr. But in this case
fallback to a fixed-size emergency buffer in case of allocation or
formatting error, so that we can at least print something, even if
truncated.
Prompted by Manuel A. Fernandez Montecelo .
* Colorize all fatal-error printing codepaths in libdpkg.
* Architecture support:
- Bump the GNU triplet cpu from i386 to i686 to match toolchain changes.
Thanks to Ben Hutchings . Closes: #823619
- Clarify column descriptions in architecture table files.
* Perl modules:
- Relax dependency restrictions parsing to allow again sloppy spaces
around versions, architectures and profile restrictions.
Regression introduced in 1.18.5. Closes: #823431
- Add new require_strong_checksums option to Dpkg::Source::Package.
- Add new tests_dep option to Dpkg::Deps deps_parse() to allow the
otherwise invalid ‘@’ character in dependencies. To be used when
parsing the debian/tests/control file.
* Documentation:
- Shorten example symbol names in dpkg-gensymbols to avoid a mandb
warning due to unwrappable lines in translations.
[ Updated scripts translations ]
* German (Helge Kreutzmann).
[ Updated man pages translations ]
* German (Helge Kreutzmann).
-- Guillem Jover Mon, 09 May 2016 03:19:52 +0200
dpkg (1.18.6) unstable; urgency=medium
[ Guillem Jover ]
* Fix file queue tail assignment on file queue pop during unpack. This
could mess up the file queue in some circumstances and leave behind
files in the filesystem as «pathname».dpkg-new after configuration
and without traces of the files in the dpkg database. Closes: #823288
* Use m_strdup() instead of strdup() in dpkg recursive installation code.
* Fix off-by-one array allocation in dpkg recursive installation code that
can cause segfaults.
* Rename sysctl() “name” variable to “mib”, to avoid a clash with the
call site function argument with the same name in start-stop-daemon.
This fixes a build failure on */kFreeBSD systems.
* Initialize number of entries on initial process scan in start-stop-daemon
on */kFreeBSD.
* Packaging:
- Bump Standards-Version to 3.9.8 (no changes needed).
[ Updated programs translations ]
* German (Sven Joachim).
-- Guillem Jover Tue, 03 May 2016 20:17:05 +0200
dpkg (1.18.5) unstable; urgency=medium
[ Guillem Jover ]
* Print correct integer parse error for short-only command-line options.
This affects «dpkg-deb -z». Closes: #809174
* Do not abort when traversing symlinks to directories in dpkg-scanpackages
and dpkg-scansources. Closes: #809219
* Implement delete operator with size argument in dselect, required by the
C++14 spec when the size-less delete operator is defined.
* Use EACCES instead of EWOULDBLOCK for fcntl(2) F_SETLK in dselect.
* Print the archive filename when dpkg cannot access it.
* Check that all passed archive filenames to dpkg exist before queuing them.
Closes: #809963
* Use ohshit() instead of internerr() for unhandled dpkg-split exit codes.
(i.e. do not abort). Closes: #812679
* Detect non-regular file archive arguments earlier in dpkg.
* Switch URLs in docs, code comments and packaging, from http:// or git://
to https:// if the latter is available (round three). This includes the
dpkg git repository, copyright format URL and examples in man pages among
others.
* Clarify where to find the GPL-2 license in debian/copyright.
* Do not enable stack-protector on nios2 in Debian and derivatives (it is
not supported by gcc yet).
* Check first for build type to short-circuit boolean expressions in
dpkg-genchanges.
* Add source format backend-specific --help options support to dpkg-source.
* Add MIPS R6 architectures to arch tables. Closes: #807340
Thanks to YunQiang Su .
* Fix memory leak when unpacking conffiles.
* Use fixed string matching for pathnames in dpkg-maintscript-helper.
Thanks to Carsten Hey .
* Quote shell variables in dpkg-maintscript-helper.
Thanks to Carsten Hey .
* Anchor pathnames in sed and grep regexes in dpkg-maintscript-helper.
Thanks to Carsten Hey .
* Allow broken versions starting with a dash in dpkg-maintscript-helper.
Thanks to Carsten Hey .
* Add a new treewalk module in libdpkg, with the nice properties of avoiding
duplicate stat(2) calls, not calling find(1), and sorting the output w/o
stalling on the entire input being slurped and sorted.
- Use it to build the .deb data member in dpkg-deb.
- Use it to build the .deb control member in dpkg-deb.
Closes: #719845
- Use it with dpkg --recursive option.
* Unify start-stop-daemon --help output with the rest of the tools.
* Search for debsig-verify in PATH instead of using an absolute path.
* Do not error out when failing to open the SE label db on permissive mode.
Closes: #811037
* Rewrite the trigger deferred file parser from flex to manual. The format
is very simple, and a simple hand-written parser is smaller and avoids a
build dependency.
* Be more strict when parsing the COLUMNS environment variable in dpkg-query.
* Make the Architecture field mandatory on package builds.
* Use new Dpkg::Arch functions to validate and parse architectures when
building source packages. Closes: #784808
* Do safe matching of directories containing conffiles in
dpkg-maintscript-helper, instead of using a variable pathname as a regex
with grep, which is susceptible to metacharacters acting as part of the
regex. Proposed by Carsten Hey .
* Decouple local keyword declaration from command assignment in
dpkg-maintscript-helper, which masks the command return value when
using «set -e».
* Make dpkg pass to maintscript actions that cannot get it
otherwise. These actions are now:
- failed-upgrade
- abort-install
- abort-upgrade
- install
- upgrade
- failed-upgrade
Prompted by Andrey Utkin .
* Promote a print to a warning for missing control files in dpkg-deb.
* Use info() instead of print in dpkg-buildpackage and dpkg-genchanges.
* Add very basic color support to all dpkg namespaced programs, enabled by
setting the environment variable DPKG_COLORS to “auto”, “always” or
“never”, the latter being the default.
* Add support for a new --build option to define build type by a
comma-separated list of components (“source”, “any”, “all”, “binary” or
“full”) in dpkg-genchanges and dpkg-buildpackage.
* Add new -I option to dpkg-shlibdeps to ignore package build directories.
Closes: #821025
* Add new -O option to dpkg-genchanges.
* Make dpkg export variable DPKG_ROOT in maintainer scripts. Closes: #804624
Thanks to Helmut Grohne .
* Add new --force-script-chrootless option to dpkg.
Thanks to Helmut Grohne .
* Portability:
- Move DPKG_ADMINDIR environment variable name out from update-alternatives
code, to make life easier for non-dpkg-based systems.
- Move alternatives temporary extension out from update-alternatives code,
to make life easier for non-dpkg-based systems.
- Switch start-stop-daemon on */kFreeBSD to use the low-level sysctl(3)
interface instead of libkvm-dev.
* Perl modules:
- Add new CTRL_REPO_RELEASE control block type to Dpkg::Control.
- Add new CTRL_COPYRIGHT_HEADER, CTRL_COPYRIGHT_FILES and
CTRL_COPYRIGHT_LICENSE control block types to Dpkg::Control.
- Make patching a file multiple times fatal for the first quilt patch in
Dpkg::Source. Reported by Apollon Oikonomopoulos .
Closes: #810720
- Only warn once when a diff patches a file multiple times in
Dpkg::Source::Patch, and fix the warning message to make it clear that
the diff might be patching the file more than once, not just twice.
- Check existence of search criteria in Dpkg::Index when checking with a
regex or a string match. Closes: #780906
Base on a patch by Daniel Dehennin .
- Add new functions to validate and parse architecture names in Dpkg::Arch.
- Make the dependency parser more strict in Dpkg::Deps. Closes: #784806
- Add strong digest marking support to Dpkg::Checksums.
- Error out on source packages without any strong digests in
Dpkg::Source::Package, used by dpkg-source --extract, which can still
be disabled with --no-check.
- Switch Dpkg::Conf implementation to be hash based, add two new accessors
and a new option to the filter method to use the old behavior.
- Do not parse entry multiple times in Dpkg::Changelog::Entry::Debian.
Add new parse_header() and parse_trailer() methods, and deprecate
check_header() and check_trailer() ones.
- Use “GnuPG” instead of “gpg” in error messages to refer to the software
in Dpkg::Source::Package.
- Handle undef versions in Dpkg::Changelog from empty versions in
changelog entry header lines.
- Allow detached upstream orig tarball signatures when extracting
version 1.0 non-native source packages.
- Include upstream orig tarball signatures in source packages.
See #759478.
- Add fixdebugpath to reproducible feature in Dpkg::Vendor::Debian.
Thanks to Daniel Kahn Gillmor . Closes: #819194
* Build system:
- Fix building development documentation.
- Remove unused UA_LIBS variable.
- Split libps and libkvm detection into their own macros and variables.
- Make it possible to build without system libmd.
- Add a configuration summary to configure output.
- Make git log invocation immune to local configuration.
- Do not require passing the perl interpreter to run-script.
- Quote dirname argument in run-script, to handle spaces in pathname.
Reported by Carsten Hey .
- Use a single po4a opt argument instead of the same per language.
* Packaging:
- Enable all hardening flags, starting with gcc-5 there is no performance
loss anymore when enabling PIE on i386.
* Test suite:
- Add a unit test to compile perl code with warnings.
- Add a unit test for the trigger deferred parser.
* Documentation:
- Say value instead of option in deb-control(5).
- Mark debian changelog format in bold in dpkg-parsechangelog(1).
- Add references to man pages describing file formats.
- Document missing Install-Size, Built-For-Profiles and Build-Profiles
fields in man pages.
- Add new dsc(5), deb-changelog(5) and deb-changes(5) man pages.
- Remove Debian specific policy references.
- Remove superfluous SEE ALSO references from dpkg-source(1).
- Fix --remove and --purge summary formatting in dpkg(1).
- Move --audit description just after --verify in dpkg(1).
- Mark Maintainer field as bold in deb-src-control(5).
- Fix reference to --record-avail instead of nonexistent --avail.
- Add missing quotes in man pages.
- Document Source field version in deb-control(5).
- Add new deb822(5) man page.
- Document and improve C/C++ programs exit codes in man pages.
- Clarify dpkg --path-exclude/--path-include pathname filter behavior.
Closes: #811267
- Clarify that packages are only automatically forgotten by dpkg if they
contain no user data, such as package selections. Closes: #813179
- Fix documentation for package flags in dpkg(1).
- Clarify that deb-symbols(5) documents the binary format subset, and
the template symbol files are described in dpkg-gensymbols(1).
Closes: #795163
- Update field requirements of control file formats to match dpkg reality.
- Document the format of the origins filename in deb-origin(5).
- Add list of flags set by bug feature area to dpkg-buildflags(1).
- Switch output encoding of man pages to UTF-8.
- Move SEE ALSO section to the end of Dpkg::Changelog::Debian.
- Clarify that i386 does not suffer performance loss due to PIE anymore
since gcc >= 5 in dpkg-buildflags(1).
- Document in deb822(5) that deb-origin(5) also supports comments.
- Clarify which characters constitute the deb822(5) control files syntax
by using Unicode code points and their printable characters.
Based on a patch by Ben Finney .
- Remove wrong mention that deb-control(5) support comments.
- Make explicit that deb-control(5) documents the binary control file.
- Add missing value for Standards-Version field in dsc(5).
Reported by Helge Kreutzmann .
[ Updated programs translations ]
* Dutch (Frans Spiesschaert). Closes: #822797
* German (Sven Joachim).
* Japanese (Takuma Yamada). Closes: #819939
* Portuguese (Miguel Figueiredo).
* Simplified Chinese (Zhou Mo). Closes: #809517
* Vietnamese (Trần Ngọc Quân).
[ Updated dselect translations ]
* Japanese (Takuma Yamada). Closes: #819940
[ Updated scripts translations ]
* German (Helge Kreutzmann).
[ New man pages translations ]
* Dutch (Frans Spiesschaert). Closes: #822798
[ Updated man pages translations ]
* German (Helge Kreutzmann).
-- Guillem Jover Mon, 02 May 2016 04:14:57 +0200
dpkg (1.18.4) unstable; urgency=medium
[ Guillem Jover ]
* Switch dpkg-scansources and dpkg-scanpackages to use File::Find instead
of find(1), as the former is more portable with more consistent behavior,
and always canonicalizes the pathnames. Closes: #800649
* Initialize Config-Version also for packages previously in triggers-pending
state, otherwise we end up not passing the previously configured version
to «postinst configure», which might consider this a first install instead
of an upgrade. Closes: #801156
* Fix memory leaks in «dpkg --verify» and dpkg infodb format upgrade logic.
* Merge all update-alternatives action handling into a single if-else-if
block, to unify the code an allow a future switch into a shared library.
* Perform any necessary cleanups on normal exit from dpkg-divert --add and
--remove commands.
* Make dpkg-architecture warning on non-matching GNU system type compiler
agnostic.
* Add ‘.gitreview’ to the default dpkg-source ignore lists.
* Add support for DPKG_MAINTSCRIPT_DEBUG environment variable to dpkg.
* Fix dpkg-checkbuilddeps exit code to be 1 instead of a random error value
on unsatisfied dependencies. Regression introduced in dpkg 1.18.3.
* Fix an off-by-one write access in dpkg-deb when parsing the old format
.deb control member size. Thanks to Hanno Böck .
Fixes CVE-2015-0860.
* Fix an off-by-one read access in dpkg-deb when parsing ar member names.
Thanks to Hanno Böck .
* Add experimental multithreaded xz compression support in libdpkg, which
requires xz >= 5.2.0.
* Fix physical file offset comparison in dpkg. Closes: #808912
Thanks to Yuri Gribov .
* Fix usage of dpkg-architecture -s after other action options.
Reported by Niels Thykier .
* Add NIOS2 support to cputable. Thanks to Marek Vasut .
* On Debian and derivatives enable timeless build flag feature by default.
Thanks to Paul Wise . Closes: #805872
* Perl modules:
- Add support for Build-Essential field. Closes: #806315
* Test suite:
- Improve perl code test coverage.
* Build system:
- Set PERL5LIB globally for the test suite to the local modules directory,
to avoid using the system modules. Regression introduced in dpkg 1.17.8.
Reported by Jérémy Bobbio . Closes: #801329
- Use absolute buildir pathnames in PATH variable for the test suite.
- Descend into scripts directory when cleaning up code coverage files.
- Add new configure option --disable-devel-docs to select the kind of docs
to generate, default for now is development documentation.
- Try to use AM_GNU_GETTEXT_REQUIRE_VERSION to benefit from the latest
installed gettext version, while guaranteeing a minimal required version.
* Packaging:
- Add missing Build-Depends for restriction formula support.
* Documentation:
- Move description for “target architecture” from the dpkg-architecture(1)
‘-A’ option to the TERMS section. Closes: #799046
- Clarify that the md5sum check on «dpkg --verify» is performed on the
file contents, and failures denote changed content. Closes: #760248
- Document that dpkg-buildpackage -nc -S implies -d.
- Clarify role of Build-Depends in deb-src-control(5).
Prompted by Johannes Schauer .
- Document supported feature areas.
- Clarify in dpkg-query(1) when binary:Package gets arch-qualified.
Closes: #801958
- Add a subsection separating external from internal environment variables
in dpkg(1).
[ Updated programs translations ]
* Dutch (Frans Spiesschaert). Closes: #800513
* Japanese (Kenshi Muto). Closes: #799432
* Turkish (Mert Dirik). Closes: #799875
[ Updated scripts translations ]
* German (Helge Kreutzmann).
[ Updated man pages translations ]
* German (Helge Kreutzmann, Julian R). Closes: #807156
-- Guillem Jover Fri, 25 Dec 2015 13:20:26 +0100
dpkg (1.18.3) unstable; urgency=medium
[ Guillem Jover ]
* Fix short-lived memory leaks in start-stop-daemon. As a side effect now
a missing group after ‘:’ on --chuid is a fatal error.
* Print the master and slave links in «update-alternatives --display».
* Print the current best alternative in the head instead of the trail
in «update-alternatives --display», with a two space indentation.
* Reimplement «update-alternatives --all» as a fully built-in command
instead of executing itself with --config per subtask.
* Reimplement «update-alternatives --set-selections» as a fully built-in
command instead of executing itself with --set or --auto per subtask.
* Add kfreebsd-armhf support to ostable and triplettable. Closes: #796283
Thanks to Steven Chamberlain .
* Fix «dpkg --verify» with --root.
* Fix an off-by-one write access in dpkg-deb when parsing the .deb magic.
Reported by Jacek Wielemborek . Closes: #798324
* Split overlong perl regexes into multiline extended regexes.
* Switch dselect multicd method license from GPL2 to GPL2+, with consent
from all its authors.
* Fix inadvertent license change for lib/dpkg/utils.c from GPL2 to GPL2+.
* Fix segfault when using «dpkg --no-act» with a synthetic --admindir.
Reported by David Kalnischkies .
* Perl modules:
- Only warn on invalid week days instead of aborting in
Dpkg::Changelog::Entry::Debian. Regression introduced in dpkg 1.18.2.
Reported by Jakub Wilk .
- Do not warn when removing an empty subdirectory on source package
extraction in Dpkg::Source::Package::V2. Closes: #796671
- Do not abort on parse errors from Time::Piece->strptime() for the
changelog trailer date, just queue them so that the caller can decide
if they should be warnings or actual errors. Closes: #795936
- Validate the changelog trailer date, and catch and warn or error on
bogus month names, such as unknown or unabbreviated ones.
* Test suite:
- Get the reference build flags from dpkg-buildflags.pl, instead of
hardcoding them, which might not match depending on the architecture.
Closes: #794694
- Delete any environment variable starting with DEB_ in mk.t that might
affect the test results.
* Build system:
- Add a new --with-devlibdir configure option for the C libdpkg library.
* Packaging:
- Remove unneeded --sourcedir options from dh_install calls.
- Use the new --with-devlibdir configure option to only switch libdpkg-dev
files to the multi-arch directory. Closes: #794977
* Documentation:
- Fix typos for --predep-package option name. Closes: #794688
- Add missing dashes to package-list in deb-src-control(5).
- Mark each individual required field as such, instead of using segregated
sections.
[ Updated programs translations ]
* Catalan (Jordi Mallach).
* French (Sébastien Poher). Closes: #798371
* German (Sven Joachim).
* Vietnamese (Trần Ngọc Quân).
[ Updated dselect translations ]
* French (Sébastien Poher). Closes: #798370
[ Updated scripts translations ]
* French (Sébastien Poher). Closes: #798369
* German (Helge Kreutzmann).
[ Updated man pages translations ]
* German (Helge Kreutzmann).
-- Guillem Jover Mon, 21 Sep 2015 07:11:42 +0200
dpkg (1.18.2) unstable; urgency=low
[ Guillem Jover ]
* Fix plural form translations for single plural languages. Closes: #790025
* Add new dpkg-buildpackage -J option, which is a safe version of -j.
* Fix dpkg-gencontrol to add correct binary filename to debian/files,
even when overriding the Package field value with the -D option.
Reported by Niels Thykier .
* Move the implicit build-essential:native Build-Depends from
dpkg-checkbuilddeps to a new vendor hook, as it is Debian-specific.
* Add support for ignoring built-in build dependencies and conflicts
with the new «dpkg-buildpackage --ignore-builtin-builddeps» and
«dpkg-checkbuilddeps -I» options. Closes: #480638, #571671
* When sys_siglist is defined in the system, try to use NSIG as we cannot
compute the array size with sizeof(). If NSIG is missing fallback to 32
items. Prompted by Igor Pashev .
* Use string_to_security_class() instead of a literal SECCLASS value in
the setexecfilecon() libcompat function, as is now
deprecated.
* Switch libdpkg xz compressor to use CRC64 for integrity checks, to match
the default on the command-line tool, which should provide slightly better
detection against damaged data, at a negligible speed difference.
* Only use the SHELL environment variable for interactive shells.
Closes: #788819
* Move tar option --no-recursion before -T in dpkg-deb. With tar > 1.28 the
--no-recursion option is now positional, and needs to be passed before
the -T option, otherwise the tarball will end up with duplicated entries.
Thanks to Richard Purdie .
* Add an extra level of escaping for double $(evals) in architecture.mk
and buildflags.mk, so that the variables are computed lazily again.
Regression introduced in dpkg 1.16.2. Closes: #793330
* Add binary packages Essential information to Package-List field in the
.dsc file, as optional essential=yes entries. This allows precomputing
the pseudo-essential set before starting an architecture bootstrap.
* Perl modules:
- Remove non-functional timezone name support from
Dpkg::Changelog::Entry::Debian.
- Use Time::Piece (part of the perl core distribution) instead of
Date::Parse in Dpkg::Changelog::Entry::Debian. This reduces the build
and run-time dependencies, and helps architecture bootstrapping.
- Simplify distribution splitting in Dpkg::Changelog::Entry::Debian.
- Add new function changelog_parse_plugin() in Dpkg::Changelog::Parse.
- Add new function changelog_parse_debian() in Dpkg::Changelog::Parse, and
use it in changelog_parse() instead of the external plugin parser when
the input format is “debian”. This significantly speeds up the parsing.
- Remove trailing space before handling blank line dot-separator in
Dpkg::Control::HashCore. Regression introduced in dpkg 1.18.0.
Reported by Jakub Wilk . Closes: #789580
- Allow the Maintainer field in CTRL_FILE_STATUS.
- Import make_path from File::Path in Dpkg::Source::Package::V2.
Regression introduced in dpkg 1.18.0. Closes: #789957
- Make the BinaryFiles subpackage self-contained by explicitly importing
File::Spec in Dpkg::Source::Package::V2.
- Do not exclude pre-existing symlinks when unpacking the debian/ tarball
in Dpkg::Source::Package::V2. Closes: #790073, #791535
- Disable the thread sanitizer when the address sanitizer is enabled
in Dpkg::Vendor::Debian as these are mutually incompatible, and make
sanitize=+all not work at all.
- Allow colons (:) in added filenames in Dpkg::Dist::Files, which can be
present when the upstream version contains colons. Regression introduced
in dpkg 1.18.0. Reported by Jakub Wilk .
- Future-proof tar invocations in Dpkg::Source::Archive for options that
might become positional in the future, and by always placing function
options first.
- Make the dependency comparison deep by comparing not only the first
dependency alternative, to get them sorted in a reproducible way.
Based on a patch by Chris Lamb . Closes: #792491
- Support spaces in symbol names in Dpkg::Shlibs::Objdump. This is
required by Go shared libraries. Closes: #785344
Based on a patch by Michael Hudson-Doyle .
* Test suite:
- Set SIGINT, SIGTERM and SIGPIPE to their default actions to get
deterministic behavior.
- Add test cases for the makefile snippets.
- Delete DEB_VENDOR from the environment to get reliable results.
* Packaging:
- Make the libdpkg-dev package Multi-Arch:same.
- Mark libio-string-perl as .
* Documentation:
- Fix grammar in dpkg-architecture(1).
Thanks to Chris Lamb . Closes: #787616
- Use the feature area name in the dpkg-buildflags(1) subsection title.
- Document DPKG_HOOK_ACTION also in dpkg(1) ENVIRONMENT section.
- Clarify when some features where added in man pages.
- Document --yet-to-unpack, --predep-package and all --assert-
commands as supported in both «dpkg --help» and dpkg(1).
- Document abitable in dpkg-architecture(1).
- Clarify that an architecture wildcard is a Debian thing in
dpkg-architecture(1).
- Document multiarch triplet in dpkg-architecture(1) TERMS section.
- Remove “my” keyword from Dpkg perl modules function prototypes.
- Say FUNCTIONS instead of METHODS for Dpkg modules when appropriate.
- Fix POD syntax inside verbatim paragraph in Dpkg::Changelog.
- Document and mark Dpkg::Arch as a public module.
- Fix Dpkg::Changelog::Parse::changelog_parse documentation.
[ Updated programs translations ]
* Dutch (Frans Spiesschaert). Closes: #789097
* Simplified Chinese (Zhou Mo). Closes: #787986
* Turkish (Mert Dirik). Closes: #788211
* Vietnamese (Trần Ngọc Quân).
[ Updated man pages translations ]
* German (Helge Kreutzmann).
[ Updated dselect translations ]
* Dutch (Frans Spiesschaert). Closes: #789096
[ Updated scripts translations ]
* German (Helge Kreutzmann).
-- Guillem Jover Mon, 03 Aug 2015 15:40:21 +0200
dpkg (1.18.1) unstable; urgency=low
[ Guillem Jover ]
* Cast c_isbits() c argument to an unsigned char when indexing the array.
This fixes build failures on armel, armhf, ppc64el and s390x.
* Do not allow pathnames with embedded newlines in dpkg-deb and dpkg.
Closes: #720761
* Fix setting the SE Linux context when a file has a statoverride.
Closes: #786435
* Set the SE Linux file context even when the file mode has no file type.
* Make dpkg-buildpackage -j override any parallel option specified in
DEB_BUILD_OPTIONS. Regression introduced in dpkg 1.14.15.
* Honor Pre-Depends, Conflicts and Breaks for packages in unpacked and
half states. Thanks to Ian Jackson . Closes: #377860
* Fix build failure on FreeBSD by actually using libmd if available.
* Sort dpkg-scanpackages output by package name and version.
Thanks to Maximilian Schwerin .
* Sort dpkg-scansources output by package name and version.
Thanks to Maximilian Schwerin .
* Set the correct default compression value in dpkg-deb for control.tar.gz
member. This meant using compression level 1 when using the zlib shared
library to compress the control.tar member, and always failing when using
the gzip command. Regression introduced in dpkg 1.17.6. Closes: #786654
* Use the generated template file instead of the original one when looking
for changes in dpkg-gensymbols. There's too much information not being
preserved in the symbols files to be able to regenerate templates for
them. Closes: #785937, #786840
* Perl modules:
- Add missing strict and warnings pragmas for submodules.
- Use non-destructive substitutions inside map.
- Use the state keyword to simplify the code.
- Do not replace #PACKAGE# in template mode in Dpkg::Shlibs::SymbolFile.
* Documentation:
- Update current default source compressor from gzip to xz.
- Remove spurious ‘=’ from parallel DEB_BUILD_OPTIONS without arguments
in dpkg-buildpackage(1).
[ Updated programs translations ]
* German (Sven Joachim).
* Simplified Chinese (Zhou Mo). Closes: #786377
[ Updated man pages translations ]
* German (Helge Kreutzmann).
[ Updated dselect translations ]
* German (Sven Joachim).
-- Guillem Jover Sat, 30 May 2015 03:00:21 +0200
dpkg (1.18.0) unstable; urgency=low
[ Guillem Jover ]
* Only trim trailing “/” and “/.” from «dpkg-query --search» arguments if
they are a pathname, and not a pattern or a substring match.
* Switch C/C++ code to use a new set of C locale character type functions
independent of the current locale.
* Add support for arch-bits and arch-endian dpkg-gensymbols tags.
Closes: #630342
* Switch perl code from legacy File::Path functions to new ones.
* Fix perl uninitialized value usage in dpkg-scansources when the Binary
field is missing.
* Use dpkg-query instead of dpkg for --search in dpkg-shlibdeps so that
the subprocesses get the correct admindir. Closes: #775258
* Rework the Installed-Size field default value computation to make it
reproducible regardless of the build system filesystem, and document
how the value is computed and that it is just an approximation.
Closes: #650077
* Use strftime() instead of «date -R» in dpkg-genchanges, as the latter
is not specified by POSIX and is not widely portable.
* Warn on obsolete '<' and '>' operators in dpkg --compare-versions.
* Trim end of line whitespace from dpkg and dselect config file parsers.
Reported by Christoph Biedl .
* Do not silently eat a standalone ‘-’ in the libdpkg command-line parser.
* Fix short-lived memory leaks in dpkg-deb and libdpkg. Closes: #769515
* Fix «dpkg-deb -b» filename generation when the package does not contain
an Architecture field. Regression introduced in dpkg 1.16.2.
* Fix «dpkg --audit» to report missing and empty architecture fields.
Regression introduced in dpkg 1.16.2.
* Add support to dpkg-deb for reading the archive from standard input,
except for --raw-extract which does not yet support it. Closes: #616614
Based on a patch by Johannes Schauer .
* Add ‘.mailmap’ to the default dpkg-source ignore lists.
* Set the SE Linux context on «dpkg-statoverride --update». Closes: #690361
* Do not fail on dpkg-query -W and -l when multiple arguments match the
same package. Closes: #588505
* Change dpkg-maintscript-helper to handle symlinks and pathnames ending in
slash. For the former error out, for the latter strip it. Closes: #771752
* Support moving a conffile not being shipped anymore. Closes: #767003
Thanks to Mathias Behrle .
* Add a new dpkg-buildflags sanitize feature area:
- Add new “address”, “thread”, “leak” and “undefined” features, all
disabled by default. Closes: #760741
* Do not accept unknown user or group names on «dpkg-statoverride --add».
Regression introduced in dpkg 1.17.11. Closes: #775124
* Normalize dpkg-parsechangelog command-line parsing, so that «-ovalue»,
«-o value», «--option=value» and «--option value» will all be accepted.
Closes: #693951
* Add dpkg --ctrl-tarfile forwarding command for dpkg-deb.
* Disable dependency checks on dpkg-buildpackage -S -nc.
* Make dependency checks fatal for dpkg-buildpackage -S.
* Update amd64 GNU cpu regex in cputable to match amd64 too, in addition
to x86_64. This is required for FreeBSD.
* Use badusage() instead of ohshit() for command-line errors.
* Use the original template symbols file when diffing in dpkg-gensymbols.
We should not create a new template symbols file, because the output
might change (different sorting order for example) relative to the
original. Closes: #773718
* Do not leak kvm descriptors in start-stop-daemon on GNU/kFreeBSD systems.
Based on a patch by Jeff Epler . Closes: #779467
* Switch start-stop-daemon to use a monotonic clock if available. This
makes the timeout checks resilient to abrupt system clock changes.
Suggested by Jose M Calhariz . Closes: #783014
* Fix perl warning in dpkg-genchanges when parsing BY-HAND file entries.
Regression introduced in dpkg 1.17.7. Closes: #781074
* Use the checksums files list order when building the Files field to match
the other Checksum fields in dpkg-genchanges.
* Skip files based on the architecture from the filename in dpkg-genchanges.
* Allow binary packages not found in debian/control in dpkg-genchanges,
which could allow injecting debug .debs for example.
* Annotate any non-deb binary descriptions (not just udebs) with their
package type in dpkg-genchanges.
* Remove outdated local copy of the Debian README.mirrors.txt file from
dselect ftp access method, and print a message pointing to the current
URL instead. Closes: #784966
* Cleanup default dpkg-shlibdeps shared library directory search list:
- Do not add cross-root directories (// and /usr//).
- Remove ancient multilib /emul/ia32-linux/ paths.
- Reorder directory precedence to:
«dpkg-shlibdeps -l» > ENV{LD_LIBRARY_PATHS} > cross-multiarch >
DEFAULT_LIBRARY_PATH > ld.so.conf > DEFAULT_MULTILIB_PATH
* When upgrading, copy over the cached arch-qualified package name. This
fixes wrong output when cross-grading.
* Consider foreign packages ambiguous in need of an arch-qualifier.
* Perl modules:
- Rename and deprecate Dpkg::Gettext _g function with new g_.
- Assume in Dpkg::Arch that the abitable is always present, and bump
libdpkg-perl Depends on dpkg to 1.16.3, the version introducing the file.
- Remove support for GCC_TARGET environment variable from Dpkg::Shlibs.
This was a temporary workaround for very old gcc toolchains. See #453267.
- Prefer multiarch paths to multilib ones in Dpkg::Shlibs.
Thanks to Helmut Grohne . Closes: #772184
- Enable sub-second timestamps in Dpkg::Source::Patch by using Time::HiRes.
- Use TMPDIR instead of manually setting DIR on tempfile() call in
Dpkg::Source::Package::V2.
- Switch Dpkg::Checksums from using checksum programs to the more portable
Digest modules. Obsolete the 'program' property, and add a 'name' one.
- Add support for $DEFAULT_TEXT_DOMAIN to Dpkg::Gettext, so that the Dpkg
perl modules can always produce localized messages.
- Fix OpenPGP Armor Header Line parsing in Dpkg::Control::Hash. We should
only accept [\r\t ] as trailing whitespace, although RFC4880 does not
clarify what whitespace really maps to, we should really match the GnuPG
implementation anyway, as that's what we use to verify the signatures.
Reported by Jann Horn . Fixes CVE-2015-0840.
- Pass PATCH_GET environment variable instead of -g0 to the patch command
in Dpkg::Source::Patch. This allows using non-GNU patch programs, like
FreeBSD's patch.
- Accept an %opts argument for the Dpkg::Control::Info constructor, and
accept either passing a filename option as undef, or a scalar undef.
Closes: #782019
- Do not print on undef filehandle in Dpkg::Control::Info output().
Thanks to Roderich Schupp . Closes: #781887
- Always sort the Dpkg::Dist::Files files list on output, instead of
preserving the insertion order, which is not reproducible with parallel
builds. Reported by Jérémy Bobbio .
- Add new filter() method to Dpkg::Substvars.
- Kill the process when reaching timeout in Dpkg::IPC::wait_child().
* Test suite:
- Check perl code compilation, warnings and strictness.
- Fix dpkg-divert unit test to work on BSD «rm -rf» that cannot traverse
directories with mode 000.
- Fix dpkg-divert unit test to work when there is no /dev/full.
- Skip test cases when there is no c++filt available.
- Add test cases for Dpkg::Conf and Dpkg::Checksums.
- Handle libtool executables in progname unit test.
- Do not use a timeout when testing cat I/O, speeds up test suite by 5s.
- Reduce timeout test from 5 seconds to 1, to speed up test suite by 4s.
* Build system:
- Bump gettext version to 0.19:
+ Use --add-location=file in msgmerge and xgettext commands.
+ Use --porefs=noline for po4a command.
- Wrap file references in man page PO files with po4a --porefs=wrap.
- Fix support for cross-building dpkg:
+ Assume a working C99 snprintf on SUS >= v3.
+ Do not try to run the va_copy configure check, just check that the
symbol is available.
- Check that HAVE_DECL_SYS_SIGLIST is 0 instead of undefined, to fix a
build failure on uclibc based systems. Closes: #777044
Based on a patch by Alex Potapenko .
- Use single suffix rules instead of non-portable %-pattern rules.
- Pass CC to the test suite, so that we can use a non-gcc compiler.
- Call AM_PROG_AR to detect the correct system archiver to use.
- Pass -Wall to automake in AM_INIT_AUTOMAKE, not implied by foreign.
* Packaging:
- Remove old trigger related Breaks and Conflicts from dpkg.
- Only use stackprotectorstrong when building dpkg with gcc >= 4.9.
- Switch to debhelper compatibility level 9.
- Name each public-domain license with a different name.
- Add missing public modules to dpkg-dev package description.
- Get rid of backward compatibility pseudo-tags from bug reports.
- Install doc/README.feature-removal-schedule only on affected packages
and debian/usertags everywhere.
* Documentation:
- Document arch-qualifiers for dependency fields in deb-control(5) and
deb-src-control(5). Reported by Johannes Schauer .
Closes: #768842
- Document versioned Provides in deb-control(5).
- Document the version when dpkg-deb --raw-extract got introduced.
- Document dpkg --log format, add missing actions and describe the startup
messages. Closes: #773398
- Document when and how the dpkg-maintscript-helper package name argument
is or should be arch-qualified. Closes: #776072
- Fix and update Arch substvar description in deb-substvars(5).
- Document that current build flag feature areas only work on Debian and
derivatives in dpkg-buildflags(1).
- Use “wildcard characters” instead of “wildchars” in dpkg-query(1).
- Document dpkg-query --search behavior in man page. Closes: #775379
- Document postinst “triggered” argument in debian/dpkg.postinst comment
header.
- Document Dpkg::IPC function signatures.
- Document the obsolete --compare-versions '<' and '>' operators in the
dpkg(1) man page. Thanks to Tomas Pospisek .
Closes: #776551
- Move dpkg-divert, dpkg-statoverride and update-alternatives man pages
from section 8 to 1, to match their installation path.
- Capitalize dpkg-parsechangelog(1) option descriptions.
- Mark dpkg-parsechangelog(1) --format values in bold.
- Place short options before long ones in dpkg-mergechangelogs(1) and
dselect(1) man pages.
- Properly terminate a bold marking in dpkg(1).
- Document in man pages the dpkg version when new features were introduced.
- Document that timestamps are reset for files patched with source format
“3.0 (quilt)” too.
- Document in dpkg-buildpackage(1) that using dpkg-source is sometimes
better than -S. Suggested by Johannes Schauer .
- Document dselect -? option.
- Document in dpkg-buildflags(1) that DEB_VENDOR influences the execution.
- Document that dpkg performs sanity checks on PATH.
- Mark some words and commands as non-hyphenable in man pages.
- Separate multi-line hanging tag paragraphs with .TQ in man pages.
- Mark field names in bold in man pages.
- Use various groff escape sequences for quoting characters.
- Lowercase warning and note admonitions in start-stop-daemon(8).
- Mark dselect(1) color attributes in bold.
- Say output instead of display for dpkg-deb tar-file option in dpkg(1).
- Say archive instead of filename for dpkg-deb option in dpkg(1).
- Say control-field-name instead of control-file-field in dpkg-deb(1).
- Fix option values and pathname markup in dpkg-deb(1).
- Use .TQ to separate different but related options in dpkg(1).
- Clarify that dpkg-buildpackage -jN forces parallel builds, regardless of
the packaging or upstream build systems supporting them. Closes: #780866
- Remove unneeded update-alternatives references from options descriptions.
- Document that apt might expect Packages.xz too in dpkg-scanpackages(1).
- Say METHODS instead of FUNCTIONS or OBJECT FOO in POD section titles.
- Document dpkg version when perl module versions got bumped.
* Output message fixes and improvements:
- Remove trailing newline from string literal in warning calls.
- Say “execute” instead of “exec” in Dpkg::Changelog::Parse error message.
- Say “package” instead of “it” in dpkg-name warning message.
- Uppercase field names in error messages.
- Expand EOF and eof into “end of file” in error messages.
- Use “” instead of “return” or “enter” in input prompts.
- Say directory instead of dir in output messages.
- Merge the same dpkg-scanpackages warning messages into a single line.
- Clarify dpkg-genchanges changes description open error.
- Add missing preposition in Dpkg::Source::Patch error message.
- Improve available state sorting order strings in dselect panel.
- Say “changelog-file” instead of “changelogfile” in --help output.
- Say “command” instead of “action” for dselect.
- Improve commands listing in «dselect --help» output, by printing them
before options and listing them one on each line with a description.
- Improve dselect color-spec --help output.
- Move "(default)" annotations in scripts --help output after option
description.
- Consistently use proper quotation marks ("" or '', and not the
unbalanced `' pair) all over the place.
- Use syserr() instead of an ad-hoc error message in dpkg-scansources.
- Say substvars instead of varlist in dpkg-shlibdeps error messages.
- Fix error messages on invalid uid/git/mode command-line syntax errors
in dpkg-statoverride, to not say they are from the statoverride file.
- Fix error message on empty dsc file in dpkg-genchanges.
- Mention “(^Z)” instead of “char” for the MSDOS end of file character.
[ Raphaël Hertzog ]
* Drop myself from Uploaders.
[ Updated programs translations ]
* Simplified Chinese (Zhou Mo). Closes: #782326
* Turkish (Mert Dirik). Closes: #785096
* Vietnamese (Trần Ngọc Quân).
[ Updated scripts translations ]
* German (Helge Kreutzmann).
[ Updated man pages translations ]
* German (Helge Kreutzmann).
-- Guillem Jover Mon, 18 May 2015 15:08:31 +0200
dpkg (1.17.23) unstable; urgency=low
[ Guillem Jover ]
* Use a matching group instead of ${^MATCH} in s/// in dselect build script.
* Skip tar extractor tests if tar is not GNU tar >= 1.27.
* Reset the trigger cycle tracking on unsatisfied dependencies during
trigger processing. Closes: #771730
* Fix out-of-bounds buffer read accesses when parsing field and trigger
names or checking package ownership of conffiles and directories.
Reported by Joshua Rogers .
* Add versioned Breaks on packages creating trigger cycles. Namely auctex,
apt-cudf, ccache, cups, distcc, fusionforge-plugin-mediawiki, gap-core,
gxine, hoogle, icecc, libjs-protoaculous, mcollective, pypy, wordpress
and xfonts-traditional.
[ Updated programs translations ]
* Basque (Iñaki Larrañaga Murgoitio). Closes: #771893
* Catalan (Guillem Jover).
* Czech (Miroslav Kure).
* Esperanto (Felipe Castro).
* French (Sébastien Poher).
* Italian (Milo Casagrande).
* Portuguese (Miguel Figueiredo).
* Russian (Yuri Kozlov). Closes: #771691
* Simplified Chinese (Zhou Mo). Closes: #771264
* Spanish (Javier Fernández-Sanguino)
* Swedish (Peter Krefting).
* Thai (Theppitak Karoonboonyanan). Closes: #772965
[ Updated scripts translations ]
* Catalan (Guillem Jover).
* Polish (Łukasz Dulny).
* Russian (Yuri Kozlov). Closes: #772841
[ Updated man pages translations ]
* French (Sébastien Poher).
* Italian (Beatrice Torracca). Closes: #771673
[ Updated dselect translations ]
* Catalan (Guillem Jover).
* Czech (Miroslav Kure).
* Norwegian Bokmål (Hans Fredrik Nordhaug).
* Polish (Łukasz Dulny).
* Portuguese (Miguel Figueiredo).
* Russian (Yuri Kozlov). Closes: #771682
* Spanish (Javier Fernández-Sanguino)
* Vietnamese (Trần Ngọc Quân).
-- Guillem Jover Tue, 23 Dec 2014 17:45:44 +0100
dpkg (1.17.22) unstable; urgency=low
[ Guillem Jover ]
* Add version introducing --ctrl-tarfile in dpkg-deb(1) man page.
* Bump minimal version for dir_to_symlink and symlink_to_dir commands
to 1.17.14 in dpkg-maintscript-helper(1) man page. Closes: #769843
* Reintroduce update-alternatives, dpkg-divert and dpkg-statoverride
compatibility symlinks under /usr/sbin/. There are still packages
using those paths, but the relevant lintian check did not list any,
so this got removed prematurely.
* Add Breaks on old man-db, fontconfig and readahead-fedora packages using
awaiting triggers, as they produce trigger cycles. Closes: #768599
* Escape package and architecture names on control file parsing warning,
as those get injected into a variable that is used as a format string,
and they come from the package fields, which are under user control.
Regression introduced in dpkg 1.16.0. Fixes CVE-2014-8625. Closes: #768485
Reported by Joshua Rogers .
* Do not match partial field names in control files. Closes: #769119
Regression introduced in dpkg 1.10.
* Fix build on Mac OS X. Regression introduced in dpkg 1.17.11.
Reported by Dominyk Tiller .
* Normalize tar entry uid and gid from the current system only in dpkg
unpack. Regression introduced in dpkg 1.17.14. Closes: #769211
* Restore multiple processing instances check for packages and archives
specified on the command-line. Regression introduced in dpkg 1.17.20.
* Fail on trigger processing when it is required to progress. Trigger
processing is sometimes required and sometimes opportunistic, and we
should only fail on the former but ignore the latter. Closes: #768852
* Do not ignore trigger cycles for direct dependencies, these are just
normal trigger cycles, and as such should not be special cased.
* Register all pending triggers for deferred processing when being called
as «dpkg --configure pkgname…». This is a mostly conformant workaround
for frontends like apt that do not correctly call «dpkg --configure -a»
or «dpkg --triggers-only -a» after their normal runs, and leave packages
in triggers-pending and triggers-awaited states. Closes: #766758
[ Updated programs translations ]
* Catalan (Guillem Jover).
* Danish (Joe Dalton).
* French (Sébastien Poher).
* German (Sven Joachim).
* Japanese (Kenshi Muto). Closes: #771255
* Polish (Łukasz Dulny).
* Simplified Chinese (Zhou Mo). Closes: #766724, #770280
* Swedish (Peter Krefting).
* Turkish (Mert Dirik).
* Vietnamese (Trần Ngọc Quân)
[ Updated scripts translations ]
* French (Sébastien Poher).
* German (Helge Kreutzmann).
* Swedish (Peter Krefting).
[ Updated man pages translations ]
* French (Sébastien Poher). Closes: #767934
* German (Helge Kreutzmann). Closes: #752123
* Simplified Chinese (Zhou Mo). Closes: #767573
* Swedish (Peter Krefting).
[ Updated dselect translations ]
* Danish (Joe Dalton).
* Dutch (Frans Spiesschaert). Closes: #771237
* French (Sébastien Poher). Closes: #767918
* Japanese (Kenshi Muto). Closes: #771256
* Swedish (Peter Krefting).
-- Guillem Jover Fri, 28 Nov 2014 02:02:34 +0100
dpkg (1.17.21) unstable; urgency=low
[ Guillem Jover ]
* Get consistent git-style diff support, by adding (>= 2.7) to the dpkg-dev
patch Depends, and a Breaks patch (<< 2.7) to libdpkg-perl.
* Error out on obsolete Build-Profiles field syntax.
* Document -g and -G options in dpkg-genchanges(1). Closes: #766568
* Do not accept values bundled with long options in dpkg-parsechangelog.
The parser was accepting things like «--count10», which is just broken.
Instead allow only «--count=10» in addition to «--count 10».
* Accept «-S value» in addition to «-Svalue» in dpkg-parsechangelog.
Closes: #766559
* Add support for new interest-await and activate-await trigger directives.
And a new --await option to dpkg-trigger. This might allow possibly
switching the default meaning after a transition period no shorter than
two minor versions, so in 1.19.x or 1.20.x. Perhaps.
* Do trigger cycle detection after dependency checks in dependtry <= 1,
and before dependency cycle breaking in dependtry > 1. This makes sure
to always catch trigger cycles, but still gives the opportunity to try
to process triggers for packages that are not yet ready in the first
dependtry, but which might be a bit later on, without wrongly detecting
avoidable and bogus trigger cycles. Closes: #766557
* Update features removal schedule:
- The -u, --udeb dpkg-scanpackages options got removed, state that.
- Remove the entry about obsolete fields, as these need to be preserved
for backward compatibility, they are part of the external interface to
be able to handle ancient binary packages.
[ Updated programs translations ]
* Catalan (Guillem Jover).
* German (Sven Joachim). Closes: #766311
* Simplified Chinese (Zhou Mo).
[ Updated scripts translations ]
* Catalan (Guillem Jover).
-- Guillem Jover Sat, 25 Oct 2014 02:21:43 +0200
dpkg (1.17.20) unstable; urgency=low
[ Guillem Jover ]
* Add a requeueing insertion protection for process_queue().
* Make sure to always switch to the next dependtry after we have made no
progress for a while. Regression stemming from non future proof changes
introduced with the initial triggers implementation in dpkg 1.14.17
combined with changes in dpkg 1.17.19. Closes: #766242, #766322
* Make the initial dependtry be 1 instead of 0. This gets rid of an unused
dependtry step, which got accidentally introduced when the perl dpkg was
rewritten in C, ages ago.
* Allow detached upstream signatures for upstream orig.tar files in the
.dsc file. Suggested by Daniel Kahn Gillmor .
Closes: #759478
* Inline alternative status description into translatable string in
update-alternatives. Required-by: #766311
* Reword description for installed status in dpkg(1) man page.
[ Updated programs translations ]
* German (Sven Joachim).
* Simplified Chinese (Zhou Mo).
* Vietnamese (Trần Ngọc Quân).
-- Guillem Jover Thu, 23 Oct 2014 00:43:05 +0200
dpkg (1.17.19) unstable; urgency=low
[ Guillem Jover ]
* Bump the Breaks on devscripts to 2.14.10 due to the new dpkg-architecture
command-line parsing strictness introduced in 1.17.17. Closes: #764965
* Create pidfiles even when start-stop-daemon is not asked to background
the process itself. Although a bit of a dubious usage, because any error
before executing the program will not be properly reported to the caller.
Regression introduced in dpkg 1.17.14. Closes: #765110
* Add new --remove-pidfile option to start-stop-daemon.
* Mention --pid and --ppid in start-stop-daemon(8) man page DESCRIPTION.
* Add invoke hooks for dpkg --add-architecture and --remove-architecture.
Prompted by Helmut Grohne .
* Reverse --verify-format logic to actually accept 'rpm' as valid.
Closes: #765907
* Fix trigger dependency checks and cycle detection.
Regression introduced in dpkg 1.17.17.
Closes: #765434, #765668, #765734, #765781, #765789, #765952
* Rework dependency problem debug and notice output on trigger processing.
[ Updated programs translations ]
* Italian (Milo Casagrande): Closes: #765748
* Turkish (Mert Dirik). Closes: #764942
* Simplified Chinese (Zhou Mo). Closes: #765693
[ Updated scripts translations ]
* German (Helge Kreutzmann).
[ Updated man pages translations ]
* German (Helge Kreutzmann).
-- Guillem Jover Mon, 20 Oct 2014 15:17:49 +0200
dpkg (1.17.18) unstable; urgency=low
[ Guillem Jover ]
* Handle empty minimum versions when initializing dependency versions,
as the code is mapping the minimum version 0 to '' to avoid outputting
useless versions. Regression introduced in dpkg 1.17.17. Closes: #764929
[ Updated programs translations ]
* Catalan (Guillem Jover).
[ Updated dselect translations ]
* Catalan (Guillem Jover).
* German (Sven Joachim).
-- Guillem Jover Sun, 12 Oct 2014 15:47:44 +0200
dpkg (1.17.17) unstable; urgency=low
[ Guillem Jover ]
* Add dpkg-vendor, Dpkg/File.pm and Dpkg/Util.pm to the list of files with
translatable strings, so that they can be translated.
* Fix some typos for versioned and mentioned in comments and changelogs.
* Mark for translation and unify "rm cleanup" string in dpkg.
* Mark for translation and improve dselect method handling error messages.
* Defer trigger processing if the package does not fulfill dependencies.
Closes: #671711
* Do not write to the database when changing selections with --dry-run.
Closes: #764673
* Add missing imports from Dpkg::BuildProfiles in dpkg-genchanges.
Regression introduced in dpkg 1.17.14. Closes: #764216
Reported by Johannes Schauer .
* Initialize dependencies with the correct minimum version from a symbols
file with multiple SONAMEs in dpkg-shlibdeps.
Thanks to Jérémy Bobbio . Closes: #764721
* Perl modules:
- Allow multiple whitespace in Dpkg::BuildProfiles::get_build_profiles()
when parsing the DEB_BUILD_PROFILES environment variable.
Thanks to Johannes Schauer .
- New Dpkg::Getopt private module.
- Document public module Dpkg.
- Document public module Dpkg::Gettext.
- Mark Dpkg::BuildProfiles as a public module.
- Document all public module versions in a CHANGES section.
- Remove EXPORTED from POD section titles.
- Document private modules as such in a CHANGES section.
* Set the DEB_TARGET_* dpkg-architecture variables from architecture.mk.
Missed in dpkg 1.17.14.
* Initialize DEB_TARGET_ARCH variable without requiring DEB_HOST_ARCH,
which is not being set at all when querying for DEB_TARGET_ variables.
* Normalize dpkg-architecture command-line parsing, so that «--option=value»
«--option value», «-ovalue» and «-o value» will all be accepted.
* Add long option names for all dpkg-architecture short options.
* Add support for --host-arch, --host-type, --target-arch and --target-type
long options in dpkg-buildpackage. These will get passed through to
dpkg-architecture. This restores the ability to specify the target
architecture when building cross-compilers. Regression introduced in
dpkg 1.17.14. Reported by Helmut Grohne .
* Do not modify the topic variable values in list functions in perl code.
* List Dpkg::Exit and Dpkg::Interface::Storable as public modules in
libdpkg-perl package description.
[ Updated programs translations ]
* German (Sven Joachim).
* Vietnamese (Trần Ngọc Quân).
[ Updated scripts translations ]
* German (Helge Kreutzmann).
-- Guillem Jover Sun, 12 Oct 2014 04:59:09 +0200
dpkg (1.17.16) unstable; urgency=low
* Set the copyright holder in the po4a calls for man pages.
* Switch remaining topic to named variable in Dpkg::Source::Patch:analyze(),
otherwise the loop was expecting values in one variable but storing them
in another. Regression introduced in dpkg 1.17.14. Closes: #764206
* Set umask to 0 when creating symlinks in tar test case, to normalize
results. POSIX specifies that symlinks have undefined permissions in
their mode, so their setting is system dependent. Linux does not honor
the umask for symlinks, other systems like Hurd or kFreeBSD do.
Regression introduced in dpkg 1.17.14. Closes: #764171
-- Guillem Jover Mon, 06 Oct 2014 13:29:17 +0200
dpkg (1.17.15) unstable; urgency=low
* Do not blacklist pie and stackprotector build flags on mips/mipsel.
Thanks to Aurelien Jarno . Closes: #763672
* Fix build failures due to mismatched umask in libdpkg tar test case.
Set it to a known value of 0022.
-- Guillem Jover Mon, 06 Oct 2014 03:21:58 +0200
dpkg (1.17.14) unstable; urgency=low
[ Guillem Jover ]
* Fix '--' to '-' on translations for single character options.
* Correct the copyright holder in the gettext Makevars files.
* Switch debian/copyright to machine-readable format 1.0, and extensively
update the information within.
* Bump Standards-Version to 3.9.6 (no changes needed).
* Disable unused run-time type information for dselect.
* Fix compiler flag detection with non-GCC compilers in the build system.
* Fix perl warning on dpkg-source when typing Ctrl-D on patch name prompt.
* Add new dpkg-deb --ctrl-tarfile command.
* dpkg-architecture:
- Add support for target system information via the new DEB_TARGET_ family
of variables, and new -A and -T options to override defaulting to the
host system.
- Clarify that -a, -t, -e and -i work with the host system.
* Place 'Commands:' before 'Options:' sections on --help output in
dpkg-architecture and dpkg-vendor.
* Always warn in dpkg-genchanges on missing Section or Priority value,
either empty or '-'.
* Fix order of Files field on generated .changes file in dpkg-genchanges.
Regression introduced in dpkg 1.17.7.
* Stop warning on unknown arbitrary fields from dpkg-deb.
* Remove unnecessary handling of obsolete Package_Revision field in dselect
ftp method.
* Fix the build system to parse the system curses.h header instead of
dselect-curses.h, to not just default on the builtin and override keys
for dselect key bindings support. Regression introduced in dpkg 1.15.1.
* Emit a warning when using the obsolete Dpkg::Deps check_package() function.
* Add support for versioned Provides to Dpkg::Deps::KnownFacts, missed in
dpkg 1.17.11.
* Man pages:
- Add a mention of packaging helpers support in dpkg-maintscript-helper(1).
Closes: #759754
- Move dpkg-buildflags(1) generic feature area details to the section top.
- Fix prerm invocation arguments in update-alternatives(8).
Reported by jre . Closes: #761025
* Add new deps_iterate() function to Dpkg::Deps. Closes: #759747
Based on a patch by Dima Kogan .
* Add support for relative symlinks to dpkg-maintscript-helper symlink_to_dir
command. Suggested by Don Armstrong .
* Add a new dpkg-buildflags qa feature area:
- Add a new bug feature, disabled by default, which will enable fatal
warnings for code that can pose actual problems. Closes: #682659
- Add a new canary feature, disabled by default, which will allow tracking
build flags propagation. Closes: #628516
* Pass DEB_BUILD_OPTIONS to dpkg-buildflags in buildflags.mk, required to
get noopt to work at all, for example.
* Add a new dpkg-buildflags reproducible feature area:
- Add a new timeless feature, disabled by default, which will add
«-Wdate-time» to CPPFLAGS.
Thanks to Paul Wise . Closes: #762683
* Fix error message from buffer_copy() read and write functions. This
affects error messages from partial or broken .deb packages for example.
Regression introduced in dpkg 1.17.10. Closes: #759498
* Remove lpia architecture support.
* Improvements and portability fixes to start-stop-daemon:
- Abort if the system or compatibility setsid() fails.
- Do not exit from the first parent before the pidfile has been created,
when using --background and --make-pidfile, to avoid the race condition.
Based on a patch by Nir Soffer . Closes: #686420
- Make sure the pidfile is always created with a 022 umask.
Reported by Will Conley . Closes: #760222
- Do not abort on --stop when only --pid or --ppid options are specified.
Thanks to Christos Trochalakis . Closes: #763767
- On kFreeBSD systems do not unnecessarily make kvm_openfiles() open
/dev/mem. This causes issues on FreeBSD jails for example.
Reported by Steven Chamberlain .
- On systems using libkvm, do not fail when kvm_getprocs() cannot find
any process.
* Map i786 to i386 also for the multiarch pathname in dpkg-architecture.
* Handle omitted binary packages due to build profiles in dpkg-genchanges.
Based on a patch by Johannes Schauer . Closes: #758191
* Update restriction formula syntax for build profiles:
- Restriction lists are now restriction formulas.
- Restriction formulas are given in disjunctive normal form expression:
- Removal of the implicit prefix/namespace mechanic.
- Construct the profiles entry of the Packages-List field by converting
the " " syntax into "bar,baz+blub".
- Include a temporary compatibility mapping with the old way to write
the Build-Profiles field in binary packages which can be removed once
all affected source packages have moved to the new syntax.
Thanks to Johannes Schauer . Closes: #760158
* Normalize instdir in dpkg by removing trailing «/» and «/.». This gets
rid of several inconsistencies and doubled «/» in syscalls and output
messages.
* Never try to remove the root directory or its backups. There's no point in
it, and makes life more difficult for a read-only root with a read-write
overlay or a symlink farm. Requested by sepero111@gmx.com.
* Remove arbitrary filename limit from dpkg-deb, which was lifted some
time ago when the code switched to a dynamic string via varbuf.
* Do not pipe the files to sign from dpkg-buildpackage to GnuPG. When GnuPG
uses the gpg-agent it is unable to detect the correct tty configuration
if stdin is a pipe instead of the current terminal. Closes: #762391
* Add a new --hash option to enable generating only specific file checksums
in dpkg-scanpackages. Requested by Thorsten Glaser .
* Add architecture restriction options for dpkg-architecture -L. This allows
selecting specific subsets of all valid known architectures, matching by
wildcard (-W), endianness (-E) or bits (-B). The restricting options can
be combined, or omitted altogether. Closes: #762635
* Say arch-wildcard instead of arch-alias in dpkg-architecture --help output.
* Test suite:
- Do not leave temporary files behind on failure or when interrupted.
- Add basic unit tests for the FNV hashing function.
- Add unit tests for the libdpkg tar extractor.
* Add --build and --extract command aliases to dpkg-source.
* Print file or package names instead of pointers in dpkg debug output,
to make it more meaningful and reproducible.
* Fix off-by-one error in libdpkg command argv size calculation.
Based on a patch by Bálint Réczey . Closes: #760690
* Switch the libdpkg string hashing function from FNV-1 to the recommended
FNV-1a variant.
* Switch the dpkg files database string hashing function from what appears
to be a custom hash function to the libdpkg FNV-1a implementation. As a
side effect this fixes an integer overflow. Addresses: #760741
* Double the dpkg files database hash table size to the closest 2^18 prime.
Times have changed, and it's common to have at least these many files.
This reduces the amount of collisions.
* Document optional dpkg -C argument in --help output. Closes: #763000
* Consider a hardlink tar entry as a regular file for mode values, i.e.
assign to it S_IFREG instead of 0.
[ Raphaël Hertzog ]
* Explain better in deb-triggers(5) why interest/activate-noawait should be
favored.
[ Updated programs translations ]
* Catalan (Guillem Jover): Fix mismatched format string.
* Czech (Miroslav Kure).
* Polish (Łukasz Dulny).
* Turkish (Mert Dirik). Closes: #763825
[ Updated man pages translations ]
* German (Helge Kreutzmann).
* Italian (Guillem Jover): Swap order of some dpkg-deb arguments.
Thanks to xor . Closes: #759149
-- Guillem Jover Mon, 06 Oct 2014 00:11:08 +0200
dpkg (1.17.13) unstable; urgency=low
[ Guillem Jover ]
* Remove unbalanced trailing single-quote in dpkg-deb error message.
Reported by Trần Ngọc Quân .
* Remove architecture blacklist from hardening build flag option
stackprotectorstrong. Thanks to Romain Francoise .
* Documentation:
- Merge binary:Package descriptions in dpkg-query(1).
- Split --remove and --purge options in dpkg(1). This also clarifies on
which package states each option can operate. Closes: #576338
- Remove duplicate “of the” in dpkg-maintscript-helper(1).
* Fix dpkg-maintscript-helper dir_to_symlink to handle relative symlink
targets. Thanks to Helmut Grohne .
* Fix dpkg-maintscript-helper symlink_to_dir to assure absolute pathnames
arguments.
* Fix dpkg-source not detecting modified files during --commit or -b.
Regression introduced in dpkg 1.17.11. Closes: #758426
Reported by Neil Williams .
* Only test the strerror() compatible code if sys_errlist and sys_nerr
are present. This fixes a build failure on GNU/Hurd. Closes: #758199
* Switch start-stop-daemon on GNU/kFreeBSD systems to use libkvm, instead
of relying on linprocfs which is not the native procfs on kFreeBSD, and it
is usually not mounted as FreeBSD programs do not expect it to be present.
[ Updated programs translations ]
* Czech (Miroslav Kure).
* German (Sven Joachim).
* Vietnamese (Trần Ngọc Quân).
[ Updated man pages translations ]
* French (Jean-Pierre Giraud, Vincent Thomas, Raphaël Hertzog).
[ Updated scripts translations ]
* French (Raphaël Hertzog).
* German (Helge Kreutzmann).
-- Guillem Jover Tue, 19 Aug 2014 20:14:45 +0200
dpkg (1.17.12) unstable; urgency=low
[ Guillem Jover ]
* Only build the compatibility selinux code if libselinux is available or
the user requested it. Also fixes build failures on non-Linux systems.
Closes: #757637
* Documentation:
- Add a short description to each virtual field in dpkg-query(1), and
mention the version they got introduced in dpkg.
- Fix formatting of last paragraphs inside dselect(1) --color description.
* Rework dselect columns code, to make it easier to maintain and read.
* Add new architecture columns to dselect package list view. The new
columns, shown by default, can be turned off with the new ‘A’ key,
or bound to another key via the new “archdisplay” keybinding.
* Fix a descriptor leak on dselect subprocesses when --debug is used.
* Use «tar --format=gnu» when creating source archives. This makes sure we
get a deterministic output format, regardless of what tar defaults to.
Thanks to Jan Blunck ..
* Use perl's length instead of defined when checking some environment
variables, if we require them to have content.
* Allow specifying the same build type option multiple times in
dpkg-buildpackage and dpkg-genchanges. There seems to be scripts with
such invocations in the wild. Closes: #757795
[ Updated programs translations ]
* German (Sven Joachim).
[ Updated scripts translations ]
* German (Helge Kreutzmann).
[ Updated man pages translations ]
* German (Helge Kreutzmann).
-- Guillem Jover Fri, 15 Aug 2014 03:30:39 +0200
dpkg (1.17.11) unstable; urgency=low
[ Guillem Jover ]
* Switch URLs in docs and code comments from http:// to https:// if the
latter is available (round two). This includes the quilt patch header
templates, and examples in man pages.
* Update some dpkg git URLs to the new and newer (cgit switch) scheme.
* Changes to libcompat:
- Make the library testable.
- Do not run qsort() over the scandir() list if it is NULL.
- Add a setexecfilecon() compatibility function out from dpkg code.
* Use SELinux setexecfilecon() if available in dpkg instead of ad-hoc code.
* Replace obsolete with , which fixes compilation on
Android. Thanks to Fredrik Fornwall . Closes: #752036
* Fix file triggers/Unincorp descriptor leak on subprocesses. Regression
introduced with the initial triggers implementation in dpkg 1.14.17.
Closes: #751021
* Do not disable the stack-protector build flags on arm64 in Debian and
derivatives, the toolchain supports them now.
Thanks to Adam Conrad . Closes: #751032
* When parsing the statoverride database from dpkg-statoverride do not
consider it an error and refuse to operate at all if the user or group
names are not known to the system, just preserve them. Closes: #563307
* Do not write to the available file when unpacking binary packages. This
information is not useful as dpkg has never recorded the archive path,
so it has never been truly available for re-installation anyway.
* Add versioned Provides support:
- Add a new dpkg --assert-versioned-provides command.
- Packages can provide a specific version, “virtual (= 1.0)” which will
be honored, previously it would just be accepted when parsing.
- Non-versioned virtual packages will not satisfy versioned dependencies.
- Versioned virtual packages will satisfy non-versioned dependencies.
Based on skeletal code by Ben Collins .
Closes: #7330, #24934, #112131, #134582, #180316
* On removal check Depends and Pre-Depends for packages in unpacked and
half-configured states too.
* Add support for new hardening build flag stackprotectorstrong in Debian
and derivatives, enabled by default. It will fallback to stackprotector
when the former is not functional or disabled by the user.
Thanks to Romain Francoise .
* Change «dpkg-deb --field» code to use the libdpkg deb822 parser instead
of an ad-hoc one. This makes sure any field fixup and sanity check is
performed on the input, and gets reflected on the output.
* Add new dpkg-query virtual fields db:Status-Want, db:Status-Status and
db:Status-Eflag to allow fine-grained access to the Status values.
* Automatically add the Testsuite field in dpkg-source to the .dsc file.
* Spell nocheck option in dpkg-scanpackages wait_child() call correctly.
Spotted by James McCoy (in devscripts).
* Move the explanation of functional checks from --verify-format to the
--verify command in the dpkg(1) man page. Closes: #747264
* Improve dpkg-buildpackage(1) man page:
- Mark DEB_CHECK_COMMAND environment variable in bold.
- Add final item for done hook in the actions sequence.
- Mention that -nc does not apply either when -F is specified.
- Mention that the --FOO-option options can be used multiple times.
- Fix a typo in the BUGS section.
* Mark the “and” between the filenames as regular format in dpkg-source(1).
* Add --format and --ignore-bad-version to dpkg-source --help output.
* Clarify error message in Dpkg::Source::Quilt when patches fail to apply,
to note that the patch might be malformed (besides not accepting patches
with fuzz).
* Try to preallocate the disk size for extracted files on unpack. This
might help in avoiding filesystem fragmentation, and possibly improve
performance on some filesystems.
* Print the correct removed binary filename when building a source package
with dpkg-source --include-removal. Closes: #755166
* Add powerpcel support to cputable. Thanks to Jae Junh .
* Bump the i386 architecture GNU triplet to i586-linux-gnu to match the
change in gcc. Somewhat reluctantly, as i386 wants to be its unique
snowflake and use a GNU triplet not matching its baseline. This will
cause problems when cross-building and using unmatched combinations of
dpkg-dev and gcc. Closes: #751363
* Update i386 architecture GNU cpu regex in cputable to match i786 too.
* Remove unused pkglibdir variable from libdpkg.pc.in.
* Perl modules:
- Add new set_as_auto() method to Dpkg::Substvars.
- Add support for sig and delete_sig spawn() options in Dpkg::IPC.
- Add %opts to ensure_open() member in Dpkg::Compression::FileHandle.
- Change find_command() to handle an empty or undef argument in Dpkg:Path.
* Mark Format and Installed-Size as automatic substvars in dpkg-genchanges
and dpkg-gencontrol respectively.
* Warn on usage of deprecated Source-Version substvar.
* Say OpenPGP instead of PGP when referring to the standard on code comments
and output messages.
* Add a hint to the “no dependency information found” error message in
dpkg-shlibdeps, to check if the library is actually packaged.
Thanks to Sylvestre Ledru . Closes: #756230
* Delete the current compressor SIGPIPE disposition in Dpkg::Source::Archive,
which fixes ignoring SIGPIPE from the calling process. Closes: #756526
* Ignore DEB_CHECK_COMMAND in dpkg-buildpackage if the command is not found.
* Emit a warning when using the deprecated -is/-ip/-isp/-ips options in
dpkg-gencontrol.
* Only print build type once in dpkg-genchanges, instead of once for each
specified -A or -B option and then yet another time for the general build
type description.
* Unify build options description in --help output for dpkg-buildpackage
and dpkg-genchanges.
* Only allow one build type option in dpkg-genchanges and dpkg-buildpackage.
* Correctly filter the host architecture on the Architecture field in the
generated .changes file from dpkg-genchanges, when the debian/files
contains arch-specific packages but dpkg-genchanges was called with
one of the build types excluding them.
* Add new -g and -G options to dpkg-genchanges and dpkg-buildpackage for
source plus arch-indep/specific builds. Closes: #756975
* Fix dpkg --add-architecture and --remove-architecture to check that they
get exactly one argument. Closes: #757254
[ Updated programs translations ]
* Danish (Joe Dalton). Closes: #754127
* French (Jean-Baka Domelevo Entfellner, Julien Patriarca).
* Portuguese (Miguel Figueiredo). Closes: #756920
* Spanish (Guillem Jover): Fix «dpkg-query -l» header. Closes: #756209
* Swedish (Peter Krefting).
[ Updated scripts translations ]
* Swedish (Peter Krefting).
[ Updated man pages translations ]
* Swedish (Peter Krefting).
-- Guillem Jover Sat, 09 Aug 2014 17:16:27 +0200
dpkg (1.17.10) unstable; urgency=medium
[ Guillem Jover ]
* Use libtool to build the static libraries, which makes it possible to
embed libcompat inside libdpkg, as required by some external programs
linking against the latter. Closes: #746122
* Fix word wrapping logic in dselect. Regression introduced in dpkg 1.17.3.
* Fix possible out of bounds buffer read access in the error output on
bogus ar member sizes.
* Fix memory leaks in buffer_copy() on error conditions.
* Test suite:
- Improve C code coverage.
- Add template test cases for most perl modules.
- Add test cases for Dpkg::Deps OR relationships.
- Add minimal test case for Dpkg::Source::Quilt.
- Add test cases for Dpkg::Source::Patch CVE-2014-0471 and CVE-2014-3127.
- Add test case for patch disabling hunks; not security sensitive.
* Fix non-security sensitive TOCTOU race in triggers database loading.
* Fix non-security sensitive TOCTOU race in update-alternative alternative
database loading.
* Fix non-security sensitive TOCTOU race in update-alternative rename code.
* Add a workaround to start-stop-daemon for bogus OpenVZ Linux kernels that
prepend, instead of appending, the " (deleted)" marker in /proc/PID/exe.
Closes: #731530
* Move dpkg-architecture -L argument to the Commands --help output section.
* Make dpkg-maintscript-helper print only once that we are moving a
conffile, and not on every interim state transition. Closes: #747370
* Do not use global match variables in perl code.
* Man pages:
- Attempt to clarify and improve wording of some strange or confused
constructs. Reported by Helge Kreutzmann.
- Expand Vcs-* field names into each supported field name in
deb-src-control(5) to make it easier to search for them.
- Change control.tar.gz reference to simply control.tar in deb(5).
- Document in dpkg-deb(1) -Z option that bzip2 and lzma are deprecated.
- Add notes in dpkg-gensymbols(1) about symbol backward-compatibility.
Based on a patch by Bernhard R. Link .
Closes: #746973
- Document that dpkg-buildpackage(1) -j argument is optional.
- Add current and deprecated media types to deb(5).
- Document in dpkg(1) that --audit now does more than just searching for
partially installed packages.
* Add support for automatic parallel job selection in dpkg-buildpackage,
matching currently active processors, when using -jauto. Closes: #748012
* Perl modules:
- Bump $VERSION for Dpkg::Patch, missed in 1.16.1.
- Bump $VERSION for Dpkg::Deps, missed in 1.17.0.
- Update and fix CHANGES POD sections for public modules.
- Add missing Dpkg::Deps::Multiple profile_is_concerned() and
reduce_profiles() methods, inherited by Dpkg::Deps::Union,
Dpkg::Deps::AND and Dpkg::Deps::OR.
* Do not mangle quilt series files with a missing newline on the last line.
Closes: #584233
* Quiesce tar warnings in cron job by redirecting stderr to /dev/null, as
it seems --warning=none does not work correctly. Closes: #748544
* Do not emit a trailing space from Dpkg::Control::Hash on a field's empty
first line. Bump dpkg-dev Breaks on devscripts to 2.14.4, as previous
versions expect a trailing space from dpkg-parsechangelog output.
Based on a patch by Johannes Schauer . Closes: #749044
* Do not assume that sensible-editor is present on «dpkg-source --commit»,
as that command is very Debian specific. Fallback to try VISUAL, EDITOR,
or vi, if the previous commands are either unset or not found.
* Use badusage() instead of ohshit() on dpkg --ignore-depends argument
parsing errors.
* Add per package dpkg --audit support.
* Add support for DragonFlyBSD to ostable and triplettable.
Thanks to Hleb Valoshka <375gnu@gmail.com>.
* Add support for DragonFlyBSD to start-stop-daemon. Closes: #734452
Based on a patch by Hleb Valoshka <375gnu@gmail.com>.
* Correctly parse patch headers in Dpkg::Source::Patch, to avoid directory
traversal attempts from hostile source packages when unpacking them.
Reported by Javier Serrano Polo as an unspecified
directory traversal; meanwhile also independently found by me both
#749183 and what was supposed to be #746498, which was later on published
and ended up being just a subset of the other non-reported issue.
Fixes CVE-2014-3864 and CVE-2014-3865. Closes: #746498, #749183
[ Updated programs translations ]
* Catalan (Guillem Jover).
* Italian (Milo Casagrande). Closes: #750105
[ Updated scripts translations ]
* German (Helge Kreutzmann).
[ Updated man pages translations ]
* German (Helge Kreutzmann).
[ Raphaël Hertzog ]
* Let dpkg-source unpack additional tarballs in a deterministic order.
Thanks to Samuel Bronson for the report. Closes: #747148
-- Guillem Jover Thu, 05 Jun 2014 20:18:04 +0200
dpkg (1.17.9) unstable; urgency=high
[ Guillem Jover ]
* Do not allow patch files with C-style encoded filenames. Closes: #746306
Fixes CVE-2014-3127 and unconditionally fixes CVE-2014-0471.
Reported by Javier Serrano Polo .
* Switch alternative database backups from xz to gzip. Closes: #746354
* Do not leak long tar names on bogus or truncated archives.
* Do not leak the filepackages iterator when a directory is used by other
packages.
* Fix short lived memory leaks in «dpkg-split --split».
* Fix memory leak in unused Keybindings screen in dselect.
* Do not leak color string on «dselect --color».
* Fix memory leaks when parsing alternatives.
* Fix off-by-one stack buffer overrun in start-stop-daemon on GNU/Linux and
GNU/kFreeBSD if the executable pathname is longer than _POSIX_PATH_MAX.
Although this should not have security implications as the buffer is
surrounded by two arrays (so those catch accesses even if the stack
grows up or down), and we are compiling with -fstack-protector anyway.
* Mark the command_get_pager() tests on a tty as TODO for now, so that
we do not get failures on build daemons.
* Make test suite errors abort the build again. Closes: #746331
[ Updated scripts translations ]
* French (Steve Petruzzello). Closes: #746350
* German (Helge Kreutzmann).
[ Updated man pages translations ]
* German (Helge Kreutzmann).
-- Guillem Jover Wed, 30 Apr 2014 05:45:20 +0200
dpkg (1.17.8) unstable; urgency=high
[ Guillem Jover ]
* Do not backup nonexistent database files from the cron.daily file.
And stop emitting tar warnings. Closes: #745592, #745651
* Test suite:
- Improve Perl code coverage.
- Improve C code coverage.
* Handle space-only strings when parsing versions in libdpkg.
* Document the environment requirements for the dpkg-maintscript-helper
supports command in the man page. Closes: #739634
* Improve wording for «dpkg --verify» and --verify-format in the man page.
Closes: #733057
* Switch test runner from Test::Harness to TAP::Harness.
* Use the perl TAP::Harness for the C test suite instead of the automake
tap-driver, to avoid requiring automake >= 1.12, currently not present
in stable.
* Enable failed test case reporting from the TAP::Harness, so that we get
more meaningful reports on failure from the C test suite.
* Correctly parse C-style diff filenames in Dpkg::Source::Patch, to avoid
directory traversal attempts from hostile source packages when unpacking
them. Reported by Jakub Wilk . Fixes CVE-2014-0471.
[ Updated programs translations ]
* German (Sven Joachim).
* Russian (Yuri Kozlov). Closes: #745869
* Vietnamese (Trần Ngọc Quân).
-- Guillem Jover Mon, 28 Apr 2014 13:33:11 +0200
dpkg (1.17.7) unstable; urgency=low
[ Guillem Jover ]
* Documentation:
- Mention in deb-symbols(5), that the “main-dependency-template” is
always used. Closes: #737731
- Clarify in deb-control(5) «Multi-Arch: no» field omission.
- Clarify in dpkg-buildpackage(1) --check-option description.
- Document dpkg-query --control-path life expectancy. See: #699647
- Fix indentation of “Extract options (with -x)” title in dpkg-source(1).
- Improve symlink <-> directory switch information in
dpkg-maintscript-helper(1). Closes: #739388
- Add missing flags affected by hardening options to dpkg-buildflags(1).
* Use exit instead of return to exit a subshell in dpkg-maintscript-helper.
Thanks to Richard Levitte . Closes: #738957
* Localize $_ in Perl functions with while (<$fh>) style loops.
* Perl test suite cleanup:
- Switch test suite runner from ExtUtils::Command::MM to Test::Harness.
- Enable colors in test suite runner.
- Remove sequence number prefixes from test case filenames.
* Do not generate perl warnings on nonexistent fields with
«dpkg-parsechangelog --show».
* Fix bogus message on dependency parse errors in dpkg-checkbuilddeps.
Closes: #736778
* Document is_pgp_signed as a public Dpkg::Control::Hash option.
Closes: #735975
* Do not generate perl warnings on undef versions in
Dpkg::Deps::deps_compare(). See: #737731
* Clarify dpkg-genchanges error message on binary builds without any binary
artifact built. Closes: #726520
* Improve dpkg-source warning message when ignoring file removals,
by adding a hint about the --include-removal option.
Thanks to Moritz Muehlenhoff . Closes: #738310
* Add a new dpkg-source extraction --ignore-bad-version option.
Closes: #740883
* Add Architecture and Build-Profiles information to Package-List field,
as optional name=value1,value2 entries, with names «arch» and «profile».
Use the now recognized field Build-Profiles from binary stanzas in the
source control file to fill the «profile» value.
* Do not interpret the .dsc filename as a regex when recomputing the
md5sum for the .changes file after signing the .dsc. Closes: #742535
* Cache vendor info Control::Hash objects in Dpkg::Vendor::get_vendor_info()
when parsing the vendor file on each hook invocation.
* If the vendor does not have a Dpkg::Vendor module, try loading a module
from the parent vendors, before falling back to Dpkg::Vendor::Default.
Closes: #735978
* Set Ubuntu build flags for ppc64el instead of ppc64, as Ubuntu never ended
up shipping a ppc64 architecture. Also honor noopt DEB_BUILD_OPTIONS flag.
Thanks to Adam Conrad . Closes: #736717
* Add support for FCFLAGS, OBJCFLAGS and OBJCXXFLAGS build flags.
Closes: #744326
* Improvements and portability fixes to start-stop-daemon:
- When using the Linux procfs switch to use /proc/PID/status instead of
/proc/PID/stat to read the process name.
- Add a generic KVM-based implementation to initialize the entire
process list.
- Fix FreeBSD KVM code to use current kinfo_proc layout.
- Add a native FreeBSD pid_is_exec() method, which is more reliable than
the KVM-based one, and means neither linprocfs nor procfs are required
on such system anymore. Note that GNU/kFreeBSD is still using Linux
procfs code (which ends up using linprocfs).
- Fix OpenBSD KVM code to use current kinfo_proc layout.
- Detect system specific headers at configure time instead of hardcoding
their usage depending on system macros.
- Add a new --ppid matching option to check for parent PID.
Suggested by Alex Mestiashvili .
- On GNU/Hurd do not link unnecessarily against libshouldbeinlibc and
libihash.
* Set TAR preprocessor variable at build time instead of hardcoding it.
This will allow non-GNU systems to easily use another value for their
GNU tar, which is usually either gnutar or gtar.
* Require compound literals support in the compiler at configure time.
* Fix compound literals usage with compilers in C99 mode, by not assigning
them to static variables.
* Test suite cleanup:
- Do not unnecessarily shut up stdout in t-subproc.
- Test command_exec() exit code.
- Test allocations with new test_alloc() instead of pass/fail macros.
- Switch C test suite to use TAP.
* Add support for Packages-files in dpkg --update-avail and --merge-avail
from pipes, or standard input if the argument is omitted or is ‘-’.
Closes: #357093, #367297
* Error out on not-installed packages passed to «dpkg --verify».
* Deprecate compressing .deb files with bzip2, by making dpkg-deb issue a
warning, as the compressor has been superseded by xz when it comes to
compression ratio, and in cases where higher compatibility or raw speed
is desired gzip is still the better option. Although unpacking will be
kept being supported to handle existing bzip2 compressed .deb files.
* Use GNU tar's --no-unquote when using -T in dpkg-deb to avoid mangling
filenames. Reported by Niels Thykier . Closes: #743687
* Backup all databases with user data, not just the status database.
* Add Conflicts to dpkg against packages using install-info that were
removed after lenny or squeeze, but may have survived upgrades to wheezy.
Thanks to Andreas Beckmann . Closes: #735159
* Be verbose on «make check» errors by printing the test suite log.
[ Updated programs translations ]
* German (Sven Joachim).
* Swedish (Peter Krefting).
* Thai (Theppitak Karoonboonyanan). Closes: #745032
* Vietnamese (Trần Ngọc Quân).
[ Updated scripts translations ]
* German (Helge Kreutzmann).
* Swedish (Peter Krefting).
[ Updated man pages translations ]
* German (Helge Kreutzmann).
* Italian (Beatrice Torracca). Closes: #742449
* Swedish (Peter Krefting).
-- Guillem Jover Mon, 21 Apr 2014 05:03:52 +0200
dpkg (1.17.6) unstable; urgency=low
[ Guillem Jover ]
* Move signing in dpkg-buildpackage to the end of the build.
* Add new --check-command and --check-option options to dpkg-buildpackage,
and DEB_CHECK_COMMAND environment variable as a default value, to
specify a package checker to use before the signing process.
* Detect a missing gain-root-command even if dpkg-buildpackage is running
as root.
* Detect a missing sign-command in dpkg-buildpackage, before starting the
build, to avoid a failure at the end of the process.
* Remove trailing newlines from dpkg-deb warning message.
* Change dpkg-deb conffile name length warning into an error, as dpkg will
reject those packages at install time anyway.
* Unify and clarify dpkg-deb and dpkg conffile name length error message.
Closes: #108196
* Add new start-stop-daemon --pid option. Closes: #253265
* Mention Multi-Arch: no value in man pages. Closes: #732648
* Correctly hyphenate binary-only and source-only in dpkg-buildpackage
output messages.
* Use makedev(3) when extracting .deb archives rather than ad-hoc
computations, to be able to support large major/minor device numbers,
supported on at least Linux, NetBSD and OpenBSD based systems.
Thanks to Peter Chang .
* Turn the ARM Embedded ABI symbols blacklist into a regex, to stop having
to keep up with the GNU toolchain, or other toolchains emitting different
symbols.
* Blacklist GOMP critical section symbols. Closes: #708033
* Add support for Ignore-Blacklist-Groups field in symbols files, with the
two available group values aeabi and gomp. Closes: #694524
* Allow updating checksums in Dpkg::Checksums without erroring out.
* Add shell hooks support to dpkg-buildpackage, based on the debuild
implementation in devscripts 2.13.9. Closes: #476221
* Add support for Testsuite source field.
* Clarify error message about missing revision in non-native source package.
Closes: #719348, #733746
* Set default compression options in source format specific modules instead
of dpkg-source. This makes sure the correct compression level is set, even
for “3.0 (native)” packages with non-default compressors. Closes: #733326
* Change default source package compressor for new formats (>= 2.0) to xz.
* Ignore the same packages in «dpkg-query --list» when computing the
column width as when printing the entries. Closes: #734114
* Do not produce .deb archives with uncompressed gzip members on
«dpkg-deb -Zgzip -z0», instead create them as non-compressed members,
as if -Znone had been passed, as documented. Closes: #718295
* Add support for .deb archives with a control member not compressed
(control.tar) or compressed with xz (control.tar.xz).
* Add support for creating uniformly compressed .deb archive members,
with the new dpkg-deb option --uniform-compression.
* Fix file descriptor leaks in diversions and statoverride databases.
Closes: #734783
* Allow missing prior-version argument in dpkg-maintscript-helper
dir_to_symlink and symlink_to_dir commands. Closes: #733980
[ Updated programs translations ]
* Swedish (Peter Krefting).
* Vietnamese (Trần Ngọc Quân).
[ Updated scripts translations ]
* German (Helge Kreutzmann).
* Swedish (Peter Krefting).
[ Updated man pages translations ]
* German (Helge Kreutzmann).
* Swedish (Peter Krefting).
-- Guillem Jover Wed, 15 Jan 2014 05:29:45 +0100
dpkg (1.17.5) unstable; urgency=low
[ Guillem Jover ]
* Switch non-tty output to be line buffered by default, and set it to fully
buffered only for programs with precious and abundant output, not just
progress reporting output (i.e. dpkg-query). This was causing out-of-order
error and debug messages in relation to normal progress reporting, which
could be very confusing. Regression introduced in dpkg 1.17.2.
* Fix segfault in update-alternatives when adding or renaming slaves for
an existing alternative. Regression introduced in dpkg 1.17.2.
Closes: #731710
* Fix dpkg-maintscript-helper symlink_to_dir and dir_to_symlink commands:
- Always run postinst code regardless of prior-version, as the package
might have been never configured before.
- Be more strict when checking the expected state of paths.
- Rename subcommand shell code to check-files-ownership.
- Change dir_to_symlink switch code to use a staging empty directory,
to avoid dpkg removing files from other packages, when removing the
package old files during upgrade.
- Bump minimal version in man page to 1.17.5.
Closes: #731730
* Mention gpg2 too as one of the default sign commands in dpkg-buildpackage.
[ Updated programs translations ]
* German (Sven Joachim).
[ Updated scripts translations ]
* German (Helge Kreutzmann).
[ Updated man pages translations ]
* German (Helge Kreutzmann).
-- Guillem Jover Thu, 12 Dec 2013 08:29:45 +0100
dpkg (1.17.4) unstable; urgency=low
* Keep the diversions and statoverride database files open during dpkg
runs, to avoid eager inode number reuse by the filesystem if these files
get replaced multiple times in maintainer scripts, as we rely on the
inode numbers being different when checking if the databases need to
be reloaded. Regression introduced in 1.17.2. Closes: #731524
* Add debug output to diversions and statoverride database loading code.
* Reset the statoverrides information from the in-core database when
reloading it from disk, otherwise removals in maintainer scripts will
not be seen during the current dpkg run.
* Get rid of dpkg-split global partqueue queue variable.
* Use warningv() in dpkg instead of ad-hoc printing message when
overriding with --force option.
* Switch URLs in docs and code comments from http:// to https:// if the
latter is available.
-- Guillem Jover Sat, 07 Dec 2013 07:34:54 +0100
dpkg (1.17.3) unstable; urgency=low
[ Guillem Jover ]
* Check availability of warning flags at build time. Fixes a build failure
on systems with old g++ compilers not accepting -Wc++11-compat.
* Move DPKG_C_C99 call just after AC_PROG_CC, so that subsequent checks
can take advantage of the possibly set flags to enable C99 features.
* Improve configure C99 compiler check output.
* Use C++11 nullptr instead of 0 or NULL, which is way more descriptive
and has a better type. Check for C++11 compiler support, and fallback
nullptr to 0 if unavailable.
[ Updated programs translations ]
* Vietnamese (Trần Ngọc Quân). Closes: #731409
-- Guillem Jover Thu, 05 Dec 2013 10:19:38 +0100
dpkg (1.17.2) unstable; urgency=low
[ Guillem Jover ]
* Make Dpkg::Arch debwildcard_to_debtriplet() more robust by matching
on exact 'any' strings, instead of substrings.
* Add manpages-it Replaces to dselect and dpkg-dev. Closes: #717983
Reported by Andreas Beckmann