File: changelog

package info (click to toggle)
libytnef 1.9.2-2
  • links: PTS, VCS
  • area: main
  • in suites: stretch
  • size: 1,356 kB
  • ctags: 931
  • sloc: ansic: 4,011; perl: 94; makefile: 57; sh: 31
file content (152 lines) | stat: -rw-r--r-- 5,393 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
libytnef (1.9.2-2) unstable; urgency=medium

  * Add CVE information to previous changelog entry.
  * Add CVE-2017-9058.patch: Fix a heap buffer overflow in SIZECHECK macro
    (closes: #862556).

 -- Jordi Mallach <jordi@debian.org>  Mon, 22 May 2017 23:51:52 +0200

libytnef (1.9.2-1) unstable; urgency=medium

  * QA upload.
  * New upstream release.
    - This release contains additional security fixes:
      [CVE-2017-6800] Invalid memory access (heap overrun) in handling
                      LONG data types
      [CVE-2017-6801] Missing check for fields of size 0
      [CVE-2017-6802] Potential buffer overrun in compressed RTF streams
  * Add CVE information to previous changelog entry.
  * Install pkg-config .pc file to -dev package.

 -- Jordi Mallach <jordi@debian.org>  Tue, 07 Mar 2017 13:46:50 +0100

libytnef (1.9.1-1) unstable; urgency=medium

  * QA upload.
  * New upstream release.
    - This release contains fixes for the following vulnerabilities:
      [CVE-2017-6298] Null pointer dereference
      [CVE-2017-6299] Infinite loop / DoS in TNEFFillMapi function
      [CVE-2017-6300] Buffer overflow
      [CVE-2017-6301] Out of bounds read
      [CVE-2017-6302] Integer overflow
      [CVE-2017-6303] Invalid write and integer overflow
      [CVE-2017-6304] Out of bounds read
      [CVE-2017-6305] Out of bounds read and write
      [CVE-2017-6306] Directory traversal in SanitizeFilename function
      See more details at:
      http://www.openwall.com/lists/oss-security/2017/02/15/4
  * Add -Wall -Wextra to CFLAGS via DEB_CFLAGS_MAINT_APPEND.
  * Add -Wl,--as-needed to LDFLAGS via DEB_LDFLAGS_MAINT_APPEND.
  * Add Suggests for required Perl modules to run ytnefprocess.pl.

 -- Jordi Mallach <jordi@debian.org>  Wed, 22 Feb 2017 00:50:36 +0100

libytnef (1.9-1) unstable; urgency=medium

  * QA upload.
  * New upstream release.
    - This release unifies libytnef and ytnef in a single autotools package.
      The source should be renamed to ytnef, but will do later on due to
      the stretch freeze.
  * Drop all patches, merged upstream.
  * Add Vcs-* fields pointing to new collab-maint git repo.
  * Bump debhelper compat to v10.
  * Update to Standards-Version 3.9.8, with no changes needed.
  * Update Homepage field and watch file to point to Github project.
  * Rewrite rules using dh sequencer.
  * Rewrite copyright using machine-readable format v1.0.
  * Pass --list-missing to dh_install.
  * Pass -c4 to dpkg-gensymbols.
  * Introduce a new ytnef-tools binary and tweak descriptions to mention it.
  * Enable all hardening options.

 -- Jordi Mallach <jordi@debian.org>  Wed, 04 Jan 2017 08:02:02 +0100

libytnef (1.5-9) unstable; urgency=medium

  * QA upload.
  * Add patch to fix FTBFS with clang. Closes: #742146.

 -- Ricardo Mones <mones@debian.org>  Sat, 22 Aug 2015 11:10:24 +0200

libytnef (1.5-8) unstable; urgency=medium

  * QA upload.
  * Raised compat level to 9.
  * Removed hardcoded Pre-Depends (thanks Lintian).
  * Added watch file, just in case it goes alive again.
  * Differentiate short descriptions of binary packages.
  * Add library symbols file.
  * Follow patching guidelines in all patches.

 -- Ricardo Mones <mones@debian.org>  Fri, 21 Aug 2015 12:01:07 +0200

libytnef (1.5-7) unstable; urgency=medium

  * QA upload.
  * Added patches/handle_pt_clsid.diff - Closes: #792462.
  * Updated Standards-Version to latest.

 -- Ricardo Mones <mones@debian.org>  Fri, 21 Aug 2015 01:10:30 +0200

libytnef (1.5-6) unstable; urgency=medium

  * QA upload.
  * Build using dh-autoreconf.
  * Multiarchify the packages.

 -- Matthias Klose <doko@debian.org>  Wed, 18 Dec 2013 13:04:19 +0100

libytnef (1.5-5) unstable; urgency=low

  * QA upload.
  * Use dh_autotools-dev to update config.{sub,guess} for AArch64.
  * Fix heap overflow (CVE-2010-5109). Closes: #705468.
  * Use dpkg-buildflags for the build.

 -- Matthias Klose <doko@debian.org>  Thu, 10 Oct 2013 14:16:21 +0200

libytnef (1.5-4) unstable; urgency=low

  * QA upload.
  * source/format, patches/series, patches/update_autofiles.patch
  - Switch to dpkg-source 3.0 (quilt) format 
  * debian/control
  - Bump Standards-Version to 3.9.2 (no other changes required)
  - Add sourceforge project URL as Homepage field
  - Add ${misc:Depends} to all binary packages (lintian)
  * debian/rules
  - Add recommended targets build-arch and build-indep (lintian)

 -- Ricardo Mones <mones@debian.org>  Tue, 20 Sep 2011 08:13:13 +0200

libytnef (1.5-3) unstable; urgency=low

  * QA upload.
  * Get rid of unneeded *.la files (Closes: #622540).

 -- Alessio Treglia <alessio@debian.org>  Sat, 04 Jun 2011 10:03:07 +0200

libytnef (1.5-2) unstable; urgency=low

  * Orphaning this package. Thanks for the NMUs!
  * Bump debhelper compat to 7 and Standards-Version to 3.8.3.
  * Make dependency between libytnef0-dev and libytnef0 more strict.

 -- Joshua Kwan <joshk@triplehelix.org>  Mon, 28 Sep 2009 10:13:48 -0700

libytnef (1.5-1.1) unstable; urgency=low

  * Non-maintainer upload.
  * call dh_makeshlibs before calling dh_installdeb.
  * configure.ac: use AM_MAINTAINER_MODE.
  * autotools related files: regenerate. Closes: bug#342670, #536118.

 -- Aurelien Jarno <aurel32@debian.org>  Sun, 16 Aug 2009 21:10:48 +0200

libytnef (1.5-1) unstable; urgency=low

  * Initial release.

 -- Joshua Kwan <joshk@triplehelix.org>  Mon,  9 May 2005 20:31:56 -0700