Change log for debsig-verify package in Ubuntu

debsig-verify (0.28) unstable; urgency=medium

  * Add support for zstd compressed .deb archives.
  * Packaging:
    - Update copyright years.
    - Switch to Standards-Version 4.6.2 (no changes needed).
    - Do not trim debian/changelog.

 -- Guillem Jover <email address hidden>  Tue, 10 Jan 2023 23:38:18 +0100

Available diffs

• diff from 0.25ubuntu1 (in Ubuntu) to 0.28 (43.7 KiB)

debsig-verify (0.25ubuntu1) kinetic; urgency=medium

  * Add support for zstd compression, as implemented in Ubuntu.

 -- Simon Chopin <email address hidden>  Thu, 02 Jun 2022 11:13:03 +0200

Available diffs

• diff from 0.23 (in Debian) to 0.25ubuntu1 (78.0 KiB)
• diff from 0.25 (in Debian) to 0.25ubuntu1 (749 bytes)

debsig-verify (0.25) unstable; urgency=medium

  * Update copyright years.
  * Test suite:
    - Fix function name in trap.

 -- Guillem Jover <email address hidden>  Wed, 17 Nov 2021 02:35:53 +0100

Available diffs

• diff from 0.24 to 0.25 (2.5 KiB)

debsig-verify (0.24) unstable; urgency=medium

  * Switch keyring parser from gpg --list-packets to --show-keys --with-colons.
  * Use fingerprint and fallback to use long keyIDs for database filenames.
  * Reject weak RIPEMD160 and SHA1 algorithms.
  * Documentation:
    - Update .gpg keyring references to .pgp in man page.
    - Mention OpenPGP instead of gpg in generic code comments.
    - Clarify the requirement for OpenPGP keyrings.
      Prompted by Steve McIntyre <email address hidden>.
      See #988646.
    - Update and modernize the policy-syntax specification.
  * Code internals:
    - Move GnuPG specific macros to the GnuPG backend module.
    - Rename gpgVerify() to sigVerify().
    - Add a new find_command() function.
    - Abstract the OpenPGP operations behind a frontend driver.
    - Move checkSigExist() from misc to openpgp module.
    - Rename XML parser file to policy-xml.
    - Refactor key ID comparison function.
    - Support comparing keyIDs and fingerprints.
    - Refactor database filename generation into a new function.
    - Refactor prefix matching into a new function.
    - Regroup header includes.
  * Build system:
    - Add GitLab CI support.
    - Update .gitignore file.
  * Packaging:
    - Fix typo for Standards-Version field.
    - Switch to Standards-Version 4.6.0 (no changes needed).
    - Do not include the keyid in the example policies pathname.
  * Test suite:
    - Rename .gpg keyrings to .pgp.
    - Abstract OpenPGP details into debsig_openpgp_* functions.
    - Check OpenPGP backend availability.
    - Add sqop and sq OpenPGP backend support.
    - Remove obsolete and non-compliant test data.
      Reported by Charles Duffy <email address hidden>.
    - Shorten test case titles.
    - Move bad sig case after no sig case.

 -- Guillem Jover <email address hidden>  Tue, 16 Nov 2021 06:02:07 +0100

debsig-verify (0.23) unstable; urgency=medium

  * Remove unused ‘c’ variable assignment in fgets() call.
  * Packaging:
    - Switch to Standard-Version 4.5.1 (no changes needed).
    - Switch to debhelper compatibility level 13.
    - Update copyright years.

 -- Guillem Jover <email address hidden>  Thu, 24 Dec 2020 22:29:03 +0100

Available diffs

• diff from 0.22 to 0.23 (9.7 KiB)

debsig-verify (0.22) unstable; urgency=medium

  * Fix use after free on debug output.
    Reported by Moritz Meintker <email address hidden>.

 -- Guillem Jover <email address hidden>  Wed, 11 Dec 2019 05:12:02 +0100

Available diffs

• diff from 0.21 to 0.22 (2.2 KiB)

debsig-verify (0.21) unstable; urgency=medium

  * Packaging:
    - Do not use dh_auto_configure to configure the source in the
      autopkgtest, as it passes unknown options that emit warnings that
      make the test fail. See: #942813.

 -- Guillem Jover <email address hidden>  Sat, 26 Oct 2019 20:38:50 +0200

Available diffs

• diff from 0.19 to 0.21 (14.1 KiB)
• diff from 0.20 to 0.21 (2.1 KiB)

debsig-verify (0.20) unstable; urgency=medium

  * Update copyright years.
  * Expand GPLv2 brief notice in debsig-verify man page into the standard
    GPL-2+ notice.
  * Print the temporary directory template in case mkdtemp() fails, instead
    of printing NULL.
  * Build system:
    - Add missing files to the distribution.
    - Generate the .dist-version when creating a dist tarball.
  * Packaging:
    - Bump Standard-Version to 4.4.1 (no changes needed).
    - Switch from debian/compat to debhelper-compat in Build-Depends.
    - Switch to debhelper compatibility level 12.
    - Switch to dh.

 -- Guillem Jover <email address hidden>  Sat, 19 Oct 2019 04:23:44 +0200

debsig-verify (0.19) unstable; urgency=medium

  * Update Vcs information to point to new hosting.
  * Allocate pathname buffers dynamically to avoid possible silent truncation.
  * Build system:
    - Detect compiler flags availability at build-time.
  * Packaging:
    - Namespace debhelper files with package names.
    - Bump Standard-Version to 4.1.5 (no changes needed).
    - Move debhelper command arguments into fragment files.
    - Install all test policies into keyid example directories.

 -- Guillem Jover <email address hidden>  Thu, 05 Jul 2018 12:50:11 +0200

Available diffs

• diff from 0.18 to 0.19 (24.1 KiB)

debsig-verify (0.18) unstable; urgency=medium

  * Pass --no-auto-check-trustdb to the gpg invocations.
  * Add gpg as a alternative dependencies to gnupg, and gpg-agent or
    gnupg-agent as new Build-Depends, now that the package has been split
    in a more fine-grained way.
  * Use UTC0 instead of UTC when setting TZ.
  * Bump Standard-Version to 4.1.1 (no changes needed).
  * Add autopkgtest using the upstream test suite.
  * Set Rules-Requires-Root to no.
  * Set distribution tarball format to ustar.

 -- Guillem Jover <email address hidden>  Sun, 05 Nov 2017 23:46:13 +0100

Available diffs

• diff from 0.17 to 0.18 (4.5 KiB)

debsig-verify (0.17) unstable; urgency=medium

  * Spelling fixes. Thanks to Josh Soref <email address hidden>.
  * Switch from libxmltok (expat 1.x) to libexpat (expat 2.x). The latter
    package is slightly bigger, but that is offset by being used by many
    more package, and more importantly being maintained upstream.
  * Bump Standard-Version to 4.0.1 (no changes needed).
  * Switch to debhelper compatibility level 10.

 -- Guillem Jover <email address hidden>  Sun, 13 Aug 2017 00:25:11 +0200

Available diffs

• diff from 0.16 to 0.17 (6.2 KiB)

debsig-verify (0.16) unstable; urgency=medium

  * Wrap dependency fields in debian/control.
  * Add debsigs to Suggests.
  * Mark gnupg Build-Depends as <!nocheck>.
  * Adapt for libdpkg 1.18.11 ar API changes.
  * Enable more compilation warnings from configure.
  * Switch to a single git repository URL in README for browsing and cloning
    to fix previously broken cloning URL.

 -- Guillem Jover <email address hidden>  Tue, 24 Jan 2017 02:10:20 +0100

Available diffs

• diff from 0.15 to 0.16 (5.1 KiB)

debsig-verify (0.15) unstable; urgency=medium

  * Fix typo in error message, reported by lintian.
  * Fix typo in man page, reported by lintian.
  * Bump Standard-Version to 3.9.8 (no changes needed).
  * Use https for debsig policy DTD.
  * Fix coding style.
  * Switch to the dpkg makefile fragments in debian/rules.
  * Enable all hardening flags.
  * Switch to use the new libdpkg 1.18.8 ar API.
  * Fix parsing of GnuPG 2.x --list-packets output.
  * Move debian/copyright paragraph referencing GPL-2 file to a Comment field.
  * Make configure.ac a dependency of the configure target in debian/rules.
  * Fix test suite with GnuPG 2.x.

 -- Guillem Jover <email address hidden>  Thu, 14 Jul 2016 00:45:33 +0200

Available diffs

• diff from 0.14 to 0.15 (13.1 KiB)

debsig-verify (0.14) unstable; urgency=low

  * Assume at least C89 and POSIX.1-2001.
  * Fix man page formatting.
  * Add references to debsigs(1) and gpg(1) to the man page.
  * Add missing man page .TH fields.
  * Use https instead of git or http in URLs.
  * Add new test case covering key to name id mapping.
  * Switch to use more of libdpkg instead of ad-hoc code:
    - Use path_make_temp_template().
    - Switch from popen() to subproc_fork() and execlp(), to avoid shell
      invocation and unsafe argument passing.
    - Use the command module to invoke GnuPG instead of execlp().
  * Do not use an absolute pathname to the GnuPG program.
  * Make the GnuPG program configurable through the DEBSIG_GNUPG_PROGRAM
    environment variable.
  * Fix handling of a possibly non-terminated origin ID string.
  * Fix a file TOCTOU issue in the XML parser.
  * Set umask() for mkstemp() calls.
  * Do not free() nor unlink() an uninitialized string.
  * Fix printing debug message on unmatched key IDs in getKeyID().
  * Update copyright years.

 -- Guillem Jover <email address hidden>  Sat, 13 Feb 2016 11:32:58 +0100

Available diffs

• diff from 0.13 to 0.14 (26.1 KiB)

debsig-verify (0.13) unstable; urgency=medium


  * Disable all current GnuPG warnings, as these do not concern us, because
    we only use gpg for verification purposes, so we should not be handling
    sensitive material anyway. This fixes failures in the testsuite on
    GNU/Hurd due to unexpected output in stderr.

 -- Guillem Jover <email address hidden>  Tue, 28 Oct 2014 18:03:29 +0100

Available diffs

• diff from 0.10ubuntu2 (in Ubuntu) to 0.13 (171.1 KiB)

debsig-verify (0.10ubuntu2) utopic; urgency=low

  * improve GNUPGHOME chnage based on the review from Guillem
    and fix bug in the cleanup handling
 -- Michael Vogt <email address hidden>   Fri, 22 Aug 2014 19:08:57 +0200

Available diffs

• diff from 0.10 (in Debian) to 0.10ubuntu2 (1.4 KiB)
• diff from 0.10ubuntu1 to 0.10ubuntu2 (1.1 KiB)

debsig-verify (0.10ubuntu1) utopic; urgency=low

  * set the GNUPGHOME environment to a temporary dir to ensure
    that debsig-verify works even if ~/.gnupg is not writable
 -- Michael Vogt <email address hidden>   Thu, 21 Aug 2014 20:55:26 +0200

Available diffs

• diff from 0.10 (in Debian) to 0.10ubuntu1 (1.1 KiB)

debsig-verify (0.10) unstable; urgency=low


  * Add exit status codes to the man page.
    Thanks to Ben Collins <email address hidden>.
  * Enable LFS by passing the correct build flags to the build.
  * Extend the package long description.
  * Add a lintian override for package-contains-empty-directory on
    /usr/share/debsig/keyrings/.

 -- Guillem Jover <email address hidden>  Tue, 29 Jul 2014 12:21:49 +0200

Available diffs

• diff from 0.9 to 0.10 (2.0 KiB)

debsig-verify (0.9) unstable; urgency=low


  * New maintainer. Closes: #540897
  * Use '' style quoting instead of unpaired `'.
  * Use italics for pathnames and user replacable strings.
  * Add missing space before Build-Depends version.
  * Bump Standard-Version to 3.9.5 (no changed needed).
  * Stop making build-indep depend on build-stamp in debian/rules.
  * Stop using a build-stamp in debian/rules.
  * Add dh_installman and dh_link commands.
  * Mark debsig-verify as Enhances dpkg.
  * Sync Priority with archive override (from standard to optional).
  * Use $(CURDIR) instead of $(shell pwd) in debian/rules.
  * Honour user CPPFLAGS, CFLAGS and LDFLAGS.
  * Set build flags via dpkg-buildflags.
  * Switch debian/copyright to machine-readable format 1.0.
  * Add support for control.tar, control.tar.xz, data.tar, data.tar.xz,
    data.tar.bz2 and data.tar.lzma deb members. Closes: #745563
    Based on a patch by Vivek Das Mohapatra <email address hidden>.
  * Do not unnecessarily link against libxmltok, only libxmlparse.
  * Start using libdpkg instead of duplicating code:
    - Add pkg-config and libdpkg-dev to Build-Depends.
    - Add a Built-Using field for libdpkg-dev static linking.
    - Use libdpkg error handling code.
    - Use libdpkg ar handling. This enables ar large file support (LFS).
  * Check return values from functions marked with warn_unused_result.
  * Fix typos (aswell → as well). Closes: #748539
    Thanks to Tomas Pospisek <email address hidden>.
  * Add Vcs-Browser and Vcs-Git fields.
  * Switch to source format “3.0 (native)”.
  * Create the debian-keyring.gpg testing symlink in a new check target,
    instead of shipping it in the git repository or the release tarballs.
  * Decapitalize package short description.

 -- Guillem Jover <email address hidden>  Fri, 06 Jun 2014 13:41:13 +0200

Available diffs

• diff from 0.8 to 0.9 (10.2 KiB)

debsig-verify (0.8) unstable; urgency=low


  * QA upload.
  * Maintainer field set to QA Group. 
  * Standards-Version bumped to 3.9.3.
  * Add dependency on ${misc:Depends}.
  * Debhelper compatibility level set to 9. Build dependency on debhelper
    updated accordingly.
  * build-{arch,indep} targets added to debian/rules.
  * Deprecated dh_clean -k replaced with dh_prep.

 -- Emanuele Rocca <email address hidden>  Sun, 20 May 2012 09:25:43 +0000

Available diffs

• diff from 0.7 (in Ubuntu) to 0.8 (1.0 KiB)

debsig-verify (0.7) unstable; urgency=low


  * Upload to main proper

 -- Ben Collins <email address hidden>  Tue, 15 Apr 2003 13:37:34 -0400