Change log for gcab package in Ubuntu

gcab (1.6-1) unstable; urgency=medium

  * New upstream release.
  * Standards-Version 4.6.2, no change required.

 -- Stephen Kitt <email address hidden>  Thu, 06 Jul 2023 19:05:23 +0200

Available diffs

• diff from 1.5-1 to 1.6-1 (4.2 KiB)

gcab (1.5-1) unstable; urgency=medium

  * New upstream release.
  * Standards-Version 4.6.1, no change required.

 -- Stephen Kitt <email address hidden>  Sun, 07 Aug 2022 21:31:55 +0200

Available diffs

• diff from 1.4-3build2 (in ~ci-train-ppa-service/ubuntu/4810-deletedppa) to 1.5-1 (24.3 KiB)

gcab (1.4-3build2) jammy; urgency=medium

  * No-change rebuild for ppc64el baseline bump.

 -- Łukasz 'sil2100' Zemczak <email address hidden>  Wed, 23 Mar 2022 14:53:30 +0100

Available diffs

• diff from 1.4-3build1 (in Ubuntu) to 1.4-3build2 (337 bytes)

gcab (1.4-3build1) impish; urgency=medium

  * No-change rebuild to build packages with zstd compression.

 -- Matthias Klose <email address hidden>  Thu, 07 Oct 2021 12:11:49 +0200

Available diffs

• diff from 1.4-3 (in Debian) to 1.4-3build1 (333 bytes)

gcab (1.4-3) unstable; urgency=medium

  * Bump debian/watch version, fix it to avoid scanning the parent
    directory.
  * Switch to debhelper compatibility level 13.
  * Standards-Version 4.5.1, no further change required.

 -- Stephen Kitt <email address hidden>  Sun, 17 Jan 2021 11:36:30 +0100

Available diffs

• diff from 1.4-2 to 1.4-3 (953 bytes)

gcab (1.4-2) unstable; urgency=medium

  [ Debian Janitor ]
  * Set upstream metadata fields: Bug-Database, Bug-Submit, Repository,
    Repository-Browse.

  [ Stephen Kitt ]
  * Use version symbols for the symbols file.
  * Standards-Version 4.5.0, no further change required.

 -- Stephen Kitt <email address hidden>  Wed, 22 Apr 2020 23:08:45 +0200

Available diffs

• diff from 1.4-1 to 1.4-2 (1.0 KiB)

gcab (1.4-1) unstable; urgency=medium

  * New upstream release.

 -- Stephen Kitt <email address hidden>  Thu, 09 Jan 2020 22:54:28 +0100

Available diffs

• diff from 1.3-1 to 1.4-1 (4.9 KiB)

gcab (1.3-1) unstable; urgency=medium

  * New upstream release, merging overflow.patch and the self-test
    patches.
  * Standards-Version 4.4.1, no change required.

 -- Stephen Kitt <email address hidden>  Sat, 12 Oct 2019 12:17:13 +0200

Available diffs

• diff from 1.2-5 to 1.3-1 (10.5 KiB)

gcab (1.2-5) unstable; urgency=medium

  * Source-only rebuild after going through NEW.

 -- Stephen Kitt <email address hidden>  Sat, 07 Sep 2019 17:29:04 +0200

Available diffs

• diff from 1.2-3 to 1.2-5 (4.9 KiB)

gcab (1.2-3) unstable; urgency=medium

  * Apply upstream patch to fix corruption when extracting.
    Closes: #931487. LP: #1835589.

 -- Stephen Kitt <email address hidden>  Sat, 06 Jul 2019 10:18:07 +0200

Available diffs

• diff from 1.2-2 to 1.2-3 (1.1 KiB)

gcab (1.2-2) unstable; urgency=medium

  * Avoid needing PATH_MAX, so we can build on Hurd. Closes: #888640;
    thanks to Paul Sonnenschein for the patch!

 -- Stephen Kitt <email address hidden>  Sat, 22 Dec 2018 12:37:31 +0100

Available diffs

• diff from 1.2-1 to 1.2-2 (766 bytes)

gcab (1.2-1) unstable; urgency=medium

  * New upstream release, including the fix for the rewind regression.

 -- Stephen Kitt <email address hidden>  Tue, 11 Dec 2018 22:14:38 +0100

Available diffs

• diff from 1.1-4 to 1.2-1 (7.2 KiB)

gcab (1.1-4) unstable; urgency=medium

  * Apply upstream patch to fix rewind regression. LP: #1801643, #1801644.
  * Switch to a secure upstream URL in debian/watch.
  * ddeb migration complete, drop the dh_strip override.
  * Add “Build-Depends-Package” entry to libdcab-1.0-0.symbols.
  * Set “Rules-Requires-Root: no”.
  * Standards-Version 4.2.1, no further change required.

 -- Stephen Kitt <email address hidden>  Mon, 05 Nov 2018 17:53:25 +0100

Available diffs

• diff from 1.1-3 to 1.1-4 (1.9 KiB)

gcab (1.1-3) unstable; urgency=medium

  * Migrate to Salsa.
  * Standards-Version 4.1.4, no further change required.

 -- Stephen Kitt <email address hidden>  Wed, 02 May 2018 20:28:11 +0200

Available diffs

• diff from 1.1-2 to 1.1-3 (514 bytes)

gcab (1.1-2) unstable; urgency=medium

  * Patch the build to avoid requiring git. Closes: #890111.

 -- Stephen Kitt <email address hidden>  Sun, 11 Feb 2018 18:49:38 +0100

Available diffs

• diff from 1.0-1 to 1.1-2 (10.0 KiB)
• diff from 1.1-1 to 1.1-2 (955 bytes)

gcab (1.1-1) unstable; urgency=medium

  * New upstream release.

 -- Stephen Kitt <email address hidden>  Sat, 10 Feb 2018 22:26:53 +0100

Available diffs

• diff from 1.0-1 to 1.1-1 (9.7 KiB)

gcab (1.0-1) unstable; urgency=medium

  * New upstream release, merging a number of patches and switching to the
    Meson build system.
  * Use dh_missing instead of dh_install --list-missing.

 -- Stephen Kitt <email address hidden>  Thu, 25 Jan 2018 19:55:45 +0100

Available diffs

• diff from 0.7-7 to 1.0-1 (476.6 KiB)

gcab (0.7-1ubuntu0.1) xenial-security; urgency=medium

  * SECURITY UPDATE: code execution via crafted .cab file
    - debian/patches/CVE-2018-5345.patch: add size check in
      libgcab/cabinet.c.
    - CVE-2018-5345

 -- Marc Deslauriers <email address hidden>  Wed, 24 Jan 2018 07:59:02 -0500

Available diffs

• diff from 0.7-1 (in Debian) to 0.7-1ubuntu0.1 (1.5 KiB)

gcab (0.7-4ubuntu0.1) artful-security; urgency=medium

  * SECURITY UPDATE: code execution via crafted .cab file
    - debian/patches/CVE-2018-5345.patch: add size check in
      libgcab/cabinet.c.
    - CVE-2018-5345

 -- Marc Deslauriers <email address hidden>  Wed, 24 Jan 2018 07:47:47 -0500

Available diffs

• diff from 0.7-4 (in Debian) to 0.7-4ubuntu0.1 (1.6 KiB)

gcab (0.7-7) unstable; urgency=high

  * Switch to debhelper compatibility level 11.
  * Apply upstream fix for CVE-2018-5345. Closes: #887776. This also fixes
    the out-of-bounds read in cdata_finish(). Closes: #881922.
  * Standards-Version 4.1.3, no change required.

 -- Stephen Kitt <email address hidden>  Tue, 23 Jan 2018 14:25:04 +0100

Available diffs

• diff from 0.7-6 to 0.7-7 (1.8 KiB)

gcab (0.7-6) unstable; urgency=medium

  * Apply upstream fix to the fix for checkstum calculations on big-endian
    and little-endian platforms. LP: #1737723.
  * Standards-Version 4.1.2, no change required.

 -- Stephen Kitt <email address hidden>  Tue, 12 Dec 2017 20:36:48 +0100

Available diffs

• diff from 0.7-5 to 0.7-6 (4.5 KiB)

gcab (0.7-5) unstable; urgency=medium

  * Apply upstream fix for checksum calculations on big-endian platforms;
    thanks to Mario Limonciello for the report and pointer to the patch.
    Closes: #882013.
  * Standards-Version 4.1.1, no further change required.

 -- Stephen Kitt <email address hidden>  Mon, 20 Nov 2017 20:06:54 +0100

Available diffs

• diff from 0.7-4 to 0.7-5 (1.6 KiB)

gcab (0.7-4) unstable; urgency=medium

  * Add overrides for Lintian’s “spelling error” covering the use of “GNU
    Public License” (which refers to the general concept here).
  * Make gcab produce reproducible cabinets; thanks to Chris Lamb for the
    patch. Closes: #872460.
  * Fix an invalid libgcab-dev link in libgcab-doc.

 -- Stephen Kitt <email address hidden>  Thu, 17 Aug 2017 22:43:03 +0200

Available diffs

• diff from 0.7-3 to 0.7-4 (1.1 KiB)

gcab (0.7-3) unstable; urgency=medium

  * Switch to debhelper compatibility level 10.
  * As per the GObject-Introspection policy, the typelib package should be
    gir1.2-gcab-1.0, not gir1.2-libgcab-1.0; rename the package
    accordingly. The -dev package also needs a dependency on the typelib
    package.
  * Update debian/copyright.
  * Standards-Version 4.0.0, no further change required.

 -- Stephen Kitt <email address hidden>  Tue, 11 Jul 2017 12:35:49 +0200

Available diffs

• diff from 0.7-2 to 0.7-3 (1.5 KiB)

gcab (0.7-2) unstable; urgency=medium

  * Explicitly build-depend on intltool and pkg-config instead of relying
    on gnome-common. Closes: #837853.
  * Standards-Version 3.9.8, no change required.

 -- Stephen Kitt <email address hidden>  Thu, 15 Sep 2016 23:02:12 +0200

Available diffs

• diff from 0.7-1 to 0.7-2 (572 bytes)

gcab (0.7-1) unstable; urgency=medium

  * New upstream release.
  * Add unique license names for all the permissive licenses.
  * Migrate to dbgsym debug packages.
  * Switch to https: VCS URIs (see #810378).
  * Add the Ubuntu patch to avoid integer overflows in zalloc.
  * Standards-Version 3.9.7, no change required.
  * Enable all hardening options.

 -- Stephen Kitt <email address hidden>  Fri, 18 Mar 2016 12:46:01 +0100

Available diffs

• diff from 0.6-1ubuntu1 (in Ubuntu) to 0.7-1 (215.7 KiB)

gcab (0.6-1ubuntu1) xenial; urgency=medium

  * Add zalloc_integer_overflow.patch (LP: #1475021)

 -- Mario Limonciello <email address hidden>  Wed, 17 Feb 2016 12:29:13 -0600

Available diffs

• diff from 0.6-1 (in Debian) to 0.6-1ubuntu1 (608 bytes)

gcab (0.6-1) unstable; urgency=medium


  * New upstream release.
  * Drop afl-fixes.patch, merged upstream.

 -- Stephen Kitt <email address hidden>  Fri, 20 Mar 2015 20:11:15 +0100

Available diffs

• diff from 0.4-3 to 0.6-1 (116.3 KiB)

gcab (0.4-3) unstable; urgency=medium


  * Fix all the crashes detected by AFL. Thanks to Jakub Wilk for the
    suggestion! Closes: #775941.
  * Fix hyphens in the manpage.

 -- Stephen Kitt <email address hidden>  Sun, 25 Jan 2015 23:51:15 +0100

Available diffs

• diff from 0.4-2 to 0.4-3 (2.8 KiB)

gcab (0.4-2) unstable; urgency=medium


  * Indicate that libgcab/gcab-enums.* is licensed using LGPL-2.0+, not
    2.1+ like the rest of the project. Thanks to Thorsten Alteholz for
    pointing out that this should be indicated explicitly!
  * Prevent path traversals; contents of cabinet files are always
    extracted below the extraction point and cannot escape it. Closes:
    #774580. This is CVE-2015-0552.

 -- Stephen Kitt <email address hidden>  Tue, 06 Jan 2015 00:14:58 +0100

Available diffs

• diff from 0.4-1 to 0.4-2 (2.1 KiB)

gcab (0.4-1) unstable; urgency=low


  * Initial release. Closes: #771253.

 -- Stephen Kitt <email address hidden>  Sat, 29 Nov 2014 00:12:00 +0100