Change log for libxmltok package in Ubuntu

libxmltok (1.2-4ubuntu1) kinetic; urgency=medium

  * SECURITY UPDATE: Incomplete validation of encoding
    - debian/patches/CVE-2022-25235-1.patch: remove the unused macro
      UTF8_GET_NAMING from xmltok/xmltok.c.
    - debian/patches/CVE-2022-25235-2.patch: add verification calls to
      IS_INVALID_CHAR() in CHECK_NAME_CASE, CHECK_NMSTRT_CASE and
      prologTok methods.
    - debian/patches/CVE-2022-25235-3.patch: add comments to BT_LEAD
      cases in xmltok/xmltok_impl.c.
    - CVE-2022-25235
  * SECURITY UPDATE: Namespace-separator insertions
    - debian/patches/CVE-2022-25236-1.patch: add a validation for
      nameSpaceSeparator in addBinding() in xmlparse/xmlparse.c.
    - debian/patches/CVE-2022-25236-2.patch: add a new method
      is_rfc3986_uri_char() to the previous validation in addBinding()
      in xmlparse/xmlparse.c.
    - CVE-2022-25236

 -- Rodrigo Figueiredo Zaiden <email address hidden>  Fri, 15 Jul 2022 10:32:03 -0300

Available diffs

• diff from 1.2-4 (in Debian) to 1.2-4ubuntu1 (3.9 KiB)

libxmltok (1.2-4) unstable; urgency=medium

  * Team upload.
  * debian/rules:
    + Rewrite using the dh sequencer.  Closes: #871512
    + Don't build in parallel, the makefile is not parallel-safe
  * Bump debhelper compat level to 10.
    + No need to specify --sourcedir to dh_install anymore.
  * Move to source format 3.0 (quilt).
  * debian/control:
    + Remove obsolete Vcs-* fields that don't work anymore.  Closes: #528300
    + De-duplicate the long descriptions.
    + De-duplicate the priority and section headers.
    + Add dependency on ${misc:Depends}, to be used for debhelper.
    + Bump Standards-Version to 4.0.1.
  * debian/TODO: remove empty file.

 -- Mattia Rizzolo <email address hidden>  Thu, 10 Aug 2017 14:06:20 +0200

Available diffs

• diff from 1.2-3build3 (in Ubuntu) to 1.2-4 (4.9 KiB)

libxmltok (1.2-3build3) quantal; urgency=low

  * Rebuild for new armel compiler default of ARMv5t.
 -- Colin Watson <email address hidden>   Fri, 05 Oct 2012 10:48:23 +0100

Available diffs

• diff from 1.2-3build2 to 1.2-3build3 (324 bytes)

libxmltok (1.2-3build2) lucid; urgency=low

  * rebuild rest of main for armel armv7/thumb2 optimization;
    UbuntuSpec:mobile-lucid-arm-gcc-v7-thumb2
 -- Alexander Sack <email address hidden>   Sun, 07 Mar 2010 00:55:40 +0100

Available diffs

• diff from 1.2-3build1 to 1.2-3build2 (348 bytes)

libxmltok (1.2-3build1) karmic; urgency=low

  * No-change rebuild to gain FORTIFY defaults.

 -- Kees Cook <email address hidden>   Mon, 11 May 2009 12:07:36 -0700

Available diffs

• diff from 1.2-3 to 1.2-3build1 (286 bytes)

libxmltok (1.2-3) unstable; urgency=low

  * debian/control:
    * replaced '${Source-Version}' by '${binary:Version}'
      (detected by lintian)
    * upgraded to Debian Policy 3.7.3
    * added Vcs-Browser and Vcs-Cvs fields
    * added Homepage field
      (detected by lintian)
    * changed build dependency on 'debhelper' to '(>= 5.0)'
  * debian/compat: bumped version to 5
  * debian/watch: bumped version to 3

 -- Matthias Klose <email address hidden>   Fri,  01 Feb 2008 15:31:44 +0000

libxmltok (1.2-2build1) gutsy; urgency=low

  * No-change upload to include stack protector.

 -- Kees Cook <email address hidden>   Tue, 31 Jul 2007 10:40:06 -0700

libxmltok (1.2-2) unstable; urgency=low


  * Added 'debian/watch'
  * Makefile: updated to support setting CFLAGS through DEB_BUILD_OPTIONS
  * debian/rules: added support for DEB_BUILD_OPTIONS
  * debiam/rules: various small improvements

 -- Ardo van Rangelrooij <email address hidden>  Wed, 24 Nov 2004 16:29:33 -0600

libxmltok (1.2-1) unstable; urgency=low


  * New upstream release
    (closes: Bug#251869)
    - Makefile: updated
    - xmlparse/Makefile: updated
  * Added copyright statement file 'copying.txt'
  * debian/copyright: updated to reflect new copyright statement
  * debian/rules,xmlparse/Makefile,xmltok/Makefile: removed obsolete copyright
    statement
  * debian/control: added author's name and package homepage to description

 -- Ardo van Rangelrooij <email address hidden>  Tue,  1 Jun 2004 11:15:39 -0500