Change logs for libgd2 source package in Lucid

  • libgd2 (2.0.36~rc1~dfsg-3.1ubuntu1) lucid; urgency=low
    
      * Merge from debian testing.  Remaining changes:
        - debian/control: Drop unnecessary build dependency 'gnulib'.
    
    libgd2 (2.0.36~rc1~dfsg-3.1) unstable; urgency=high
    
      * Non-maintainer upload by the Security Team.
      * Fixed CVE-2009-3546: possible buffer overflow or buffer over-read attacks
        via crafted files (Closes: #552534)
     -- Kees Cook <email address hidden>   Tue, 08 Dec 2009 16:59:29 -0800
  • libgd2 (2.0.36~rc1~dfsg-3ubuntu1) intrepid; urgency=low
    
      * Merge from debian unstable, remaining changes:
        - debian/control: Drop unnecessary build dependency 'gnulib'.
    
    libgd2 (2.0.36~rc1~dfsg-3) unstable; urgency=medium
    
      * Drop bogus "-Wl,--disable-rpath" ld flags.  Closes: bug#478534,
        #476018, thanks to Kumar Appaiah.
      * Install (cleaned copy of) index.html as both README and README.html.
      * Build-depend on html2text (pulled in by debhelper too, but also used
        explicitly so we must depend on it ourselves according to Policy).
      * Update local cdbs snippets:
        + Add and use local autotools.mk extended to support multiple build
          flavors (instead of custom-invoked configure + make).
          As extra bonus this fixes support for cross-compilation (thanks to
          Kumar Appaiah for pointing it out in bug#476018).
        + Add local autotools-vars.mk, makefile.mk and makefile-vars.mk
          needed by local autotools.mk above.
        + Strip non-printable characters in copyright-check.mk.
        + Relaxed copyright-check.mk to only warn by default.
        + Update dependency cleanup to strip cdbs 0.4.27 (not 0.4.27-1).
      * Update debian/copyright-hints.
      * Bump debhelper compatibility level to 6.
      * Semi-auto-update debian/control to update build-dependencies:
          DEB_AUTO_UPDATE_DEBIAN_CONTROL=yes fakeroot debian/rules clean
      * Set urgency=medium as this fixes serious FTBFS bugs.
    
    libgd2 (2.0.36~rc1~dfsg-2) unstable; urgency=medium
    
      * Add symbols file.
      * Add patch 0001 to fix leak in gdImageCopyResized.
      * Set urgency=medium, as the bugfix above seems security-related.
      * Update local cdbs snippets:
        + Enable patchsys-quilt.mk.
        + Major improvements to update-tarball (but none of them affecting
          this current packaging).
        + Major improvements to copyright-check, including new versioned
          build-dependency on devscripts.  Update debian/copyright_hints.
          Closes: bug#466642.
        + Drop buildcore.mk override.  Set DEB_AUTO_UPDATE_DEBIAN_CONTROL
          directly instead when needed.
        + Update debian/README.cdbs-tweaks
      * Avoid copyright-check choking on config/install.sh and aclocal.m4.
      * Semi-auto-update debian/control to update build-dependencies:
        DEB_AUTO_UPDATE_DEBIAN_CONTROL=yes fakeroot debian/rules clean
    
    libgd2 (2.0.36~rc1~dfsg-1) unstable; urgency=medium
    
      * New upstream prerelease.
        + Fixed gdImageCopy with true color image, the transparent color was
          ignored
        + Fixed support of PNG grayscale image with alpha channel
        + _gdCreateFromFile() can crash if gdImageCreate fails
        + gdImageCreateFrom*Ptr() can crash if gdNewDynamicCtxEx() fails
        + gdImageRectangle draws 1x1 rectangles as 1x3 rectangles
        + Possible integer overflow in gdImageFill()
        + Optimization for single pixel line not in correct order
        + gdImageColorDeallocate can write outside buffer
        + gdImageColorTransparent can write outside buffer
        + gdImageWBMPCtx can crash when createwbmp fails
      * Set urgency=medium due to this being a bugfix-only release, and some
        of the fixes seems security-related.
      * Move Homepage to own field (from pseudo-field in long description).
      * Move XS-Vcs-* control fields to Vcs-*.
      * Add patch 0003 to fix segfault when createwbmp fails.
      * Adjust watch file:
        + Include upstream prereleases
        + Ignore local trailing ~dfsg repackaging hint
        + Invoke svn-upgrade (not uupdate)
      * Update cdbs tweaks:
        + Support zip in upstream-tarball.mk (unneeded here)
        + Use ~ as repackaging delimiter in upstream-tarball.mk to make room
          for point releases and cleaned up rerelease
        + Rename top srcdir in repackaged tarball to $pkg-$ver.orig to
          comply with Developers Reference 6.7.8.2.
        + Support mangling upstream version string in upstream-tarball.mk
        + Drop buildcore.mk override (set DEB_AUTO_UPDATE_DEBIAN_CONTROL
          manually when needed instead)
      * Drop all patches: applied upstream.
      * Strip tests from repackaged source tarball: newly added truetype
        font comes without license, and all tests are unusable anyway
        without cmake modules that are already stripped.
      * Document stripped files in debian/copyright.
      * Update debian/copyright_hints (newer years for automade files).
      * Bump standards-version to 3.7.3 (no changes needed).
      * Semi-auto-update debian/control:
        DEB_AUTO_UPDATE_DEBIAN_CONTROL=yes fakeroot debian/rules
    
     -- Kees Cook <email address hidden>   Sun, 03 Aug 2008 19:21:21 -0700