Change logs for openslp-dfsg source package in Wily

  • openslp-dfsg (1.2.1-10ubuntu1) wily; urgency=medium
    
      * SECURITY UPDATE: denial of service via double free flaw
        - debian/patches/CVE-2015-5177.patch: fix double free if
          SLPDKnownDAAdd() fails in slpd/slpd_knownda.c.
        - CVE-2015-5177
    
     -- Marc Deslauriers <email address hidden>  Fri, 28 Aug 2015 15:27:38 -0400
  • openslp-dfsg (1.2.1-10) unstable; urgency=low
    
    
      * QA upload.
      * Bump Standards-Version to 3.9.5 (no changes needed).
      * Bump debhelper compatibility level to 9.
      * Switch to machine-parseable copyright format.
      * Reorder binary package stanzas in debian/control.
      * Split common and specific package descriptions into distinct paragraphs
        so that translations are easier.
      * Reword package summaries.
      * Mark slpd and slptool as Multi-Arch:foreign, libslp1 and libslp-dev as
        Multi-Arch:same. Closes: #755935
      * Clean up debian/rules:
        - Explicitly set DEB_HOST_GNU_TYPE.
        - Remove unused DEB_BUILD_GNU_SYSTEM and DEB_BUILD_GNU_CPU assignments.
        - Remove commented out debhelper commands.
        - Do not pass any argument to update-rc.d via dh_installinit.
        - Pass --host and --build to configure only when cross-compiling.
        - Pass --disable-silent-rules to configure, preemptively.
        - Enable hardening build flags.
      * Clean up init script:
       - Update LSB header descriptions.
       - Add LSB status action support.
       - Rename debian/init.d to debian/slpd.init.
       - Add new PIDFILE variable.
      * Remove unnecessary debian/dirs, dh_installinit takes care of creating the
        etc/init.d directory.
      * Remove debian/preinst, as it was wrongly using start-stop-daemon directly,
        and invoke-rc.d is already being injected by debhelper to stop the daemon
        on upgrade.
      * Remove «set -x» from slpd postinst.
      * Namespace stray debhelper files with «slpd.» in debian/ filenames.
      * Remove trailing spaces from debian/ files.
      * Change the libcrypto configure-time checks conditional on whether it is
        going to be used at build time, so that we can remove the libssl-dev
        Build-Conflicts.
      * Add a debian/watch file.
      * Add a basic symbols file for libslp1.
      * Fix a typo in slptool's program output message.
      * Fix a typo in an automake coditional in the code, that was not properly
        disabling the code (ENABLE_SLPV2_SECURITY → ENABLE_SLPv2_SECURITY).
      * Fix handling of string-list in common/slp_common.c by not increasing
        the item pointer past the string-list pointer, and letting '\\' only
        escape the item separator ','. Although not reproduced it should in
        theory fix CVE-2012-4428. Closes: #687597
    
     -- Guillem Jover <email address hidden>  Fri, 25 Jul 2014 16:57:05 +0200