Change log for autotrace package in Ubuntu

autotrace (0.31.1-16+deb7u1ubuntu0.1) trusty-security; urgency=medium

  * SECURITY UPDATE: Integer underflow
    - debian/patches/CVE-2013-1953.patch: Perform a bounds check on biSize
      before subtracting 4 and causing an integer underflow
    - CVE-2013-1953

 -- Mike Salvatore <email address hidden>  Wed, 16 Jan 2019 14:29:40 -0500

Available diffs

• diff from 0.31.1-16+deb7u1build0.14.04.1 to 0.31.1-16+deb7u1ubuntu0.1 (1.0 KiB)

autotrace (0.31.1-16+nmu1.2ubuntu0.1) xenial-security; urgency=medium

  * SECURITY UPDATE: Heap buffer overflow
    - debian/patches/CVE-2016-7392.patch: Fix an order of operations error in
      call to XMALLOC to avoid a heap-based buffer overflow when processing
      bmp images.
    - CVE-2016-7392

 -- Mike Salvatore <email address hidden>  Wed, 16 Jan 2019 12:18:25 -0500

Available diffs

• diff from 0.31.1-16+nmu1.2 (in Debian) to 0.31.1-16+nmu1.2ubuntu0.1 (1.1 KiB)

autotrace (0.31.1-17build1) zesty; urgency=medium

  * Rebuild against new imagemagick 6.9.7.0.

 -- Gianfranco Costamagna <email address hidden>  Wed, 18 Jan 2017 14:43:21 +0100

Available diffs

• diff from 0.31.1-17 (in Debian) to 0.31.1-17build1 (326 bytes)

autotrace (0.31.1-17) unstable; urgency=medium

  * QA upload
  * Set maintainer field to Debian QA Group (see #834306)
  * Fix heap-based buffer overflow in pstoedit_suffix_table_init.
    Closes: #837599 [CVE-2016-7392]

 -- Christoph Biedl <email address hidden>  Wed, 21 Dec 2016 09:50:51 +0100

Available diffs

• diff from 0.31.1-16+nmu1.2build1 (in Ubuntu) to 0.31.1-17 (1.1 KiB)

autotrace (0.31.1-16+deb7u1build0.14.04.1) trusty-security; urgency=medium

  * fake sync from Debian

Available diffs

• diff from 0.31.1-16build2 (in Ubuntu) to 0.31.1-16+deb7u1build0.14.04.1 (922 bytes)

autotrace (0.31.1-16+deb7u1build0.12.04.1) precise-security; urgency=medium

  * fake sync from Debian

Available diffs

• diff from 0.31.1-16build1 (in Ubuntu) to 0.31.1-16+deb7u1build0.12.04.1 (882 bytes)

autotrace (0.31.1-16+nmu1.2build1) yakkety; urgency=medium

  * No-change rebuild for libpng soname change.

 -- Matthias Klose <email address hidden>  Fri, 22 Apr 2016 23:58:17 +0000

Available diffs

• diff from 0.31.1-16+nmu1.2 (in Debian) to 0.31.1-16+nmu1.2build1 (364 bytes)

autotrace (0.31.1-16+nmu1.2) unstable; urgency=medium

  * Change Depends from libpng12-dev to libpng-dev (really Closes: #662273)

 -- Tobias Frost <email address hidden>  Tue, 16 Feb 2016 14:36:58 +0100

Available diffs

• diff from 0.31.1-16+nmu1.1 to 0.31.1-16+nmu1.2 (616 bytes)

autotrace (0.31.1-16+nmu1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Fixes for the libpng 1.6 library transition: (Closes: #662273)
      - Build-Depends on libpng-dev, instead of libpng12-dev
      - Add patch from Fedora for the library's API

 -- Tobias Frost <email address hidden>  Mon, 25 Jan 2016 13:28:09 +0100

Available diffs

• diff from 0.31.1-16+nmu1build1 (in Ubuntu) to 0.31.1-16+nmu1.1 (1.9 KiB)

autotrace (0.31.1-16+nmu1build1) wily; urgency=medium

  * No-change rebuild against libpstoedit0v5

 -- Steve Langasek <email address hidden>  Mon, 10 Aug 2015 18:49:23 +0000

Available diffs

• diff from 0.31.1-16+nmu1 (in Debian) to 0.31.1-16+nmu1build1 (589 bytes)

autotrace (0.31.1-16+nmu1) unstable; urgency=low


  * Non-maintainer upload.
  * Fix buffer overflow (Closes: #742873, CVE-2013-1953), patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=951257.

 -- Yann Dirson <email address hidden>  Sat, 15 Nov 2014 16:45:25 +0100

Available diffs

• diff from 0.31.1-16build3 (in Ubuntu) to 0.31.1-16+nmu1 (930 bytes)

autotrace (0.31.1-16build3) vivid; urgency=medium

  * Rebuild against libmagickcore-6.q16-2.
 -- Colin Watson <email address hidden>   Thu, 30 Oct 2014 12:48:15 +0000

Available diffs

• diff from 0.31.1-16build2 to 0.31.1-16build3 (326 bytes)

autotrace (0.31.1-16build2) quantal; urgency=low

  * Rebuild for imagemagick5
 -- Michael Terry <email address hidden>   Tue, 17 Jul 2012 10:05:28 -0400

Available diffs

• diff from 0.31.1-16build1 to 0.31.1-16build2 (334 bytes)

autotrace (0.31.1-16build1) precise; urgency=low

  * No change rebuild for imagemagick4 transition
 -- Michael Terry <email address hidden>   Fri, 18 Nov 2011 12:19:09 -0500

Available diffs

• diff from 0.31.1-16 to 0.31.1-16build1 (344 bytes)

autotrace (0.31.1-16) unstable; urgency=low

  * Bumped Standards-Version to 3.9.2
  * Switch to dpkg-source 3.0 (quilt) format
  * Added a patchs for the old changes(pkg without a patch system).
  * Added misc depends to libautotrace-dev
  * Switch to dh8 scripts, dep3 and dep5 format. 
  * Added more description to libautotrace3 and libautotrace-dev
  * Added a symbols file for libautotrace3.
  * Added a docs file and for libautotrace-dev a examples file.
 -- Ubuntu Archive Auto-Sync <email address hidden>   Mon,  17 Oct 2011 09:10:23 +0000

Available diffs

• diff from 0.31.1-15.3 (in Debian) to 0.31.1-16 (666.8 KiB)

autotrace (0.31.1-15.3) unstable; urgency=low
  * Non-maintainer upload.  * Don't ship .la files (Closes: #621237). -- Luk Claes <email address hidden>  Tue, 28 Jun 2011 20:46:13 +0200

autotrace (0.31.1-15.2) unstable; urgency=medium

  * Non-maintainer upload.
  * ... and replace references to the old libmagick9-dev from
    libautotrace-dev (closes: #625593, again...)
  * Urgency medium to fix RC bugs and help the imagemagick transition
    along.
 -- Ubuntu Archive Auto-Sync <email address hidden>   Fri,  24 Jun 2011 09:06:58 +0000

Available diffs

• diff from 0.31.1-15.1 to 0.31.1-15.2 (623 bytes)

autotrace (0.31.1-15.1) unstable; urgency=low

  * Non-maintainer upload.
  * Build with recent imagemagick libraries (closes: #625593)
 -- Ubuntu Archive Auto-Sync <email address hidden>   Sat,  11 Jun 2011 08:59:51 +0000

Available diffs

• diff from 0.31.1-15build1 to 0.31.1-15.1 (605 bytes)

autotrace (0.31.1-15build1) maverick; urgency=low

  * No changes upload for libmagick2 -> libmagick3 transition
 -- Fabrice Coutadeur <email address hidden>   Wed, 21 Jul 2010 23:09:38 +0200

Available diffs

• diff from 0.31.1-15 to 0.31.1-15build1 (321 bytes)

autotrace (0.31.1-15) unstable; urgency=low

  * New maintainer. Closes: #525919
  * Bump Standards-Version to 3.8.3.
  * Fix the manpage ugly format.
 -- Vikram <email address hidden>   Thu,  24 Dec 2009 00:29:48 +0000

Available diffs

• diff from 0.31.1-14ubuntu2 to 0.31.1-15 (1.5 KiB)

autotrace (0.31.1-14ubuntu2) karmic; urgency=low

  * Revert the input-magick.c change, which apparently causes a build
    failure again with the latest API

 -- Steve Langasek <email address hidden>   Tue, 08 Sep 2009 19:14:53 +0000

Available diffs

• diff from 0.31.1-14ubuntu1 to 0.31.1-14ubuntu2 (825 bytes)

autotrace (0.31.1-14ubuntu1) karmic; urgency=low

  * Merge from debian unstable, remaining changes:
    - Fix input-magick.c to build against current ImageMagick api

 -- Laurent Bigonville <email address hidden>   Thu, 30 Apr 2009 16:06:43 +0200

Available diffs

• diff from 0.31.1-13ubuntu1 to 0.31.1-14ubuntu1 (1.6 KiB)

autotrace (0.31.1-13ubuntu1) jaunty; urgency=low

  * Rebuild for libmagick10 -> libmagickcore1 transition (LP: #348160)
  * Fix input-magick.c to build against current ImageMagick api
  * Improved debian/watch file and autotrace.install

 -- Alessandro Ghersi <email address hidden>   Thu, 26 Mar 2009 01:08:43 +0100

Available diffs

• diff from 0.31.1-13build2 to 0.31.1-13ubuntu1 (1.2 KiB)

autotrace (0.31.1-13build2) hardy; urgency=low

  * Rebuild for libmagick9 -> libmagick10 transition.

 -- Luca Falavigna <email address hidden>   Wed, 27 Feb 2008 20:36:54 +0100

autotrace (0.31.1-13build1) gutsy; urgency=low

  * No-change rebuild for libjasper transition.

 -- Steve Kowalik <email address hidden>   Sun, 24 Jun 2007 23:36:41 +1000

autotrace (0.31.1-13) unstable; urgency=low

  * Fix some more cases of 64-bit uncleanness (wrong format string
    for size_t).

autotrace (0.31.1-11) unstable; urgency=low


  * Rebuild for new libpstoedit0c2a package.
  * Zlib is not actually used by autotrace; remove build-dependency
    and comment out configure check.

  * Override the ad-hoc build system to avoid transitive shlibs dependencies.
  * Further overrides to produce a sane /usr/lib/pkgconfig/autotrace.pc
  * The autotrace-config script is broken by design; don't ship it.
    All of these per Steve Langasek in
    <http://lists.debian.org/debian-devel-announce/2005/11/msg00016.html>

 -- Henning Makholm <email address hidden>  Fri, 25 Nov 2005 22:07:08 +0100

autotrace (0.31.1-8) unstable; urgency=low


  * Add watch file
  * Make lintian happy again my letting the Build-Depends line be
    a single (long) line.
  * Apply patch from Steve Langasek (in bug #262469) to remove direct
    dependencies from the autotrace binary package to libmagick.
    (Closes: #260938, as far as it is possible to do in the autotrace
    package).
  * Apply patch from Paul Sladen to eliminate redundant closepaths
    in pdf output.

 -- Henning Makholm <email address hidden>  Mon,  3 Jan 2005 06:45:24 +0000

autotrace (0.31.1-7) unstable; urgency=medium


  * Rebuild for libtiff4 transition

 -- Henning Makholm <email address hidden>  Sun,  1 Aug 2004 12:05:45 +0100

autotrace (0.31.1-6) unstable; urgency=low


  * Rebuild against new libmagick packages. (Closes: #245603).
  * Remove debian/fixmagickversions; we now build-depend on libmagick6
    which never exhibited the particular bug that script worked around.
  * Remove temporary (build-)dependencies on libplot-dev; libpstoedit-dev
    has been fixed for a while now.
  * Fixed upstream configure script which does not like libmagick 6.x
  * Include ltmain.sh in the autofoo stuff in debian/rules; the one shipped
    by upstream had drifted out of sync with Debian's libtool package.
    This should also please GNU/*BSD porters (#242950).

 -- Henning Makholm <email address hidden>  Tue, 27 Apr 2004 02:46:16 +0100