Change log for file package in Ubuntu

file (5.03-5ubuntu1.1) lucid-security; urgency=medium

  * SECURITY UPDATE: denial of service via crafted CDF file
    - debian/patches/CVE-2012-1571.patch:
    - CVE-2012-1571
  * SECURITY UPDATE: denial of service via crafted indirect offset value
    - debian/patches/CVE-2013-1943.patch: properly handle recursion in
      src/ascmagic.c, src/file.h, src/funcs.c, src/softmagic.c.
    - CVE-2013-1943
 -- Marc Deslauriers <email address hidden>   Mon, 24 Feb 2014 13:33:26 -0500

Available diffs

• diff from 5.03-5ubuntu1 (in Ubuntu) to 5.03-5ubuntu1.1 (12.7 KiB)

file (5.11-2ubuntu0.1) quantal-security; urgency=medium

  * SECURITY UPDATE: denial of service via crafted indirect offset value
    - debian/patches/CVE-2013-1943.patch: properly handle recursion in
      src/ascmagic.c, src/file.h, src/funcs.c, src/softmagic.c.
    - CVE-2013-1943
 -- Marc Deslauriers <email address hidden>   Mon, 24 Feb 2014 13:02:55 -0500

Available diffs

• diff from 5.11-2 (in Debian) to 5.11-2ubuntu0.1 (2.3 KiB)

file (5.11-2ubuntu4.1) saucy-security; urgency=medium

  * SECURITY UPDATE: denial of service via crafted indirect offset value
    - debian/patches/CVE-2013-1943.patch: properly handle recursion in
      src/ascmagic.c, src/file.h, src/funcs.c, src/softmagic.c.
    - CVE-2013-1943
 -- Marc Deslauriers <email address hidden>   Mon, 24 Feb 2014 12:38:41 -0500

Available diffs

• diff from 5.11-2ubuntu4 (in Ubuntu) to 5.11-2ubuntu4.1 (2.3 KiB)

file (1:5.14-2ubuntu1) trusty; urgency=low

  * Merge with Debian; remaining changes:
    - Adjust python build dependencies for cross builds.
    - Make python-magic a binary indep package.
    - Allow the package to cross-build.
  * Recognize python3.4 byte code.
  * Build using dh-autoreconf.

Available diffs

• diff from 5.11-2ubuntu4 to 1:5.14-2ubuntu1 (168.2 KiB)

file (5.11-2ubuntu4) raring; urgency=low

  * debian/rules: Remove the override_dh_strip target.
 -- Matthias Klose <email address hidden>   Wed, 06 Mar 2013 21:26:02 +0800

Available diffs

• diff from 5.11-2ubuntu2 to 5.11-2ubuntu4 (1.1 KiB)
• diff from 5.11-2ubuntu3 to 5.11-2ubuntu4 (540 bytes)

file (5.11-2ubuntu3) raring; urgency=low

  * Adjust python build dependencies for cross builds.
  * Make python-magic a binary indep package, stop building python-magic-dbg.
 -- Matthias Klose <email address hidden>   Wed, 06 Mar 2013 20:25:25 +0800

Available diffs

• diff from 5.11-2ubuntu2 to 5.11-2ubuntu3 (910 bytes)

file (5.11-2ubuntu2) raring; urgency=low

  * Allow the package to cross-build.
  * Configure with --disable-silent-rules.
 -- Matthias Klose <email address hidden>   Wed, 06 Mar 2013 18:05:17 +0800

Available diffs

• diff from 5.11-2ubuntu1 to 5.11-2ubuntu2 (923 bytes)

file (5.11-2ubuntu1) raring; urgency=low

  * Build a python3-magic package. Closes: #695259.
  * Recognize python3.3 byte code. Closes: #697110.
 -- Matthias Klose <email address hidden>   Sat, 12 Jan 2013 18:13:44 +0100

Available diffs

• diff from 5.11-2 (in Debian) to 5.11-2ubuntu1 (1.8 KiB)

file (5.11-2) unstable; urgency=low


  * Removing leading slash in debhelper install files.
  * Minimizing rules file.
  * Switching to xz compression.

 -- Daniel Baumann <email address hidden>  Sat, 30 Jun 2012 19:27:00 +0200

Available diffs

• diff from 5.11-1 to 5.11-2 (1.9 KiB)

file (5.11-1) unstable; urgency=low


  [ Judit Foglszinger ]
  * Merging upstream version 5.11.

  [ Daniel Baumann ]
  * Updating to debhelper version 9.
  * Removing uneeded versioned build-depends against dpkg-dev.
  * Updating to standards version 3.9.3.
  * Updating copyright file machine-readable format version 1.0.
  * Adding todo file.

 -- Daniel Baumann <email address hidden>  Sat, 17 Mar 2012 10:20:34 +0100

Available diffs

• diff from 5.09-2 (in Ubuntu) to 5.11-1 (31.1 KiB)

file (5.09-2) unstable; urgency=low

  * Adding build-arch and build-indep to rules.
  * Adding libmagic1 to depends of python-magic (Closes: #646004).
 -- Ubuntu Archive Auto-Sync <email address hidden>   Tue,  01 Nov 2011 10:32:43 +0000

Available diffs

• diff from 5.09-1 to 5.09-2 (723 bytes)

file (5.09-1) unstable; urgency=low

  [ Daniel Baumann ]
  * Removing pre-squeeze conflicts against file in libmagic1.
  * Removing pre-squeeze version from python build-depends.
  * Merging upstream version 5.09.

  [ Judit Foglszinger ]
  * Removing magic-add-lrf.patch, went upstream.
  * Renaming doc-manpages.patch.
 -- Ubuntu Archive Auto-Sync <email address hidden>   Thu,  20 Oct 2011 06:27:36 +0000

Available diffs

• diff from 5.08-1 (in Debian) to 5.09-1 (12.9 KiB)

file (5.08-1) unstable; urgency=low


  [ Judit Foglszinger ]
  * Merging upstream version 5.08 (Closes: #612742, #619225, #626340).

  [ Daniel Baumann ]
  * Adding patch from Sylvain Rabot <email address hidden> to add
    detection for shell scripts using /usr/bin/env in their shebang.
  * Removing magic-update-awk.patch, went upstream.
  * Removing magic-update-bash.patch, went upstream.
  * Removing magic-update-reiserfs.patch, went upstream.
  * Removing magic-update-tcsh.patch, went upstream.
  * Removing magic-update-zip.patch, went upstream.
  * Removing magic-update-real.patch, went upstream.
  * Removing magic-update-os2.patch, went upstream.
  * Removing magic-update-digifax.patch, went upstream.
  * Removing magic-update-mono.patch, went upstream.
  * Removing magic-update-pfm.patch, went upstream.
  * Removing magic-update-ocaml.patch, went upstream.
  * Removing magic-update-linuxswap.patch, went upstream.
  * Removing magic-update-linuxext.patch, went upstream.
  * Removing magic-update-llvm.patch, went upstream.
  * Removing magic-update-gimp.patch, went upstream.
  * Removing magic-update-wav.patch, went upstream.
  * Removing magic-update-z-machine.patch, went upstream.
  * Removing magic-update-xwd.patch, went upstream.
  * Removing magic-update-utf.patch, went upstream.
  * Removing magic-update-spectrum.patch, went upstream.
  * Removing magic-update-tgif.patch, went upstream.
  * Removing magic-update-truetype.patch, went upstream.
  * Removing magic-update-7zip.patch, went upstream.
  * Removing magic-update-lzma.patch, went upstream.
  * Removing magic-update-xz.patch, went upstream.
  * Removing magic-update-qemu.patch, went upstream.
  * Removing magic-update-psf2.patch, went upstream.
  * Removing magic-update-dyatic.patch, went upstream.
  * Removing magic-update-bio-rad.patch, went upstream.
  * Removing magic-update-icon.patch, went upstream.
  * Removing magic-add-par2.patch, went upstream.
  * Removing magic-add-pe5.patch, went upstream.
  * Removing magic-add-pdmenu.patch, went upstream.
  * Removing magic-add-powertab.patch, went upstream.
  * Removing magic-add-scummvm.patch, went upstream.
  * Removing magic-add-sgf.patch, went upstream.
  * Removing magic-add-sisu.patch, went upstream.
  * Removing magic-add-snes.patch, went upstream.
  * Removing magic-add-ssh.patch, went upstream.
  * Removing magic-add-ssl.patch, went upstream.
  * Removing magic-add-subversion.patch, went upstream.
  * Removing magic-add-supercollider.patch, went upstream.
  * Removing magic-add-xen.patch, went upstream.
  * Removing magic-add-xcursor.patch, went upstream.
  * Removing magic-add-freemind.patch, went upstream.

  [ Judit Foglszinger ]
  * Removing magic-add-qdbm.patch, went upstream.
  * Removing magic-add-tokyocabinet.patch, went upstream.
  * Removing magic-add-cromfs.patch, went upstream.
  * Removing magic-add-scribus.patch, went upstream.
  * Removing magic-add-selinux.patch, went upstream.
  * Removing magic-add-bzr.patch, went upstream.
  * Removing magic-add-git.patch, went upstream.
  * Removing magic-add-nut.patch, went upstream.
  * Removing magic-add-blcr.patch, went upstream.
  * Removing magic-add-lyx.patch, went upstream.
  * Removing magic-add-bacula.patch, went upstream.
  * Removing magic-add-olympus.patch, went upstream.
  * Removing magic-add-mdmp.patch, went upstream.
  * Removing magic-add-gstreamer.patch, went upstream.
  * Removing magic-add-xfsdump.patch, went upstream.
  * Removing magic-add-delta-iso.patch, went upstream.
  * Removing magic-add-delta-rpm.patch, went upstream.
  * Removing magic-add-avchd.patch, went upstream.
  * Removing magic-add-chiasmus.patch, went upstream.
  * Removing magic-add-hdr.patch, went upstream.
  * Removing magic-add-foveon-x3f.patch, went upstream.
  * Removing magic-add-paint-net.patch, went upstream.
  * Removing magic-add-dact.patch, went upstream.
  * Removing magic-add-datafork.patch, went upstream.
  * Removing magic-add-pdb.patch, went upstream.
  * Removing magic-add-gdsii.patch, went upstream.
  * Removing magic-add-canon.patch, went upstream.
  * Removing magic-add-jfs.patch, went upstream.
  * Removing magic-add-git-index.patch, went upstream.
  * Removing magic-add-erlang.patch, went upstream.
  * Removing magic-add-epub.patch, went upstream.
  * Removing magic-add-shebang.patch, went upstream.
  * Removing manpages-typo.patch, went upstream.
  * Removing manpages-typo2.patch, went upstream.
  * Removing manpages-typo3.patch, went upstream.
  * Removing file-coredump.patch, went upstream.
  * Updating file-localmagic.patch to apply cleanly after upstream
    changes.
  * Updating doc-manpages.patch to apply cleanly after upstream changes.
  * Removing conglomeration.patch, went upstream.
  * Removing file-python.patch, not needed anymore.
  * Removing unused lintian override.
  * Adding patch from Adam Buchbinder <email address hidden> to add
    new magic for BBeB ebooks (Closes: #624585).
  * Refusing to copy patchlevel.h in rules due to it's upstream removal.
  * Modifiing file-make.patch to apply after upstream changes.
  * Updating standards version to 3.9.2.
  * Adding patch from Julian Taylor <email address hidden> to
    switch from dh_pysupport to dh_python2 (Closes: #637149).

  [ Daniel Baumann ]
  * Updating to debhelper version 8.
  * Updating maintainer and uploaders fields.
  * Removing vcs fields.
  * Removing references to my old email address.
  * Switching to source format version 3.0 (quilt).
  * Also removing superfluous pycompat file.
  * Compacting copyright file.
  * Updating years in copyright file.
  * Renumbering remaining patches.

 -- Daniel Baumann <email address hidden>  Thu, 08 Sep 2011 18:24:15 +0200

file (5.04-5ubuntu3) oneiric; urgency=low

  * Switch to dh_python2.  (LP: #788514)
 -- Julian Taylor <email address hidden>   Mon, 08 Aug 2011 21:49:06 +0200

Available diffs

• diff from 5.04-5ubuntu2 to 5.04-5ubuntu3 (1005 bytes)

file (5.04-5ubuntu2) natty; urgency=low

  * Rebuild to add support for python 2.7.
 -- Matthias Klose <email address hidden>   Thu, 02 Dec 2010 23:59:46 +0000

Available diffs

• diff from 5.04-5ubuntu1 to 5.04-5ubuntu2 (310 bytes)

file (5.04-5ubuntu1) natty; urgency=low

  * Merge from debian unstable (LP: #668729), remaining changes:
    - Fix recognition of mime-type application/x-iso9660-image (LP: 458677):
      + add debian/patches/300-magic-fix-iso9660-image.patch
    - Fix bad tabs for OpenSSH DSA/RSA public keys (LP: 533553):
      + fix debian/patches/208-magic-add-ssh.patch

Available diffs

• diff from 5.03-5ubuntu1 to 5.04-5ubuntu1 (70.8 KiB)

file (5.03-5ubuntu1) lucid; urgency=low

  * Fix recognition of mime-type application/x-iso9660-image (LP: 458677)
    - add debian/patches/300-magic-fix-iso9660-image.patch
  * Fix bad tabs for OpenSSH DSA/RSA public keys (LP: 533553)
    - fix debian/patches/208-magic-add-ssh.patch
 -- TJ <email address hidden>   Sat, 6 Mar 2010 23:30:00 +0000

Available diffs

• diff from 5.03-5 to 5.03-5ubuntu1 (1.3 KiB)

file (5.03-5) unstable; urgency=low

  * Adding explicit debian source version 1.0 until switch to 3.0.
  * Updating setup.py calls in rules for python2.6 again, thanks to
    Jakub Wilk <email address hidden> (Closes: #555208).
 -- Bhavani Shankar <email address hidden>   Mon,  04 Jan 2010 19:45:32 +0000

Available diffs

• diff from 5.03-4ubuntu1 to 5.03-5 (1.1 KiB)

file (5.03-4ubuntu1) lucid; urgency=low

  * Add --install-layout=deb to Python install rules for dist-packages
    compatibility
 -- Scott Kitterman <email address hidden>   Tue, 22 Dec 2009 23:35:40 -0500

Available diffs

• diff from 5.03-4 to 5.03-4ubuntu1 (750 bytes)

file (5.03-4) unstable; urgency=low

  * Adding README.source.
  * Adding patch to add new magic for Lyx (Closes: #556194).
  * Adding patch from Adam Buchbinder <email address hidden> to add
    new magic for bacula volumes (Closes: #556981).
  * Adding patch from Adam Buchbinder <email address hidden> to add
    new magic for olympus orf files (Closes: #519305).
  * Adding patch from Josh Triplett <email address hidden> to add new
    magic for gstreamer binary registry files (Closes: #559117).
  * Adding patch from Daniel Novotny <email address hidden> to add new
    magic for MDMP crash report data files.
  * Adding patch from Daniel Novotny <email address hidden> to add update
    magic for postscript fonts.
  * Adding patch from Daniel Novotny <email address hidden> to add new
    magic for xfs dumps.
  * Adding patch from Daniel Novotny <email address hidden> to add new
    magic for ppc swapfiles.
  * Adding patch from Daniel Novotny <email address hidden> to add new
    magic for delta iso files.
  * Adding patch from Daniel Novotny <email address hidden> to add new
    magic for delta rpm files.
  * Adding patch from Alexander Danilov <email address hidden>
    to add new magic for AVCHD Clip Information files (Closes: #538847).
  * Adding patch to add new magic for Chiasmus (Closes: #540368).
  * Adding patch from Adam Buchbinder <email address hidden> to
    update magic for truetype collections (Closes: #545709).
  * Adding patch from Joerg Friedrich <email address hidden>
    to add support for all flags from magic.h in python-magic (Closes:
    #529354).
  * Adding patch from Adam Buchbinder <email address hidden> to add
    new magic for HDR formats (Closes: #520416).
  * Adding patch from Adam Buchbinder <email address hidden> to add
    new magic for Foveon X3F (Closes: #516800).
  * Adding patch from Adam Buchbinder <email address hidden> to add
    new magic for Paint.NET images (Closes: #504779).
  * Adding patch to add mime type for 7-zip files (Closes: #552742).
 -- Ubuntu Archive Auto-Sync <email address hidden>   Fri,  18 Dec 2009 08:42:57 +0000

Available diffs

• diff from 5.03-3 to 5.03-4 (5.5 KiB)

file (5.03-3) unstable; urgency=low

  * Updating tgif magic, thanks to Hugo Graumann <email address hidden>
    (Closes: #549601).
  * Enabling nut magic patch.
  * Correcting wrong vcs-browser field.
  * Updating setup.py calls in rules for python2.6, thanks to Piotr
    Ozarowski <email address hidden> (Closes: #555208).

Available diffs

• diff from 5.03-1ubuntu1 to 5.03-3 (3.1 KiB)

file (4.26-2ubuntu4) jaunty-proposed; urgency=low

  * 220-magic-update-erlang.dpatch: Escape spaces in Erlang magic to avoid
    misidentifications, particularly PostScript files produced on Tuesdays
    (LP: #248619).

 -- Colin Watson <email address hidden>   Thu, 04 Jun 2009 12:29:05 +0100

Available diffs

• diff from 4.26-2ubuntu3 to 4.26-2ubuntu4 (891 bytes)

file (4.24-4ubuntu1) intrepid-proposed; urgency=low

  * 213-magic-update-erlang.dpatch: Escape spaces in Erlang magic to avoid
    misidentifications, particularly PostScript files produced on Tuesdays
    (LP: #248619).

 -- Colin Watson <email address hidden>   Thu, 04 Jun 2009 13:16:12 +0100

Available diffs

• diff from 4.24-4 to 4.24-4ubuntu1 (923 bytes)

file (4.21-3ubuntu2) hardy-proposed; urgency=low

  * 307-magic-add-erlang.dpatch: Escape spaces in Erlang magic to avoid
    misidentifications, particularly PostScript files produced on Tuesdays
    (LP: #248619).

 -- Colin Watson <email address hidden>   Thu, 04 Jun 2009 13:12:19 +0100

Available diffs

• diff from 4.21-3ubuntu1 to 4.21-3ubuntu2 (1.0 KiB)

file (5.03-1ubuntu1) karmic; urgency=low

  * Merge from debian unstable, remaining changes:
    - call setup.py --install with --install-layout=deb
      (otherwise the build will end up in /usr/local/python2.6/dist-packages)

Available diffs

• diff from 5.02-1ubuntu1 to 5.03-1ubuntu1 (4.2 KiB)

file (5.02-1ubuntu1) karmic; urgency=low

  * Merge from debian unstable, remaining changes:
    - call setup.py --install with --install-layout=deb
      (otherwise the build will end up in /usr/local/python2.6/dist-packages)

Available diffs

• diff from 5.01-1ubuntu1 to 5.02-1ubuntu1 (5.5 KiB)

file (5.01-1ubuntu1) karmic; urgency=low

  * Merge from debian unstable, remaining changes:
    - call setup.py --install with --install-layout=deb
      (otherwise the build will end up in /usr/local/python2.6/dist-packages)
  * dropped, fixed upstream
    - debian/patches/342-magic-cafebabe.dpatch

Available diffs

• diff from 4.26-2ubuntu3 to 5.01-1ubuntu1 (222.6 KiB)

file (4.26-2ubuntu3) jaunty; urgency=low

  * No change rebuild.

 -- Matthias Klose <email address hidden>   Mon, 16 Mar 2009 18:18:21 +0100

Available diffs

• diff from 4.26-2ubuntu2 to 4.26-2ubuntu3 (281 bytes)

file (4.26-2ubuntu2) jaunty; urgency=low

  * Fix .class file detection. LP: #286492.

 -- Matthias Klose <email address hidden>   Wed, 11 Mar 2009 13:19:50 +0100

Available diffs

• diff from 4.26-2ubuntu1 to 4.26-2ubuntu2 (714 bytes)

file (4.26-2ubuntu1) jaunty; urgency=low

  * Build for python2.6.
  * Call setup.py --install with --install-layout=deb.

 -- Matthias Klose <email address hidden>   Mon, 23 Feb 2009 15:53:14 +0100

Available diffs

• diff from 4.26-2 to 4.26-2ubuntu1 (798 bytes)

file (4.26-2) unstable; urgency=medium

  * Using patch-stamp rather than patch in rules file.
  * Replacing obsolete dh_clean -k with dh_prep.
  * Adding patch from Toeroek Edwin <email address hidden> to update llvm magics
    (Closes: #505805).
  * Adding patch to add mime entries for ruby (Closes: #502201).
  * Adding patch from Ori Avtalion <email address hidden> to update gimp magics
    (Closes: #501200).
  * Corrected spelling of 'ScummVM' in magic-add-scummvm.dpatch.
  * Adding patch from Adam Buchbinder <email address hidden> to update wav
    magics (Closes: #508174).

 -- Ubuntu Archive Auto-Sync <email address hidden>   Wed,  10 Dec 2008 00:40:41 +0000

Available diffs

• diff from 4.26-1 to 4.26-2 (1.9 KiB)

file (4.26-1) unstable; urgency=low

  * Updating vcs fields in control file.
  * Merging upstream version 4.26.
  * Rediffing 903-file-localmagic.dpatch.

Available diffs

• diff from 4.24-4 to 4.26-1 (59.2 KiB)

file (4.24-4) unstable; urgency=high

  * Adding patch from Jelmer Vernooij <email address hidden> to add new
    magics for bzr (Closes: #488742).
  * Adding symlinks to /usr/share/misc to conform to the LSB, thanks to
    Matthias Klose <email address hidden>.
  * Adding zlibg1-dev to libmagic-dev depends (Closes: #472856).
  * Adding patch to revert upstream change to stop build plain magic
    files. This fixes #481247 correctly now (Closes: #481247).
  * Reverting previous wrong NMU.

Available diffs

• diff from 4.24-2ubuntu1 to 4.24-4 (9.6 KiB)

file (4.21-3ubuntu1) hardy-proposed; urgency=low

  * Add symlinks to /usr/share/misc to conform to the LSB (not just in spirit).
    LP: #217827.

 -- Matthias Klose <email address hidden>   Mon, 09 Jun 2008 12:04:13 +0200

Available diffs

• diff from 4.24-2ubuntu1 to 4.21-3ubuntu1 (283.6 KiB)

file (4.24-2ubuntu1) intrepid; urgency=low

  * Add symlinks to /usr/share/misc to conform to the LSB (not just in spirit).
    LP: #217827.

 -- Matthias Klose <email address hidden>   Mon, 09 Jun 2008 12:01:51 +0200

Available diffs

• diff from 4.24-2 to 4.24-2ubuntu1 (407 bytes)

file (4.24-2) unstable; urgency=medium

  * Adding plain magic files for compatibility.
  * Using lintian debhelper to install lintian overrides.
  * Removing watch file.
  * Removing useless whitespaces in changelog file.
  * Adding vcs fields in control file.
  * Upgrading package to debhelper 6.

file (4.23-2) unstable; urgency=low

  * Applied patch from Neil Williams <email address hidden> to add crossbuild
    support to debian/rules (Closes: #465111).

file (4.21-3) unstable; urgency=low

  * Including extra headers in /usr/include/file (Closes: #397307).
  * Added patch from Eduardo Sabbatella <email address hidden> to
    add magic for SGF Smart Game Format (Closes: #428605).
  * Added patch from Josh Triplett <email address hidden> to add magic for git
    bundles (Closes: #430070).
  * Added patch from Mathieu Malaterre <email address hidden> to extend
    JPEG 2000 magic (Closes: #439005).
  * Added patch from Daniele Sempione <email address hidden> to add magic for
    Microsoft Document Imaging Format (.mdi) (Closes: #430548).
  * Added patch from Nicolas Collignon <email address hidden> to add magics
    for OpenSSH and OpenSSL certificates/key files (Closes: #439537).

file (4.21-1) unstable; urgency=low

  * New upstream release.
  * Rediffed 211-magic-update-os2rexx.dpatch.
  * Removed 302-magic-add-ape.dpatch, went upstream.
  * Rediffed 304-magic-add-arm.dpatch.
  * Rediffed 317-magic-add-ocfs.dpatch.
  * Rediffed 318-magic-add-par2.dpatch.
  * Rediffed 322-magic-add-scummvm.dpatch.
  * Rediffed 325-magic-add-subversion.dpatch.
  * Rediffed 326-magic-add-supercollider.dpatch.
  * Rediffed 328-magic-add-xen.dpatch.
  * Removed 999-upstream-reg-startend.dpatch, now included in upstream.
  * Updated 905-file-segfault.dpatch.
  * Rediffed 999-conglomeration.dpatch.

file (4.19-1ubuntu2.1) feisty-security; urgency=low

  * SECURITY UPDATE: heap overflow allows arbitrary code execution.
  * src/funcs.c: upstream patch updated for more correct fix.
  * References
    CVE-2007-2799

 -- Kees Cook <email address hidden>   Mon, 11 Jun 2007 11:44:18 -0700

file (4.17-2ubuntu1.2) edgy-security; urgency=low

  * SECURITY UPDATE: heap overflow allows arbitrary code execution.
  * src/funcs.c: upstream patch updated for more correct fix.
  * References
    CVE-2007-2799

 -- Kees Cook <email address hidden>   Mon, 11 Jun 2007 11:44:18 -0700

file (4.16-0ubuntu3.2) dapper-security; urgency=low

  * SECURITY UPDATE: heap overflow allows arbitrary code execution.
  * src/funcs.c: upstream patch updated for more correct fix.
  * References
    CVE-2007-2799

 -- Kees Cook <email address hidden>   Mon, 11 Jun 2007 11:44:18 -0700

file (4.20-5ubuntu1) gutsy; urgency=low

  * Merge from debian unstable, remaining changes:
    - Build a python-magic-dbg package.
    - Set Ubuntu maintainer address.
  * Add 500-adjust-rexx.dpatch: work around regex DoS (CVE-2007-2026)

file (4.19-1ubuntu2) feisty; urgency=low

  * SECURITY UPDATE: heap overflow allows arbitrary code execution.
  * src/funcs.c: upstream patch for file_printf applied inline.
  * References
    CVE-2007-1536

 -- Kees Cook <email address hidden>   Tue, 20 Mar 2007 15:25:58 -0700

file (4.17-2ubuntu1.1) edgy-security; urgency=low

  * SECURITY UPDATE: heap overflow allows arbitrary code execution.
  * src/funcs.c: upstream patch for file_printf applied inline.
  * References
    CVE-2007-1536

 -- Kees Cook <email address hidden>   Tue, 20 Mar 2007 17:08:57 -0700

file (4.16-0ubuntu3.1) dapper-security; urgency=low

  * SECURITY UPDATE: heap overflow allows arbitrary code execution.
  * src/funcs.c: upstream patch for file_printf applied inline.
  * References
    CVE-2007-1536

 -- Kees Cook <email address hidden>   Tue, 20 Mar 2007 17:34:42 -0700

file (4.12-1ubuntu1.1) breezy-security; urgency=low

  * SECURITY UPDATE: heap overflow allows arbitrary code execution.
  * src/funcs.c: upstream patch for file_printf applied inline.
  * References
    CVE-2007-1536

 -- Kees Cook <email address hidden>   Tue, 20 Mar 2007 17:36:20 -0700

file (4.19-1ubuntu1) feisty; urgency=low

  * Build a python-magic-dbg package.
  * Set Ubuntu maintainer address.

 -- Matthias Klose <email address hidden>   Sun, 18 Feb 2007 16:04:22 +0100

file (4.19-1) unstable; urgency=low

  * New upstream version.
  * Use correct new URL to upstream now (closes: #406820)

 -- Matthias Klose <email address hidden>   Wed,  07 Feb 2007 11:59:02 +0000

file (4.17-5) unstable; urgency=high

  * Initialize some previously uninitialized memory, this could lead to a
    segmentation fault when using magic_compile in libmagic (closes: #403085)

 -- Ubuntu Archive Auto-Sync <email address hidden>   Wed,  20 Dec 2006 12:56:45 +0000

file (4.17-4) unstable; urgency=medium

  * Add proper depends for python-magic (fixes not yet filed serious bug)

file (4.17-2ubuntu1) edgy; urgency=low

  * Resynchronize with Debian unstable.

file (4.16-0ubuntu3) dapper; urgency=low

  * Drop python2.3 package.

 -- Matthias Klose <email address hidden>   Tue, 14 Feb 2006 16:39:25 +0000

file (4.16-0ubuntu2) dapper; urgency=low

  * Add magic for detecting compiled python 2.4 bits.
    (Malone #18325)

 -- Jeff Bailey <email address hidden>   Sat, 11 Feb 2006 08:33:38 -0500

file (4.16-0ubuntu1) dapper; urgency=low


  * New upstream version.

 -- Matthias Klose <email address hidden>  Thu, 19 Jan 2006 16:42:00 +0000

file (4.15-2) unstable; urgency=low


  * Add Build-Depends to python, although I really don’t see the point of the
    python package (since file Build-Depended transitively on python2.3
    anyway), which claims to be a dependency package only (closes: #333859)
  * Disabled EMF detection as it not only caused false positives, which might
    have been acceptible, but a segmentation fault (closes: #333502)
  * Move the magic databases from /usr/share/misc/file to /usr/share/file;
    this still violates the FHS in letter, but not in spirit; this is
    different from the position in other distros (closes: #215139, #278478)

 -- Michael Piefel <email address hidden>  Fri, 14 Oct 2005 16:01:54 +0200

file (4.12-1ubuntu1) breezy; urgency=low


  * Fix misrecognition of bzip2'd .debs as gzip.  (Also reported upstream
    and to Debian BTS; Debian bug number still pending.)

 -- Ian Jackson <email address hidden>  Fri, 16 Sep 2005 13:32:30 +0100

file (4.12-1) unstable; urgency=high


  * New upstream version. Closes: #283316, a potential stack smash in ELF
    header parsing. Urgency set to high.
  * /etc/magic is read, as it should (Closes: #279324)
  * No further changes to increase the slim chance of getting into Sarge.

 -- Michael Piefel <email address hidden>  Mon, 06 Dec 2004 10:42:47 +0100

file (4.09-1) unstable; urgency=low


  * New upstream version. This includes almost every patch that the Debian
    version had, so this package is very close to upstream's.
  * Disable some more Apple magic (closes: #231476); curiously, most of the
    Apple magic is very weak.
  * Disable very weak Assembler magic (closes: #223328)
  * Disable weak AWK magic (closes: #223282)
  * Added DjVu magic (closes: #238570)
  * Removed erroneous 5th column in magic.mime (closes: #246428)
  * Better error report messages in two places (closes: #243446, #252951)
  * Use /etc/magic again (failed to touch Makefile.in, closes: #231306)

 -- Michael Piefel <email address hidden>  Fri, 11 Jun 2004 14:35:30 +0200