Change log : wavpack package : Ubuntu

5.6.0-1build1

Superseded in oracular-release on 2024-05-04

Published in noble-release on 2024-04-17

Deleted in noble-proposed (Reason: Moved to noble)

wavpack (5.6.0-1build1) noble; urgency=high

  * No change rebuild for 64-bit time_t and frame pointers.

 -- Julian Andres Klode <email address hidden>  Mon, 08 Apr 2024 18:21:52 +0200

Available diffs

diff from 5.6.0-1 (in Debian) to 5.6.0-1build1 (569 bytes)

5.7.0-1

Published in oracular-release on 2024-05-04

Deleted in oracular-proposed (Reason: Moved to oracular)

wavpack (5.7.0-1) unstable; urgency=medium

  * New upstream version 5.7.0
  * debian/control: Bump Standards-Version
  * debian/copyright: Update copyright years

 -- Sebastian Ramacher <email address hidden>  Tue, 05 Mar 2024 21:31:49 +0100

Available diffs

diff from 5.6.0-1build1 (in Ubuntu) to 5.7.0-1 (174.5 KiB)

5.6.0-1

Superseded in noble-release on 2024-04-17

Published in mantic-release on 2023-04-25

Published in lunar-release on 2022-12-03

Deleted in lunar-proposed (Reason: Moved to lunar)

wavpack (5.6.0-1) unstable; urgency=medium

  * New upstream version 5.6.0

 -- Sebastian Ramacher <email address hidden>  Fri, 02 Dec 2022 21:49:01 +0100

Available diffs

diff from 5.5.0-1 to 5.6.0-1 (35.2 KiB)

5.5.0-1

Superseded in lunar-release on 2022-12-03

Obsolete in kinetic-release on 2023-11-13

Deleted in kinetic-proposed (Reason: Moved to kinetic)

wavpack (5.5.0-1) unstable; urgency=medium

  * New upstream version 5.5.0
    - Fix out-of-bounds read (CVE-2021-44269)
  * debian/control: Bump Standards-Version
  * debian/copyright: Bump copyright years
  * debian/libwavpack-dev.install: No longer install static library
  * debian/rules: Build with --disable-rpath

 -- Sebastian Ramacher <email address hidden>  Wed, 13 Jul 2022 10:33:29 +0200

Available diffs

diff from 5.4.0-1build2 (in ~ci-train-ppa-service/ubuntu/4816-deletedppa) to 5.5.0-1 (257.9 KiB)

5.4.0-1build2

Superseded in kinetic-release on 2022-07-15

Published in jammy-release on 2022-04-02

Deleted in jammy-proposed (Reason: Moved to jammy)

wavpack (5.4.0-1build2) jammy; urgency=high

  * No change rebuild for ppc64el baseline bump.

 -- Julian Andres Klode <email address hidden>  Fri, 25 Mar 2022 10:53:17 +0100

Available diffs

diff from 5.4.0-1build1 (in Ubuntu) to 5.4.0-1build2 (585 bytes)

5.4.0-1build1

Superseded in jammy-release on 2022-04-02

Obsolete in impish-release on 2022-07-23

Deleted in impish-proposed (Reason: Moved to impish)

wavpack (5.4.0-1build1) impish; urgency=medium

  * No-change rebuild to build packages with zstd compression.

 -- Matthias Klose <email address hidden>  Thu, 07 Oct 2021 12:26:18 +0200

Available diffs

diff from 5.4.0-1 (in Debian) to 5.4.0-1build1 (320 bytes)

5.4.0-1

Superseded in impish-release on 2021-10-11

Obsolete in hirsute-release on 2022-07-23

Deleted in hirsute-proposed on 2022-07-24 (Reason: moved to Release)

wavpack (5.4.0-1) unstable; urgency=medium

  * New upstream release
  * debian/patches: Drop patches integrated upstream

 -- Sebastian Ramacher <email address hidden>  Wed, 20 Jan 2021 21:40:02 +0100

Available diffs

diff from 5.3.0-2 to 5.4.0-1 (229.0 KiB)

5.3.0-1ubuntu0.1

Obsolete in groovy-updates on 2021-12-22

Obsolete in groovy-security on 2021-12-22

wavpack (5.3.0-1ubuntu0.1) groovy-security; urgency=medium

  * SECURITY UPDATE: Out-of-bounds write
    - debian/patches/CVE-2020-35738.patch: checks bounds
      in order to avoid/fix integer overflows resulting in buffer
      overruns in src/pack_utils.c.
    - CVE-2020-35738

 -- Leonidas Da Silva Barbosa <email address hidden>  Tue, 05 Jan 2021 11:23:12 -0300

Available diffs

diff from 5.3.0-1 (in Debian) to 5.3.0-1ubuntu0.1 (1.4 KiB)

5.2.0-1ubuntu0.1

Published in focal-updates on 2021-01-06

Published in focal-security on 2021-01-06

wavpack (5.2.0-1ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: Out-of-bounds write
    - debian/patches/CVE-2020-35738.patch: checks bounds
      in order to avoid/fix integer overflows resulting in buffer
      overruns in src/pack_utils.c.
    - CVE-2020-35738

 -- Leonidas Da Silva Barbosa <email address hidden>  Tue, 05 Jan 2021 10:55:22 -0300

Available diffs

diff from 5.2.0-1 (in Debian) to 5.2.0-1ubuntu0.1 (1.4 KiB)

5.1.0-2ubuntu1.5

Published in bionic-updates on 2021-01-06

Published in bionic-security on 2021-01-06

wavpack (5.1.0-2ubuntu1.5) bionic-security; urgency=medium

  * SECURITY UPDATE: Out-of-bounds write
    - debian/patches/CVE-2020-35738.patch: checks bounds
      in order to avoid/fix integer overflows resulting in buffer
      overruns in src/pack_utils.c.
    - CVE-2020-35738

 -- Leonidas Da Silva Barbosa <email address hidden>  Tue, 05 Jan 2021 10:32:02 -0300

Available diffs

diff from 5.1.0-2ubuntu1.4 to 5.1.0-2ubuntu1.5 (1.3 KiB)

5.3.0-2

Superseded in hirsute-release on 2021-01-21

Deleted in hirsute-proposed on 2021-01-23 (Reason: moved to Release)

wavpack (5.3.0-2) unstable; urgency=medium

  * debian/control: Bump Standards-Version
  * debian/: Bump debhelper compat to 13
  * debian/patches: Add upstream patches for CVE-2020-35738 (Closes: #978548)

 -- Sebastian Ramacher <email address hidden>  Wed, 30 Dec 2020 10:40:48 +0100

Available diffs

diff from 5.3.0-1 to 5.3.0-2 (1.5 KiB)

5.3.0-1

Superseded in hirsute-release on 2021-01-04

Obsolete in groovy-release on 2021-12-22

Deleted in groovy-proposed on 2022-07-23 (Reason: moved to Release)

wavpack (5.3.0-1) unstable; urgency=medium

  [ Debian Janitor ]
  * Set upstream metadata fields: Bug-Database, Bug-Submit, Repository,
    Repository-Browse.

  [ Sebastian Ramacher ]
  * New upstream release
  * debian/control: Bump Standards-Version

 -- Sebastian Ramacher <email address hidden>  Tue, 21 Apr 2020 22:25:00 +0200

Available diffs

diff from 5.2.0-1 to 5.3.0-1 (17.2 KiB)

5.2.0-1

Superseded in groovy-release on 2020-04-30

Published in focal-release on 2020-01-06

Deleted in focal-proposed (Reason: moved to Release)

wavpack (5.2.0-1) unstable; urgency=medium

  [ Ondřej Nový ]
  * Bump Standards-Version to 4.4.1

  [ Sebastian Ramacher ]
  * New upstream version 5.2.0
  * debian/rules: Override with new changelog path
  * debian/patches: Remove all patches, all included upstream
  * debian/control: Set RRR: no

 -- Sebastian Ramacher <email address hidden>  Tue, 31 Dec 2019 09:46:04 +0100

Available diffs

diff from 5.1.0-7 to 5.2.0-1 (106.2 KiB)

5.1.0-5ubuntu0.2

Obsolete in disco-updates on 2020-07-14

Obsolete in disco-security on 2020-07-14

wavpack (5.1.0-5ubuntu0.2) disco-security; urgency=medium

  * debian/0009-issue-41-make-sure-DFF-does-not*.patch: make sure
    DFF chunk does not have negative length.
  * debian/patches/0010-issue-43-catch-zero*.patch: catch zero
    channel count in DSF and DSDIFF files.
  * SECURITY UPDATE: Crash due a divide by zero
    - debian/patches/CVE-2019-1010315.patch: make sure DSDIFF files
      have a valid channel count in cli/dsdiff.c.
    - CVE-2019-1010315
  * SECURITY UPDATE: Crashes and segfaults
    - debian/patches/CVE-2019-1010317.patch: make sure CAF files
      have a "desc" chunk in cli/caff.c.
    - CVE-2019-1010317
  * SECURITY UPDATE: Crashes and segfaults
    - debian/patches/CVE-2019-1010318.patch: make sure sample rate is
      specified and non-zero in DFF files in cli/dsdiff.c.
    - CVE-2019-1010318
  * SECURITY UPDATE: Crashes and segfaults
    - debian/patches/CVE-2019-1010319.patch: clear WaveHeader at start
      to prevent uninitialized read in cli/wave64.c.
    - CVE-2019-1010319

 -- <email address hidden> (Leonidas S. Barbosa)  Mon, 15 Jul 2019 15:45:37 -0300

Available diffs

diff from 5.1.0-5ubuntu0.1 to 5.1.0-5ubuntu0.2 (2.8 KiB)

5.1.0-2ubuntu1.4

Superseded in bionic-updates on 2021-01-06

Superseded in bionic-security on 2021-01-06

wavpack (5.1.0-2ubuntu1.4) bionic-security; urgency=medium

  * debian/0009-issue-41-make-sure-DFF-does-not*.patch: make sure
    DFF chunk does not have negative length.
  * debian/patches/0010-issue-43-catch-zero*.patch: catch zero
    channel count in DSF and DSDIFF files.
  * SECURITY UPDATE: Crash due a divide by zero
    - debian/patches/CVE-2019-1010315.patch: make sure DSDIFF files
      have a valid channel count in cli/dsdiff.c.
    - CVE-2019-1010315
  * SECURITY UPDATE: Crashes and segfaults
    - debian/patches/CVE-2019-1010317.patch: make sure CAF files
      have a "desc" chunk in cli/caff.c.
    - CVE-2019-1010317
  * SECURITY UPDATE: Crashes and segfaults
    - debian/patches/CVE-2019-1010318.patch: make sure sample rate is
      specified and non-zero in DFF files in cli/dsdiff.c.
    - CVE-2019-1010318
  * SECURITY UPDATE: Crashes and segfaults
    - debian/patches/CVE-2019-1010319.patch: clear WaveHeader at start
      to prevent uninitialized read in cli/wave64.c.
    - CVE-2019-1010319

 -- <email address hidden> (Leonidas S. Barbosa)  Tue, 16 Jul 2019 09:04:50 -0300

Available diffs

diff from 5.1.0-2ubuntu1.3 to 5.1.0-2ubuntu1.4 (2.8 KiB)

5.1.0-7

Superseded in focal-release on 2020-01-06

Obsolete in eoan-release on 2020-12-29

Deleted in eoan-proposed on 2020-12-29 (Reason: moved to release)

wavpack (5.1.0-7) unstable; urgency=medium

  * debian/patches: Cherry-pick upstream patches to fix use of uninitialized
    values. (CVE-2019-1010317, CVE-2019-1010319) (Closes: #932060, #932061)
  * debian/: Bump debhelper compat to 12.
  * debian/control: Bump Standards-Version.

 -- Sebastian Ramacher <email address hidden>  Sun, 14 Jul 2019 21:10:51 +0200

Available diffs

diff from 5.1.0-6 to 5.1.0-7 (2.3 KiB)

5.1.0-2ubuntu1.3

Superseded in bionic-updates on 2019-07-16

Superseded in bionic-security on 2019-07-16

wavpack (5.1.0-2ubuntu1.3) bionic-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2019-11498.patch: make sure sample rate variable
      is specified and non-zero in DFF files in cli/dsdiff.c.
    - CVE-2019-11498

 -- <email address hidden> (Leonidas S. Barbosa)  Mon, 29 Apr 2019 11:43:20 -0300

Available diffs

diff from 5.1.0-2ubuntu1.2 to 5.1.0-2ubuntu1.3 (1.1 KiB)

5.1.0-4ubuntu0.2

Obsolete in cosmic-updates on 2020-07-13

Obsolete in cosmic-security on 2020-07-13

wavpack (5.1.0-4ubuntu0.2) cosmic-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2019-11498.patch: make sure sample rate variable
      is specified and non-zero in DFF files in cli/dsdiff.c.
    - CVE-2019-11498

 -- <email address hidden> (Leonidas S. Barbosa)  Mon, 29 Apr 2019 11:42:32 -0300

Available diffs

diff from 5.1.0-4ubuntu0.1 to 5.1.0-4ubuntu0.2 (1.1 KiB)

5.1.0-5ubuntu0.1

Superseded in disco-updates on 2019-07-16

Superseded in disco-security on 2019-07-16

wavpack (5.1.0-5ubuntu0.1) disco-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2019-11498.patch: make sure sample rate variable
      is specified and non-zero in DFF files in cli/dsdiff.c.
    - CVE-2019-11498

 -- <email address hidden> (Leonidas S. Barbosa)  Mon, 29 Apr 2019 11:39:34 -0300

Available diffs

diff from 5.1.0-5 (in Debian) to 5.1.0-5ubuntu0.1 (1.4 KiB)

5.1.0-6

Superseded in eoan-release on 2019-07-15

Deleted in eoan-proposed on 2019-07-16 (Reason: moved to release)

wavpack (5.1.0-6) unstable; urgency=medium

  * debian/patches: Cherry-pick upstream patches to fix use of uninitialized
    values. (CVE-2019-11498) (Closes: #927903)

 -- Sebastian Ramacher <email address hidden>  Sun, 28 Apr 2019 23:30:18 +0200

Available diffs

diff from 5.1.0-5 to 5.1.0-6 (2.0 KiB)

5.1.0-4ubuntu0.1

Superseded in cosmic-updates on 2019-04-30

Superseded in cosmic-security on 2019-04-30

wavpack (5.1.0-4ubuntu0.1) cosmic-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2018-19840.patch: checking
      if sample_rate is not zero in src/pack_utils.c.
    - CVE-2018-19840
  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2018-19841.patch: fix in
      src/open_utils.c.

 -- <email address hidden> (Leonidas S. Barbosa)  Thu, 06 Dec 2018 08:57:02 -0300

Available diffs

diff from 5.1.0-4 (in Debian) to 5.1.0-4ubuntu0.1 (1.6 KiB)

5.1.0-2ubuntu1.2

Superseded in bionic-updates on 2019-04-30

Superseded in bionic-security on 2019-04-30

wavpack (5.1.0-2ubuntu1.2) bionic-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2018-19840.patch: checking
      if sample_rate is not zero in src/pack_utils.c.
    - CVE-2018-19840
  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2018-19841.patch: fix in
      src/open_utils.c.

 -- <email address hidden> (Leonidas S. Barbosa)  Thu, 06 Dec 2018 08:47:38 -0300

Available diffs

4.75.2-2ubuntu0.2

Published in xenial-updates on 2018-12-06

Published in xenial-security on 2018-12-06

wavpack (4.75.2-2ubuntu0.2) xenial-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2018-19840.patch: checking
      if sample_rate is not zero in src/pack_utils.c and
      removing register keyword in src/read_words.c.
    - CVE-2018-19840

 -- <email address hidden> (Leonidas S. Barbosa)  Wed, 05 Dec 2018 16:51:11 -0300

Available diffs

4.70.0-1ubuntu0.2

Published in trusty-updates on 2018-12-06

Published in trusty-security on 2018-12-06

wavpack (4.70.0-1ubuntu0.2) trusty-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2018-19840.patch: checking
      if sample_rate is not zero in src/wputils.c and
      removing register keyword in src/read_words.c.
    - CVE-2018-19840

 -- <email address hidden> (Leonidas S. Barbosa)  Wed, 05 Dec 2018 15:14:37 -0300

Available diffs

5.1.0-5

Superseded in eoan-release on 2019-04-29

Obsolete in disco-release on 2020-07-14

Deleted in disco-proposed on 2020-07-14 (Reason: moved to release)

wavpack (5.1.0-5) unstable; urgency=medium

  * debian/control: Bump Standards-Version.
  * debian/patches: Cherry-pick upstream patches for multiple CVEs
    (CVE-2018-19840, CVE-2018-19841). (Closes: #915564, #915565)

 -- Sebastian Ramacher <email address hidden>  Wed, 05 Dec 2018 09:43:52 +0100

Available diffs

diff from 5.1.0-4 to 5.1.0-5 (1.5 KiB)

5.1.0-4

Superseded in disco-release on 2018-12-05

Obsolete in cosmic-release on 2020-07-13

Deleted in cosmic-proposed on 2020-07-13 (Reason: moved to release)

wavpack (5.1.0-4) unstable; urgency=medium

  * debian/control:
    - Remove old Pre-Depends.
    - Add myself to Uploaders.
    - Bump Standards-Version.
  * debian/copyright: Convert to CF-1.0.
  * debian/:
    - Convert to dh.
    - Bump debhelper compat level to 11.
  * debian/watch: Update to version 4.
  * debian/rules: Build with all hardening options enabled.

 -- Sebastian Ramacher <email address hidden>  Sat, 28 Jul 2018 17:53:07 +0200

Available diffs

diff from 5.1.0-3 to 5.1.0-4 (3.2 KiB)

5.1.0-3

Superseded in cosmic-release on 2018-07-29

Deleted in cosmic-proposed on 2018-07-30 (Reason: moved to release)

wavpack (5.1.0-3) unstable; urgency=medium

  [ Ondřej Nový ]
  * d/control: Set Vcs-* to salsa.debian.org
  * d/rules: Remove trailing whitespaces

  [ Felipe Sateler ]
  * Change maintainer address to <email address hidden>

  [ Sebastian Ramacher ]
  * debian/control: Bump Standards-Version.
  * debian/patches:
    - Cherry-pick upstream patches for multiple CVEs (CVE-2018-7254,
      CVE-2018-7253, CVE-2018-6767, CVE-2018-10540, CVE-2018-10539,
      CVE-2018-10538, CVE-2018-10537, CVE-2018-10536). (Closes: #889274,
      #889276, #889559, #897271)
    - Fix a memory leak.

 -- Sebastian Ramacher <email address hidden>  Tue, 01 May 2018 09:52:12 +0200

Available diffs

diff from 5.1.0-2ubuntu1.1 (in ~ubuntu-security/ubuntu/ppa) to 5.1.0-3 (6.6 KiB)

5.1.0-2ubuntu1.1

Superseded in cosmic-release on 2018-05-09

Deleted in cosmic-proposed on 2018-12-07 (Reason: moved to release)

Superseded in bionic-updates on 2018-12-06

Superseded in bionic-security on 2018-12-06

wavpack (5.1.0-2ubuntu1.1) bionic-security; urgency=medium

  * SECURITY UPDATE: Writing to memory vulnerability in wav64 and riff
    - debian/patches/CVE-2018-10536-and-10537.patch: fixing in cli/riff.c,
      cli/wave64.c.
    - CVE-2018-10536
    - CVE-2018-10537
  * SECURITY UPDATE: Out-of-bounds writes in riff, DSDiff and W64
    - debian/patches/CVE-2018-10538-and-10539-and-10540.patch: sanitize
      size of unknown chunks before malloc in cli/dsdiff.c, cli/riff.c,
      cli/wave64.c.
    - CVE-2018-10538
    - CVE-2018-10539
    - CVE-2018-10540

 -- <email address hidden> (Leonidas S. Barbosa)  Mon, 30 Apr 2018 15:53:18 -0300

Available diffs

diff from 5.1.0-2ubuntu1 (in Ubuntu) to 5.1.0-2ubuntu1.1 (1.9 KiB)

5.1.0-2ubuntu0.3

Obsolete in artful-updates on 2020-07-10

Obsolete in artful-security on 2020-07-10

wavpack (5.1.0-2ubuntu0.3) artful-security; urgency=medium

  * SECURITY UPDATE: Writing to memory vulnerability in wav64 and riff
    - debian/patches/CVE-2018-10536-and-10537.patch: fixing in cli/riff.c,
      cli/wave64.c.
    - CVE-2018-10536
    - CVE-2018-10537
  * SECURITY UPDATE: Out-of-bounds writes in riff, DSDiff and W64
    - debian/patches/CVE-2018-10538-and-10539-and-10540.patch: sanitize
      size of unknown chunks before malloc in cli/dsdiff.c, cli/riff.c,
      cli/wave64.c.
    - CVE-2018-10538
    - CVE-2018-10539
    - CVE-2018-10540

 -- <email address hidden> (Leonidas S. Barbosa)  Mon, 30 Apr 2018 15:37:17 -0300

Available diffs

diff from 5.1.0-2ubuntu0.2 to 5.1.0-2ubuntu0.3 (1.9 KiB)

5.1.0-2ubuntu1

Superseded in cosmic-release on 2018-05-03

Published in bionic-release on 2018-02-23

Deleted in bionic-proposed (Reason: moved to release)

wavpack (5.1.0-2ubuntu1) bionic; urgency=medium

  * SECURITY UPDATE: stack-based buffer overr-read
    - debian/patches/CVE-2018-6767.patch: do not overwrite
      stack on corrupt RF64 file in cli/riff.c.
    - CVE-2018-6767
  * SECURITY UPDATE: Maliciously crafted DSDIFF can result
    in a denial of service
    - debian/patches/CVE-2018-7253.patch: do not overwrite
      heap on corrupt DSDIFF file in cli/dsdiff.c
    - CVE-2018-7253
  * SECURITY UPDATE: Denial of service through maliciously
    crafted CAF file
    - debian/patches/CVE-2018-7254.patch: fix buffer overflows
      and bad allocs in cli/caff.c.
    - CVE-2018-7254

 -- <email address hidden> (Leonidas S. Barbosa)  Thu, 22 Feb 2018 12:13:50 -0300

Available diffs

diff from 5.1.0-2 (in Debian) to 5.1.0-2ubuntu1 (3.3 KiB)

5.1.0-2ubuntu0.2

Superseded in artful-updates on 2018-04-30

Superseded in artful-security on 2018-04-30

wavpack (5.1.0-2ubuntu0.2) artful-security; urgency=medium

  * SECURITY UPDATE: Maliciously crafted DSDIFF can result
    in a denial of service
    - debian/patches/CVE-2018-7253.patch: do not overwrite
      heap on corrupt DSDIFF file in cli/dsdiff.c
    - CVE-2018-7253
  * SECURITY UPDATE: Denial of service through maliciously
    crafted CAF file
    - debian/patches/CVE-2018-7254.patch: fix buffer overflows
      and bad allocs in cli/caff.c.
    - CVE-2018-7254

 -- <email address hidden> (Leonidas S. Barbosa)  Wed, 21 Feb 2018 10:43:42 -0300

Available diffs

diff from 5.1.0-2ubuntu0.1 to 5.1.0-2ubuntu0.2 (1.8 KiB)

4.75.2-2ubuntu0.1

Superseded in xenial-updates on 2018-12-06

Superseded in xenial-security on 2018-12-06

wavpack (4.75.2-2ubuntu0.1) xenial-security; urgency=medium

  * SECURITY UPDATE: Denial of service via crafted WV file
    - debian/patches/CVE-2016-10169.patch: fix in words.c.
    - CVE-2016-10169

 -- <email address hidden> (Leonidas S. Barbosa)  Mon, 12 Feb 2018 11:33:50 -0300

Available diffs

diff from 4.75.2-2 (in Debian) to 4.75.2-2ubuntu0.1 (1.1 KiB)

4.70.0-1ubuntu0.1

Superseded in trusty-updates on 2018-12-06

Superseded in trusty-security on 2018-12-06

wavpack (4.70.0-1ubuntu0.1) trusty-security; urgency=medium

  * SECURITY UPDATE: Denial of service via crafted WV file
    - debian/patches/CVE-2016-10169.patch: fix in words.c.
    - CVE-2016-10169

 -- <email address hidden> (Leonidas S. Barbosa)  Mon, 12 Feb 2018 09:43:33 -0300

Available diffs

diff from 4.70.0-1 (in Debian) to 4.70.0-1ubuntu0.1 (1.1 KiB)

5.1.0-2ubuntu0.1

Superseded in artful-updates on 2018-02-22

Superseded in artful-security on 2018-02-22

wavpack (5.1.0-2ubuntu0.1) artful-security; urgency=medium

  * SECURITY UPDATE: stack-based buffer overr-read
    - debian/patches/CVE-2018-6767.patch: do not overwrite
      stack on corrupt RF64 file in cli/riff.c.
    - CVE-2018-6767

 -- <email address hidden> (Leonidas S. Barbosa)  Mon, 12 Feb 2018 09:18:17 -0300

Available diffs

diff from 5.1.0-2 (in Debian) to 5.1.0-2ubuntu0.1 (2.2 KiB)

5.1.0-2

Superseded in bionic-release on 2018-02-23

Obsolete in artful-release on 2020-07-10

Deleted in artful-proposed on 2020-07-10 (Reason: moved to release)

wavpack (5.1.0-2) unstable; urgency=medium

  * Bump Standards-Version to 4.0.0.
  * Drop myself from Uploaders.

 -- Loïc Minier <email address hidden>  Sun, 09 Jul 2017 21:32:49 +0200

Available diffs

diff from 5.1.0-1 to 5.1.0-2 (611 bytes)

5.1.0-1

Superseded in artful-release on 2017-07-10

Deleted in artful-proposed on 2017-07-11 (Reason: moved to release)

wavpack (5.1.0-1) unstable; urgency=medium

  * Team upload.
  * New upstream release.
  * debian/patches: Removed patches included upstream.
  * debian/copyright: Update copyright years.

 -- Sebastian Ramacher <email address hidden>  Thu, 15 Jun 2017 12:59:20 +0200

Available diffs

diff from 5.0.0-2 to 5.1.0-1 (37.2 KiB)

5.0.0-2

Superseded in artful-release on 2017-06-20

Obsolete in zesty-release on 2018-06-22

Deleted in zesty-proposed on 2018-06-22 (Reason: moved to release)

wavpack (5.0.0-2) unstable; urgency=medium

  * Team upload.
  * debian/patches: Apply upstream fix to fix some fuzz failures
    (CVE-2016-10169, CVE-2016-10170, CVE-2016-10171, CVE-2016-10172). (Closes:
    #853076)

 -- Sebastian Ramacher <email address hidden>  Mon, 30 Jan 2017 21:04:05 +0100

Available diffs

diff from 5.0.0-1 to 5.0.0-2 (1.2 KiB)

5.0.0-1

Superseded in zesty-release on 2017-01-31

Deleted in zesty-proposed on 2017-02-01 (Reason: moved to release)

wavpack (5.0.0-1) unstable; urgency=medium

  * Team upload.
  * New upstream release.
  * debian/libwavpack1.symbols: Add new symbols.
  * debian/copyright: Update copyright information.
  * debian/control: Bump Standards-Version.

 -- Sebastian Ramacher <email address hidden>  Mon, 02 Jan 2017 13:56:51 +0100

Available diffs

diff from 4.80.0-1 to 5.0.0-1 (148.0 KiB)

4.80.0-1

Superseded in zesty-release on 2017-01-02

Obsolete in yakkety-release on 2018-01-23

Deleted in yakkety-proposed on 2018-01-23 (Reason: moved to release)

wavpack (4.80.0-1) unstable; urgency=medium

  * Team upload.
  * New upstream release.
  * debian/patches/mark-stack-non-executable.patch: Removed, included
    upstream.
  * debian/control:
    - Bump Standards-Version, no changes needed.
    - Update Vcs-*.

 -- Sebastian Ramacher <email address hidden>  Tue, 05 Apr 2016 21:47:45 +0200

Available diffs

diff from 4.75.2-2 to 4.80.0-1 (93.6 KiB)

4.75.2-2

Superseded in yakkety-release on 2016-04-29

Published in xenial-release on 2016-01-18

Deleted in xenial-proposed (Reason: moved to release)

wavpack (4.75.2-2) unstable; urgency=medium

  * Team upload.
  * debian/rules:
    - No longer pass --enable-mmx on amd64. It was removed.
    - Pass --disable-asm on armel and armhf to fix FTBFS.

 -- Sebastian Ramacher <email address hidden>  Sun, 17 Jan 2016 17:39:03 +0100

Available diffs

diff from 4.75.0-1 to 4.75.2-2 (53.4 KiB)
diff from 4.75.2-1 to 4.75.2-2 (531 bytes)

4.75.2-1

Superseded in xenial-proposed on 2016-01-17

wavpack (4.75.2-1) unstable; urgency=medium

  * Team upload.
  * New upstream release.
  * debian/patches/mark-stack-non-executable.patch: Mark stack as
    non-executable. Thanks to Russell Coker for the patch. (Closes: #793320)
  * debian/control: Remove ${shlibs:Depends} from libwavpack-dev's Depends.

 -- Sebastian Ramacher <email address hidden>  Sun, 17 Jan 2016 13:39:23 +0100

4.75.0-1

Superseded in xenial-release on 2016-01-18

Obsolete in wily-release on 2018-01-22

Deleted in wily-proposed on 2018-01-22 (Reason: moved to release)

wavpack (4.75.0-1) unstable; urgency=medium

  * Team upload.
  * New upstream release:
    - improved: reorganization for modularity and to improve linking
    - added: assembler optimizations for encode/decode on x86 and x64
    - added: assembler optimizations for decoding on ARMv7 (Linux)
    - improved: several minor speed optimizations using intrinsics
    - fixed: wavpack.pc.in not working correctly on some Linux distros
    - fixed: memcpy() issue causing abort() on OpenBSD
  * Touch Standards-Version

 -- Alessio Treglia <email address hidden>  Wed, 10 Jun 2015 19:17:14 +0100

Available diffs

diff from 4.70.0-1 to 4.75.0-1 (264.8 KiB)

4.70.0-1

Superseded in wily-release on 2015-06-11

Obsolete in vivid-release on 2018-01-18

Obsolete in utopic-release on 2016-11-03

Published in trusty-release on 2013-11-01

Deleted in trusty-proposed (Reason: moved to release)

wavpack (4.70.0-1) unstable; urgency=low


  * New upstream release:
    + debian/patches/0001-pkgconfig.patch,
      debian/patches/0002-largefile.patch:
      - Drop patches that were merged upstream.

 -- Sebastian Dröge <email address hidden>  Thu, 31 Oct 2013 16:47:06 +0100

Available diffs

diff from 4.60.1-3 to 4.70.0-1 (590.7 KiB)

4.60.1-3

Superseded in trusty-release on 2013-11-01

Obsolete in saucy-release on 2015-04-24

Obsolete in raring-release on 2015-04-24

Obsolete in quantal-release on 2015-04-24

wavpack (4.60.1-3) unstable; urgency=low


  * Team upload.
  * Check for large files support on 32-bit systems too.
    Thanks to Frank Lübeck for the report. (Closes: #666340)
  * Add dh-autoreconf to the build.
  * Bump debhelper requirement to match debian/compat.
  * Bump Standards.

 -- Alessio Treglia <email address hidden>  Sun, 01 Apr 2012 11:43:30 +0200

Available diffs

diff from 4.60.1-2 to 4.60.1-3 (1.1 KiB)

4.60.1-2

Superseded in quantal-release on 2012-05-01

Published in precise-release on 2011-12-06

wavpack (4.60.1-2) unstable; urgency=low


  * Team upload.
  * Enable Multi-Arch support (Closes: #651017):
    - debian/{*.install,control,rules}: Update references and enable
      Multi-Arch: same; patch from Becka Morgan.
    - debian/patches/0001-pkgconfig.patch: Avoid wavpack.pc to be
      broken after switching to Multi-Arch.
  * Fix lintian's warnings:
    - binary-control-field-duplicates-source
    - copyright-refers-to-deprecated-bsd-license-file
    - description-synopsis-starts-with-article
  * Enable MMX extensions on amd64.
  * Correct maintainer's name, add VCS fields.
  * Bump debian/compat.
  * Bump Standards version.
  * Add gbp config file.

 -- Alessio Treglia <email address hidden>  Mon, 05 Dec 2011 11:36:14 +0100

Available diffs

diff from 4.60.1-1 (in Ubuntu) to 4.60.1-2 (2.3 KiB)

4.60.1-1

Superseded in precise-release on 2011-12-06

Obsolete in oneiric-release on 2015-04-24

Obsolete in natty-release on 2013-06-04

Obsolete in maverick-release on 2013-03-05

Obsolete in lucid-release on 2016-10-26

wavpack (4.60.1-1) unstable; urgency=low

  * New upstream release:
    + debian/rules:
      - Some cleanup.
    + debian/*.1.xml,
      debian/wavpack.manpages,
      debian/control:
      - Manpages are upstream now.
  * debian/source/format:
    + Switch to 3.0 (quilt) and use upstream's tar.bz2.
 -- Ubuntu Archive Auto-Sync <email address hidden>   Mon,  21 Dec 2009 10:44:35 +0000

Available diffs

diff from 4.60.0-1 to 4.60.1-1 (26.8 KiB)

4.60.0-1

Superseded in lucid-release on 2009-12-21

wavpack (4.60.0-1) unstable; urgency=low

  * New upstream release:
    + debian/libwavpack1.symbols,
      debian/libwavpack1.shlibs:
      - Updated for the API additions.
  * debian/control:
    + Updated Standards-Version to 3.8.3.
    + Add ${shlibs:Depends} to the -dev package.
  * debian/control,
    debian/compat:
    + Updated to debhelper compat level 6.
 -- Ubuntu Archive Auto-Sync <email address hidden>   Fri,  06 Nov 2009 10:40:01 +0000

Available diffs

diff from 4.50.1-1 to 4.60.0-1 (41.4 KiB)

4.50.1-1

Superseded in lucid-release on 2009-11-06

Obsolete in karmic-release on 2013-03-04

Obsolete in jaunty-release on 2013-02-28

wavpack (4.50.1-1) unstable; urgency=low

  * New upstream bugfix release.

 -- Ubuntu Archive Auto-Sync <email address hidden>   Wed,  05 Nov 2008 18:04:32 +0000

Available diffs

diff from 4.50.0-1 to 4.50.1-1 (8.4 KiB)

4.50.0-1

Superseded in jaunty-release on 2008-11-06

Obsolete in intrepid-release on 2013-02-20

wavpack (4.50.0-1) unstable; urgency=low

  * New upstream release:
    + debian/patches/01_memory-alignment.patch:
      - Dropped, fixed different upstream.
    + debian/libwavpack1.shlibs:
      - Updated to >= 4.50.0 because of new flags for some functions.
  * debian/control:
    + Set maintainer to pkg-multimedia.
    + Wrap control fields.
    + Move homepage to the Homepage field.
    + Update Standards-Version to 3.8.0, no additional changes needed.

 -- Ubuntu Archive Auto-Sync <email address hidden>   Fri,  04 Jul 2008 08:47:49 +0100

Available diffs

diff from 4.41.0-2 to 4.50.0-1 (210.5 KiB)

4.41.0-2

Superseded in intrepid-release on 2008-07-04

wavpack (4.41.0-2) unstable; urgency=low

  * debian/libwavpack1.symbols,
    debian/control:
    + Add a symbol file for WavPack and build depend on new enough dpkg-dev
      for this.
  * debian/control:
    + Update Standards-Version to 3.7.3, no additional changes needed.
    + Use ${binary:Version} instead of ${Source-Version}.
  * debian/patches/01_memory-alignment.patch:
    + Fix alignment issues which result in a SIGBUS on sparc (Closes: #476234).

 -- Ubuntu Archive Auto-Sync <email address hidden>   Fri,  02 May 2008 02:33:04 +0100

4.41.0-1

Superseded in intrepid-release on 2008-05-03

Obsolete in hardy-release on 2015-04-24

Obsolete in gutsy-release on 2011-09-16

Superseded in gutsy-release on 2007-06-18

wavpack (4.41.0-1) unstable; urgency=low

  * New upstream release without API changes.
  * debian/patches/01_fix-undefined-extern.diff:
    + Dropped, not necessary anymore.

 -- Ubuntu Archive Auto-Sync <email address hidden>   Tue,  22 May 2007 08:24:41 +0100

4.40.0-2

Superseded in gutsy-release on 2007-05-22

wavpack (4.40.0-2) unstable; urgency=low

  * Upload to unstable
  * debian/control:
    + Update to use my debian.org mail address

 -- Ubuntu Archive Auto-Sync <email address hidden>   Fri,  27 Apr 2007 13:30:17 +0100

4.40.0-1

Superseded in gutsy-release on 2007-04-27

Obsolete in feisty-release on 2009-08-20

wavpack (4.40.0-1) experimental; urgency=low

  [ Sebastian Dröge ]
  * New upstream release
  * debian/control:
    + Update package name for new soname and remove now unnecessary conflicts
    + Drop unnecessary libncurses (build) dependency
  * debian/rules:
    + Adjust for new package name
  * debian/libwavpack1.shlibs:
    + Set shlibs minimal version from here
  * debian/patches/01_fix-undefined-extern.diff:
    + Updated for new file locations
  * debian/compat:
    + Update to 5

  [ Loic Minier ]
  * Add year 2006 to copyright.

 -- Sebastian Dr?ge <email address hidden>   Tue,  16 Jan 2007 11:58:17 +0000

4.40.0-0ubuntu1

Superseded in feisty-release on 2007-01-16

wavpack (4.40.0-0ubuntu1) feisty; urgency=low

  * New upstream release
  * debian/control:
    + Update package name for new soname and remove now unnecessary conflicts
    + Drop unnecessary libncurses (build) dependency
  * debian/rules:
    + Adjust for new package name
  * debian/libwavpack1.shlibs:
    + Set shlibs minimal version from here
  * debian/patches/01_fix-undefined-extern.diff:
    + Updated for new file locations
  * debian/compat:
    + Update to 5

 -- Sebastian Dröge <email address hidden>   Mon, 11 Dec 2006 13:22:21 +0100

4.32-2ubuntu2

Superseded in feisty-release on 2006-12-11

Obsolete in edgy-release on 2008-06-19

Obsolete in dapper-release on 2011-09-06

wavpack (4.32-2ubuntu2) dapper; urgency=low

  * Also conflict with gstreamer0.10-plugins-bad (<< 0.10.1-0ubuntu2) which is
    not in Debian yet

 -- Sebastian Dröge <email address hidden>   Wed, 26 Apr 2006 12:27:10 +0200

4.32-2ubuntu1

Superseded in dapper-release on 2006-04-26

wavpack (4.32-2ubuntu1) dapper; urgency=low

  * Sync with Debian
  * Adjust conflict on gstreamer0.8-misc to (<< 0.8.12-1ubuntu2)

4.3-2

Superseded in dapper-release on 2006-04-26

Superseded in dapper-release on 2006-02-03

wavpack (4.3-2) unstable; urgency=low


  * Use -fsigned-char to solve problems with decoding/encoding on different
    archs where chars are unsigned by default (including powerpc)
  * Install the README only in the -dev package

 -- Sebastian Dröge <email address hidden>  Thu, 17 Nov 2005 18:38:32 +0100

4.2-0ubuntu1

Obsolete in breezy-release on 2008-03-25

wavpack (4.2-0ubuntu1) breezy; urgency=low


  * Initial Revision
  * Patch for autotools stuff included so we don't have to run autoreconf in
    rules as upstream hasn't done it

 -- Sebastian Dröge <email address hidden>  Sun, 24 Jul 2005 23:12:31 +0200

Ubuntuwavpack package

Change log for wavpack package in Ubuntu

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Ubuntu
wavpack package