-
dpkg (1.17.13ubuntu1.1) utopic-security; urgency=medium
* SECURITY UPDATE: OpenPGP Armor Header Line parsing issue
- scripts/Dpkg/Control/HashCore.pm: adjust whitespace parsing.
- scripts/Makefile.*, scripts/t/Dpkg_Control.t,
scripts/t/Dpkg_Control/bogus-armor-formfeed.dsc: added tests.
- Patch thanks to Guillem Jover
- CVE-2015-0840
-- Marc Deslauriers <email address hidden> Thu, 09 Apr 2015 08:08:57 -0400
-
dpkg (1.17.13ubuntu1) utopic; urgency=medium
* Merge from Debian unstable. Remaining changes:
- Allow -fstack-protector on arm64 now that GCC and glibc support it.
- Change native source version/format mismatch errors into warnings
until the dust settles on Debian bug 737634 about override options.
- Add DPKG_UNTRANSLATED_MESSAGES environment check so that higher-level
tools can get untranslated dpkg terminal log messages while at the
same time having translated debconf prompts.
- Special-case arm{el,hf} ELF objects in Shlibs/Objdump.pm for multilib.
- Map unqualified package names of multiarch-same packages to the native
arch instead of throwing an error, so that we don't break on upgrade
when there are unqualified names stored in the dpkg trigger database.
- Add logic to the postinst to `dpkg --add-architecture i386' on new
installs on amd64, mimicking our previous behaviour with the conffile.
- Apply a workaround from mvo to consider ^rc packages as multiarch,
during the dpkg consistency checks. (see LP: 1015567 and 1057367).
dpkg (1.17.13) unstable; urgency=low
[ Guillem Jover ]
* Remove unbalanced trailing single-quote in dpkg-deb error message.
Reported by Trần Ngọc Quân <email address hidden>.
* Remove architecture blacklist from hardening build flag option
stackprotectorstrong. Thanks to Romain Francoise <email address hidden>.
* Documentation:
- Merge binary:Package descriptions in dpkg-query(1).
- Split --remove and --purge options in dpkg(1). This also clarifies on
which package states each option can operate. Closes: #576338
- Remove duplicate “of the” in dpkg-maintscript-helper(1).
* Fix dpkg-maintscript-helper dir_to_symlink to handle relative symlink
targets. Thanks to Helmut Grohne <email address hidden>.
* Fix dpkg-maintscript-helper symlink_to_dir to assure absolute pathnames
arguments.
* Fix dpkg-source not detecting modified files during --commit or -b.
Regression introduced in dpkg 1.17.11. Closes: #758426
Reported by Neil Williams <email address hidden>.
* Only test the strerror() compatible code if sys_errlist and sys_nerr
are present. This fixes a build failure on GNU/Hurd. Closes: #758199
* Switch start-stop-daemon on GNU/kFreeBSD systems to use libkvm, instead
of relying on linprocfs which is not the native procfs on kFreeBSD, and it
is usually not mounted as FreeBSD programs do not expect it to be present.
[ Updated programs translations ]
* Czech (Miroslav Kure).
* German (Sven Joachim).
* Vietnamese (Trần Ngọc Quân).
[ Updated manpages translations ]
* French (Jean-Pierre Giraud, Vincent Thomas, Raphaël Hertzog).
[ Updated scripts translations ]
* French (Raphaël Hertzog).
* German (Helge Kreutzmann).
-- Adam Conrad <email address hidden> Thu, 21 Aug 2014 12:35:23 -0600
-
dpkg (1.17.12ubuntu1) utopic; urgency=medium
* Merge with Debian; remaining changes:
- Change native source version/format mismatch errors into warnings
until the dust settles on Debian bug 737634 about override options.
- Add DPKG_UNTRANSLATED_MESSAGES environment check so that higher-level
tools can get untranslated dpkg terminal log messages while at the
same time having translated debconf prompts.
- Special-case arm{el,hf} ELF objects in Shlibs/Objdump.pm for multilib.
- Map unqualified package names of multiarch-same packages to the native
arch instead of throwing an error, so that we don't break on upgrade
when there are unqualified names stored in the dpkg trigger database.
- Add logic to the postinst to `dpkg --add-architecture i386' on new
installs on amd64, mimicking our previous behaviour with the conffile.
- Apply a workaround from mvo to consider ^rc packages as multiarch,
during the dpkg consistency checks. (see LP: 1015567 and 1057367).
dpkg (1.17.12) unstable; urgency=low
[ Guillem Jover ]
* Only build the compatibility selinux code if libselinux is available or
the user requested it. Also fixes build failures on non-Linux systems.
Closes: #757637
* Documentation:
- Add a short description to each virtual field in dpkg-query(1), and
mention the version they got introduced in dpkg.
- Fix formatting of last paragraphs inside dselect(1) --color description.
* Rework dselect columns code, to make it easier to maintain and read.
* Add new architecture columns to dselect package list view. The new
columns, shown by default, can be turned off with the new ‘A’ key,
or bound to another key via the new “archdisplay” keybinding.
* Fix a descriptor leak on dselect subprocesses when --debug is used.
* Use «tar --format=gnu» when creating source archives. This makes sure we
get a deterministic output format, regardless of what tar defaults to.
Thanks to Jan Blunck <email address hidden>..
* Use perl's length instead of defined when checking some environment
variables, if we require them to have content.
* Allow specifying the same build type option multiple times in
dpkg-buildpackage and dpkg-genchanges. There seems to be scripts with
such invocations in the wild. Closes: #757795
[ Updated programs translations ]
* German (Sven Joachim).
[ Updated scripts translations ]
* German (Helge Kreutzmann).
[ Updated manpages translations ]
* German (Helge Kreutzmann).
dpkg (1.17.11) unstable; urgency=low
[ Guillem Jover ]
* Switch URLs in docs and code comments from http:// to https:// if the
latter is available (round two). This includes the quilt patch header
templates, and examples in man pages.
* Update some dpkg git URLs to the new and newer (cgit switch) scheme.
* Changes to libcompat:
- Make the library testable.
- Do not run qsort() over the scandir() list if it is NULL.
- Add a setexecfilecon() compatibility function out from dpkg code.
* Use SELinux setexecfilecon() if available in dpkg instead of ad-hoc code.
* Replace obsolete <sys/fcntl.h> with <fcntl.h>, which fixes compilation on
Android. Thanks to Fredrik Fornwall <email address hidden>. Closes: #752036
* Fix file triggers/Unincorp descriptor leak on subprocesses. Regression
introduced with the initial triggers implementation in dpkg 1.14.17.
Closes: #751021
* Do not disable the stack-protector build flags on arm64 in Debian and
derivatives, the toolchain supports them now.
Thanks to Adam Conrad <email address hidden>. Closes: #751032
* When parsing the statoverride database from dpkg-statoverride do not
consider it an error and refuse to operate at all if the user or group
names are not known to the system, just preserve them. Closes: #563307
* Do not write to the available file when unpacking binary packages. This
information is not useful as dpkg has never recorded the archive path,
so it has never been truly available for re-installation anyway.
* Add versioned Provides support:
- Add a new dpkg --assert-versioned-provides command.
- Packages can provide a specific version, “virtual (= 1.0)” which will
be honored, previously it would just be accepted when parsing.
- Non-versioned virtual packages will not satisfy versioned dependencies.
- Versioned virtual packages will satisfy non-versioned dependencies.
Based on skeletal code by Ben Collins <email address hidden>.
Closes: #7330, #24934, #112131, #134582, #180316
* On removal check Depends and Pre-Depends for packages in unpacked and
half-configured states too.
* Add support for new hardening build flag stackprotectorstrong in Debian
and derivatives, enabled by default. It will fallback to stackprotector
when the former is not functional or disabled by the user.
Thanks to Romain Francoise <email address hidden>.
* Change «dpkg-deb --field» code to use the libdpkg deb822 parser instead
of an ad-hoc one. This makes sure any field fixup and sanity check is
performed on the input, and gets reflected on the output.
* Add new dpkg-query virtual fields db:Status-Want, db:Status-Status and
db:Status-Eflag to allow fine-grained access to the Status values.
* Automatically add the Testsuite field in dpkg-source to the .dsc file.
* Spell nocheck option in dpkg-scanpackages wait_child() call correctly.
Spotted by James McCoy <email address hidden> (in devscripts).
* Move the explanation of functional checks from --verify-format to the
--verify command in the dpkg(1) man page. Closes: #747264
* Improve dpkg-buildpackage(1) man page:
- Mark DEB_CHECK_COMMAND environment variable in bold.
- Add final item for done hook in the actions sequence.
- Mention that -nc does not apply either when -F is specified.
- Mention that the --FOO-option options can be used multiple times.
- Fix a typo in the BUGS section.
* Mark the “and” between the filenames as regular format in dpkg-source(1).
* Add --format and --ignore-bad-version to dpkg-source --help output.
* Clarify error message in Dpkg::Source::Quilt when patches fail to apply,
to note that the patch might be malformed (besides not accepting patches
with fuzz).
* Try to preallocate the disk size for extracted files on unpack. This
might help in avoiding filesystem fragmentation, and possibly improve
performance on some filesystems.
* Print the correct removed binary filename when building a source package
with dpkg-source --include-removal. Closes: #755166
* Add powerpcel support to cputable. Thanks to Jae Junh <email address hidden>.
* Bump the i386 architecture GNU triplet to i586-linux-gnu to match the
change in gcc. Somewhat reluctantly, as i386 wants to be its unique
snowflake and use a GNU triplet not matching its baseline. This will
cause problems when cross-building and using unmatched combinations of
dpkg-dev and gcc. Closes: #751363
* Update i386 architecture GNU cpu regex in cputable to match i786 too.
* Remove unused pkglibdir variable from libdpkg.pc.in.
* Perl modules:
- Add new set_as_auto() method to Dpkg::Substvars.
- Add support for sig and delete_sig spawn() options in Dpkg::IPC.
- Add %opts to ensure_open() member in Dpkg::Compression::FileHandle.
- Change find_command() to handle an empty or undef argument in Dpkg:Path.
* Mark Format and Installed-Size as automatic substvars in dpkg-genchanges
and dpkg-gencontrol respectively.
* Warn on usage of deprecated Source-Version substvar.
* Say OpenPGP instead of PGP when referring to the standard on code comments
and output messages.
* Add a hint to the “no dependency information found” error message in
dpkg-shlibdeps, to check if the library is actually packaged.
Thanks to Sylvestre Ledru <email address hidden>. Closes: #756230
* Delete the current compressor SIGPIPE disposition in Dpkg::Source::Archive,
which fixes ignoring SIGPIPE from the calling process. Closes: #756526
* Ignore DEB_CHECK_COMMAND in dpkg-buildpackage if the command is not found.
* Emit a warning when using the deprecated -is/-ip/-isp/-ips options in
dpkg-gencontrol.
* Only print build type once in dpkg-genchanges, instead of once for each
specified -A or -B option and then yet another time for the general build
type description.
* Unify build options description in --help output for dpkg-buildpackage
and dpkg-genchanges.
* Only allow one build type option in dpkg-genchanges and dpkg-buildpackage.
* Correctly filter the host architecture on the Architecture field in the
generated .changes file from dpkg-genchanges, when the debian/files
contains arch-specific packages but dpkg-genchanges was called with
one of the build types excluding them.
* Add new -g and -G options to dpkg-genchanges and dpkg-buildpackage for
source plus arch-indep/specific builds. Closes: #756975
* Fix dpkg --add-architecture and --remove-architecture to check that they
get exactly one argument. Closes: #757254
[ Updated programs translations ]
* Danish (Joe Dalton). Closes: #754127
* French (Jean-Baka Domelevo Entfellner, Julien Patriarca).
* Portuguese (Miguel Figueiredo). Closes: #756920
* Spanish (Guillem Jover): Fix «dpkg-query -l» header. Closes: #756209
* Swedish (Peter Krefting).
[ Updated scripts translations ]
* Swedish (Peter Krefting).
[ Updated manpages translations ]
* Swedish (Peter Krefting).
-- Matthias Klose <email address hidden> Sun, 17 Aug 2014 13:14:31 +0200
-
dpkg (1.17.10ubuntu1) utopic; urgency=medium
* Merge from Debian unstable. Remaining changes:
- Allow -fstack-protector on arm64 now that GCC and glibc support it.
- Change native source version/format mismatch errors into warnings
until the dust settles on Debian bug 737634 about override options.
- Add DPKG_UNTRANSLATED_MESSAGES environment check so that higher-level
tools can get untranslated dpkg terminal log messages while at the
same time having translated debconf prompts.
- Special-case arm{el,hf} ELF objects in Shlibs/Objdump.pm for multilib.
- Map unqualified package names of multiarch-same packages to the native
arch instead of throwing an error, so that we don't break on upgrade
when there are unqualified names stored in the dpkg trigger database.
- Add logic to the postinst to `dpkg --add-architecture i386' on new
installs on amd64, mimicking our previous behaviour with the conffile.
- Apply a workaround from mvo to consider ^rc packages as multiarch,
during the dpkg consistency checks. (see LP: 1015567 and 1057367).
dpkg (1.17.10) unstable; urgency=medium
[ Guillem Jover ]
* Use libtool to build the static libraries, which makes it possible to
embed libcompat inside libdpkg, as required by some external programs
linking against the latter. Closes: #746122
* Fix word wrapping logic in dselect. Regression introduced in dpkg 1.17.3.
* Fix possible out of bounds buffer read access in the error output on
bogus ar member sizes.
* Fix memory leaks in buffer_copy() on error conditions.
* Test suite:
- Improve C code coverage.
- Add template test cases for most perl modules.
- Add test cases for Dpkg::Deps OR relationships.
- Add minimal test case for Dpkg::Source::Quilt.
- Add test cases for Dpkg::Source::Patch CVE-2014-0471 and CVE-2014-3127.
- Add test case for patch disabling hunks; not security sensitive.
* Fix non-security sensitive TOCTOU race in triggers database loading.
* Fix non-security sensitive TOCTOU race in update-alternative alternative
database loading.
* Fix non-security sensitive TOCTOU race in update-alternative rename code.
* Add a workaround to start-stop-daemon for bogus OpenVZ Linux kernels that
prepend, instead of appending, the " (deleted)" marker in /proc/PID/exe.
Closes: #731530
* Move dpkg-architecture -L argument to the Commands --help output section.
* Make dpkg-maintscript-helper print only once that we are moving a
conffile, and not on every interim state transition. Closes: #747370
* Do not use global match variables in perl code.
* Man pages:
- Attempt to clarify and improve wording of some strange or confused
constructs. Reported by Helge Kreutzmann.
- Expand Vcs-* field names into each supported field name in
deb-src-control(5) to make it easier to search for them.
- Change control.tar.gz reference to simply control.tar in deb(5).
- Document in dpkg-deb(1) -Z option that bzip2 and lzma are deprecated.
- Add notes in dpkg-gensymbols(1) about symbol backward-compatibility.
Based on a patch by Bernhard R. Link <email address hidden>.
Closes: #746973
- Document that dpkg-buildpackage(1) -j argument is optional.
- Add current and deprecated media types to deb(5).
- Document in dpkg(1) that --audit now does more than just searching for
partially installed packages.
* Add support for automatic parallel job selection in dpkg-buildpackage,
matching currently active processors, when using -jauto. Closes: #748012
* Perl modules:
- Bump $VERSION for Dpkg::Patch, missed in 1.16.1.
- Bump $VERSION for Dpkg::Deps, missed in 1.17.0.
- Update and fix CHANGES POD sections for public modules.
- Add missing Dpkg::Deps::Multiple profile_is_concerned() and
reduce_profiles() methods, inherited by Dpkg::Deps::Union,
Dpkg::Deps::AND and Dpkg::Deps::OR.
* Do not mangle quilt series files with a missing newline on the last line.
Closes: #584233
* Quiesce tar warnings in cron job by redirecting stderr to /dev/null, as
it seems --warning=none does not work correctly. Closes: #748544
* Do not emit a trailing space from Dpkg::Control::Hash on a field's empty
first line. Bump dpkg-dev Breaks on devscripts to 2.14.4, as previous
versions expect a trailing space from dpkg-parsechangelog output.
Based on a patch by Johannes Schauer <email address hidden>. Closes: #749044
* Do not assume that sensible-editor is present on «dpkg-source --commit»,
as that command is very Debian specific. Fallback to try VISUAL, EDITOR,
or vi, if the previous commands are either unset or not found.
* Use badusage() instead of ohshit() on dpkg --ignore-depends argument
parsing errors.
* Add per package dpkg --audit support.
* Add support for DragonFlyBSD to ostable and triplettable.
Thanks to Hleb Valoshka <email address hidden>.
* Add support for DragonFlyBSD to start-stop-daemon. Closes: #734452
Based on a patch by Hleb Valoshka <email address hidden>.
* Correctly parse patch headers in Dpkg::Source::Patch, to avoid directory
traversal attempts from hostile source packages when unpacking them.
Reported by Javier Serrano Polo <email address hidden> as an unspecified
directory traversal; meanwhile also independently found by me both
#749183 and what was supposed to be #746498, which was later on published
and ended up being just a subset of the other non-reported issue.
Fixes CVE-2014-3864 and CVE-2014-3865. Closes: #746498, #749183
[ Updated programs translations ]
* Catalan (Guillem Jover).
* Italian (Milo Casagrande). Closes: #750105
[ Updated scripts translations ]
* German (Helge Kreutzmann).
[ Updated manpages translations ]
* German (Helge Kreutzmann).
[ Raphaël Hertzog ]
* Let dpkg-source unpack additional tarballs in a deterministic order.
Thanks to Samuel Bronson for the report. Closes: #747148
-- Adam Conrad <email address hidden> Mon, 09 Jun 2014 12:18:09 -0600
-
dpkg (1.17.9ubuntu1) utopic; urgency=medium
* Merge with Debian unstable, fixing the testsuite's failure to fail.
dpkg (1.17.9) unstable; urgency=high
[ Guillem Jover ]
* Do not allow patch files with C-style encoded filenames. Closes: #746306
Unconditionally fixes CVE-2014-0471.
* Switch alternative database backups from xz to gzip. Closes: #746354
* Do not leak long tar names on bogus or truncated archives.
* Do not leak the filepackages iterator when a directory is used by other
packages.
* Fix short lived memory leaks in «dpkg-split --split».
* Fix memory leak in unused Keybindings screen in dselect.
* Do not leak color string on «dselect --color».
* Fix memory leaks when parsing alternatives.
* Fix off-by-one stack buffer overrun in start-stop-daemon on GNU/Linux and
GNU/kFreeBSD if the executable pathname is longer than _POSIX_PATH_MAX.
Although this should not have security implications as the buffer is
surrounded by two arrays (so those catch accesses even if the stack
grows up or down), and we are compiling with -fstack-protector anyway.
* Mark the command_get_pager() tests on a tty as TODO for now, so that
we do not get failures on build daemons.
* Make test suite errors abort the build again. Closes: #746331
[ Updated scripts translations ]
* French (Steve Petruzzello). Closes: #746350
* German (Helge Kreutzmann).
[ Updated manpages translations ]
* German (Helge Kreutzmann).
-- Adam Conrad <email address hidden> Wed, 30 Apr 2014 08:24:27 -0600
-
dpkg (1.17.8ubuntu1) utopic; urgency=medium
* Merge with Debian unstable to bring in several bugfixes, including
the hostile patch unpack directory traversal fix for CVE-2014-0471
dpkg (1.17.8) unstable; urgency=high
[ Guillem Jover ]
* Do not backup nonexistent database files from the cron.daily file.
And stop emitting tar warnings. Closes: #745592, #745651
* Test suite:
- Improve Perl code coverage.
- Improve C code coverage.
* Handle space-only strings when parsing versions in libdpkg.
* Document the environment requirements for the dpkg-maintscript-helper
supports command in the man page. Closes: #739634
* Improve wording for «dpkg --verify» and --verify-format in the man page.
Closes: #733057
* Switch test runner from Test::Harness to TAP::Harness.
* Use the perl TAP::Harness for the C test suite instead of the automake
tap-driver, to avoid requiring automake >= 1.12, currently not present
in stable.
* Enable failed test case reporting from the TAP::Harness, so that we get
more meaningful reports on failure from the C test suite.
* Correctly parse C-style diff filenames in Dpkg::Source::Patch, to avoid
directory traversal attempts from hostile source packages when unpacking
them. Reported by Jakub Wilk <email address hidden>. Fixes CVE-2014-0471.
[ Updated programs translations ]
* German (Sven Joachim).
* Russian (Yuri Kozlov). Closes: #745869
* Vietnamese (Trần Ngọc Quân).
-- Adam Conrad <email address hidden> Mon, 28 Apr 2014 21:16:49 -0600
-
dpkg (1.17.7ubuntu1) utopic; urgency=medium
* Merge from Debian unstable. Remaining changes:
- Allow -fstack-protector on arm64 now that GCC and glibc support it.
- Change native source version/format mismatch errors into warnings
until the dust settles on Debian bug 737634 about override options.
- Add DPKG_UNTRANSLATED_MESSAGES environment check so that higher-level
tools can get untranslated dpkg terminal log messages while at the
same time having translated debconf prompts.
- Special-case arm{el,hf} ELF objects in Shlibs/Objdump.pm for multilib.
- Map unqualified package names of multiarch-same packages to the native
arch instead of throwing an error, so that we don't break on upgrade
when there are unqualified names stored in the dpkg trigger database.
- Add logic to the postinst to `dpkg --add-architecture i386' on new
installs on amd64, mimicking our previous behaviour with the conffile.
- Apply a workaround from mvo to consider RC packages as multiarch,
during the dpkg consistency checks. (see LP: 1015567 and 1057367).
* Drop obsolete migration code and guards from pre-trusty dpkg versions.
dpkg (1.17.7) unstable; urgency=low
[ Guillem Jover ]
* Documentation:
- Mention in deb-symbols(5), that the “main-dependency-template” is
always used. Closes: #737731
- Clarify in deb-control(5) «Multi-Arch: no» field omission.
- Clarify in dpkg-buildpackage(1) --check-option description.
- Document dpkg-query --control-path life expectancy. See: #699647
- Fix indentation of “Extract options (with -x)” title in dpkg-source(1).
- Improve symlink <-> directory switch information in
dpkg-maintscript-helper(1). Closes: #739388
- Add missing flags affected by hardening options to dpkg-buildflags(1).
* Use exit instead of return to exit a subshell in dpkg-maintscript-helper.
Thanks to Richard Levitte <email address hidden>. Closes: #738957
* Localize $_ in Perl functions with while (<$fh>) style loops.
* Perl test suite cleanup:
- Switch test suite runner from ExtUtils::Command::MM to Test::Harness.
- Enable colors in test suite runner.
- Remove sequence number prefixes from test case filenames.
* Do not generate perl warnings on nonexistent fields with
«dpkg-parsechangelog --show».
* Fix bogus message on dependency parse errors in dpkg-checkbuilddeps.
Closes: #736778
* Document is_pgp_signed as a public Dpkg::Control::Hash option.
Closes: #735975
* Do not generate perl warnings on undef versions in
Dpkg::Deps::deps_compare(). See: #737731
* Clarify dpkg-genchanges error message on binary builds without any binary
artifact built. Closes: #726520
* Improve dpkg-source warning message when ignoring file removals,
by adding a hint about the --include-removal option.
Thanks to Moritz Muehlenhoff <email address hidden>. Closes: #738310
* Add a new dpkg-source extraction --ignore-bad-version option.
Closes: #740883
* Add Architecture and Build-Profiles information to Package-List field,
as optional name=value1,value2 entries, with names «arch» and «profile».
Use the now recognized field Build-Profiles from binary stanzas in the
source control file to fill the «profile» value.
* Do not interpret the .dsc filename as a regex when recomputing the
md5sum for the .changes file after signing the .dsc. Closes: #742535
* Cache vendor info Control::Hash objects in Dpkg::Vendor::get_vendor_info()
when parsing the vendor file on each hook invocation.
* If the vendor does not have a Dpkg::Vendor module, try loading a module
from the parent vendors, before falling back to Dpkg::Vendor::Default.
Closes: #735978
* Set Ubuntu build flags for ppc64el instead of ppc64, as Ubuntu never ended
up shipping a ppc64 architecture. Also honor noopt DEB_BUILD_OPTIONS flag.
Thanks to Adam Conrad <<email address hidden>. Closes: #738691
* Add OpenRISC or1k support to cputable.
Thanks to Christian Svensson <email address hidden>. Closes: #736717
* Add support for FCFLAGS, OBJCFLAGS and OBJCXXFLAGS build flags.
Closes: #744326
* Improvements and portability fixes to start-stop-daemon:
- When using the Linux procfs switch to use /proc/PID/status instead of
/proc/PID/stat to read the process name.
- Add a generic KVM-based implementation to initialize the entire
process list.
- Fix FreeBSD KVM code to use current kinfo_proc layout.
- Add a native FreeBSD pid_is_exec() method, which is more reliable than
the KVM-based one, and means neither linprocfs nor procfs are required
on such system anymore. Note that GNU/kFreeBSD is still using Linux
procfs code (which ends up using linprocfs).
- Fix OpenBSD KVM code to use current kinfo_proc layout.
- Detect system specific headers at configure time instead of hardcoding
their usage depending on system macros.
- Add a new --ppid matching option to check for parent PID.
Suggested by Alex Mestiashvili <email address hidden>.
- On GNU/Hurd do not link unnecessarily against libshouldbeinlibc and
libihash.
* Set TAR preprocessor variable at build time instead of hardcoding it.
This will allow non-GNU systems to easily use another value for their
GNU tar, which is usually either gnutar or gtar.
* Require compound literals support in the compiler at configure time.
* Fix compound literals usage with compilers in C99 mode, by not assigning
them to static variables.
* Test suite cleanup:
- Do not unnecessarily shut up stdout in t-subproc.
- Test command_exec() exit code.
- Test allocations with new test_alloc() instead of pass/fail macros.
- Switch C test suite to use TAP.
* Add support for Packages-files in dpkg --update-avail and --merge-avail
from pipes, or standard input if the argument is omitted or is ‘-’.
Closes: #357093, #367297
* Error out on not-installed packages passed to «dpkg --verify».
* Deprecate compressing .deb files with bzip2, by making dpkg-deb issue a
warning, as the compressor has been superseded by xz when it comes to
compression ratio, and in cases where higher compatibility or raw speed
is desired gzip is still the better option. Although unpacking will be
kept being supported to handle existing bzip2 compressed .deb files.
* Use GNU tar's --no-unquote when using -T in dpkg-deb to avoid mangling
filenames. Reported by Niels Thykier <email address hidden>. Closes: #743687
* Backup all databases with user data, not just the status database.
* Add Conflicts to dpkg against packages using install-info that were
removed after lenny or squeeze, but may have survived upgrades to wheezy.
Thanks to Andreas Beckmann <email address hidden>. Closes: #735159
* Be verbose on «make check» errors by printing the test suite log.
[ Updated dpkg translations ]
* German (Sven Joachim).
* Swedish (Peter Krefting).
* Thai (Theppitak Karoonboonyanan). Closes: #745032
* Vietnamese (Trần Ngọc Quân).
[ Updated scripts translations ]
* German (Helge Kreutzmann).
* Swedish (Peter Krefting).
[ Updated manpages translations ]
* German (Helge Kreutzmann).
* Italian (Beatrice Torracca). Closes: #742449
* Swedish (Peter Krefting).
dpkg (1.17.6) unstable; urgency=low
[ Guillem Jover ]
* Move signing in dpkg-buildpackage to the end of the build.
* Add new --check-command and --check-option options to dpkg-buildpackage,
and DEB_CHECK_COMMAND environment variable as a default value, to
specify a package checker to use before the signing process.
* Detect a missing gain-root-command even if dpkg-buildpackage is running
as root.
* Detect a missing sign-command in dpkg-buildpackage, before starting the
build, to avoid a failure at the end of the process.
* Remove trailing newlines from dpkg-deb warning message.
* Change dpkg-deb conffile name length warning into an error, as dpkg will
reject those packages at install time anyway.
* Unify and clarify dpkg-deb and dpkg conffile name length error message.
Closes: #108196
* Add new start-stop-daemon --pid option. Closes: #253265
* Mention Multi-Arch: no value in man pages. Closes: #732648
* Correctly hyphenate binary-only and source-only in dpkg-buildpackage
output messages.
* Use makedev(3) when extracting .deb archives rather than ad-hoc
computations, to be able to support large major/minor device numbers,
supported on at least Linux, NetBSD and OpenBSD based systems.
Thanks to Peter Chang <email address hidden>.
* Turn the ARM Embedded ABI symbols blacklist into a regex, to stop having
to keep up with the GNU toolchain, or other toolchains emitting different
symbols.
* Blacklist GOMP critical section symbols. Closes: #708033
* Add support for Ignore-Blacklist-Groups field in symbols files, with the
two available group values aeabi and gomp. Closes: #694524
* Allow updating checksums in Dpkg::Checksums without erroring out.
* Add shell hooks support to dpkg-buildpackage, based on the debuild
implementation in devscripts 2.13.9. Closes: #476221
* Add support for Testsuite source field.
* Clarify error message about missing revision in non-native source package.
Closes: #719348, #733746
* Set default compression options in source format specific modules instead
of dpkg-source. This makes sure the correct compression level is set, even
for “3.0 (native)” packages with non-default compressors. Closes: #733326
* Change default source package compressor for new formats (>= 2.0) to xz.
* Ignore the same packages in «dpkg-query --list» when computing the
column width as when printing the entries. Closes: #734114
* Do not produce .deb archives with uncompressed gzip members on
«dpkg-deb -Zgzip -z0», instead create them as non-compressed members,
as if -Znone had been passed, as documented. Closes: #718295
* Add support for .deb archives with a control member not compressed
(control.tar) or compressed with xz (control.tar.xz).
* Add support for creating uniformly compressed .deb archive members,
with the new dpkg-deb option --uniform-compression.
* Fix file descriptor leaks in diversions and statoverride databases.
Closes: #734783
* Allow missing prior-version argument in dpkg-maintscript-helper
dir_to_symlink and symlink_to_dir commands. Closes: #733980
[ Updated dpkg translations ]
* Swedish (Peter Krefting).
* Vietnamese (Trần Ngọc Quân).
[ Updated scripts translations ]
* German (Helge Kreutzmann).
* Swedish (Peter Krefting).
[ Updated manpages translations ]
* German (Helge Kreutzmann).
* Swedish (Peter Krefting).
-- Adam Conrad <email address hidden> Mon, 21 Apr 2014 18:14:10 -0600
-
dpkg (1.17.5ubuntu5) trusty; urgency=medium
* Allow -fstack-protector on arm64 now that GCC and glibc support it.
-- Adam Conrad <email address hidden> Fri, 07 Mar 2014 18:47:57 +0800
