Author: Guillem Jover
Revision Date: 2014-04-21 05:03:52 UTC

[ Guillem Jover ]
* Documentation:
  - Mention in deb-symbols(5), that the “main-dependency-template” is
    always used. Closes: #737731
  - Clarify in deb-control(5) «Multi-Arch: no» field omission.
  - Clarify in dpkg-buildpackage(1) --check-option description.
  - Document dpkg-query --control-path life expectancy. See: #699647
  - Fix indentation of “Extract options (with -x)” title in dpkg-source(1).
  - Improve symlink <-> directory switch information in
    dpkg-maintscript-helper(1). Closes: #739388
  - Add missing flags affected by hardening options to dpkg-buildflags(1).
* Use exit instead of return to exit a subshell in dpkg-maintscript-helper.
  Thanks to Richard Levitte <richard@levitte.org>. Closes: #738957
* Localize $_ in Perl functions with while (<$fh>) style loops.
* Perl test suite cleanup:
  - Switch test suite runner from ExtUtils::Command::MM to Test::Harness.
  - Enable colors in test suite runner.
  - Remove sequence number prefixes from test case filenames.
* Do not generate perl warnings on nonexistent fields with
  «dpkg-parsechangelog --show».
* Fix bogus message on dependency parse errors in dpkg-checkbuilddeps.
  Closes: #736778
* Document is_pgp_signed as a public Dpkg::Control::Hash option.
  Closes: #735975
* Do not generate perl warnings on undef versions in
  Dpkg::Deps::deps_compare(). See: #737731
* Clarify dpkg-genchanges error message on binary builds without any binary
  artifact built. Closes: #726520
* Improve dpkg-source warning message when ignoring file removals,
  by adding a hint about the --include-removal option.
  Thanks to Moritz Muehlenhoff <jmm@debian.org>. Closes: #738310
* Add a new dpkg-source extraction --ignore-bad-version option.
  Closes: #740883
* Add Architecture and Build-Profiles information to Package-List field,
  as optional name=value1,value2 entries, with names «arch» and «profile».
  Use the now recognized field Build-Profiles from binary stanzas in the
  source control file to fill the «profile» value.
* Do not interpret the .dsc filename as a regex when recomputing the
  md5sum for the .changes file after signing the .dsc. Closes: #742535
* Cache vendor info Control::Hash objects in Dpkg::Vendor::get_vendor_info()
  when parsing the vendor file on each hook invocation.
* If the vendor does not have a Dpkg::Vendor module, try loading a module
  from the parent vendors, before falling back to Dpkg::Vendor::Default.
  Closes: #735978
* Set Ubuntu build flags for ppc64el instead of ppc64, as Ubuntu never ended
  up shipping a ppc64 architecture. Also honor noopt DEB_BUILD_OPTIONS flag.
  Thanks to Adam Conrad <adconrad@debian.org. Closes: #738691
* Add OpenRISC or1k support to cputable.
  Thanks to Christian Svensson <christian@cmd.nu>. Closes: #736717
* Add support for FCFLAGS, OBJCFLAGS and OBJCXXFLAGS build flags.
  Closes: #744326
* Improvements and portability fixes to start-stop-daemon:
  - When using the Linux procfs switch to use /proc/PID/status instead of
    /proc/PID/stat to read the process name.
  - Add a generic KVM-based implementation to initialize the entire
    process list.
  - Fix FreeBSD KVM code to use current kinfo_proc layout.
  - Add a native FreeBSD pid_is_exec() method, which is more reliable than
    the KVM-based one, and means neither linprocfs nor procfs are required
    on such system anymore. Note that GNU/kFreeBSD is still using Linux
    procfs code (which ends up using linprocfs).
  - Fix OpenBSD KVM code to use current kinfo_proc layout.
  - Detect system specific headers at configure time instead of hardcoding
    their usage depending on system macros.
  - Add a new --ppid matching option to check for parent PID.
    Suggested by Alex Mestiashvili <mailatgoogl@gmail.com>.
  - On GNU/Hurd do not link unnecessarily against libshouldbeinlibc and
    libihash.
* Set TAR preprocessor variable at build time instead of hardcoding it.
  This will allow non-GNU systems to easily use another value for their
  GNU tar, which is usually either gnutar or gtar.
* Require compound literals support in the compiler at configure time.
* Fix compound literals usage with compilers in C99 mode, by not assigning
  them to static variables.
* Test suite cleanup:
  - Do not unnecessarily shut up stdout in t-subproc.
  - Test command_exec() exit code.
  - Test allocations with new test_alloc() instead of pass/fail macros.
  - Switch C test suite to use TAP.
* Add support for Packages-files in dpkg --update-avail and --merge-avail
  from pipes, or standard input if the argument is omitted or is ‘-’.
  Closes: #357093, #367297
* Error out on not-installed packages passed to «dpkg --verify».
* Deprecate compressing .deb files with bzip2, by making dpkg-deb issue a
  warning, as the compressor has been superseded by xz when it comes to
  compression ratio, and in cases where higher compatibility or raw speed
  is desired gzip is still the better option. Although unpacking will be
  kept being supported to handle existing bzip2 compressed .deb files.
* Use GNU tar's --no-unquote when using -T in dpkg-deb to avoid mangling
  filenames. Reported by Niels Thykier <niels@thykier.net>. Closes: #743687
* Backup all databases with user data, not just the status database.
* Add Conflicts to dpkg against packages using install-info that were
  removed after lenny or squeeze, but may have survived upgrades to wheezy.
  Thanks to Andreas Beckmann <anbe@debian.org>. Closes: #735159
* Be verbose on «make check» errors by printing the test suite log.

[ Updated dpkg translations ]
* German (Sven Joachim).
* Swedish (Peter Krefting).
* Thai (Theppitak Karoonboonyanan). Closes: #745032
* Vietnamese (Trần Ngọc Quân).

[ Updated scripts translations ]
* German (Helge Kreutzmann).
* Swedish (Peter Krefting).

[ Updated manpages translations ]
* German (Helge Kreutzmann).
* Italian (Beatrice Torracca). Closes: #742449
* Swedish (Peter Krefting).

Author: Guillem Jover
Revision Date: 2014-01-15 05:29:45 UTC

[ Guillem Jover ]
* Move signing in dpkg-buildpackage to the end of the build.
* Add new --check-command and --check-option options to dpkg-buildpackage,
  and DEB_CHECK_COMMAND environment variable as a default value, to
  specify a package checker to use before the signing process.
* Detect a missing gain-root-command even if dpkg-buildpackage is running
  as root.
* Detect a missing sign-command in dpkg-buildpackage, before starting the
  build, to avoid a failure at the end of the process.
* Remove trailing newlines from dpkg-deb warning message.
* Change dpkg-deb conffile name length warning into an error, as dpkg will
  reject those packages at install time anyway.
* Unify and clarify dpkg-deb and dpkg conffile name length error message.
  Closes: #108196
* Add new start-stop-daemon --pid option. Closes: #253265
* Mention Multi-Arch: no value in man pages. Closes: #732648
* Correctly hyphenate binary-only and source-only in dpkg-buildpackage
  output messages.
* Use makedev(3) when extracting .deb archives rather than ad-hoc
  computations, to be able to support large major/minor device numbers,
  supported on at least Linux, NetBSD and OpenBSD based systems.
  Thanks to Peter Chang <dpf@google.com>.
* Turn the ARM Embedded ABI symbols blacklist into a regex, to stop having
  to keep up with the GNU toolchain, or other toolchains emitting different
  symbols.
* Blacklist GOMP critical section symbols. Closes: #708033
* Add support for Ignore-Blacklist-Groups field in symbols files, with the
  two available group values aeabi and gomp. Closes: #694524
* Allow updating checksums in Dpkg::Checksums without erroring out.
* Add shell hooks support to dpkg-buildpackage, based on the debuild
  implementation in devscripts 2.13.9. Closes: #476221
* Add support for Testsuite source field.
* Clarify error message about missing revision in non-native source package.
  Closes: #719348, #733746
* Set default compression options in source format specific modules instead
  of dpkg-source. This makes sure the correct compression level is set, even
  for “3.0 (native)” packages with non-default compressors. Closes: #733326
* Change default source package compressor for new formats (>= 2.0) to xz.
* Ignore the same packages in «dpkg-query --list» when computing the
  column width as when printing the entries. Closes: #734114
* Do not produce .deb archives with uncompressed gzip members on
  «dpkg-deb -Zgzip -z0», instead create them as non-compressed members,
  as if -Znone had been passed, as documented. Closes: #718295
* Add support for .deb archives with a control member not compressed
  (control.tar) or compressed with xz (control.tar.xz).
* Add support for creating uniformly compressed .deb archive members,
  with the new dpkg-deb option --uniform-compression.
* Fix file descriptor leaks in diversions and statoverride databases.
  Closes: #734783
* Allow missing prior-version argument in dpkg-maintscript-helper
  dir_to_symlink and symlink_to_dir commands. Closes: #733980

[ Updated dpkg translations ]
* Swedish (Peter Krefting).
* Vietnamese (Trần Ngọc Quân).

[ Updated scripts translations ]
* German (Helge Kreutzmann).
* Swedish (Peter Krefting).

[ Updated manpages translations ]
* German (Helge Kreutzmann).
* Swedish (Peter Krefting).

Author: Guillem Jover
Revision Date: 2013-09-30 16:52:37 UTC

Fix value caching in Dpkg::Arch by not shadowing the variables.
Closes: #724949

Author: Guillem Jover
Revision Date: 2012-09-07 08:28:56 UTC

[ Guillem Jover ]
* Do not translate SE Linux context to human readable form while unpacking,
  as that might cause the operation to fail if the mcstransd daemon
  stopped running during the transaction. Closes: #679641
  Thanks to Russell Coker <russell@coker.com.au>.

[ Updated man page translations ]
* German (Helge Kreutzmann). Fix sub optimal translation of package states
  LP: #368783, a fix by Chris Leick and other fixes.

Author: Guillem Jover
Revision Date: 2012-02-05 23:39:40 UTC

This is a WIP release, command line interfaces *will* change.

[ Guillem Jover ]
* Move <config.h> and <compat.h> to the top of trigdeferred.l to properly
  use the configured features and compat code.
* Honour --disable-nls when the system lacks obstack support, by updating
  the obstack compat module from gnulib.
* Link the libdpkg unit tests with libcompat and libintl, so that systems
  needing them will compile correctly.
* Check for the presence of the strnlen declaration and correctly provide
  the compat one in case the systems lacks it.
* Do not assume existence of paths on the build system in the test suite.
* Do not fail to link dselect on MacOS X when using --disable-nls.
* Remove versioned coreutils Pre-Depends from dpkg due to the ancient
  md5sum transition. Reported by Bill Allombert <ballombe@debian.org>.
  Closes: #643746
* Change dpkg-architecture to only compute the requested variables. This:
  - Fixes the bootstrapping problem, as the dpkg build system only needs
    the host architecture, for which dpkg itself is not required.
  - Reduces the amount of work performed, including loading and parsing
    unnecessary table files or calling either of gcc or dpkg programs.
* Improve error message in dpkg-gencontrol and dpkg-gensymbols when
  debian/control does not have any package stanza. Closes: #642473
  Based on a patch by Kyle Willmon <kylewillmon@gmail.com>.
* Add Pre-Depends on tar >= 1.23 (satisfied in stable) to dpkg due to it
  using the ‘--warning=no-timestamp’ option. Closes: #642802
* Do not segfault on GNU/Linux when dpkg cannot retrieve the block size
  for the filesystem containing the info database. LP: #872734
* Fix two memory leaks per tar entry in the tar extractor used on unpack.
* Mark dpkg and dselect as Multi-Arch foreign.
  Reported by Steve Langasek <vorlon@debian.org>.
* Mark dpkg-dev and libdpkg-perl as Multi-Arch foreign. Closes: #648217
  Thanks to Colin Watson <cjwatson@ubuntu.com>.
* Add new deb-origin.5 man page. Closes: #608884
  Thanks to Matt Kraai <kraai@ftbfs.org>.
* Return correct status on start-stop-daemon --status when using --pidfile.
* Treat dpkg-deb compression level independently for each backend. This
  has the effect of changing the current behaviour for level 0 on all
  compressors except gzip.
* Add new dpkg-deb -S option to specify the compression strategy. The only
  currently supported value is “extreme” for xz. Closes: #647915
* Stop using brace expansion to install man pages by using dh_installman
  instead of dh_install, the former does not abort on empty glob expansion.
* Do not use absolute paths for programs in perl and shell code.
* Add missing ‘*’ in asprintf() and vasprintf() compat declarations.
* Add support for virtual output binary:Summary and db:Status-Abbrev fields.
  Closes: #192619, #427945
* Add support for virtual output source:Package and source:Version fields.
  Closes: #653575
* Use a different temporary file per process on libcompat's vsnprintf()
  function to avoid race conditions from children after fork(3).
  Reported by Daniel Ruoso <daniel@ruoso.com>. Closes: #655411
* Fix start-stop-daemon --exec and --name options on FreeBSD, NetBSD and
  OpenBSD by swapping the process matching implementations.
* Fix start-stop-daemon --name option on GNU/Hurd to match the process name.
* Document in more detail the implications of start-stop-daemon matching
  options. Closes: #367608
* Improve and clarify dpkg-shlibdeps superfluous linking warning messages.
  Based on a patch by Peter Eisentraut <petere@debian.org>. Closes: #656496

[ Raphaël Hertzog ]
* Update Dpkg::Shlibs to look into multiarch paths when cross-building
  too. Closes: #595144
* Rewrite architecture.mk with explicit loops instead of duplicating many
  similar lines. Based on a patch by Thorsten Glaser <tg@mirbsd.de>.
* Modify dpkg-gencontrol and dpkg-distaddfile to grab a write lock
  on debian/control before updating debian/files to avoid simultaneous
  updates. Closes: #642608
  Add libfile-fcntllock-perl to dpkg-dev's Depends since we use this module
  to handle the locking.
* Update dpkg-gensymbols(1) to clarify that -e accepts shell patterns
  expansions and not regular expressions. And let dpkg-gensymbols output a
  warning when a pattern doesn't match any file. Closes: #649248
* Add new option "-a <arch>" to dpkg-checkbuilddeps to check build
  dependencies for another architecture. This is really basic for now since
  it assumes all build dependencies must be satisfied on the listed
  architecture. Closes: #648180 Thanks to Colin Watson for the patch.
* Error out if a dpkg database .list file is not a regular file. LP: #369898
* Fix dpkg-mergechangelogs to not error out on invalid versions.
  Closes: #651993
* Fix dpkg-source --commit on "3.0 (quilt)" when an explicit patch file
  is given with a relative filename. Closes: #652414
* Further clarify in dpkg-source(1) the conditions under which it's possible
  to pass an explicit patch file to dpkg-source --commit.
* Add new --query-features command to dpkg-buildflags. Thanks to Kees Cook
  for the patch. Closes: #651481
* Fix description of Multi-Arch in deb-control(5). Closes: #654453
  Thanks to Jakub Wilk for spotting the mistake.
* Drop misleading spaces in deb-symbols(5) in the format description.
* Clean up dpkg-architecture(1) dropping useless information and
  adding a reference to /usr/share/dpkg/architecture.mk.
* Update dpkg-buildpackage to use the "build-arch" (for -B) and
  "build-indep" (for -A) targets unless "make -qn" says that they do not
  exist. Closes: #229357

[ Jonathan Nieder ]
* Bump po4a version in Build-Depends to 0.41, since earlier versions do
  not handle --srcdir correctly. Closes: #644370

[ Helge Kreutzmann ]
* Fix a typo in man/dpkg-deb.1.

[ Updated dpkg translations ]
* German (Sven Joachim).
* Italian (Milo Casagrande). Closes: #627832, #657849
* Swedish (Peter Krefting).
* French (Christian Perrier)

[ Updated scripts translations ]
* German (Helge Kreutzmann).
* Spanish (Omar Campagne). Closes: #636238
* Swedish (Peter Krefting).

[ Updated man page translations ]
* German (Helge Kreutzmann), including typo fix in dpkg-genchanges
  Closes: #646496, sub optimal translation of package states LP: #368783
  and an fix by Chris Leick
* Japanese (TAKAHASHI Motonobu).
* Spanish (Omar Campagne). Closes: #643969
* Swedish (Peter Krefting).
* Minor errors corrected in French (thanks to David Prévot)
* Fix translation of -B and -A options of dpkg-buildpackage.
  Thanks to Vincent Danjean. Closes: #654626

[ Updated dselect translations ]
* Dutch (Jeroen Schot). Closes: #651813

Author: Raphaël Hertzog
Revision Date: 2011-01-05 10:58:17 UTC

* Fix multiple security issues with dpkg-source (CVE-2010-1679):
  - Enhance checks to catch maliciously crafted patches which could modify
    files outside of the unpacked source package.
  - Do not consider a top-level symlink like a directory when
    extracting a tarball.
  - Exclude .pc while extracting the upstream tarball in 3.0 (quilt)
    as patch blindly writes in that directory during unpack (and would
    follow any existing symlink).