Author: Ubuntu Git Importer
Author Date: 2019-03-01 10:26:10 UTC

DSC file for 1.19.5ubuntu1

Author: Matthias Klose
Author Date: 2019-03-01 09:55:21 UTC

Import patches-unapplied version 1.19.5ubuntu1 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 527843b4f4e7bd3dc8d70fcd148c7b20f5ac8edd

New changelog entries:
  * Merge from current Debian testing; remaining Ubuntu changes:
    - Change native source version/format mismatch errors into warnings
      until the dust settles on Debian bug 737634 about override options.
    - Add DPKG_UNTRANSLATED_MESSAGES environment check so that higher-level
      tools can get untranslated dpkg terminal log messages while at the
      same time having translated debconf prompts.
    - Special-case arm{el,hf} ELF objects in Shlibs/Objdump.pm for multilib.
    - Map unqualified package names of multiarch-same packages to the native
      arch instead of throwing an error, so that we don't break on upgrade
      when there are unqualified names stored in the dpkg trigger database.
    - Apply a workaround from mvo to consider ^rc packages as multiarch,
      during the dpkg consistency checks. (see LP: 1015567 and 1057367).
    - dpkg-gencontrol: Fix Package-Type override handling for ddeb support.
    - Add Zstd compression and decompression support for binary packages.

Author: Matthias Klose
Author Date: 2019-03-01 09:55:21 UTC

Import patches-unapplied version 1.19.5ubuntu1 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 527843b4f4e7bd3dc8d70fcd148c7b20f5ac8edd

New changelog entries:
  * Merge from current Debian testing; remaining Ubuntu changes:
    - Change native source version/format mismatch errors into warnings
      until the dust settles on Debian bug 737634 about override options.
    - Add DPKG_UNTRANSLATED_MESSAGES environment check so that higher-level
      tools can get untranslated dpkg terminal log messages while at the
      same time having translated debconf prompts.
    - Special-case arm{el,hf} ELF objects in Shlibs/Objdump.pm for multilib.
    - Map unqualified package names of multiarch-same packages to the native
      arch instead of throwing an error, so that we don't break on upgrade
      when there are unqualified names stored in the dpkg trigger database.
    - Apply a workaround from mvo to consider ^rc packages as multiarch,
      during the dpkg consistency checks. (see LP: 1015567 and 1057367).
    - dpkg-gencontrol: Fix Package-Type override handling for ddeb support.
    - Add Zstd compression and decompression support for binary packages.

Author: Matthias Klose
Author Date: 2019-03-01 09:55:21 UTC

Import patches-unapplied version 1.19.5ubuntu1 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 527843b4f4e7bd3dc8d70fcd148c7b20f5ac8edd

New changelog entries:
  * Merge from current Debian testing; remaining Ubuntu changes:
    - Change native source version/format mismatch errors into warnings
      until the dust settles on Debian bug 737634 about override options.
    - Add DPKG_UNTRANSLATED_MESSAGES environment check so that higher-level
      tools can get untranslated dpkg terminal log messages while at the
      same time having translated debconf prompts.
    - Special-case arm{el,hf} ELF objects in Shlibs/Objdump.pm for multilib.
    - Map unqualified package names of multiarch-same packages to the native
      arch instead of throwing an error, so that we don't break on upgrade
      when there are unqualified names stored in the dpkg trigger database.
    - Apply a workaround from mvo to consider ^rc packages as multiarch,
      during the dpkg consistency checks. (see LP: 1015567 and 1057367).
    - dpkg-gencontrol: Fix Package-Type override handling for ddeb support.
    - Add Zstd compression and decompression support for binary packages.

Author: Matthias Klose
Author Date: 2019-03-01 09:55:21 UTC

Import patches-unapplied version 1.19.5ubuntu1 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 527843b4f4e7bd3dc8d70fcd148c7b20f5ac8edd

New changelog entries:
  * Merge from current Debian testing; remaining Ubuntu changes:
    - Change native source version/format mismatch errors into warnings
      until the dust settles on Debian bug 737634 about override options.
    - Add DPKG_UNTRANSLATED_MESSAGES environment check so that higher-level
      tools can get untranslated dpkg terminal log messages while at the
      same time having translated debconf prompts.
    - Special-case arm{el,hf} ELF objects in Shlibs/Objdump.pm for multilib.
    - Map unqualified package names of multiarch-same packages to the native
      arch instead of throwing an error, so that we don't break on upgrade
      when there are unqualified names stored in the dpkg trigger database.
    - Apply a workaround from mvo to consider ^rc packages as multiarch,
      during the dpkg consistency checks. (see LP: 1015567 and 1057367).
    - dpkg-gencontrol: Fix Package-Type override handling for ddeb support.
    - Add Zstd compression and decompression support for binary packages.

Author: Ubuntu Git Importer
Author Date: 2019-02-24 10:46:04 UTC

DSC file for 1.19.5

Author: Guillem Jover
Author Date: 2019-02-23 17:00:54 UTC

Import patches-unapplied version 1.19.5 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 1a901d7c6f7ad9ac1101f9fa6a037158e891a027

New changelog entries:
  [ Guillem Jover ]
  * start-stop-daemon: Make sure that we get a meaningful errno on
    parse_unsigned(), so that the error messages always make sense.
  * start-stop-daemon: Add new fatalv() and fatale() functions and use the
    latter for system errors, so that we are explicit on whether we want to
    use errno for error reporting or not.
  * start-stop-daemon: Always refuse to parse a world-writable pidfile,
    except when that is /dev/null.
  * dpkg: Print the current set of enabled force options on --force-help.
  * dpkg: Parse and set new DPKG_FORCE environment variable for subprocesses.
    Closes: #666147
  * dpkg-statoverride: Add support for --force-* options.
  * dpkg-statoverride: Switch from --force option to new --force-<thing>
    options. Deprecate --force option which will be considered an alias for
    --force-all for now.
  * dpkg, dpkg-statoverride: Add new option --refuse-security-mac to control
    SELinux. See #811037.
  * dpkg: Clarify error on unknown system user/group in statoverride database.
    Closes: #920880
  * dpkg-buildpackage: Clarify the warning/error on short OpenPGP key IDs.
    Closes: #922039
  * dpkg-maintscript-helper: Restrict find for dir-to-symlink move to
    -maxdepth 1. Thanks to Ralf Treinen <treinen@free.fr>. Closes: #922799
  * dpkg-genbuildinfo: Add support for a new Build-Tainted-By field in
    .buildinfo files. Suggested by Alexander E. Patrakov <patrakov@gmail.com>.
  * libdpkg: Clarify field names in error and warning messages.
  * libdpkg: Optimize error handling. Move the error reporting outside the
    involved functions so that we do not need to call gettext if there is no
    error, which has a significant performance cost.
  * libdpkg: Merge nicknames table into fieldinfos, to stop penalizing the
    lookup of non-obsolete fieldnames.
  * libdpkg: Print a more accurate warning for Revision nicknames.
  * libdpkg: Increase the pkg-hash bins size to 65521, to improve hash table
    performance at the cost of a bit more memory usage.
  * libdpkg: Blank packages that are not-installed with unknown selection.
    Closes: #922410
  * libdpkg, dpkg: Print the dpkg database directory on access errors.
    Closes: #883700
  * Perl modules:
    - Dpkg::Vendor::Debian: Add support for merged-usr-via-symlinks tainted
      tag. Suggested by Alexander E. Patrakov <patrakov@gmail.com>.
    - Dpkg::Vendor::Debian: Add support for usr-local-has-* tainted tags.
    - Dpkg::Source::Package: Add a missing use Dpkg::Source::Format.
      Diagnosed by Ian Jackson <ijackson@chiark.greenend.org.uk>.
      Closes: #921031
  * Documentation:
    - start-stop-daemon(1): Document behavior of --pidfile security checks.
      Closes: #921557
    - dpkg(1): Document the unknown selection state. Closes: #922407
  * Code internals:
    - dpkg: Move SELinux fallback label to the SELinux specific code path.
    - dpkg: Simplify maintscript_set_exec_context().
    - dpkg: Move force options support into its own file.
    - dpkg: Do not hardcode the program name in the --force-help output.
    - dpkg: Switch force options from individual variables to bit fields.
    - dpkg: Switch from a char to an enum to track the force options types.
    - dpkg: Switch to set the default force option from the forceinfos array.
    - libdpkg: New benchmark programs and infrastructure.
    - libdpkg: Add new dpkg_error_move() function.
    - libdpkg: Add new dpkg_has_error() function.
    - libdpkg: Move status names from parse errors to arguments.
    - libdpkg: Use va_arg copy instead of the original on a vasprintf() call.
    - libdpkg: Include <string.h> in pager.c.
      Reported by Y <sevener@cock.li>. Closes: #922212
    - libdpkg: Use pkg_set_want() instead of a direct assignment.
  * Build system:
    - Check whether this dist is a release, based only on the version format.
      This will avoid having to do a two staged release to get a proper perl
      distribution tarball.
  * Packaging:
    - autopkgtest: Add file to Depends fields.
    - autopkgtest: Clarify behavior on root/non-root requirement.
    - Bump Standards-Version to 4.3.0 (no changes required).
    - Remove now unused assert usertag description.
    - Remove trailing whitespace from changelog.
    - Remove Origin and Bugs fields from control file.
    - Include a bug-script to report on tainted merged-usr-via-symlinks.
  * Test suite:
    - libdpkg: Fix unit test for file_slurp(). Closes: #920974
      Diagnosed by Frank Schaefer <kelledin@gmail.com>.
  [ Updated programs translations ]
  * Dutch (Frans Spiesschaert). Closes: #921942
  * German (Sven Joachim).
  * Simplified Chinese (Zhou Mo). Closes: #920972
  [ Updated scripts translations ]
  * German (Helge Kreutzmann).
  [ Updated man pages translations ]
  * Dutch (Frans Spiesschaert). Closes: #921943
  * French (Jean-Pierre Giraud). Closes: #920905
  * German (Helge Kreutzmann).

Author: Guillem Jover
Author Date: 2019-02-23 17:00:54 UTC

Import patches-applied version 1.19.5 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: e9e90c92a4e759831ba7394824b7e6358dbcd4f6
Unapplied parent: 527843b4f4e7bd3dc8d70fcd148c7b20f5ac8edd

New changelog entries:
  [ Guillem Jover ]
  * start-stop-daemon: Make sure that we get a meaningful errno on
    parse_unsigned(), so that the error messages always make sense.
  * start-stop-daemon: Add new fatalv() and fatale() functions and use the
    latter for system errors, so that we are explicit on whether we want to
    use errno for error reporting or not.
  * start-stop-daemon: Always refuse to parse a world-writable pidfile,
    except when that is /dev/null.
  * dpkg: Print the current set of enabled force options on --force-help.
  * dpkg: Parse and set new DPKG_FORCE environment variable for subprocesses.
    Closes: #666147
  * dpkg-statoverride: Add support for --force-* options.
  * dpkg-statoverride: Switch from --force option to new --force-<thing>
    options. Deprecate --force option which will be considered an alias for
    --force-all for now.
  * dpkg, dpkg-statoverride: Add new option --refuse-security-mac to control
    SELinux. See #811037.
  * dpkg: Clarify error on unknown system user/group in statoverride database.
    Closes: #920880
  * dpkg-buildpackage: Clarify the warning/error on short OpenPGP key IDs.
    Closes: #922039
  * dpkg-maintscript-helper: Restrict find for dir-to-symlink move to
    -maxdepth 1. Thanks to Ralf Treinen <treinen@free.fr>. Closes: #922799
  * dpkg-genbuildinfo: Add support for a new Build-Tainted-By field in
    .buildinfo files. Suggested by Alexander E. Patrakov <patrakov@gmail.com>.
  * libdpkg: Clarify field names in error and warning messages.
  * libdpkg: Optimize error handling. Move the error reporting outside the
    involved functions so that we do not need to call gettext if there is no
    error, which has a significant performance cost.
  * libdpkg: Merge nicknames table into fieldinfos, to stop penalizing the
    lookup of non-obsolete fieldnames.
  * libdpkg: Print a more accurate warning for Revision nicknames.
  * libdpkg: Increase the pkg-hash bins size to 65521, to improve hash table
    performance at the cost of a bit more memory usage.
  * libdpkg: Blank packages that are not-installed with unknown selection.
    Closes: #922410
  * libdpkg, dpkg: Print the dpkg database directory on access errors.
    Closes: #883700
  * Perl modules:
    - Dpkg::Vendor::Debian: Add support for merged-usr-via-symlinks tainted
      tag. Suggested by Alexander E. Patrakov <patrakov@gmail.com>.
    - Dpkg::Vendor::Debian: Add support for usr-local-has-* tainted tags.
    - Dpkg::Source::Package: Add a missing use Dpkg::Source::Format.
      Diagnosed by Ian Jackson <ijackson@chiark.greenend.org.uk>.
      Closes: #921031
  * Documentation:
    - start-stop-daemon(1): Document behavior of --pidfile security checks.
      Closes: #921557
    - dpkg(1): Document the unknown selection state. Closes: #922407
  * Code internals:
    - dpkg: Move SELinux fallback label to the SELinux specific code path.
    - dpkg: Simplify maintscript_set_exec_context().
    - dpkg: Move force options support into its own file.
    - dpkg: Do not hardcode the program name in the --force-help output.
    - dpkg: Switch force options from individual variables to bit fields.
    - dpkg: Switch from a char to an enum to track the force options types.
    - dpkg: Switch to set the default force option from the forceinfos array.
    - libdpkg: New benchmark programs and infrastructure.
    - libdpkg: Add new dpkg_error_move() function.
    - libdpkg: Add new dpkg_has_error() function.
    - libdpkg: Move status names from parse errors to arguments.
    - libdpkg: Use va_arg copy instead of the original on a vasprintf() call.
    - libdpkg: Include <string.h> in pager.c.
      Reported by Y <sevener@cock.li>. Closes: #922212
    - libdpkg: Use pkg_set_want() instead of a direct assignment.
  * Build system:
    - Check whether this dist is a release, based only on the version format.
      This will avoid having to do a two staged release to get a proper perl
      distribution tarball.
  * Packaging:
    - autopkgtest: Add file to Depends fields.
    - autopkgtest: Clarify behavior on root/non-root requirement.
    - Bump Standards-Version to 4.3.0 (no changes required).
    - Remove now unused assert usertag description.
    - Remove trailing whitespace from changelog.
    - Remove Origin and Bugs fields from control file.
    - Include a bug-script to report on tainted merged-usr-via-symlinks.
  * Test suite:
    - libdpkg: Fix unit test for file_slurp(). Closes: #920974
      Diagnosed by Frank Schaefer <kelledin@gmail.com>.
  [ Updated programs translations ]
  * Dutch (Frans Spiesschaert). Closes: #921942
  * German (Sven Joachim).
  * Simplified Chinese (Zhou Mo). Closes: #920972
  [ Updated scripts translations ]
  * German (Helge Kreutzmann).
  [ Updated man pages translations ]
  * Dutch (Frans Spiesschaert). Closes: #921943
  * French (Jean-Pierre Giraud). Closes: #920905
  * German (Helge Kreutzmann).

Author: Guillem Jover
Author Date: 2019-02-23 17:00:54 UTC

Import patches-applied version 1.19.5 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: e9e90c92a4e759831ba7394824b7e6358dbcd4f6
Unapplied parent: 527843b4f4e7bd3dc8d70fcd148c7b20f5ac8edd

New changelog entries:
  [ Guillem Jover ]
  * start-stop-daemon: Make sure that we get a meaningful errno on
    parse_unsigned(), so that the error messages always make sense.
  * start-stop-daemon: Add new fatalv() and fatale() functions and use the
    latter for system errors, so that we are explicit on whether we want to
    use errno for error reporting or not.
  * start-stop-daemon: Always refuse to parse a world-writable pidfile,
    except when that is /dev/null.
  * dpkg: Print the current set of enabled force options on --force-help.
  * dpkg: Parse and set new DPKG_FORCE environment variable for subprocesses.
    Closes: #666147
  * dpkg-statoverride: Add support for --force-* options.
  * dpkg-statoverride: Switch from --force option to new --force-<thing>
    options. Deprecate --force option which will be considered an alias for
    --force-all for now.
  * dpkg, dpkg-statoverride: Add new option --refuse-security-mac to control
    SELinux. See #811037.
  * dpkg: Clarify error on unknown system user/group in statoverride database.
    Closes: #920880
  * dpkg-buildpackage: Clarify the warning/error on short OpenPGP key IDs.
    Closes: #922039
  * dpkg-maintscript-helper: Restrict find for dir-to-symlink move to
    -maxdepth 1. Thanks to Ralf Treinen <treinen@free.fr>. Closes: #922799
  * dpkg-genbuildinfo: Add support for a new Build-Tainted-By field in
    .buildinfo files. Suggested by Alexander E. Patrakov <patrakov@gmail.com>.
  * libdpkg: Clarify field names in error and warning messages.
  * libdpkg: Optimize error handling. Move the error reporting outside the
    involved functions so that we do not need to call gettext if there is no
    error, which has a significant performance cost.
  * libdpkg: Merge nicknames table into fieldinfos, to stop penalizing the
    lookup of non-obsolete fieldnames.
  * libdpkg: Print a more accurate warning for Revision nicknames.
  * libdpkg: Increase the pkg-hash bins size to 65521, to improve hash table
    performance at the cost of a bit more memory usage.
  * libdpkg: Blank packages that are not-installed with unknown selection.
    Closes: #922410
  * libdpkg, dpkg: Print the dpkg database directory on access errors.
    Closes: #883700
  * Perl modules:
    - Dpkg::Vendor::Debian: Add support for merged-usr-via-symlinks tainted
      tag. Suggested by Alexander E. Patrakov <patrakov@gmail.com>.
    - Dpkg::Vendor::Debian: Add support for usr-local-has-* tainted tags.
    - Dpkg::Source::Package: Add a missing use Dpkg::Source::Format.
      Diagnosed by Ian Jackson <ijackson@chiark.greenend.org.uk>.
      Closes: #921031
  * Documentation:
    - start-stop-daemon(1): Document behavior of --pidfile security checks.
      Closes: #921557
    - dpkg(1): Document the unknown selection state. Closes: #922407
  * Code internals:
    - dpkg: Move SELinux fallback label to the SELinux specific code path.
    - dpkg: Simplify maintscript_set_exec_context().
    - dpkg: Move force options support into its own file.
    - dpkg: Do not hardcode the program name in the --force-help output.
    - dpkg: Switch force options from individual variables to bit fields.
    - dpkg: Switch from a char to an enum to track the force options types.
    - dpkg: Switch to set the default force option from the forceinfos array.
    - libdpkg: New benchmark programs and infrastructure.
    - libdpkg: Add new dpkg_error_move() function.
    - libdpkg: Add new dpkg_has_error() function.
    - libdpkg: Move status names from parse errors to arguments.
    - libdpkg: Use va_arg copy instead of the original on a vasprintf() call.
    - libdpkg: Include <string.h> in pager.c.
      Reported by Y <sevener@cock.li>. Closes: #922212
    - libdpkg: Use pkg_set_want() instead of a direct assignment.
  * Build system:
    - Check whether this dist is a release, based only on the version format.
      This will avoid having to do a two staged release to get a proper perl
      distribution tarball.
  * Packaging:
    - autopkgtest: Add file to Depends fields.
    - autopkgtest: Clarify behavior on root/non-root requirement.
    - Bump Standards-Version to 4.3.0 (no changes required).
    - Remove now unused assert usertag description.
    - Remove trailing whitespace from changelog.
    - Remove Origin and Bugs fields from control file.
    - Include a bug-script to report on tainted merged-usr-via-symlinks.
  * Test suite:
    - libdpkg: Fix unit test for file_slurp(). Closes: #920974
      Diagnosed by Frank Schaefer <kelledin@gmail.com>.
  [ Updated programs translations ]
  * Dutch (Frans Spiesschaert). Closes: #921942
  * German (Sven Joachim).
  * Simplified Chinese (Zhou Mo). Closes: #920972
  [ Updated scripts translations ]
  * German (Helge Kreutzmann).
  [ Updated man pages translations ]
  * Dutch (Frans Spiesschaert). Closes: #921943
  * French (Jean-Pierre Giraud). Closes: #920905
  * German (Helge Kreutzmann).

Author: Guillem Jover
Author Date: 2019-02-23 17:00:54 UTC

Import patches-unapplied version 1.19.5 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 1a901d7c6f7ad9ac1101f9fa6a037158e891a027

New changelog entries:
  [ Guillem Jover ]
  * start-stop-daemon: Make sure that we get a meaningful errno on
    parse_unsigned(), so that the error messages always make sense.
  * start-stop-daemon: Add new fatalv() and fatale() functions and use the
    latter for system errors, so that we are explicit on whether we want to
    use errno for error reporting or not.
  * start-stop-daemon: Always refuse to parse a world-writable pidfile,
    except when that is /dev/null.
  * dpkg: Print the current set of enabled force options on --force-help.
  * dpkg: Parse and set new DPKG_FORCE environment variable for subprocesses.
    Closes: #666147
  * dpkg-statoverride: Add support for --force-* options.
  * dpkg-statoverride: Switch from --force option to new --force-<thing>
    options. Deprecate --force option which will be considered an alias for
    --force-all for now.
  * dpkg, dpkg-statoverride: Add new option --refuse-security-mac to control
    SELinux. See #811037.
  * dpkg: Clarify error on unknown system user/group in statoverride database.
    Closes: #920880
  * dpkg-buildpackage: Clarify the warning/error on short OpenPGP key IDs.
    Closes: #922039
  * dpkg-maintscript-helper: Restrict find for dir-to-symlink move to
    -maxdepth 1. Thanks to Ralf Treinen <treinen@free.fr>. Closes: #922799
  * dpkg-genbuildinfo: Add support for a new Build-Tainted-By field in
    .buildinfo files. Suggested by Alexander E. Patrakov <patrakov@gmail.com>.
  * libdpkg: Clarify field names in error and warning messages.
  * libdpkg: Optimize error handling. Move the error reporting outside the
    involved functions so that we do not need to call gettext if there is no
    error, which has a significant performance cost.
  * libdpkg: Merge nicknames table into fieldinfos, to stop penalizing the
    lookup of non-obsolete fieldnames.
  * libdpkg: Print a more accurate warning for Revision nicknames.
  * libdpkg: Increase the pkg-hash bins size to 65521, to improve hash table
    performance at the cost of a bit more memory usage.
  * libdpkg: Blank packages that are not-installed with unknown selection.
    Closes: #922410
  * libdpkg, dpkg: Print the dpkg database directory on access errors.
    Closes: #883700
  * Perl modules:
    - Dpkg::Vendor::Debian: Add support for merged-usr-via-symlinks tainted
      tag. Suggested by Alexander E. Patrakov <patrakov@gmail.com>.
    - Dpkg::Vendor::Debian: Add support for usr-local-has-* tainted tags.
    - Dpkg::Source::Package: Add a missing use Dpkg::Source::Format.
      Diagnosed by Ian Jackson <ijackson@chiark.greenend.org.uk>.
      Closes: #921031
  * Documentation:
    - start-stop-daemon(1): Document behavior of --pidfile security checks.
      Closes: #921557
    - dpkg(1): Document the unknown selection state. Closes: #922407
  * Code internals:
    - dpkg: Move SELinux fallback label to the SELinux specific code path.
    - dpkg: Simplify maintscript_set_exec_context().
    - dpkg: Move force options support into its own file.
    - dpkg: Do not hardcode the program name in the --force-help output.
    - dpkg: Switch force options from individual variables to bit fields.
    - dpkg: Switch from a char to an enum to track the force options types.
    - dpkg: Switch to set the default force option from the forceinfos array.
    - libdpkg: New benchmark programs and infrastructure.
    - libdpkg: Add new dpkg_error_move() function.
    - libdpkg: Add new dpkg_has_error() function.
    - libdpkg: Move status names from parse errors to arguments.
    - libdpkg: Use va_arg copy instead of the original on a vasprintf() call.
    - libdpkg: Include <string.h> in pager.c.
      Reported by Y <sevener@cock.li>. Closes: #922212
    - libdpkg: Use pkg_set_want() instead of a direct assignment.
  * Build system:
    - Check whether this dist is a release, based only on the version format.
      This will avoid having to do a two staged release to get a proper perl
      distribution tarball.
  * Packaging:
    - autopkgtest: Add file to Depends fields.
    - autopkgtest: Clarify behavior on root/non-root requirement.
    - Bump Standards-Version to 4.3.0 (no changes required).
    - Remove now unused assert usertag description.
    - Remove trailing whitespace from changelog.
    - Remove Origin and Bugs fields from control file.
    - Include a bug-script to report on tainted merged-usr-via-symlinks.
  * Test suite:
    - libdpkg: Fix unit test for file_slurp(). Closes: #920974
      Diagnosed by Frank Schaefer <kelledin@gmail.com>.
  [ Updated programs translations ]
  * Dutch (Frans Spiesschaert). Closes: #921942
  * German (Sven Joachim).
  * Simplified Chinese (Zhou Mo). Closes: #920972
  [ Updated scripts translations ]
  * German (Helge Kreutzmann).
  [ Updated man pages translations ]
  * Dutch (Frans Spiesschaert). Closes: #921943
  * French (Jean-Pierre Giraud). Closes: #920905
  * German (Helge Kreutzmann).

Author: Julian Andres Klode
Author Date: 2018-10-04 12:21:49 UTC

Import patches-unapplied version 1.19.0.5ubuntu2.1 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: 44446fcbb543ce37f23ccc9e5887c010b18c6b1c

New changelog entries:
  * Apply patch from upstream to add frontend locking (LP: #1796081):
    - Add support for frontend locking. This makes it possible for frontends
      using this new protocol, to safely lock the dpkg database w/o risk of
      race conditions with other dpkg instances or frontends supporting the
      same protocol.

Author: Julian Andres Klode
Author Date: 2018-10-04 12:21:49 UTC

Import patches-unapplied version 1.19.0.5ubuntu2.1 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: 44446fcbb543ce37f23ccc9e5887c010b18c6b1c

New changelog entries:
  * Apply patch from upstream to add frontend locking (LP: #1796081):
    - Add support for frontend locking. This makes it possible for frontends
      using this new protocol, to safely lock the dpkg database w/o risk of
      race conditions with other dpkg instances or frontends supporting the
      same protocol.

Author: Julian Andres Klode
Author Date: 2018-10-04 12:21:49 UTC

Import patches-unapplied version 1.18.4ubuntu1.5 to ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: 678ea00f730652c43a28c8494a7da7dfbd9a759b

New changelog entries:
  * Apply patch from upstream to add frontend locking (LP: #1796081):
    - Add support for frontend locking. This makes it possible for frontends
      using this new protocol, to safely lock the dpkg database w/o risk of
      race conditions with other dpkg instances or frontends supporting the
      same protocol.

Author: Julian Andres Klode
Author Date: 2018-10-04 12:21:49 UTC

Import patches-unapplied version 1.18.4ubuntu1.5 to ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: 678ea00f730652c43a28c8494a7da7dfbd9a759b

New changelog entries:
  * Apply patch from upstream to add frontend locking (LP: #1796081):
    - Add support for frontend locking. This makes it possible for frontends
      using this new protocol, to safely lock the dpkg database w/o risk of
      race conditions with other dpkg instances or frontends supporting the
      same protocol.

Author: Julian Andres Klode
Author Date: 2018-10-04 12:21:49 UTC

Import patches-unapplied version 1.18.4ubuntu1.5 to ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: 678ea00f730652c43a28c8494a7da7dfbd9a759b

New changelog entries:
  * Apply patch from upstream to add frontend locking (LP: #1796081):
    - Add support for frontend locking. This makes it possible for frontends
      using this new protocol, to safely lock the dpkg database w/o risk of
      race conditions with other dpkg instances or frontends supporting the
      same protocol.

Author: Julian Andres Klode
Author Date: 2018-10-04 12:21:49 UTC

Import patches-unapplied version 1.19.0.5ubuntu2.1 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: 44446fcbb543ce37f23ccc9e5887c010b18c6b1c

New changelog entries:
  * Apply patch from upstream to add frontend locking (LP: #1796081):
    - Add support for frontend locking. This makes it possible for frontends
      using this new protocol, to safely lock the dpkg database w/o risk of
      race conditions with other dpkg instances or frontends supporting the
      same protocol.

Author: Gianfranco Costamagna
Author Date: 2018-09-13 11:46:04 UTC

Import patches-unapplied version 1.19.0.5ubuntu5 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: e96a66a6fb2225ec5c3eb20f8dde0952f7d21a52

New changelog entries:
  * Manually do autoreconf -fi to pick up new automake 1.16

Author: Gianfranco Costamagna
Author Date: 2018-09-13 11:46:04 UTC

Import patches-unapplied version 1.19.0.5ubuntu5 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: e96a66a6fb2225ec5c3eb20f8dde0952f7d21a52

New changelog entries:
  * Manually do autoreconf -fi to pick up new automake 1.16

Author: Gianfranco Costamagna
Author Date: 2018-09-13 11:46:04 UTC

Import patches-unapplied version 1.19.0.5ubuntu5 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: e96a66a6fb2225ec5c3eb20f8dde0952f7d21a52

New changelog entries:
  * Manually do autoreconf -fi to pick up new automake 1.16

Author: Guillem Jover
Author Date: 2018-06-26 10:28:08 UTC

Import patches-applied version 1.18.25 to applied/debian/stretch

Imported using git-ubuntu import.

Changelog parent: 4366ddf6758fef63f887598fd84e74df91e9a62f
Unapplied parent: f929151e899f7e86b92e91418049810e5ee5d496

New changelog entries:
  [ Guillem Jover ]
  * Parse start-stop-daemon usernames and groupnames starting with digits in
    -u and -c correctly. Reported by Bodo Eggert <7eggert@online.de>.
  * Always use the binary version for the .buildinfo filename in
    dpkg-genbuildinfo. Reported by Raphaël Hertzog <hertzog@debian.org>.
    Closes: #869236
  * Fix integer overflow in deb(5) format version parser.
    Closes: #868356
  * Fix directory traversal with dpkg-deb --raw-extract, by guaranteeing
    that the DEBIAN pathname does not exist. Closes: #879982
    Reported by Jakub Wilk <jwilk@jwilk.net>.
  * Do not try to recompute hashes for the .dsc file when signing binary-only
    builds in dpkg-buildpackage. Reported by Ximin Luo <infinity0@debian.org>.
  * Architecture support:
    - Add support for riscv64 CPU. Closes: #822914
      Thanks to Manuel A. Fernandez Montecelo <mafm@debian.org>
  * Perl modules:
    - Do not normalize args past a passthrough stop word in Dpkg::Getopt.
      Some commands pass some arguments through to another command, and
      those must not be normalized as that might break their invocation.
      Reported by Helmut Grohne <helmut@subdivi.de>.
  * Documentation:
    - Update buildinfo information in dpkg-buildpackage man page to match
      the current implementation.
    - Use correct name for archname validator value in dpkg(1) man page.
      Reported by Niels Thykier <niels@thykier.net.
    - Update git URLs for move away from alioth.debian.org.
  * Packaging:
    - Add versioned Build-Depends on tar, due to the --clamp-mtime option
      being used in Dpkg::Source::Archive which is used by dpkg-source,
      used by the test suite. Closes: #877330
  [ Updated programs translations ]
  * Dutch (Frans Spiesschaert).
  * German (Sven Joachim).
  * Italian (Pietro Battiston, Milo Casagrande).
  * Portuguese (Miguel Figueiredo).
  * Simplified Chinese (Zhou Mo, Boyuan Yang).
  * Spanish (Javier Fernandez-Sanguino).
  * Turkish (Mert Dirik).
  [ Updated man pages translations ]
  * Dutch (Frans Spiesschaert).
  * German (Helge Kreutzmann).

Author: Guillem Jover
Author Date: 2018-06-26 10:28:08 UTC

Import patches-unapplied version 1.18.25 to debian/stretch

Imported using git-ubuntu import.

Changelog parent: ea4ed8ab98db4b88c96bf1ab8146b2105b720030

New changelog entries:
  [ Guillem Jover ]
  * Parse start-stop-daemon usernames and groupnames starting with digits in
    -u and -c correctly. Reported by Bodo Eggert <7eggert@online.de>.
  * Always use the binary version for the .buildinfo filename in
    dpkg-genbuildinfo. Reported by Raphaël Hertzog <hertzog@debian.org>.
    Closes: #869236
  * Fix integer overflow in deb(5) format version parser.
    Closes: #868356
  * Fix directory traversal with dpkg-deb --raw-extract, by guaranteeing
    that the DEBIAN pathname does not exist. Closes: #879982
    Reported by Jakub Wilk <jwilk@jwilk.net>.
  * Do not try to recompute hashes for the .dsc file when signing binary-only
    builds in dpkg-buildpackage. Reported by Ximin Luo <infinity0@debian.org>.
  * Architecture support:
    - Add support for riscv64 CPU. Closes: #822914
      Thanks to Manuel A. Fernandez Montecelo <mafm@debian.org>
  * Perl modules:
    - Do not normalize args past a passthrough stop word in Dpkg::Getopt.
      Some commands pass some arguments through to another command, and
      those must not be normalized as that might break their invocation.
      Reported by Helmut Grohne <helmut@subdivi.de>.
  * Documentation:
    - Update buildinfo information in dpkg-buildpackage man page to match
      the current implementation.
    - Use correct name for archname validator value in dpkg(1) man page.
      Reported by Niels Thykier <niels@thykier.net.
    - Update git URLs for move away from alioth.debian.org.
  * Packaging:
    - Add versioned Build-Depends on tar, due to the --clamp-mtime option
      being used in Dpkg::Source::Archive which is used by dpkg-source,
      used by the test suite. Closes: #877330
  [ Updated programs translations ]
  * Dutch (Frans Spiesschaert).
  * German (Sven Joachim).
  * Italian (Pietro Battiston, Milo Casagrande).
  * Portuguese (Miguel Figueiredo).
  * Simplified Chinese (Zhou Mo, Boyuan Yang).
  * Spanish (Javier Fernandez-Sanguino).
  * Turkish (Mert Dirik).
  [ Updated man pages translations ]
  * Dutch (Frans Spiesschaert).
  * German (Helge Kreutzmann).

Author: Balint Reczey
Author Date: 2018-04-16 02:25:21 UTC

Import patches-unapplied version 1.19.0.5ubuntu2 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: ee86fd621c522477e47fdd1cbe878cda50756777

New changelog entries:
  * Add Zstandard compression and decompression support for binary packages
    (LP: #1764220)

Author: Ubuntu Git Importer
Author Date: 2018-03-10 16:44:28 UTC

Initial Ubuntu pristine-tar branch.

Author: Ubuntu Git Importer
Author Date: 2018-03-10 16:44:28 UTC

Initial Debian pristine-tar branch.

Author: Adam Conrad
Author Date: 2017-12-04 19:15:45 UTC

Import patches-unapplied version 1.17.5ubuntu5.8 to ubuntu/trusty-proposed

Imported using git-ubuntu import.

Changelog parent: b7ba14d7f2f5cfdf34352d21580a695a85de7809

New changelog entries:
  * Add support for .deb archives with a control member not compressed
    (control.tar) or compressed with xz (control.tar.xz) LP: #1730627.

Author: Adam Conrad
Author Date: 2017-12-04 19:15:45 UTC

Import patches-unapplied version 1.17.5ubuntu5.8 to ubuntu/trusty-proposed

Imported using git-ubuntu import.

Changelog parent: b7ba14d7f2f5cfdf34352d21580a695a85de7809

New changelog entries:
  * Add support for .deb archives with a control member not compressed
    (control.tar) or compressed with xz (control.tar.xz) LP: #1730627.

Author: Adam Conrad
Author Date: 2017-12-04 19:15:45 UTC

Import patches-unapplied version 1.17.5ubuntu5.8 to ubuntu/trusty-proposed

Imported using git-ubuntu import.

Changelog parent: b7ba14d7f2f5cfdf34352d21580a695a85de7809

New changelog entries:
  * Add support for .deb archives with a control member not compressed
    (control.tar) or compressed with xz (control.tar.xz) LP: #1730627.

Author: Adam Conrad
Author Date: 2017-06-05 17:35:51 UTC

Import patches-unapplied version 1.18.24ubuntu1 to ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: ea4ed8ab98db4b88c96bf1ab8146b2105b720030

New changelog entries:
  * Merge from current Debian testing; remaining Ubuntu changes:
    - Change native source version/format mismatch errors into warnings
      until the dust settles on Debian bug 737634 about override options.
    - Add DPKG_UNTRANSLATED_MESSAGES environment check so that higher-level
      tools can get untranslated dpkg terminal log messages while at the
      same time having translated debconf prompts.
    - Special-case arm{el,hf} ELF objects in Shlibs/Objdump.pm for multilib.
    - Map unqualified package names of multiarch-same packages to the native
      arch instead of throwing an error, so that we don't break on upgrade
      when there are unqualified names stored in the dpkg trigger database.
    - Apply a workaround from mvo to consider ^rc packages as multiarch,
      during the dpkg consistency checks. (see LP: 1015567 and 1057367).
    - dpkg-gencontrol: Fix Package-Type override handling for ddeb support.
  * scripts/Dpkg/Vendor/Ubuntu.pm: Drop hardening changes merged upstream.
  * dpkg-buildpackage: Drop stale debian/files cleaning, solved differently.

Author: Adam Conrad
Author Date: 2017-06-05 17:35:51 UTC

Import patches-unapplied version 1.18.24ubuntu1 to ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: ea4ed8ab98db4b88c96bf1ab8146b2105b720030

New changelog entries:
  * Merge from current Debian testing; remaining Ubuntu changes:
    - Change native source version/format mismatch errors into warnings
      until the dust settles on Debian bug 737634 about override options.
    - Add DPKG_UNTRANSLATED_MESSAGES environment check so that higher-level
      tools can get untranslated dpkg terminal log messages while at the
      same time having translated debconf prompts.
    - Special-case arm{el,hf} ELF objects in Shlibs/Objdump.pm for multilib.
    - Map unqualified package names of multiarch-same packages to the native
      arch instead of throwing an error, so that we don't break on upgrade
      when there are unqualified names stored in the dpkg trigger database.
    - Apply a workaround from mvo to consider ^rc packages as multiarch,
      during the dpkg consistency checks. (see LP: 1015567 and 1057367).
    - dpkg-gencontrol: Fix Package-Type override handling for ddeb support.
  * scripts/Dpkg/Vendor/Ubuntu.pm: Drop hardening changes merged upstream.
  * dpkg-buildpackage: Drop stale debian/files cleaning, solved differently.

Author: Adam Conrad
Author Date: 2017-06-05 17:35:51 UTC

Import patches-unapplied version 1.18.24ubuntu1 to ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: ea4ed8ab98db4b88c96bf1ab8146b2105b720030

New changelog entries:
  * Merge from current Debian testing; remaining Ubuntu changes:
    - Change native source version/format mismatch errors into warnings
      until the dust settles on Debian bug 737634 about override options.
    - Add DPKG_UNTRANSLATED_MESSAGES environment check so that higher-level
      tools can get untranslated dpkg terminal log messages while at the
      same time having translated debconf prompts.
    - Special-case arm{el,hf} ELF objects in Shlibs/Objdump.pm for multilib.
    - Map unqualified package names of multiarch-same packages to the native
      arch instead of throwing an error, so that we don't break on upgrade
      when there are unqualified names stored in the dpkg trigger database.
    - Apply a workaround from mvo to consider ^rc packages as multiarch,
      during the dpkg consistency checks. (see LP: 1015567 and 1057367).
    - dpkg-gencontrol: Fix Package-Type override handling for ddeb support.
  * scripts/Dpkg/Vendor/Ubuntu.pm: Drop hardening changes merged upstream.
  * dpkg-buildpackage: Drop stale debian/files cleaning, solved differently.

Author: Adam Conrad
Author Date: 2017-04-10 10:08:19 UTC

Import patches-unapplied version 1.18.10ubuntu1.1 to ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: 482e5bbeb33dde61419a350b3b07bce9332ce2cd

New changelog entries:
  * Cherry-pick patch from git to limit preallocation to files over
    16KiB, fixing installation performance regression (LP: #1663749)

Author: Adam Conrad
Author Date: 2017-04-10 10:08:19 UTC

Import patches-unapplied version 1.18.10ubuntu1.1 to ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: 482e5bbeb33dde61419a350b3b07bce9332ce2cd

New changelog entries:
  * Cherry-pick patch from git to limit preallocation to files over
    16KiB, fixing installation performance regression (LP: #1663749)

Author: Adam Conrad
Author Date: 2017-04-10 10:08:19 UTC

Import patches-unapplied version 1.18.10ubuntu1.1 to ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: 482e5bbeb33dde61419a350b3b07bce9332ce2cd

New changelog entries:
  * Cherry-pick patch from git to limit preallocation to files over
    16KiB, fixing installation performance regression (LP: #1663749)

Author: Adam Conrad
Author Date: 2017-04-10 10:08:19 UTC

Import patches-unapplied version 1.18.10ubuntu2 to ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 482e5bbeb33dde61419a350b3b07bce9332ce2cd

New changelog entries:
  * Cherry-pick patch from git to limit preallocation to files over
    16KiB, fixing installation performance regression (LP: #1663749)

Author: Adam Conrad
Author Date: 2017-04-10 10:08:19 UTC

Import patches-unapplied version 1.18.10ubuntu2 to ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 482e5bbeb33dde61419a350b3b07bce9332ce2cd

New changelog entries:
  * Cherry-pick patch from git to limit preallocation to files over
    16KiB, fixing installation performance regression (LP: #1663749)

Author: Adam Conrad
Author Date: 2017-04-10 10:08:19 UTC

Import patches-unapplied version 1.18.10ubuntu2 to ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 482e5bbeb33dde61419a350b3b07bce9332ce2cd

New changelog entries:
  * Cherry-pick patch from git to limit preallocation to files over
    16KiB, fixing installation performance regression (LP: #1663749)

Author: Adam Conrad
Author Date: 2016-08-12 17:35:16 UTC

Import patches-unapplied version 1.18.10ubuntu1 to ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: d96b05fa7950ea28de50ed75c9ee697f266710dd

New changelog entries:
  * Merge from Debian testing; remaining Ubuntu changes:
    - Change native source version/format mismatch errors into warnings
      until the dust settles on Debian bug 737634 about override options.
    - Add DPKG_UNTRANSLATED_MESSAGES environment check so that higher-level
      tools can get untranslated dpkg terminal log messages while at the
      same time having translated debconf prompts.
    - Special-case arm{el,hf} ELF objects in Shlibs/Objdump.pm for multilib.
    - Map unqualified package names of multiarch-same packages to the native
      arch instead of throwing an error, so that we don't break on upgrade
      when there are unqualified names stored in the dpkg trigger database.
    - Apply a workaround from mvo to consider ^rc packages as multiarch,
      during the dpkg consistency checks. (see LP: 1015567 and 1057367).

Author: Colin Watson
Author Date: 2016-06-14 18:22:53 UTC

Import patches-unapplied version 1.16.1.2ubuntu7.8 to ubuntu/precise-proposed

Imported using git-ubuntu import.

Changelog parent: 4c0c52cd2addac776b5b74bd071bbc48982e06c3

New changelog entries:
  * Backport from Debian (LP: #1587667):
    - Allow detached upstream signatures for upstream orig.tar files in the
      .dsc file. Suggested by Daniel Kahn Gillmor <dkg@fifthhorseman.net>.
      Closes: #759478
    - Allow detached upstream orig tarball signatures when extracting
      version 1.0 non-native source packages.

Author: Colin Watson
Author Date: 2016-06-14 18:22:53 UTC

Import patches-unapplied version 1.16.1.2ubuntu7.8 to ubuntu/precise-proposed

Imported using git-ubuntu import.

Changelog parent: 4c0c52cd2addac776b5b74bd071bbc48982e06c3

New changelog entries:
  * Backport from Debian (LP: #1587667):
    - Allow detached upstream signatures for upstream orig.tar files in the
      .dsc file. Suggested by Daniel Kahn Gillmor <dkg@fifthhorseman.net>.
      Closes: #759478
    - Allow detached upstream orig tarball signatures when extracting
      version 1.0 non-native source packages.

Author: Colin Watson
Author Date: 2016-06-14 18:22:53 UTC

Import patches-unapplied version 1.16.1.2ubuntu7.8 to ubuntu/precise-proposed

Imported using git-ubuntu import.

Changelog parent: 4c0c52cd2addac776b5b74bd071bbc48982e06c3

New changelog entries:
  * Backport from Debian (LP: #1587667):
    - Allow detached upstream signatures for upstream orig.tar files in the
      .dsc file. Suggested by Daniel Kahn Gillmor <dkg@fifthhorseman.net>.
      Closes: #759478
    - Allow detached upstream orig tarball signatures when extracting
      version 1.0 non-native source packages.

Author: Guillem Jover
Author Date: 2016-03-20 09:23:24 UTC

Import patches-unapplied version 1.16.18 to debian/wheezy

Imported using git-ubuntu import.

Changelog parent: 5476bff3b4b097a28f79c894c4b4163b56e23813

New changelog entries:
  * Remove trailing space before handling blank line dot-separator in
    Dpkg::Control::Hash. Regression introduced in dpkg 1.16.16.
    Reported by Jakub Wilk <jwilk@debian.org>. Closes: #789580
  * Only use the SHELL environment variable for interactive shells.
    Closes: #788819
  * Move tar option --no-recursion before -T in dpkg-deb. With tar > 1.28 the
    --no-recursion option is now positional, and needs to be passed before
    the -T option, otherwise the tarball will end up with duplicated entries.
    Thanks to Richard Purdie <richard.purdie@linuxfoundation.org>.
    Closes: #807940
  * Initialize Config-Version also for packages previously in triggers-pending
    state, otherwise we end up not passing the previously configured version
    to «postinst configure», which might consider this a first install instead
    of an upgrade. Closes: #801156
  * Fix memory leaks in dpkg infodb format upgrade logic.
  * Fix physical file offset comparison in dpkg. Closes: #808912
    Thanks to Yuri Gribov <tetra2005@gmail.com>.
  * Do not accept empty field names in dpkg. Closes: #769111
  * When sys_siglist is defined in the system, try to use NSIG as we cannot
    compute the array size with sizeof(). If NSIG is missing fallback to 32
    items. Prompted by Igor Pashev <pashev.igor@gmail.com>.

Author: Guillem Jover
Author Date: 2016-03-20 09:23:24 UTC

Import patches-applied version 1.16.18 to applied/debian/wheezy

Imported using git-ubuntu import.

Changelog parent: f4ac19b44e862ffe6214d207b4d2f0bbaf2d163c
Unapplied parent: 8f9061819b0cef1505e1ef6d63d68ac1a0f00eb1

New changelog entries:
  * Remove trailing space before handling blank line dot-separator in
    Dpkg::Control::Hash. Regression introduced in dpkg 1.16.16.
    Reported by Jakub Wilk <jwilk@debian.org>. Closes: #789580
  * Only use the SHELL environment variable for interactive shells.
    Closes: #788819
  * Move tar option --no-recursion before -T in dpkg-deb. With tar > 1.28 the
    --no-recursion option is now positional, and needs to be passed before
    the -T option, otherwise the tarball will end up with duplicated entries.
    Thanks to Richard Purdie <richard.purdie@linuxfoundation.org>.
    Closes: #807940
  * Initialize Config-Version also for packages previously in triggers-pending
    state, otherwise we end up not passing the previously configured version
    to «postinst configure», which might consider this a first install instead
    of an upgrade. Closes: #801156
  * Fix memory leaks in dpkg infodb format upgrade logic.
  * Fix physical file offset comparison in dpkg. Closes: #808912
    Thanks to Yuri Gribov <tetra2005@gmail.com>.
  * Do not accept empty field names in dpkg. Closes: #769111
  * When sys_siglist is defined in the system, try to use NSIG as we cannot
    compute the array size with sizeof(). If NSIG is missing fallback to 32
    items. Prompted by Igor Pashev <pashev.igor@gmail.com>.

Author: Guillem Jover
Author Date: 2016-03-20 10:40:28 UTC

Import patches-applied version 1.17.27 to applied/debian/jessie

Imported using git-ubuntu import.

Changelog parent: 535957d8633c1131f22c3515beaaf78d8566842e
Unapplied parent: fa701bad2e2a506b96621d6f7f357dc7c5879b9d

New changelog entries:
  [ Guillem Jover ]
  * Add more Conflicts for removed packages expecting dpkg to ship
    install-info. Namely ada-mode and octave2.1-info. Closes: #783657
    Thanks to Andreas Beckmann <anbe@debian.org>.
  * Remove trailing space before handling blank line dot-separator in
    Dpkg::Control::HashCore. Regression introduced in dpkg 1.17.25.
    Reported by Jakub Wilk <jwilk@debian.org>. Closes: #789580
  * Only use the SHELL environment variable for interactive shells.
    Closes: #788819
  * Move tar option --no-recursion before -T in dpkg-deb. With tar > 1.28 the
    --no-recursion option is now positional, and needs to be passed before
    the -T option, otherwise the tarball will end up with duplicated entries.
    Thanks to Richard Purdie <richard.purdie@linuxfoundation.org>.
    Closes: #807940
  * Initialize Config-Version also for packages previously in triggers-pending
    state, otherwise we end up not passing the previously configured version
    to «postinst configure», which might consider this a first install instead
    of an upgrade. Closes: #801156
  * Fix memory leak in dpkg infodb format upgrade logic.
  * Fix physical file offset comparison in dpkg. Closes: #808912
    Thanks to Yuri Gribov <tetra2005@gmail.com>.
  * Add kfreebsd-armhf support to ostable and triplettable. Closes: #796283
    Thanks to Steven Chamberlain <steven@pyro.eu.org>.
  * Add NIOS2 support to cputable. Thanks to Marek Vasut <marex@denx.de>.
  * Build system:
    - Set PERL5LIB globally for the test suite to the local modules directory,
      to avoid using the system modules. Regression introduced in dpkg 1.17.8.
      Reported by Jérémy Bobbio <lunar@debian.org>. Closes: #801329
    - When sys_siglist is defined in the system, try to use NSIG as we cannot
      compute the array size with sizeof(). If NSIG is missing fallback to 32
      items. Prompted by Igor Pashev <pashev.igor@gmail.com>.
  [ Updated scripts translations ]
  * German (Helge Kreutzmann). (Various fixes)
  [ Updated manpages translations ]
  * German (Helge Kreutzmann). (Various fixes)

Author: Guillem Jover
Author Date: 2016-03-20 10:40:28 UTC

Import patches-unapplied version 1.17.27 to debian/jessie

Imported using git-ubuntu import.

Changelog parent: 9c719438360556ac11509a170e806130d6eaff70

New changelog entries:
  [ Guillem Jover ]
  * Add more Conflicts for removed packages expecting dpkg to ship
    install-info. Namely ada-mode and octave2.1-info. Closes: #783657
    Thanks to Andreas Beckmann <anbe@debian.org>.
  * Remove trailing space before handling blank line dot-separator in
    Dpkg::Control::HashCore. Regression introduced in dpkg 1.17.25.
    Reported by Jakub Wilk <jwilk@debian.org>. Closes: #789580
  * Only use the SHELL environment variable for interactive shells.
    Closes: #788819
  * Move tar option --no-recursion before -T in dpkg-deb. With tar > 1.28 the
    --no-recursion option is now positional, and needs to be passed before
    the -T option, otherwise the tarball will end up with duplicated entries.
    Thanks to Richard Purdie <richard.purdie@linuxfoundation.org>.
    Closes: #807940
  * Initialize Config-Version also for packages previously in triggers-pending
    state, otherwise we end up not passing the previously configured version
    to «postinst configure», which might consider this a first install instead
    of an upgrade. Closes: #801156
  * Fix memory leak in dpkg infodb format upgrade logic.
  * Fix physical file offset comparison in dpkg. Closes: #808912
    Thanks to Yuri Gribov <tetra2005@gmail.com>.
  * Add kfreebsd-armhf support to ostable and triplettable. Closes: #796283
    Thanks to Steven Chamberlain <steven@pyro.eu.org>.
  * Add NIOS2 support to cputable. Thanks to Marek Vasut <marex@denx.de>.
  * Build system:
    - Set PERL5LIB globally for the test suite to the local modules directory,
      to avoid using the system modules. Regression introduced in dpkg 1.17.8.
      Reported by Jérémy Bobbio <lunar@debian.org>. Closes: #801329
    - When sys_siglist is defined in the system, try to use NSIG as we cannot
      compute the array size with sizeof(). If NSIG is missing fallback to 32
      items. Prompted by Igor Pashev <pashev.igor@gmail.com>.
  [ Updated scripts translations ]
  * German (Helge Kreutzmann). (Various fixes)
  [ Updated manpages translations ]
  * German (Helge Kreutzmann). (Various fixes)

Author: Adam Conrad
Author Date: 2016-04-25 18:44:01 UTC

Import patches-unapplied version 1.17.5ubuntu5.6 to ubuntu/trusty-proposed

Imported using git-ubuntu import.

Changelog parent: 61b3281fa5815d3290f36676ebad4048508af339

New changelog entries:
  * dpkg-maintscript-helper: s/exit/return/ in subshells (LP: #1574285)

Author: Adam Conrad
Author Date: 2016-01-12 21:24:21 UTC

Import patches-unapplied version 1.18.4ubuntu1 to ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: 6847c2e933a39ce9ae80931f37e7733aa90fcec5

New changelog entries:
  * Merge from Debian testing; remaining changes in the Ubuntu delta:
    - Change native source version/format mismatch errors into warnings
      until the dust settles on Debian bug 737634 about override options.
    - Add DPKG_UNTRANSLATED_MESSAGES environment check so that higher-level
      tools can get untranslated dpkg terminal log messages while at the
      same time having translated debconf prompts.
    - Special-case arm{el,hf} ELF objects in Shlibs/Objdump.pm for multilib.
    - Map unqualified package names of multiarch-same packages to the native
      arch instead of throwing an error, so that we don't break on upgrade
      when there are unqualified names stored in the dpkg trigger database.
    - Apply a workaround from mvo to consider ^rc packages as multiarch,
      during the dpkg consistency checks. (see LP: 1015567 and 1057367).
    - Carry over Breaks/Conflicts for triggers/upgrades until post-16.04.

Author: Marc Deslauriers
Author Date: 2015-11-26 12:58:25 UTC

Import patches-unapplied version 1.17.25ubuntu1.1 to ubuntu/vivid-security

Imported using git-ubuntu import.

Changelog parent: 09c3a54a572ec9993f66d6773625498e71d94454

New changelog entries:
  * SECURITY UPDATE: multiple security issues
    - dpkg-deb/extract.c: Fix off-by-one write access on versionbuf
      variable.
    - dpkg-deb/extract.c: Fix off-by-one write access on ctrllenbuf
      variable. (CVE-2015-0860)
    - lib/dpkg/ar.c: Fix an off-by-one read access in ar member name
      variable.
    - Thanks to Guillem Jover and Hanno Böck for the patches!

Author: Marc Deslauriers
Author Date: 2015-11-26 12:40:52 UTC

Import patches-unapplied version 1.16.1.2ubuntu7.7 to ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: 2415b6747ace42fb32d51b60d5b70a2913898cc8

New changelog entries:
  * SECURITY UPDATE: multiple security issues
    - dpkg-deb/extract.c: Fix off-by-one write access on versionbuf
      variable.
    - dpkg-deb/extract.c: Fix off-by-one write access on ctrllenbuf
      variable. (CVE-2015-0860)
    - lib/dpkg/ar.c: Fix an off-by-one read access in ar member name
      variable.
    - Thanks to Guillem Jover and Hanno Böck for the patches!

Author: Marc Deslauriers
Author Date: 2015-11-26 12:58:25 UTC

Import patches-unapplied version 1.17.25ubuntu1.1 to ubuntu/vivid-security

Imported using git-ubuntu import.

Changelog parent: 09c3a54a572ec9993f66d6773625498e71d94454

New changelog entries:
  * SECURITY UPDATE: multiple security issues
    - dpkg-deb/extract.c: Fix off-by-one write access on versionbuf
      variable.
    - dpkg-deb/extract.c: Fix off-by-one write access on ctrllenbuf
      variable. (CVE-2015-0860)
    - lib/dpkg/ar.c: Fix an off-by-one read access in ar member name
      variable.
    - Thanks to Guillem Jover and Hanno Böck for the patches!

Author: Marc Deslauriers
Author Date: 2015-11-26 12:58:25 UTC

Import patches-unapplied version 1.17.25ubuntu1.1 to ubuntu/vivid-security

Imported using git-ubuntu import.

Changelog parent: 09c3a54a572ec9993f66d6773625498e71d94454

New changelog entries:
  * SECURITY UPDATE: multiple security issues
    - dpkg-deb/extract.c: Fix off-by-one write access on versionbuf
      variable.
    - dpkg-deb/extract.c: Fix off-by-one write access on ctrllenbuf
      variable. (CVE-2015-0860)
    - lib/dpkg/ar.c: Fix an off-by-one read access in ar member name
      variable.
    - Thanks to Guillem Jover and Hanno Böck for the patches!

Author: Marc Deslauriers
Author Date: 2015-11-26 13:00:10 UTC

Import patches-unapplied version 1.18.2ubuntu5.1 to ubuntu/wily-security

Imported using git-ubuntu import.

Changelog parent: b51da176b25d57bf43ce7ca7b7d624a1de602983

New changelog entries:
  * SECURITY UPDATE: multiple security issues
    - dpkg-deb/extract.c: Fix off-by-one write access on ctrllenbuf
      variable. (CVE-2015-0860)
    - lib/dpkg/ar.c: Fix an off-by-one read access in ar member name
      variable.
    - Thanks to Guillem Jover and Hanno Böck for the patches!

Author: Marc Deslauriers
Author Date: 2015-11-26 13:00:10 UTC

Import patches-unapplied version 1.18.2ubuntu5.1 to ubuntu/wily-security

Imported using git-ubuntu import.

Changelog parent: b51da176b25d57bf43ce7ca7b7d624a1de602983

New changelog entries:
  * SECURITY UPDATE: multiple security issues
    - dpkg-deb/extract.c: Fix off-by-one write access on ctrllenbuf
      variable. (CVE-2015-0860)
    - lib/dpkg/ar.c: Fix an off-by-one read access in ar member name
      variable.
    - Thanks to Guillem Jover and Hanno Böck for the patches!

Author: Marc Deslauriers
Author Date: 2015-11-26 13:00:10 UTC

Import patches-unapplied version 1.18.2ubuntu5.1 to ubuntu/wily-security

Imported using git-ubuntu import.

Changelog parent: b51da176b25d57bf43ce7ca7b7d624a1de602983

New changelog entries:
  * SECURITY UPDATE: multiple security issues
    - dpkg-deb/extract.c: Fix off-by-one write access on ctrllenbuf
      variable. (CVE-2015-0860)
    - lib/dpkg/ar.c: Fix an off-by-one read access in ar member name
      variable.
    - Thanks to Guillem Jover and Hanno Böck for the patches!

Author: Adam Conrad
Author Date: 2015-10-17 18:47:12 UTC

Import patches-unapplied version 1.18.2ubuntu5 to ubuntu/wily-proposed

Imported using git-ubuntu import.

Changelog parent: 2f0a4bf4cbb56a1c9d5bef17a9c2aa90e8956385

New changelog entries:
  * Pull packaging changes from 1.18.3 to fix libdir issues (LP: #1504761)
  * Fix an off-by-one write access in dpkg-deb when parsing the deb magic.
  * Fix a segfault when using «dpkg --no-act» with a synthetic --admindir.

Author: Adam Conrad
Author Date: 2015-10-17 18:47:12 UTC

Import patches-unapplied version 1.18.2ubuntu5 to ubuntu/wily-proposed

Imported using git-ubuntu import.

Changelog parent: 2f0a4bf4cbb56a1c9d5bef17a9c2aa90e8956385

New changelog entries:
  * Pull packaging changes from 1.18.3 to fix libdir issues (LP: #1504761)
  * Fix an off-by-one write access in dpkg-deb when parsing the deb magic.
  * Fix a segfault when using «dpkg --no-act» with a synthetic --admindir.

Author: Adam Conrad
Author Date: 2015-04-11 03:36:44 UTC

Import patches-unapplied version 1.17.25ubuntu1 to ubuntu/vivid-proposed

Imported using git-ubuntu import.

Changelog parent: ff1068b3f0d33511e9e3f0a0136c15917cabb007

New changelog entries:
  * Merge with Debian, pulling in the upstream fix for CVE-2015-0840,
    a couple of updated translations, and several trivial bug fixes.

Author: Adam Conrad
Author Date: 2015-04-11 03:36:44 UTC

Import patches-unapplied version 1.17.25ubuntu1 to ubuntu/vivid-proposed

Imported using git-ubuntu import.

Changelog parent: ff1068b3f0d33511e9e3f0a0136c15917cabb007

New changelog entries:
  * Merge with Debian, pulling in the upstream fix for CVE-2015-0840,
    a couple of updated translations, and several trivial bug fixes.

Author: Marc Deslauriers
Author Date: 2015-04-09 12:08:57 UTC

Import patches-unapplied version 1.17.13ubuntu1.1 to ubuntu/utopic-security

Imported using git-ubuntu import.

Changelog parent: 421e5de885e7f015bc76eeb4fe790bc2d4d62827

New changelog entries:
  * SECURITY UPDATE: OpenPGP Armor Header Line parsing issue
    - scripts/Dpkg/Control/HashCore.pm: adjust whitespace parsing.
    - scripts/Makefile.*, scripts/t/Dpkg_Control.t,
      scripts/t/Dpkg_Control/bogus-armor-formfeed.dsc: added tests.
    - Patch thanks to Guillem Jover
    - CVE-2015-0840

Author: Marc Deslauriers
Author Date: 2015-04-09 14:47:12 UTC

Import patches-unapplied version 1.15.5.6ubuntu4.10 to ubuntu/lucid-security

Imported using git-ubuntu import.

Changelog parent: 9d8667afead3a53ddab7e1b400f4d8e5dba8d4af

New changelog entries:
  * SECURITY UPDATE: OpenPGP Armor Header Line parsing issue
    - scripts/Dpkg/Control/{Hash,Package}.pm: adjust parsing logic.
    - scripts/Makefile.*, scripts/t/700_Dpkg_Control.t,
      scripts/t/700_Dpkg_Control/*: added bunch of tests.
    - Patch thanks to Guillem Jover
    - CVE-2015-0840

Author: Marc Deslauriers
Author Date: 2015-04-09 14:47:12 UTC

Import patches-unapplied version 1.15.5.6ubuntu4.10 to ubuntu/lucid-security

Imported using git-ubuntu import.

Changelog parent: 9d8667afead3a53ddab7e1b400f4d8e5dba8d4af

New changelog entries:
  * SECURITY UPDATE: OpenPGP Armor Header Line parsing issue
    - scripts/Dpkg/Control/{Hash,Package}.pm: adjust parsing logic.
    - scripts/Makefile.*, scripts/t/700_Dpkg_Control.t,
      scripts/t/700_Dpkg_Control/*: added bunch of tests.
    - Patch thanks to Guillem Jover
    - CVE-2015-0840

Author: Marc Deslauriers
Author Date: 2015-04-09 14:47:12 UTC

Import patches-unapplied version 1.15.5.6ubuntu4.10 to ubuntu/lucid-security

Imported using git-ubuntu import.

Changelog parent: 9d8667afead3a53ddab7e1b400f4d8e5dba8d4af

New changelog entries:
  * SECURITY UPDATE: OpenPGP Armor Header Line parsing issue
    - scripts/Dpkg/Control/{Hash,Package}.pm: adjust parsing logic.
    - scripts/Makefile.*, scripts/t/700_Dpkg_Control.t,
      scripts/t/700_Dpkg_Control/*: added bunch of tests.
    - Patch thanks to Guillem Jover
    - CVE-2015-0840

Author: Marc Deslauriers
Author Date: 2015-04-09 12:08:57 UTC

Import patches-unapplied version 1.17.13ubuntu1.1 to ubuntu/utopic-security

Imported using git-ubuntu import.

Changelog parent: 421e5de885e7f015bc76eeb4fe790bc2d4d62827

New changelog entries:
  * SECURITY UPDATE: OpenPGP Armor Header Line parsing issue
    - scripts/Dpkg/Control/HashCore.pm: adjust whitespace parsing.
    - scripts/Makefile.*, scripts/t/Dpkg_Control.t,
      scripts/t/Dpkg_Control/bogus-armor-formfeed.dsc: added tests.
    - Patch thanks to Guillem Jover
    - CVE-2015-0840

Author: Marc Deslauriers
Author Date: 2015-04-09 12:08:57 UTC

Import patches-unapplied version 1.17.13ubuntu1.1 to ubuntu/utopic-security

Imported using git-ubuntu import.

Changelog parent: 421e5de885e7f015bc76eeb4fe790bc2d4d62827

New changelog entries:
  * SECURITY UPDATE: OpenPGP Armor Header Line parsing issue
    - scripts/Dpkg/Control/HashCore.pm: adjust whitespace parsing.
    - scripts/Makefile.*, scripts/t/Dpkg_Control.t,
      scripts/t/Dpkg_Control/bogus-armor-formfeed.dsc: added tests.
    - Patch thanks to Guillem Jover
    - CVE-2015-0840

Author: Adam Conrad
Author Date: 2014-08-21 18:35:23 UTC

Import patches-unapplied version 1.17.13ubuntu1 to ubuntu/utopic-proposed

Imported using git-ubuntu import.

Changelog parent: 12fe55eb10d49727590847ade90f162b621bcb80

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - Allow -fstack-protector on arm64 now that GCC and glibc support it.
    - Change native source version/format mismatch errors into warnings
      until the dust settles on Debian bug 737634 about override options.
    - Add DPKG_UNTRANSLATED_MESSAGES environment check so that higher-level
      tools can get untranslated dpkg terminal log messages while at the
      same time having translated debconf prompts.
    - Special-case arm{el,hf} ELF objects in Shlibs/Objdump.pm for multilib.
    - Map unqualified package names of multiarch-same packages to the native
      arch instead of throwing an error, so that we don't break on upgrade
      when there are unqualified names stored in the dpkg trigger database.
    - Add logic to the postinst to `dpkg --add-architecture i386' on new
      installs on amd64, mimicking our previous behaviour with the conffile.
    - Apply a workaround from mvo to consider ^rc packages as multiarch,
      during the dpkg consistency checks. (see LP: 1015567 and 1057367).

Author: Adam Conrad
Author Date: 2014-08-21 18:35:23 UTC

Import patches-unapplied version 1.17.13ubuntu1 to ubuntu/utopic-proposed

Imported using git-ubuntu import.

Changelog parent: 12fe55eb10d49727590847ade90f162b621bcb80

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - Allow -fstack-protector on arm64 now that GCC and glibc support it.
    - Change native source version/format mismatch errors into warnings
      until the dust settles on Debian bug 737634 about override options.
    - Add DPKG_UNTRANSLATED_MESSAGES environment check so that higher-level
      tools can get untranslated dpkg terminal log messages while at the
      same time having translated debconf prompts.
    - Special-case arm{el,hf} ELF objects in Shlibs/Objdump.pm for multilib.
    - Map unqualified package names of multiarch-same packages to the native
      arch instead of throwing an error, so that we don't break on upgrade
      when there are unqualified names stored in the dpkg trigger database.
    - Add logic to the postinst to `dpkg --add-architecture i386' on new
      installs on amd64, mimicking our previous behaviour with the conffile.
    - Apply a workaround from mvo to consider ^rc packages as multiarch,
      during the dpkg consistency checks. (see LP: 1015567 and 1057367).

Author: Guillem Jover
Author Date: 2014-06-05 20:52:45 UTC

Import patches-applied version 1.15.11 to applied/debian/squeeze

Imported using git-ubuntu import.

Changelog parent: cc6283c97ca08000cb72446b0a11fa6e87a6bf7b
Unapplied parent: ebaf516be0d18fe50591fc1847f71dbd873ea1ec

New changelog entries:
  [ Guillem Jover ]
  * Test suite:
    - Add test cases for Dpkg::Source::Patch CVE-2014-0471 and CVE-2014-3127.
    - Add test case for patch disabling hunks; not security sensitive.
  * Correctly parse patch headers in Dpkg::Source::Patch, to avoid directory
    traversal attempts from hostile source packages when unpacking them.
    Reported by Javier Serrano Polo <javier@jasp.net> as an unspecified
    directory traversal; meanwhile also independently found by me both
    #749183 and what was supposed to be #746498, which was later on published
    and ended up being just a subset of the other non-reported issue.
    Fixes CVE-2014-3864 and CVE-2014-3865. Closes: #746498, #749183
  [ Guillem Jover ]
  * Do not allow patch files with C-style encoded filenames. Closes: #746306
    Fixes CVE-2014-3127 and unconditionally fixes CVE-2014-0471.
    Reported by Javier Serrano Polo <javier@jasp.net>.
  * Correctly parse C-style diff filenames in Dpkg::Source::Patch, to avoid
    directory traversal attempts from hostile source packages when unpacking
    them. Reported by Jakub Wilk <jwilk@debian.org>. Fixes CVE-2014-0471.

Author: Guillem Jover
Author Date: 2014-06-05 20:52:45 UTC

Import patches-unapplied version 1.15.11 to debian/squeeze

Imported using git-ubuntu import.

Changelog parent: a6d9f636b1cfe7fe3fb97d27b7c0c80cf4131f1e

New changelog entries:
  [ Guillem Jover ]
  * Test suite:
    - Add test cases for Dpkg::Source::Patch CVE-2014-0471 and CVE-2014-3127.
    - Add test case for patch disabling hunks; not security sensitive.
  * Correctly parse patch headers in Dpkg::Source::Patch, to avoid directory
    traversal attempts from hostile source packages when unpacking them.
    Reported by Javier Serrano Polo <javier@jasp.net> as an unspecified
    directory traversal; meanwhile also independently found by me both
    #749183 and what was supposed to be #746498, which was later on published
    and ended up being just a subset of the other non-reported issue.
    Fixes CVE-2014-3864 and CVE-2014-3865. Closes: #746498, #749183
  [ Guillem Jover ]
  * Do not allow patch files with C-style encoded filenames. Closes: #746306
    Fixes CVE-2014-3127 and unconditionally fixes CVE-2014-0471.
    Reported by Javier Serrano Polo <javier@jasp.net>.
  * Correctly parse C-style diff filenames in Dpkg::Source::Patch, to avoid
    directory traversal attempts from hostile source packages when unpacking
    them. Reported by Jakub Wilk <jwilk@debian.org>. Fixes CVE-2014-0471.

Author: Marc Deslauriers
Author Date: 2014-06-09 16:52:24 UTC

Import patches-unapplied version 1.16.12ubuntu1.3 to ubuntu/saucy-security

Imported using git-ubuntu import.

Changelog parent: 173b397c4e6f0d9cdb2b5baeaebe394ce786f244

New changelog entries:
  * SECURITY UPDATE: arbitrary file modification via dpkg-source
    - scripts/Dpkg/Source/Patch.pm: Use a better regex for patch header
      parsing
    - 5348cbc981a65c3c9b05bb4d13553bda930c2d78
    - CVE-2014-3864
    - CVE-2014-3865

Author: Marc Deslauriers
Author Date: 2014-06-09 16:52:24 UTC

Import patches-unapplied version 1.16.12ubuntu1.3 to ubuntu/saucy-security

Imported using git-ubuntu import.

Changelog parent: 173b397c4e6f0d9cdb2b5baeaebe394ce786f244

New changelog entries:
  * SECURITY UPDATE: arbitrary file modification via dpkg-source
    - scripts/Dpkg/Source/Patch.pm: Use a better regex for patch header
      parsing
    - 5348cbc981a65c3c9b05bb4d13553bda930c2d78
    - CVE-2014-3864
    - CVE-2014-3865

Author: Marc Deslauriers
Author Date: 2014-06-09 16:52:24 UTC

Import patches-unapplied version 1.16.12ubuntu1.3 to ubuntu/saucy-security

Imported using git-ubuntu import.

Changelog parent: 173b397c4e6f0d9cdb2b5baeaebe394ce786f244

New changelog entries:
  * SECURITY UPDATE: arbitrary file modification via dpkg-source
    - scripts/Dpkg/Source/Patch.pm: Use a better regex for patch header
      parsing
    - 5348cbc981a65c3c9b05bb4d13553bda930c2d78
    - CVE-2014-3864
    - CVE-2014-3865

Author: Marc Deslauriers
Author Date: 2014-05-01 12:03:52 UTC

Import patches-unapplied version 1.16.7ubuntu6.2 to ubuntu/quantal-security

Imported using git-ubuntu import.

Changelog parent: c66895e95af6864a86ab0515a8b0f7f8669317cc

New changelog entries:
  * SECURITY UPDATE: directory traversal in dpkg-source
    - scripts/Dpkg/Source/Patch.pm: outright reject C-style filenames in
      patches
    - a12eb58959d0a10584a428f4a3103a49204c410f
    - CVE-2014-0471

Author: Marc Deslauriers
Author Date: 2014-05-01 12:03:52 UTC

Import patches-unapplied version 1.16.7ubuntu6.2 to ubuntu/quantal-security

Imported using git-ubuntu import.

Changelog parent: c66895e95af6864a86ab0515a8b0f7f8669317cc

New changelog entries:
  * SECURITY UPDATE: directory traversal in dpkg-source
    - scripts/Dpkg/Source/Patch.pm: outright reject C-style filenames in
      patches
    - a12eb58959d0a10584a428f4a3103a49204c410f
    - CVE-2014-0471

Author: Marc Deslauriers
Author Date: 2014-05-01 12:03:52 UTC

Import patches-unapplied version 1.16.7ubuntu6.2 to ubuntu/quantal-security

Imported using git-ubuntu import.

Changelog parent: c66895e95af6864a86ab0515a8b0f7f8669317cc

New changelog entries:
  * SECURITY UPDATE: directory traversal in dpkg-source
    - scripts/Dpkg/Source/Patch.pm: outright reject C-style filenames in
      patches
    - a12eb58959d0a10584a428f4a3103a49204c410f
    - CVE-2014-0471

Author: Adam Conrad
Author Date: 2014-03-07 10:47:57 UTC

Import patches-unapplied version 1.17.5ubuntu5 to ubuntu/trusty-proposed

Imported using git-ubuntu import.

Changelog parent: 1beb01c6b8a5d2b1d36d649196635861badf124c

New changelog entries:
  * Allow -fstack-protector on arm64 now that GCC and glibc support it.

Author: Adam Conrad
Author Date: 2013-10-04 06:26:28 UTC

Import patches-unapplied version 1.16.12ubuntu1 to ubuntu/saucy-proposed

Imported using git-ubuntu import.

Changelog parent: f7728d6f3520fa7b6ffb82b0ed8f46b120d13c72

New changelog entries:
  * Merge with Debian stable-proposed-updates, remaining changes:
    - Change the multiarch downgrade version checks in prerm/postrm
      from 1.16.2 to 1.16.0~ to reflect when multiarch landed in Ubuntu.
    - Migrate dpkg multiarch conffile (and other multi-arch-related
      conf settings) to the new DB with dpkg --add-architecture, but
      keep a copy of the old conffile if it was modified.
    - Out of paranoia, keep an option handler for foreign-architecture
      that informs people that they need to scrub their config files
      and upgrade, on the off chance that the above migration fails
      for some reason (this mitigates the chances of leaving users with
      a dpkg that fails to run due to a broken config).
    - Add DPKG_UNTRANSLATED_MESSAGES environment check so that higher-level
      tools can get untranslated dpkg terminal log messages while at the
      same time having translated debconf prompts. This is useful for tools
      that hide the dpkg terminal by default and use apport for bug
      reporting with the untranslated error message.
    - Apply patch from Steve McIntyre to special-case armhf/armel ELF
      objects in Shlibs/Objdump.pm, so we don't get incorrect deps.
    - lib/dpkg/pkg-spec.c: map unqualified package names of multiarch-same
      packages to the native arch instead of throwing an error, so that we
      don't break on upgrade when there are unqualified names stored in
      dpkg's own trigger database.
    - Add logic to the postinst to `dpkg --add-architecture i386' on new
      installs on amd64, and to also do so on upgrades from pre-conffile
      Ubuntu versions, mimicking our previous behaviour with the conffile.
    - Apply a workaround from mvo to consider RC packages as multiarch,
      during the dpkg consistency checks. (see LP: 1015567 and 1057367).
    - Don't set unsupported -fstack-protector in dpkg-buildflags on arm64.
  * Add ppc64el/powerpc64le support to cputable (backported from 1.17.2)

Author: Adam Conrad
Author Date: 2013-10-04 06:26:28 UTC

Import patches-unapplied version 1.16.12ubuntu1 to ubuntu/saucy-proposed

Imported using git-ubuntu import.

Changelog parent: f7728d6f3520fa7b6ffb82b0ed8f46b120d13c72

New changelog entries:
  * Merge with Debian stable-proposed-updates, remaining changes:
    - Change the multiarch downgrade version checks in prerm/postrm
      from 1.16.2 to 1.16.0~ to reflect when multiarch landed in Ubuntu.
    - Migrate dpkg multiarch conffile (and other multi-arch-related
      conf settings) to the new DB with dpkg --add-architecture, but
      keep a copy of the old conffile if it was modified.
    - Out of paranoia, keep an option handler for foreign-architecture
      that informs people that they need to scrub their config files
      and upgrade, on the off chance that the above migration fails
      for some reason (this mitigates the chances of leaving users with
      a dpkg that fails to run due to a broken config).
    - Add DPKG_UNTRANSLATED_MESSAGES environment check so that higher-level
      tools can get untranslated dpkg terminal log messages while at the
      same time having translated debconf prompts. This is useful for tools
      that hide the dpkg terminal by default and use apport for bug
      reporting with the untranslated error message.
    - Apply patch from Steve McIntyre to special-case armhf/armel ELF
      objects in Shlibs/Objdump.pm, so we don't get incorrect deps.
    - lib/dpkg/pkg-spec.c: map unqualified package names of multiarch-same
      packages to the native arch instead of throwing an error, so that we
      don't break on upgrade when there are unqualified names stored in
      dpkg's own trigger database.
    - Add logic to the postinst to `dpkg --add-architecture i386' on new
      installs on amd64, and to also do so on upgrades from pre-conffile
      Ubuntu versions, mimicking our previous behaviour with the conffile.
    - Apply a workaround from mvo to consider RC packages as multiarch,
      during the dpkg consistency checks. (see LP: 1015567 and 1057367).
    - Don't set unsupported -fstack-protector in dpkg-buildflags on arm64.
  * Add ppc64el/powerpc64le support to cputable (backported from 1.17.2)

Author: Adam Conrad
Author Date: 2013-03-22 18:09:02 UTC

Import patches-unapplied version 1.16.10ubuntu1 to ubuntu/raring-proposed

Imported using git-ubuntu import.

Changelog parent: 4e9e681b5b0af610bcf0168a315187969275b97d

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - Change the multiarch downgrade version checks in prerm/postrm
      from 1.16.2 to 1.16.0~ to reflect when multiarch landed in Ubuntu.
    - Migrate dpkg multiarch conffile (and other multi-arch-related
      conf settings) to the new DB with dpkg --add-architecture, but
      keep a copy of the old conffile if it was modified.
    - Out of paranoia, keep an option handler for foreign-architecture
      that informs people that they need to scrub their config files
      and upgrade, on the off chance that the above migration fails
      for some reason (this mitigates the chances of leaving users with
      a dpkg that fails to run due to a broken config).
    - Add DPKG_UNTRANSLATED_MESSAGES environment check so that higher-level
      tools can get untranslated dpkg terminal log messages while at the
      same time having translated debconf prompts. This is useful for tools
      that hide the dpkg terminal by default and use apport for bug
      reporting with the untranslated error message.
    - Apply patch from Steve McIntyre to special-case armhf/armel ELF
      objects in Shlibs/Objdump.pm, so we don't get incorrect deps.
    - lib/dpkg/pkg-spec.c: map unqualified package names of multiarch-same
      packages to the native arch instead of throwing an error, so that we
      don't break on upgrade when there are unqualified names stored in
      dpkg's own trigger database.
    - Add logic to the postinst to `dpkg --add-architecture i386' on new
      installs on amd64, and to also do so on upgrades from pre-conffile
      Ubuntu versions, mimicking our previous behaviour with the conffile.
    - Apply a workaround from mvo to consider RC packages as multiarch,
      during the dpkg consistency checks. (see LP: 1015567 and 1057367).

Author: Adam Conrad
Author Date: 2013-03-22 18:09:02 UTC

Import patches-unapplied version 1.16.10ubuntu1 to ubuntu/raring-proposed

Imported using git-ubuntu import.

Changelog parent: 4e9e681b5b0af610bcf0168a315187969275b97d

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - Change the multiarch downgrade version checks in prerm/postrm
      from 1.16.2 to 1.16.0~ to reflect when multiarch landed in Ubuntu.
    - Migrate dpkg multiarch conffile (and other multi-arch-related
      conf settings) to the new DB with dpkg --add-architecture, but
      keep a copy of the old conffile if it was modified.
    - Out of paranoia, keep an option handler for foreign-architecture
      that informs people that they need to scrub their config files
      and upgrade, on the off chance that the above migration fails
      for some reason (this mitigates the chances of leaving users with
      a dpkg that fails to run due to a broken config).
    - Add DPKG_UNTRANSLATED_MESSAGES environment check so that higher-level
      tools can get untranslated dpkg terminal log messages while at the
      same time having translated debconf prompts. This is useful for tools
      that hide the dpkg terminal by default and use apport for bug
      reporting with the untranslated error message.
    - Apply patch from Steve McIntyre to special-case armhf/armel ELF
      objects in Shlibs/Objdump.pm, so we don't get incorrect deps.
    - lib/dpkg/pkg-spec.c: map unqualified package names of multiarch-same
      packages to the native arch instead of throwing an error, so that we
      don't break on upgrade when there are unqualified names stored in
      dpkg's own trigger database.
    - Add logic to the postinst to `dpkg --add-architecture i386' on new
      installs on amd64, and to also do so on upgrades from pre-conffile
      Ubuntu versions, mimicking our previous behaviour with the conffile.
    - Apply a workaround from mvo to consider RC packages as multiarch,
      during the dpkg consistency checks. (see LP: 1015567 and 1057367).

Author: Adam Conrad
Author Date: 2013-03-22 18:09:02 UTC

Import patches-unapplied version 1.16.10ubuntu1 to ubuntu/raring-proposed

Imported using git-ubuntu import.

Changelog parent: 4e9e681b5b0af610bcf0168a315187969275b97d

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - Change the multiarch downgrade version checks in prerm/postrm
      from 1.16.2 to 1.16.0~ to reflect when multiarch landed in Ubuntu.
    - Migrate dpkg multiarch conffile (and other multi-arch-related
      conf settings) to the new DB with dpkg --add-architecture, but
      keep a copy of the old conffile if it was modified.
    - Out of paranoia, keep an option handler for foreign-architecture
      that informs people that they need to scrub their config files
      and upgrade, on the off chance that the above migration fails
      for some reason (this mitigates the chances of leaving users with
      a dpkg that fails to run due to a broken config).
    - Add DPKG_UNTRANSLATED_MESSAGES environment check so that higher-level
      tools can get untranslated dpkg terminal log messages while at the
      same time having translated debconf prompts. This is useful for tools
      that hide the dpkg terminal by default and use apport for bug
      reporting with the untranslated error message.
    - Apply patch from Steve McIntyre to special-case armhf/armel ELF
      objects in Shlibs/Objdump.pm, so we don't get incorrect deps.
    - lib/dpkg/pkg-spec.c: map unqualified package names of multiarch-same
      packages to the native arch instead of throwing an error, so that we
      don't break on upgrade when there are unqualified names stored in
      dpkg's own trigger database.
    - Add logic to the postinst to `dpkg --add-architecture i386' on new
      installs on amd64, and to also do so on upgrades from pre-conffile
      Ubuntu versions, mimicking our previous behaviour with the conffile.
    - Apply a workaround from mvo to consider RC packages as multiarch,
      during the dpkg consistency checks. (see LP: 1015567 and 1057367).

Author: Barry Warsaw
Author Date: 2012-10-01 18:39:06 UTC

Import patches-unapplied version 1.16.7ubuntu6 to ubuntu/quantal

Imported using git-ubuntu import.

Changelog parent: ac939bf7eb6c64d30f935668150257a33bb1fb7e

New changelog entries:
  [ Raphaël Hertzog ]
  * Fix dpkg-source regression in "3.0 (quilt)" source packages while
    unapplying patches that remove all files in a directory. Closes:
    #683547 (LP: #1057886)

Author: Michael Jeanson
Author Date: 2012-09-14 13:43:09 UTC

Import patches-unapplied version 1.15.5.6ubuntu4.6 to ubuntu/lucid-proposed

Imported using git-ubuntu import.

Changelog parent: 426ed7f5aff1ccf3461654dc11947ecaaa816518

New changelog entries:
  * Cherry-pick fixes for sync() behaviour in dpkg (LP: #624877):
    - Disable by default usage of synchronous sync(2), as it causes undesired
      I/O on unrelated file systems. Closes: #588339, #595927, #600075
    - On Linux use sync_file_range() to initiate asynchronous writeback
      of just unpacked files. Suggested by Ted Ts'o <tytso@mit.edu>.
      Thanks to Jonathan Nieder <jrnieder@gmail.com>. Closes: #605009

Author: Steve Langasek
Author Date: 2012-04-17 03:54:37 UTC

Import patches-unapplied version 1.16.0.3ubuntu5.1 to ubuntu/oneiric-proposed

Imported using git-ubuntu import.

Changelog parent: b04f226e945aeeac47cfaff6845b14635255df58

New changelog entries:
  * Backport patch that avoids disappearing other packages from the same set.
    Packages within a set can rightfully share files and should not be
    disappeared in the case where they share all the files. LP: #902603.

Author: Steve Langasek
Author Date: 2012-04-17 03:54:37 UTC

Import patches-unapplied version 1.16.0.3ubuntu5.1 to ubuntu/oneiric-proposed

Imported using git-ubuntu import.

Changelog parent: b04f226e945aeeac47cfaff6845b14635255df58

New changelog entries:
  * Backport patch that avoids disappearing other packages from the same set.
    Packages within a set can rightfully share files and should not be
    disappeared in the case where they share all the files. LP: #902603.

Author: Steve Langasek
Author Date: 2012-04-17 03:54:37 UTC

Import patches-unapplied version 1.16.0.3ubuntu5.1 to ubuntu/oneiric-proposed

Imported using git-ubuntu import.

Changelog parent: b04f226e945aeeac47cfaff6845b14635255df58

New changelog entries:
  * Backport patch that avoids disappearing other packages from the same set.
    Packages within a set can rightfully share files and should not be
    disappeared in the case where they share all the files. LP: #902603.

Author: Adam Conrad
Author Date: 2012-04-12 22:59:09 UTC

Import patches-unapplied version 1.16.1.2ubuntu7 to ubuntu/precise-proposed

Imported using git-ubuntu import.

Changelog parent: 8eb815a31f3a25b540272d21328f5c9268d7e089

New changelog entries:
  * Apply missing patch from upstream to let dselect's resolver deal
    with multi-arch Provides in the same way as dpkg (LP: #853679)

Author: Guillem Jover
Author Date: 2012-02-05 22:39:40 UTC

Import patches-unapplied version 1.16.2~wipmultiarch to debian/experimental

Imported using git-ubuntu import.

Changelog parent: f0a21f8d99fdab3fdd4dc93e501d076cd05c2548

New changelog entries:
  This is a WIP release, command line interfaces *will* change.
  [ Guillem Jover ]
  * Move <config.h> and <compat.h> to the top of trigdeferred.l to properly
    use the configured features and compat code.
  * Honour --disable-nls when the system lacks obstack support, by updating
    the obstack compat module from gnulib.
  * Link the libdpkg unit tests with libcompat and libintl, so that systems
    needing them will compile correctly.
  * Check for the presence of the strnlen declaration and correctly provide
    the compat one in case the systems lacks it.
  * Do not assume existence of paths on the build system in the test suite.
  * Do not fail to link dselect on MacOS X when using --disable-nls.
  * Remove versioned coreutils Pre-Depends from dpkg due to the ancient
    md5sum transition. Reported by Bill Allombert <ballombe@debian.org>.
    Closes: #643746
  * Change dpkg-architecture to only compute the requested variables. This:
    - Fixes the bootstrapping problem, as the dpkg build system only needs
      the host architecture, for which dpkg itself is not required.
    - Reduces the amount of work performed, including loading and parsing
      unnecessary table files or calling either of gcc or dpkg programs.
  * Improve error message in dpkg-gencontrol and dpkg-gensymbols when
    debian/control does not have any package stanza. Closes: #642473
    Based on a patch by Kyle Willmon <kylewillmon@gmail.com>.
  * Add Pre-Depends on tar >= 1.23 (satisfied in stable) to dpkg due to it
    using the ‘--warning=no-timestamp’ option. Closes: #642802
  * Do not segfault on GNU/Linux when dpkg cannot retrieve the block size
    for the filesystem containing the info database. LP: #872734
  * Fix two memory leaks per tar entry in the tar extractor used on unpack.
  * Mark dpkg and dselect as Multi-Arch foreign.
    Reported by Steve Langasek <vorlon@debian.org>.
  * Mark dpkg-dev and libdpkg-perl as Multi-Arch foreign. Closes: #648217
    Thanks to Colin Watson <cjwatson@ubuntu.com>.
  * Add new deb-origin.5 man page. Closes: #608884
    Thanks to Matt Kraai <kraai@ftbfs.org>.
  * Return correct status on start-stop-daemon --status when using --pidfile.
  * Treat dpkg-deb compression level independently for each backend. This
    has the effect of changing the current behaviour for level 0 on all
    compressors except gzip.
  * Add new dpkg-deb -S option to specify the compression strategy. The only
    currently supported value is “extreme” for xz. Closes: #647915
  * Stop using brace expansion to install man pages by using dh_installman
    instead of dh_install, the former does not abort on empty glob expansion.
  * Do not use absolute paths for programs in perl and shell code.
  * Add missing ‘*’ in asprintf() and vasprintf() compat declarations.
  * Add support for virtual output binary:Summary and db:Status-Abbrev fields.
    Closes: #192619, #427945
  * Add support for virtual output source:Package and source:Version fields.
    Closes: #653575
  * Use a different temporary file per process on libcompat's vsnprintf()
    function to avoid race conditions from children after fork(3).
    Reported by Daniel Ruoso <daniel@ruoso.com>. Closes: #655411
  * Fix start-stop-daemon --exec and --name options on FreeBSD, NetBSD and
    OpenBSD by swapping the process matching implementations.
  * Fix start-stop-daemon --name option on GNU/Hurd to match the process name.
  * Document in more detail the implications of start-stop-daemon matching
    options. Closes: #367608
  * Improve and clarify dpkg-shlibdeps superfluous linking warning messages.
    Based on a patch by Peter Eisentraut <petere@debian.org>. Closes: #656496
  [ Raphaël Hertzog ]
  * Update Dpkg::Shlibs to look into multiarch paths when cross-building
    too. Closes: #595144
  * Rewrite architecture.mk with explicit loops instead of duplicating many
    similar lines. Based on a patch by Thorsten Glaser <tg@mirbsd.de>.
  * Modify dpkg-gencontrol and dpkg-distaddfile to grab a write lock
    on debian/control before updating debian/files to avoid simultaneous
    updates. Closes: #642608
    Add libfile-fcntllock-perl to dpkg-dev's Depends since we use this module
    to handle the locking.
  * Update dpkg-gensymbols(1) to clarify that -e accepts shell patterns
    expansions and not regular expressions. And let dpkg-gensymbols output a
    warning when a pattern doesn't match any file. Closes: #649248
  * Add new option "-a <arch>" to dpkg-checkbuilddeps to check build
    dependencies for another architecture. This is really basic for now since
    it assumes all build dependencies must be satisfied on the listed
    architecture. Closes: #648180 Thanks to Colin Watson for the patch.
  * Error out if a dpkg database .list file is not a regular file. LP: #369898
  * Fix dpkg-mergechangelogs to not error out on invalid versions.
    Closes: #651993
  * Fix dpkg-source --commit on "3.0 (quilt)" when an explicit patch file
    is given with a relative filename. Closes: #652414
  * Further clarify in dpkg-source(1) the conditions under which it's possible
    to pass an explicit patch file to dpkg-source --commit.
  * Add new --query-features command to dpkg-buildflags. Thanks to Kees Cook
    for the patch. Closes: #651481
  * Fix description of Multi-Arch in deb-control(5). Closes: #654453
    Thanks to Jakub Wilk for spotting the mistake.
  * Drop misleading spaces in deb-symbols(5) in the format description.
  * Clean up dpkg-architecture(1) dropping useless information and
    adding a reference to /usr/share/dpkg/architecture.mk.
  * Update dpkg-buildpackage to use the "build-arch" (for -B) and
    "build-indep" (for -A) targets unless "make -qn" says that they do not
    exist. Closes: #229357
  [ Jonathan Nieder ]
  * Bump po4a version in Build-Depends to 0.41, since earlier versions do
    not handle --srcdir correctly. Closes: #644370
  [ Helge Kreutzmann ]
  * Fix a typo in man/dpkg-deb.1.
  [ Updated dpkg translations ]
  * German (Sven Joachim).
  * Italian (Milo Casagrande). Closes: #627832, #657849
  * Swedish (Peter Krefting).
  * French (Christian Perrier)
  [ Updated scripts translations ]
  * German (Helge Kreutzmann).
  * Spanish (Omar Campagne). Closes: #636238
  * Swedish (Peter Krefting).
  [ Updated man page translations ]
  * German (Helge Kreutzmann), including typo fix in dpkg-genchanges
    Closes: #646496, sub optimal translation of package states LP: #368783
    and an fix by Chris Leick
  * Japanese (TAKAHASHI Motonobu).
  * Spanish (Omar Campagne). Closes: #643969
  * Swedish (Peter Krefting).
  * Minor errors corrected in French (thanks to David Prévot)
  * Fix translation of -B and -A options of dpkg-buildpackage.
    Thanks to Vincent Danjean. Closes: #654626
  [ Updated dselect translations ]
  * Dutch (Jeroen Schot). Closes: #651813

Author: Guillem Jover
Author Date: 2012-02-05 22:39:40 UTC

Import patches-applied version 1.16.2~wipmultiarch to applied/debian/experimental

Imported using git-ubuntu import.

Changelog parent: 6ab36f64252318d38842ee5457cc9f8520695862
Unapplied parent: 2f182d03b84cc8b739ddae7575a8015f58d2f9b2

New changelog entries:
  This is a WIP release, command line interfaces *will* change.
  [ Guillem Jover ]
  * Move <config.h> and <compat.h> to the top of trigdeferred.l to properly
    use the configured features and compat code.
  * Honour --disable-nls when the system lacks obstack support, by updating
    the obstack compat module from gnulib.
  * Link the libdpkg unit tests with libcompat and libintl, so that systems
    needing them will compile correctly.
  * Check for the presence of the strnlen declaration and correctly provide
    the compat one in case the systems lacks it.
  * Do not assume existence of paths on the build system in the test suite.
  * Do not fail to link dselect on MacOS X when using --disable-nls.
  * Remove versioned coreutils Pre-Depends from dpkg due to the ancient
    md5sum transition. Reported by Bill Allombert <ballombe@debian.org>.
    Closes: #643746
  * Change dpkg-architecture to only compute the requested variables. This:
    - Fixes the bootstrapping problem, as the dpkg build system only needs
      the host architecture, for which dpkg itself is not required.
    - Reduces the amount of work performed, including loading and parsing
      unnecessary table files or calling either of gcc or dpkg programs.
  * Improve error message in dpkg-gencontrol and dpkg-gensymbols when
    debian/control does not have any package stanza. Closes: #642473
    Based on a patch by Kyle Willmon <kylewillmon@gmail.com>.
  * Add Pre-Depends on tar >= 1.23 (satisfied in stable) to dpkg due to it
    using the ‘--warning=no-timestamp’ option. Closes: #642802
  * Do not segfault on GNU/Linux when dpkg cannot retrieve the block size
    for the filesystem containing the info database. LP: #872734
  * Fix two memory leaks per tar entry in the tar extractor used on unpack.
  * Mark dpkg and dselect as Multi-Arch foreign.
    Reported by Steve Langasek <vorlon@debian.org>.
  * Mark dpkg-dev and libdpkg-perl as Multi-Arch foreign. Closes: #648217
    Thanks to Colin Watson <cjwatson@ubuntu.com>.
  * Add new deb-origin.5 man page. Closes: #608884
    Thanks to Matt Kraai <kraai@ftbfs.org>.
  * Return correct status on start-stop-daemon --status when using --pidfile.
  * Treat dpkg-deb compression level independently for each backend. This
    has the effect of changing the current behaviour for level 0 on all
    compressors except gzip.
  * Add new dpkg-deb -S option to specify the compression strategy. The only
    currently supported value is “extreme” for xz. Closes: #647915
  * Stop using brace expansion to install man pages by using dh_installman
    instead of dh_install, the former does not abort on empty glob expansion.
  * Do not use absolute paths for programs in perl and shell code.
  * Add missing ‘*’ in asprintf() and vasprintf() compat declarations.
  * Add support for virtual output binary:Summary and db:Status-Abbrev fields.
    Closes: #192619, #427945
  * Add support for virtual output source:Package and source:Version fields.
    Closes: #653575
  * Use a different temporary file per process on libcompat's vsnprintf()
    function to avoid race conditions from children after fork(3).
    Reported by Daniel Ruoso <daniel@ruoso.com>. Closes: #655411
  * Fix start-stop-daemon --exec and --name options on FreeBSD, NetBSD and
    OpenBSD by swapping the process matching implementations.
  * Fix start-stop-daemon --name option on GNU/Hurd to match the process name.
  * Document in more detail the implications of start-stop-daemon matching
    options. Closes: #367608
  * Improve and clarify dpkg-shlibdeps superfluous linking warning messages.
    Based on a patch by Peter Eisentraut <petere@debian.org>. Closes: #656496
  [ Raphaël Hertzog ]
  * Update Dpkg::Shlibs to look into multiarch paths when cross-building
    too. Closes: #595144
  * Rewrite architecture.mk with explicit loops instead of duplicating many
    similar lines. Based on a patch by Thorsten Glaser <tg@mirbsd.de>.
  * Modify dpkg-gencontrol and dpkg-distaddfile to grab a write lock
    on debian/control before updating debian/files to avoid simultaneous
    updates. Closes: #642608
    Add libfile-fcntllock-perl to dpkg-dev's Depends since we use this module
    to handle the locking.
  * Update dpkg-gensymbols(1) to clarify that -e accepts shell patterns
    expansions and not regular expressions. And let dpkg-gensymbols output a
    warning when a pattern doesn't match any file. Closes: #649248
  * Add new option "-a <arch>" to dpkg-checkbuilddeps to check build
    dependencies for another architecture. This is really basic for now since
    it assumes all build dependencies must be satisfied on the listed
    architecture. Closes: #648180 Thanks to Colin Watson for the patch.
  * Error out if a dpkg database .list file is not a regular file. LP: #369898
  * Fix dpkg-mergechangelogs to not error out on invalid versions.
    Closes: #651993
  * Fix dpkg-source --commit on "3.0 (quilt)" when an explicit patch file
    is given with a relative filename. Closes: #652414
  * Further clarify in dpkg-source(1) the conditions under which it's possible
    to pass an explicit patch file to dpkg-source --commit.
  * Add new --query-features command to dpkg-buildflags. Thanks to Kees Cook
    for the patch. Closes: #651481
  * Fix description of Multi-Arch in deb-control(5). Closes: #654453
    Thanks to Jakub Wilk for spotting the mistake.
  * Drop misleading spaces in deb-symbols(5) in the format description.
  * Clean up dpkg-architecture(1) dropping useless information and
    adding a reference to /usr/share/dpkg/architecture.mk.
  * Update dpkg-buildpackage to use the "build-arch" (for -B) and
    "build-indep" (for -A) targets unless "make -qn" says that they do not
    exist. Closes: #229357
  [ Jonathan Nieder ]
  * Bump po4a version in Build-Depends to 0.41, since earlier versions do
    not handle --srcdir correctly. Closes: #644370
  [ Helge Kreutzmann ]
  * Fix a typo in man/dpkg-deb.1.
  [ Updated dpkg translations ]
  * German (Sven Joachim).
  * Italian (Milo Casagrande). Closes: #627832, #657849
  * Swedish (Peter Krefting).
  * French (Christian Perrier)
  [ Updated scripts translations ]
  * German (Helge Kreutzmann).
  * Spanish (Omar Campagne). Closes: #636238
  * Swedish (Peter Krefting).
  [ Updated man page translations ]
  * German (Helge Kreutzmann), including typo fix in dpkg-genchanges
    Closes: #646496, sub optimal translation of package states LP: #368783
    and an fix by Chris Leick
  * Japanese (TAKAHASHI Motonobu).
  * Spanish (Omar Campagne). Closes: #643969
  * Swedish (Peter Krefting).
  * Minor errors corrected in French (thanks to David Prévot)
  * Fix translation of -B and -A options of dpkg-buildpackage.
    Thanks to Vincent Danjean. Closes: #654626
  [ Updated dselect translations ]
  * Dutch (Jeroen Schot). Closes: #651813

Author: Steve Langasek
Author Date: 2011-10-06 07:29:02 UTC

Import patches-unapplied version 1.16.0.3ubuntu5 to ubuntu/oneiric

Imported using git-ubuntu import.

Changelog parent: 7328833f881b8063828bef3454439fa3d78f28ba

New changelog entries:
  * Cherry pick b8d4668 and 967a45f from pu/multiarch so that cross-grading a
    package doesn't result in dpkg believing the package has been disappeared
    on the next call. Thanks to Raphaël Hertzog <hertzog@debian.org> for
    the quick fix! (LP: #863675)

Author: Steve Langasek
Author Date: 2011-06-25 18:49:46 UTC

Import patches-unapplied version 1.16.0~ubuntu7.1 to ubuntu/natty-proposed

Imported using git-ubuntu import.

Changelog parent: 9a04483a53fb93bd7ccc5933e0d7b80294eb0446

New changelog entries:
  * src/packages.c: fix use of --force-depends so that it works again for
    foreign arch packages. Thanks to Raphaël Hertzog for the fix.
    LP: #767634.
  * regenerate lib/dpkg/trigdeferred.c from lib/dpkg/trigdeferred.l in
    the source, to ensure we don't end up with breakage from an out-of-date
    intermediate file as happened in oneiric.
  [ Guillem Jover ]
  * d84b36a81088721b340e52664aa2c3379fea2a9a: be less strict in the face of
    unknown Priority: fields in /var/lib/dpkg/status, so dpkg doesn't fail
    to run on systems whose contents were previously permitted.
    LP: #773022.

Author: Steve Langasek
Author Date: 2011-06-25 18:49:46 UTC

Import patches-unapplied version 1.16.0~ubuntu7.1 to ubuntu/natty-proposed

Imported using git-ubuntu import.

Changelog parent: 9a04483a53fb93bd7ccc5933e0d7b80294eb0446

New changelog entries:
  * src/packages.c: fix use of --force-depends so that it works again for
    foreign arch packages. Thanks to Raphaël Hertzog for the fix.
    LP: #767634.
  * regenerate lib/dpkg/trigdeferred.c from lib/dpkg/trigdeferred.l in
    the source, to ensure we don't end up with breakage from an out-of-date
    intermediate file as happened in oneiric.
  [ Guillem Jover ]
  * d84b36a81088721b340e52664aa2c3379fea2a9a: be less strict in the face of
    unknown Priority: fields in /var/lib/dpkg/status, so dpkg doesn't fail
    to run on systems whose contents were previously permitted.
    LP: #773022.

Author: Steve Langasek
Author Date: 2011-06-25 18:49:46 UTC

Import patches-unapplied version 1.16.0~ubuntu7.1 to ubuntu/natty-proposed

Imported using git-ubuntu import.

Changelog parent: 9a04483a53fb93bd7ccc5933e0d7b80294eb0446

New changelog entries:
  * src/packages.c: fix use of --force-depends so that it works again for
    foreign arch packages. Thanks to Raphaël Hertzog for the fix.
    LP: #767634.
  * regenerate lib/dpkg/trigdeferred.c from lib/dpkg/trigdeferred.l in
    the source, to ensure we don't end up with breakage from an out-of-date
    intermediate file as happened in oneiric.
  [ Guillem Jover ]
  * d84b36a81088721b340e52664aa2c3379fea2a9a: be less strict in the face of
    unknown Priority: fields in /var/lib/dpkg/status, so dpkg doesn't fail
    to run on systems whose contents were previously permitted.
    LP: #773022.

Author: Steve Langasek
Author Date: 2011-04-14 18:28:51 UTC

Import patches-unapplied version 1.16.0~ubuntu7 to ubuntu/natty

Imported using git-ubuntu import.

Changelog parent: 8eed54651355f51c878e40482cb7be7b1ea40dbd

New changelog entries:
  * src/packages.c: fix the check for whether our dependencies are
    installed, so that it works correctly for multi-arch: foreign packages
    configured during the current dpkg run. Thanks to Raphaël Hertzog
    <hertzog@debian.org> for the fix. LP: #756381.
  [ Raphaël Hertzog ]
  * fddba30d74856e2d5c3f287343569fc259729bc0: Fix regression in dpkg 1.16.0
    affecting dpkg R. Closes: #620636.

Author: Raphaël Hertzog
Author Date: 2011-01-05 09:58:17 UTC

Import patches-applied version 1.14.31 to applied/debian/lenny

Imported using git-ubuntu import.

Changelog parent: 07cb0cfc3a2bc715f97af85306c89aa1a7de1519
Unapplied parent: 75e144c959c6a9b350b41160c22e9cbc77159c78

New changelog entries:
  * Fix multiple security issues with dpkg-source (CVE-2010-1679):
    - Enhance checks to catch maliciously crafted patches which could modify
      files outside of the unpacked source package.
    - Do not consider a top-level symlink like a directory when
      extracting a tarball.
    - Exclude .pc while extracting the upstream tarball in 3.0 (quilt)
      as patch blindly writes in that directory during unpack (and would
      follow any existing symlink).

Author: Raphaël Hertzog
Author Date: 2011-01-05 09:58:17 UTC

Import patches-unapplied version 1.14.31 to debian/lenny

Imported using git-ubuntu import.

Changelog parent: 3ce344d9819e41a6206cedac06522a228cf3c34a

New changelog entries:
  * Fix multiple security issues with dpkg-source (CVE-2010-1679):
    - Enhance checks to catch maliciously crafted patches which could modify
      files outside of the unpacked source package.
    - Do not consider a top-level symlink like a directory when
      extracting a tarball.
    - Exclude .pc while extracting the upstream tarball in 3.0 (quilt)
      as patch blindly writes in that directory during unpack (and would
      follow any existing symlink).

Author: Kees Cook
Author Date: 2011-01-06 18:28:01 UTC

Import patches-unapplied version 1.15.4ubuntu2.3 to ubuntu/karmic-security

Imported using git-ubuntu import.

Changelog parent: 13447959bb9a5fe2e9f4ece5915a4e126861180b

New changelog entries:
  * SECURITY UPDATE: relative directory and symlink following in source pkgs.
    - scripts/Dpkg/Source/Archive.pm, scripts/Dpkg/Source/Patch.pm,
      scripts/Dpkg/Source/Package/V2.pm: applied fixes from Raphael Hertzog,
      thanks to Raphael Geissert.
    - CVE-2010-1679

Author: Kees Cook
Author Date: 2011-01-06 18:17:50 UTC

Import patches-unapplied version 1.15.8.4ubuntu3.1 to ubuntu/maverick-security

Imported using git-ubuntu import.

Changelog parent: 71d4c048d63c1f1303f0d189453b70b70f8a677f

New changelog entries:
  * SECURITY UPDATE: relative directory and symlink following in source pkgs.
    - scripts/Dpkg/Source/Archive.pm, scripts/Dpkg/Source/Patch.pm,
      scripts/Dpkg/Source/Package/V2.pm: applied fixes from Raphael Hertzog,
      thanks to Raphael Geissert.
    - CVE-2010-1679

Author: Kees Cook
Author Date: 2011-01-06 18:17:50 UTC

Import patches-unapplied version 1.15.8.4ubuntu3.1 to ubuntu/maverick-security

Imported using git-ubuntu import.

Changelog parent: 71d4c048d63c1f1303f0d189453b70b70f8a677f

New changelog entries:
  * SECURITY UPDATE: relative directory and symlink following in source pkgs.
    - scripts/Dpkg/Source/Archive.pm, scripts/Dpkg/Source/Patch.pm,
      scripts/Dpkg/Source/Package/V2.pm: applied fixes from Raphael Hertzog,
      thanks to Raphael Geissert.
    - CVE-2010-1679

Author: Kees Cook
Author Date: 2011-01-06 18:17:50 UTC

Import patches-unapplied version 1.15.8.4ubuntu3.1 to ubuntu/maverick-security

Imported using git-ubuntu import.

Changelog parent: 71d4c048d63c1f1303f0d189453b70b70f8a677f

New changelog entries:
  * SECURITY UPDATE: relative directory and symlink following in source pkgs.
    - scripts/Dpkg/Source/Archive.pm, scripts/Dpkg/Source/Patch.pm,
      scripts/Dpkg/Source/Package/V2.pm: applied fixes from Raphael Hertzog,
      thanks to Raphael Geissert.
    - CVE-2010-1679

Author: Kees Cook
Author Date: 2011-01-06 18:28:01 UTC

Import patches-unapplied version 1.15.4ubuntu2.3 to ubuntu/karmic-security

Imported using git-ubuntu import.

Changelog parent: 13447959bb9a5fe2e9f4ece5915a4e126861180b

New changelog entries:
  * SECURITY UPDATE: relative directory and symlink following in source pkgs.
    - scripts/Dpkg/Source/Archive.pm, scripts/Dpkg/Source/Patch.pm,
      scripts/Dpkg/Source/Package/V2.pm: applied fixes from Raphael Hertzog,
      thanks to Raphael Geissert.
    - CVE-2010-1679

Author: Kees Cook
Author Date: 2011-01-06 18:28:01 UTC

Import patches-unapplied version 1.15.4ubuntu2.3 to ubuntu/karmic-security

Imported using git-ubuntu import.

Changelog parent: 13447959bb9a5fe2e9f4ece5915a4e126861180b

New changelog entries:
  * SECURITY UPDATE: relative directory and symlink following in source pkgs.
    - scripts/Dpkg/Source/Archive.pm, scripts/Dpkg/Source/Patch.pm,
      scripts/Dpkg/Source/Package/V2.pm: applied fixes from Raphael Hertzog,
      thanks to Raphael Geissert.
    - CVE-2010-1679