[ubuntu/quantal] libxml2 2.8.0+dfsg1-4ubuntu1 (Accepted)

Thu Jul 5 22:40:43 UTC 2012

libxml2 (2.8.0+dfsg1-4ubuntu1) quantal; urgency=low

  * Merge with Debian (LP: #987502), remaining changes:
    - Don't drop *.la file. Some libraries still depend on it.

libxml2 (2.8.0+dfsg1-4) unstable; urgency=low

  * Sanitize the output of `xml2-config --libs`.

libxml2 (2.8.0+dfsg1-3) unstable; urgency=low

  * Remove odd output of xml2-config --libs (Closes: #675682).
  * Mark libxml2-dev "M-A: same" again, fixed xml2-config
    (Closes: #674474).

libxml2 (2.8.0+dfsg1-2) unstable; urgency=low

  * debian/control:
    - Remove "M-A: same" from libxml2-dev (Closes: #674474).
    - Add "M-A: foreign" to libxml2-doc.
  * debian/rules:
    - Style change on calling dh using --with.
    - Enable all hardening features.
    - The sed command for removing DEB_HOST_MULTIARCH is not reverted
      because it's generally a good idea to avoid it here.
  * lintian-overrides:
    - libxml2: package-name-doesnt-match-sonames
    - python-libxml2-dbg: hardening-no-fortify-functions

libxml2 (2.8.0+dfsg1-1) unstable; urgency=low

  * New upstream release. (Closes: #148220, #590934)
  * Adjust changelog of previous NMU (Closes: #674739).
  * Try to avoid useless space in /usr/bin/xml-config (Closes: #674474).

libxml2 (2.7.8.dfsg-9.1) unstable; urgency=high

  * Non-maintainer upload by the Security Team.
  * Fix CVE-2011-3102: off by one pointer access in xpointer.c
    (Closes: #674191).

libxml2 (2.7.8.dfsg-9) unstable; urgency=low

  * Multi-Arch ready. (Closes: #643026)
    - M-A:same packages are libxml2, libxml2-dev and libxml2-dbg.
    - M-A:foreign package is libxml2-utils, others are not M-A.
    - Library files in udeb are still placed under usr/lib directly.
  * New binary: libxml2-utils-dbg.
    Move debuggings symbols of libxml2-utils binaries to another package
    in favor of marking libxml2-dbg as M-A: same. Descriptions of related
    binary packages are slightly modified.
  * Enable hardening for Python modules. (Closes: #664107)
  * Add support for build-arch and build target, essentially make the
    package not FTBFS anymore. (Closes: #668672)
  * Use dh compat 9. Not hardcoding libdir in debian/rules.
  * Port to source format 3.0 to ease future maintenance of patches.
    - Old patches are stored in 01_historical_changes.patch
    - Do not patch Makefile.in directly, use dh_autoreconf with patches to
      configure.in and Makefile.am instead. This will not actually make
      bootstraping a new architecture more difficult since we already have
      gettext and autoconf in deep B-D, porters need to break it anyway.
    - Store doc/examples/index.html in patch to avoid ciculate B-D with
      xsltproc, we should not B-D on it.
  * debian/*.dirs: removed, useless.

libxml2 (2.7.8.dfsg-8) unstable; urgency=high

  * New maintainer (Closes: #654176).
  * Apply upstream patch to add randomization to hashing with large
    dictionaries to mitigate hash DoS (CVE-2012-0841; Closes: #660846)
  * Bump std-ver to 3.9.3, no change needed.

libxml2 (2.7.8.dfsg-7) unstable; urgency=low

  * Team upload.
  * parser.c: Fix an allocation error when copying entities.
    CVE-2011-3919. Closes: #656377.

libxml2 (2.7.8.dfsg-6) unstable; urgency=low

  * Team upload.
  * Enabled hardened build flags (Closes: #654903).
  * error.c: Fix __xmlRaiseError (Closes: #622358).

Date: Mon, 25 Jun 2012 13:14:43 +0100
Changed-By: Iain Lane <iain.lane at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Sebastien Bacher <seb128 at ubuntu.com>
https://launchpad.net/ubuntu/quantal/+source/libxml2/2.8.0+dfsg1-4ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Mon, 25 Jun 2012 13:14:43 +0100
Source: libxml2
Binary: libxml2 libxml2-utils libxml2-utils-dbg libxml2-dev libxml2-dbg libxml2-doc python-libxml2 python-libxml2-dbg libxml2-udeb
Architecture: source
Version: 2.8.0+dfsg1-4ubuntu1
Distribution: quantal
Urgency: high
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Iain Lane <iain.lane at canonical.com>
Description: 
 libxml2    - GNOME XML library
 libxml2-dbg - Debugging symbols for the GNOME XML library
 libxml2-dev - Development files for the GNOME XML library
 libxml2-doc - Documentation for the GNOME XML library
 libxml2-udeb - GNOME XML library - minimal runtime (udeb)
 libxml2-utils - XML utilities
 libxml2-utils-dbg - XML utilities (debug extension)
 python-libxml2 - Python bindings for the GNOME XML library
 python-libxml2-dbg - Python bindings for the GNOME XML library (debug extension)
Closes: 148220 590934 622358 643026 654176 654903 656377 660846 664107 668672 674191 674474 674739 675682
Launchpad-Bugs-Fixed: 987502
Changes: 
 libxml2 (2.8.0+dfsg1-4ubuntu1) quantal; urgency=low
 .
   * Merge with Debian (LP: #987502), remaining changes:
     - Don't drop *.la file. Some libraries still depend on it.
 .
 libxml2 (2.8.0+dfsg1-4) unstable; urgency=low
 .
   * Sanitize the output of `xml2-config --libs`.
 .
 libxml2 (2.8.0+dfsg1-3) unstable; urgency=low
 .
   * Remove odd output of xml2-config --libs (Closes: #675682).
   * Mark libxml2-dev "M-A: same" again, fixed xml2-config
     (Closes: #674474).
 .
 libxml2 (2.8.0+dfsg1-2) unstable; urgency=low
 .
   * debian/control:
     - Remove "M-A: same" from libxml2-dev (Closes: #674474).
     - Add "M-A: foreign" to libxml2-doc.
   * debian/rules:
     - Style change on calling dh using --with.
     - Enable all hardening features.
     - The sed command for removing DEB_HOST_MULTIARCH is not reverted
       because it's generally a good idea to avoid it here.
   * lintian-overrides:
     - libxml2: package-name-doesnt-match-sonames
     - python-libxml2-dbg: hardening-no-fortify-functions
 .
 libxml2 (2.8.0+dfsg1-1) unstable; urgency=low
 .
   * New upstream release. (Closes: #148220, #590934)
   * Adjust changelog of previous NMU (Closes: #674739).
   * Try to avoid useless space in /usr/bin/xml-config (Closes: #674474).
 .
 libxml2 (2.7.8.dfsg-9.1) unstable; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Fix CVE-2011-3102: off by one pointer access in xpointer.c
     (Closes: #674191).
 .
 libxml2 (2.7.8.dfsg-9) unstable; urgency=low
 .
   * Multi-Arch ready. (Closes: #643026)
     - M-A:same packages are libxml2, libxml2-dev and libxml2-dbg.
     - M-A:foreign package is libxml2-utils, others are not M-A.
     - Library files in udeb are still placed under usr/lib directly.
   * New binary: libxml2-utils-dbg.
     Move debuggings symbols of libxml2-utils binaries to another package
     in favor of marking libxml2-dbg as M-A: same. Descriptions of related
     binary packages are slightly modified.
   * Enable hardening for Python modules. (Closes: #664107)
   * Add support for build-arch and build target, essentially make the
     package not FTBFS anymore. (Closes: #668672)
   * Use dh compat 9. Not hardcoding libdir in debian/rules.
   * Port to source format 3.0 to ease future maintenance of patches.
     - Old patches are stored in 01_historical_changes.patch
     - Do not patch Makefile.in directly, use dh_autoreconf with patches to
       configure.in and Makefile.am instead. This will not actually make
       bootstraping a new architecture more difficult since we already have
       gettext and autoconf in deep B-D, porters need to break it anyway.
     - Store doc/examples/index.html in patch to avoid ciculate B-D with
       xsltproc, we should not B-D on it.
   * debian/*.dirs: removed, useless.
 .
 libxml2 (2.7.8.dfsg-8) unstable; urgency=high
 .
   * New maintainer (Closes: #654176).
   * Apply upstream patch to add randomization to hashing with large
     dictionaries to mitigate hash DoS (CVE-2012-0841; Closes: #660846)
   * Bump std-ver to 3.9.3, no change needed.
 .
 libxml2 (2.7.8.dfsg-7) unstable; urgency=low
 .
   * Team upload.
   * parser.c: Fix an allocation error when copying entities.
     CVE-2011-3919. Closes: #656377.
 .
 libxml2 (2.7.8.dfsg-6) unstable; urgency=low
 .
   * Team upload.
   * Enabled hardened build flags (Closes: #654903).
   * error.c: Fix __xmlRaiseError (Closes: #622358).
Checksums-Sha1: 
 18394d172b87b5b6f0aa3be3f3ec5a910ad7fcbe 2011 libxml2_2.8.0+dfsg1-4ubuntu1.dsc
 fcc1bca14d2c7dd73c71556cf0a223a73bd92305 3554683 libxml2_2.8.0+dfsg1.orig.tar.gz
 d7d20c1ab7c1ec91a668236a5255a321cbf7be8a 28826 libxml2_2.8.0+dfsg1-4ubuntu1.debian.tar.gz
Checksums-Sha256: 
 f6340d31340f85792b7719258b2ed215777f3b2d4635ec8da425f5e471ea5f0d 2011 libxml2_2.8.0+dfsg1-4ubuntu1.dsc
 46f339843967e861e81f8427373ff2a3d0a8cb608022dea16aa1d345ddcee338 3554683 libxml2_2.8.0+dfsg1.orig.tar.gz
 ba9a2817e1de8aca6bb2e049200a9e59d50b38a64ccd1cae08b02d8a1f815fbb 28826 libxml2_2.8.0+dfsg1-4ubuntu1.debian.tar.gz
Files: 
 8d1a298731fee1e3c59d0ad4b21d206b 2011 libs optional libxml2_2.8.0+dfsg1-4ubuntu1.dsc
 008920f545a36da4eca363d0c1a0ffee 3554683 libs optional libxml2_2.8.0+dfsg1.orig.tar.gz
 3bcf67f773cc0dae6c9aa33ac8d98231 28826 libs optional libxml2_2.8.0+dfsg1-4ubuntu1.debian.tar.gz
Original-Maintainer: Debian XML/SGML Group <debian-xml-sgml-pkgs at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEARECAAYFAk/2FrEACgkQQxo87aLX0pLtiACgmh3rFEsvQjnTewFrTQY5wLBU
aqcAn37IFyXYWiwLMFg9i0melBPZiEN5
=fjOs
-----END PGP SIGNATURE-----