* Merge with Debian (LP: #987502), remaining changes:
- Don't drop *.la file. Some libraries still depend on it.
libxml2 (2.8.0+dfsg1-4) unstable; urgency=low
* Sanitize the output of `xml2-config --libs`.
libxml2 (2.8.0+dfsg1-3) unstable; urgency=low
* Remove odd output of xml2-config --libs (Closes: #675682).
* Mark libxml2-dev "M-A: same" again, fixed xml2-config
(Closes: #674474).
libxml2 (2.8.0+dfsg1-2) unstable; urgency=low
* debian/control:
- Remove "M-A: same" from libxml2-dev (Closes: #674474).
- Add "M-A: foreign" to libxml2-doc.
* debian/rules:
- Style change on calling dh using --with.
- Enable all hardening features.
- The sed command for removing DEB_HOST_MULTIARCH is not reverted
because it's generally a good idea to avoid it here.
* lintian-overrides:
- libxml2: package-name-doesnt-match-sonames
- python-libxml2-dbg: hardening-no-fortify-functions
libxml2 (2.8.0+dfsg1-1) unstable; urgency=low
* New upstream release. (Closes: #148220, #590934)
* Adjust changelog of previous NMU (Closes: #674739).
* Try to avoid useless space in /usr/bin/xml-config (Closes: #674474).
libxml2 (2.7.8.dfsg-9.1) unstable; urgency=high
* Non-maintainer upload by the Security Team.
* Fix CVE-2011-3102: off by one pointer access in xpointer.c
(Closes: #674191).
libxml2 (2.7.8.dfsg-9) unstable; urgency=low
* Multi-Arch ready. (Closes: #643026)
- M-A:same packages are libxml2, libxml2-dev and libxml2-dbg.
- M-A:foreign package is libxml2-utils, others are not M-A.
- Library files in udeb are still placed under usr/lib directly.
* New binary: libxml2-utils-dbg.
Move debuggings symbols of libxml2-utils binaries to another package
in favor of marking libxml2-dbg as M-A: same. Descriptions of related
binary packages are slightly modified.
* Enable hardening for Python modules. (Closes: #664107)
* Add support for build-arch and build target, essentially make the
package not FTBFS anymore. (Closes: #668672)
* Use dh compat 9. Not hardcoding libdir in debian/rules.
* Port to source format 3.0 to ease future maintenance of patches.
- Old patches are stored in 01_historical_changes.patch
- Do not patch Makefile.in directly, use dh_autoreconf with patches to
configure.in and Makefile.am instead. This will not actually make
bootstraping a new architecture more difficult since we already have
gettext and autoconf in deep B-D, porters need to break it anyway.
- Store doc/examples/index.html in patch to avoid ciculate B-D with
xsltproc, we should not B-D on it.
* debian/*.dirs: removed, useless.
libxml2 (2.7.8.dfsg-8) unstable; urgency=high
* New maintainer (Closes: #654176).
* Apply upstream patch to add randomization to hashing with large
dictionaries to mitigate hash DoS (CVE-2012-0841; Closes: #660846)
* Bump std-ver to 3.9.3, no change needed.
libxml2 (2.7.8.dfsg-7) unstable; urgency=low
* Team upload.
* parser.c: Fix an allocation error when copying entities.
CVE-2011-3919. Closes: #656377.
libxml2 (2.7.8.dfsg-6) unstable; urgency=low
* Team upload.
* Enabled hardened build flags (Closes: #654903).
* error.c: Fix __xmlRaiseError (Closes: #622358).
-- Iain Lane <email address hidden> Mon, 25 Jun 2012 13:14:43 +0100
This bug was fixed in the package libxml2 - 2.8.0+dfsg1- 4ubuntu1
--------------- dfsg1-4ubuntu1) quantal; urgency=low
libxml2 (2.8.0+
* Merge with Debian (LP: #987502), remaining changes:
- Don't drop *.la file. Some libraries still depend on it.
libxml2 (2.8.0+dfsg1-4) unstable; urgency=low
* Sanitize the output of `xml2-config --libs`.
libxml2 (2.8.0+dfsg1-3) unstable; urgency=low
* Remove odd output of xml2-config --libs (Closes: #675682).
* Mark libxml2-dev "M-A: same" again, fixed xml2-config
(Closes: #674474).
libxml2 (2.8.0+dfsg1-2) unstable; urgency=low
* debian/control: name-doesnt- match-sonames no-fortify- functions
- Remove "M-A: same" from libxml2-dev (Closes: #674474).
- Add "M-A: foreign" to libxml2-doc.
* debian/rules:
- Style change on calling dh using --with.
- Enable all hardening features.
- The sed command for removing DEB_HOST_MULTIARCH is not reverted
because it's generally a good idea to avoid it here.
* lintian-overrides:
- libxml2: package-
- python-libxml2-dbg: hardening-
libxml2 (2.8.0+dfsg1-1) unstable; urgency=low
* New upstream release. (Closes: #148220, #590934)
* Adjust changelog of previous NMU (Closes: #674739).
* Try to avoid useless space in /usr/bin/xml-config (Closes: #674474).
libxml2 (2.7.8.dfsg-9.1) unstable; urgency=high
* Non-maintainer upload by the Security Team.
* Fix CVE-2011-3102: off by one pointer access in xpointer.c
(Closes: #674191).
libxml2 (2.7.8.dfsg-9) unstable; urgency=low
* Multi-Arch ready. (Closes: #643026) changes. patch index.html in patch to avoid ciculate B-D with
- M-A:same packages are libxml2, libxml2-dev and libxml2-dbg.
- M-A:foreign package is libxml2-utils, others are not M-A.
- Library files in udeb are still placed under usr/lib directly.
* New binary: libxml2-utils-dbg.
Move debuggings symbols of libxml2-utils binaries to another package
in favor of marking libxml2-dbg as M-A: same. Descriptions of related
binary packages are slightly modified.
* Enable hardening for Python modules. (Closes: #664107)
* Add support for build-arch and build target, essentially make the
package not FTBFS anymore. (Closes: #668672)
* Use dh compat 9. Not hardcoding libdir in debian/rules.
* Port to source format 3.0 to ease future maintenance of patches.
- Old patches are stored in 01_historical_
- Do not patch Makefile.in directly, use dh_autoreconf with patches to
configure.in and Makefile.am instead. This will not actually make
bootstraping a new architecture more difficult since we already have
gettext and autoconf in deep B-D, porters need to break it anyway.
- Store doc/examples/
xsltproc, we should not B-D on it.
* debian/*.dirs: removed, useless.
libxml2 (2.7.8.dfsg-8) unstable; urgency=high
* New maintainer (Closes: #654176).
* Apply upstream patch to add randomization to hashing with large
dictionaries to mitigate hash DoS (CVE-2012-0841; Closes: #660846)
* Bump std-ver to 3.9.3, no change needed.
libxml2 (2.7.8.dfsg-7) unstable; urgency=low
* Team upload.
* parser.c: Fix an allocation error when copying entities.
CVE-2011-3919. Closes: #656377.
libxml2 (2.7.8.dfsg-6) unstable; urgency=low
* Team upload.
* Enabled hardened build flags (Closes: #654903).
* error.c: Fix __xmlRaiseError (Closes: #622358).
-- Iain Lane <email address hidden> Mon, 25 Jun 2012 13:14:43 +0100