Branches for Quantal

Author: Jonathan Nieder
Revision Date: 2012-06-16 15:03:17 UTC

* New snapshot, taken from upstream commit f1675f76.
  - liblzma: BCJ filters would return a spurious LZMA_BUF_ERROR
    result in certain circumstances. As a result, the xz tool
    could produce inappropriate "Compressed data is corrupt" or
    "Unexpected end of input" failures (reported in XZ Embedded as
    Fedora bug 735408).
  - "xz -v -v --list" prints the minimal XZ Utils version needed
    to decompress a stream.
  - "xz --robot -v --list" formats filenames more plainly.
  - xzgrep does not fail unconditionally when the decompressor
    dies with SIGPIPE due to unconsumed output any more. This
    makes the exit status from commands such as "xzgrep -q" and
    "xzgrep -l" more predictable and convenient for scripts.
  - examples/xz_pipe_decomp.c did not check correctly for
    truncated input.
  - There is a new set of sample programs. The old ones have
    been renamed to examples_old but are still maintained.
* liblzma:
  - If dlopen() indicates that liblzma.so.2 is loaded, check fewer
    reserved fields in the stream argument to the lzma_code()
    function. This prevents out-of-bounds reads when liblzma5
    functions are called by code built against liblzma2 (see
    <http://sourceware.org/PR12977>).
  - Remove the lzma_code@Base compatibility symbol.
    Closes: #649522. Thanks to Eduard Bloch.
  - Install run-time library to /lib so it can be used before /usr
    is mounted. Closes: #672120.
  - Configure with --disable-threads for now to avoid needlessly
    linking to libpthread and librt.
* liblzma-dev:
  - Install an appropriate library for static linking instead of
    the decompression-only version used to build xzdec.
    Closes: #673001. Thanks to Anton Tolchanov.
  - Use the liblzma2-compatible version of lzma_code() in the
    static library.
  - Multi-Arch: same. Thanks to Riku Voipio.
  - Install new examples and revised old examples to
    /usr/share/doc/liblzma-dev.
* xz-utils:
  - Use update-alternatives to provide lzma, unlzma, lzcat, and
    the rest of the lz* scripts without conflicting with the lzma
    package.
  - Conflicts: lzma versions before before 9.22-1, when it started
    providing lzma, unlzma, and lzcat through the alternatives
    system.
  - Conflicts: and Replaces: xz-lzma.
  - README.Debian: Update instructions on configuring the package
    to provide lzma compatibility commands.
* Remove xz-lzma package.
* Use dpkg-buildflags to retrieve compiler flags, including
  hardening options. Build-Depends: dpkg-dev (>= 1.16.1).
  Closes: #653739.
* debian/rules:
  - build-arch: Simplify by using a double-colon rule instead of a
    dependency on a dummy noop target.
  - build-indep: Assume doxygen is available, instead of trying to
    get by by assuming the caller meant to invoke build-arch when
    it is missing. Build-Depends: dpkg-dev (>= 1.16.2).
  - Rearrange for clarity.
* debian/symbols: Bump the minimal version for lzma_code(),
  lzma_raw_buffer_decode(), and lzma_raw_buffer_encode().
* Use machine-readable copyright-format 1.0.
* Update copyright file.
* Standards-Version: 3.9.3 (checked).
* debian/changelog.upstream.sh: Use ‘git rev-list | git diff-tree’
  instead of ‘git log’ to avoid depending on the build system’s
  configuration.