lp://staging/debian/jessie/xz-utils

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

21. By Jonathan Nieder on 2012-09-10

* Apply fixes from 5.1.2alpha. Closes: #685220.
  - liblzma: report a LZMA_DATA_ERROR when range encoded data starts
    with a nonzero byte. This is a sanity check to catch malformed
    files that no known encoders produce.
  - xz -v -v --list: Support for decompressing blocks with
    zero-length uncompressed data was added in xz 5.0.2, not 5.0.3.
  - xz.1: "xz --robot -v -v --list" gained a "minimum xz version to
    decompress" field.
* xz-utils/README.Debian: Document differences from upstream.
  Closes: #685217.

20. By Jonathan Nieder on 2012-06-16

* New snapshot, taken from upstream commit f1675f76.
  - liblzma: BCJ filters would return a spurious LZMA_BUF_ERROR
    result in certain circumstances. As a result, the xz tool
    could produce inappropriate "Compressed data is corrupt" or
    "Unexpected end of input" failures (reported in XZ Embedded as
    Fedora bug 735408).
  - "xz -v -v --list" prints the minimal XZ Utils version needed
    to decompress a stream.
  - "xz --robot -v --list" formats filenames more plainly.
  - xzgrep does not fail unconditionally when the decompressor
    dies with SIGPIPE due to unconsumed output any more. This
    makes the exit status from commands such as "xzgrep -q" and
    "xzgrep -l" more predictable and convenient for scripts.
  - examples/xz_pipe_decomp.c did not check correctly for
    truncated input.
  - There is a new set of sample programs. The old ones have
    been renamed to examples_old but are still maintained.
* liblzma:
  - If dlopen() indicates that liblzma.so.2 is loaded, check fewer
    reserved fields in the stream argument to the lzma_code()
    function. This prevents out-of-bounds reads when liblzma5
    functions are called by code built against liblzma2 (see
    <http://sourceware.org/PR12977>).
  - Remove the lzma_code@Base compatibility symbol.
    Closes: #649522. Thanks to Eduard Bloch.
  - Install run-time library to /lib so it can be used before /usr
    is mounted. Closes: #672120.
  - Configure with --disable-threads for now to avoid needlessly
    linking to libpthread and librt.
* liblzma-dev:
  - Install an appropriate library for static linking instead of
    the decompression-only version used to build xzdec.
    Closes: #673001. Thanks to Anton Tolchanov.
  - Use the liblzma2-compatible version of lzma_code() in the
    static library.
  - Multi-Arch: same. Thanks to Riku Voipio.
  - Install new examples and revised old examples to
    /usr/share/doc/liblzma-dev.
* xz-utils:
  - Use update-alternatives to provide lzma, unlzma, lzcat, and
    the rest of the lz* scripts without conflicting with the lzma
    package.
  - Conflicts: lzma versions before before 9.22-1, when it started
    providing lzma, unlzma, and lzcat through the alternatives
    system.
  - Conflicts: and Replaces: xz-lzma.
  - README.Debian: Update instructions on configuring the package
    to provide lzma compatibility commands.
* Remove xz-lzma package.
* Use dpkg-buildflags to retrieve compiler flags, including
  hardening options. Build-Depends: dpkg-dev (>= 1.16.1).
  Closes: #653739.
* debian/rules:
  - build-arch: Simplify by using a double-colon rule instead of a
    dependency on a dummy noop target.
  - build-indep: Assume doxygen is available, instead of trying to
    get by by assuming the caller meant to invoke build-arch when
    it is missing. Build-Depends: dpkg-dev (>= 1.16.2).
  - Rearrange for clarity.
* debian/symbols: Bump the minimal version for lzma_code(),
  lzma_raw_buffer_decode(), and lzma_raw_buffer_encode().
* Use machine-readable copyright-format 1.0.
* Update copyright file.
* Standards-Version: 3.9.3 (checked).
* debian/changelog.upstream.sh: Use ‘git rev-list | git diff-tree’
  instead of ‘git log’ to avoid depending on the build system’s
  configuration.

19. By Jonathan Nieder on 2011-10-20

* liblzma: Match upstream ABI.
  - Remove the lzma_chunk_size() function.
  - A few ABI tweaks to reserved space in structures.
  - Enable ELF symbol versioning.
  - Bump soname to 5.
  - Continue to leave out threading support, since the relevant
    interfaces in liblzma are not yet stable.
* xz-utils/README.Debian: Remove note on ABI differences.
* Remove liblzma/README.Debian.
* liblzma: Introduce a lzma_code@Base compatibility symbol to ensure
  programs linked against unversioned symbols from liblzma2 can
  share a process image with liblzma5 without breaking.
* debian/symbols: XZ_5.0 symbols come from liblzma5. Build-Depends:
  dpkg-dev (>= 1.15.6); thanks to Jakub Wilk for a reminder.
* debian/symbols: The lzma_code@Base symbol is not guaranteed to
  continue to exist in the future, so tell dpkg-shlibdeps to produce
  an error if some package manages to use it.

18. By Jonathan Nieder on 2011-08-16

debian/rules build-arch: Do not trigger an infinite "make"
recursion loop when DEB_BUILD_OPTIONS=nocheck. Closes: #638071.
Thanks to Thorsten Glaser.

17. By Jonathan Nieder on 2011-08-16

* New snapshot, taken from upstream commit 5c5b225.
  - liblzma:
    - lzma_stream_encoder() leaked memory.
    - The LZMA2 decoder rejected streams that decompress to a
      zero-length string.
    - lzma_easy_buffer_encode() and lzma_stream_buffer_encode()
      used to write such streams when asked to compress a 0-length
      buffer.
    - lzma_index_init() would segfault on allocation failure.
    - liblzma: Various functions check their arguments (especially
      choice of integrity check) better, making it harder to create
      a corrupt .xz file instead of receiving an error.
  - xz and scripts:
    - "xz -v -v --list" would read and try to free() uninitialized
      memory, continuing past the end of an on-stack array, when
      asked to describe certain corrupted XZ files.
    - xz -S.suf now refuses to compress a file whose name already
      ends with the suffix “.suf”.
    - xz --force can be used to compress setuid, setgid, sticky,
      and multiply linked files.
    - xz uses posix_fadvise() to speed up sequential input.
    - xz --block-size forces a full flush periodically during
      compression, for better random-access reading support and to
      make simple parallelism possible in the future.
    - unxz: The new --single-stream option discards trailing
      garbage after the end of the first stream.
    - xzdiff can read gzip- and bzip2-compressed files.
    - xzdiff and xzgrep can read lzop-compressed files.
    - xzegrep and xzfgrep perform extended regex and fixed-string
      matches, respectively. (The previous behavior was to always
      use basic regexes.)
    - xzgrep -l (= --files-with-match) works.
    - The Czech “xz --help” output uses a more correct term for
      files with holes. Thanks to Petr Hubený. Closes: #605762.
    - xz: New Polish and French translations.
  - The Doxygen-generated documentation uses short, relative paths
    to name source files. Closes: #572273.
* Update copyright file.
* Remove example programs from debian/examples. They are included
  in the upstream source package now.
* Move liblzma to an architecture-specific directory, so the
  native library and foreign-architecture versions can be installed
  simultaneously.
  - liblzma2: Pre-Depends: multiarch-support.
  - Use debhelper compatibility level 9. This requires passing
    the dh sequence name before other options when invoking dh in
    debian/rules. Build-Depends: debhelper (>= 8.1.3).
  - liblzma2, liblzma-dev: Install files under /usr/lib/<triplet>
    instead of /usr/lib.
  - Thanks to Steve Langasek for explaining the process on the
    Debian wiki.
* Standards-Version: 3.9.2 (checked).
* debian/control: liblzma2 is Multi-Arch: same, while xz-utils
  and xzdec are Multi-Arch: foreign. Closes: #637883. Thanks to
  Riku Voipio.
* debian/symbols: Bump the minimal version for LZMA2 encoder
  functions that reject more bad arguments and skip empty blocks.
* debian/rules: ./configure --disable-symbol-versions for now.
* debian/rules: Provide build-arch and build-indep targets that
  only build the code and the API documentation, respectively.
  Thanks to Roger Leigh for suggesting it through lintian.
  Build-Depends: debhelper (>= 8.9.0).
* debian/rules: Treat DEB_BUILD_OPTIONS=nocheck as a request not to
  run build-time tests. Thanks to Thorsten Glaser for a reminder.
  Closes: #627209.

16. By Jonathan Nieder on 2010-11-11

* Upload to unstable.
* liblzma2, liblzma-dev, xz-lzma: Install release notes.
* debian/symbols: Bump the minimal versions for lzma_index_encoder,
  lzma_index_decoder to the version in which they gained LZMA_FINISH
  support.
* xz-utils/README.Debian: Document differences from upstream ABI.
* debian/changelog.upstream.sh: Avoid empty changelog entries when
  multiple Debian revisions match an upstream tag.

15. By Jonathan Nieder on 2010-08-10

* New upstream snapshot, taken from upstream commit d5653ba8a.
  - xz: The memory usage limiter is now disabled by default.
  - xz: Support for an XZ_DEFAULTS environment variable was added.
    It contains user-specific default settings, such as memory usage
    limits, and can be overridden by the command line and XZ_OPT.
  - xz: The new --memlimit-compress and --memlimit-decompress
    options allow the memory usage limit to be set separately for
    compression and decompression. A new --memlimit alias has been
    added for the existing --memory option.
  - xz: The --info-memory option (with or without --robot) now prints
    how much RAM is installed in addition to the compression and
    decompression memory limits.
* liblzma-doc: Simplify package description.
* debian/control: Build-Depends: autopoint | gettext (<< 0.18-1),
  autopoint | cvs instead of autopoint, to help with backporting.
  Thanks to Thorsten Glaser for a report.

14. By Jonathan Nieder on 2010-07-15

[ Thorsten Glaser ]
* Explicitly depend on autoconf (>= 2.64~) due to AC_PREREQ,
  discovered during backporting.

[ Jonathan Nieder ]
* Upload to unstable.
* New upstream snapshot, taken from upstream commit a540198f.
  - xz: The new --no-adjust option can be used to error out if there
    is insufficient memory for the chosen compression level.
* liblzma-dev: Install examples to /usr/share/doc/liblzma-dev.
* Update copyright file.

* Drop unpack-time conflicts in favor of configuration-time
  conflicts (Replaces + Breaks):
   - xz-utils: against old xz-lzma (for lzmainfo).
   - xzdec: against old xz-lzma (for lzmadec).
   - xz-lzma: against lzip 1.7 (for lzdiff and lzgrep).
* Standards-Version: 3.9.0.

* debian/autogen.sh: Don’t regenerate upstream changelog when it is
  not out of date.
* debian/rules get-orig-source: Use gzip --no-name --rsyncable.

13. By Jonathan Nieder on 2010-05-27

* New upstream snapshot, taken from upstream commit a334348dc.
  - Show both elapsed time and estimated remaining time in xz -v.
    Thanks to Trent W. Buck for the idea. Closes: #574583.
  - liblzma: Remove the Subblock filter from the public API
    (the ABI is unchanged).
* liblzma-dev.NEWS: Update.
* xz-utils: Update Czech translation.
* Change priority of xz-utils and liblzma2 to required and
  xzdec to extra.

12. By Jonathan Nieder on 2010-03-09

* New upstream snapshot, taken from upstream commit f4b2b526.
  - liblzma: The lzma_stream_init() function was not correctly
    initializing the internal allow_buffer_error flag. As a result,
    ever since 4.999.9beta-1 in rare circumstances when decompressing
    LZMA files, the xz tool would produce spurious "Unexpected end
    of input" failures (Gentoo bug 305591).
  - The default memory usage limit on low-memory systems has been
    increased.
* debian/copyright: Clarify.