~ubuntu-branches/debian/squeeze/devscripts/squeeze : changes

~ubuntu-branches/debian/squeeze/devscripts/squeeze » Changes from revision 31

From Revision 31 to 12

Rev	Summary	Authors	Tags	Date
31	* dget: * dget: + Fix CVE-2012-2241 (arbitrary file deletion) + Fix CVE-2012-2242 (arbitrary code execution) * dscverify: Fix CVE-2012-2240 (arbitrary code execution) * debdiff: Fix regression in exit code, introduced in 2.10.69+squeeze2 (Closes: 686247)	James McCoy	2.10.69+squeeze4	11 years ago
30	[ Adam D. Barratt ] [ Adam D. Barratt ] * debdiff: Fix CVE-2012-0211 and CVE-2012-0212 (argument injection / modification) [ Raphael Geissert ] * debdiff: + Fix CVE-2012-0210 (insufficient input sanitising reading .dsc and .changes files) + Remove undocumented feature treating extensionless files as if they were packages (Closes: #659559)	Adam D. Barratt	2.10.69+squeeze2	12 years ago
29	* bts: Accept the "wheezy" and "wheezy-ignore" tags. * bts: Accept the "wheezy" and "wheezy-ignore" tags. * debchange: + Set Squeeze as the default backports target. + Recognize "lenny-backports-squeeze" and "squeeze-backports" distributions. + Remove "etch-backports" and "etch-volatile" distributions.	James Vega	2.10.69+squeeze1	13 years ago
28	[ James Vega ] [ James Vega ] * po4a: Add targets to transform translated POD/DocBook files into man pages. (Closes: #597782) * Include command list in localized devscripts.1. (Closes: #597906) * Fix a couple markup issues in source files for generated man pages. * bts: Don't send an empty email when --no-action is given. (Closes: #600822) [ David Prévot ] * Update French translation. (Closes: #599234, #600033) [ Patrick Schoenfeld ] * Replace occurences of old FSF address with the FSF recommendation what should be written inside of source files. (Closes: #502512)	James Vega	2.10.69	13 years ago
27	[ James Vega ] [ James Vega ] * dget: Fix parsing of apt-cache and sources.list when given only a package name. (Closes: #594904) * debchange: + Remove EOL Ubuntu release Intrepid. Add new development release Natty. (Closes: #593659) + Remove Etch and add Squeeze as backports targets. Lenny is still the default bpo target. * rmadison: Change Backports URL to backports.debian.org. (Closes: #595714) [ Luk Claes ] * Adjust rmadison documentation for move of accessible projectb mirror from merkel to ries.	James Vega	2.10.68	13 years ago
26	* debcommit: Use the first detected changelog instead of the... * debcommit: Use the first detected changelog instead of the last. (Closes: #591368) * debsnap: Remove use of pure-perl specific functions from JSON module. (Closes: #591392) * debchange: Clarify how the TZ environment variable affects debchange. Based on a patch by Rolf Leggewie. (LP: #330430)	James Vega	2.10.67	13 years ago
25	[ James Vega ] [ James Vega ] * bts: + Fix ability to clear all tags on a bug. (Closes: #539688) + Detect invalid characters in usertags. (Closes: #590930) + Allow specifying multiple tag modifiers (+, -, =) in one usertag stanza. * rc-alert: Add missing hyphens and correct formatting in the man page. Based on a patch by Salvatore Bonaccorso. (Closes: #589607) * checkbashisms: Allow kill & trap XSI-isms unless --posix is given, as per Policy 3.9.1.0. (Closes: #486823) * debchange: Add --[no]multimaint-merge option, corresponding to the DEBCHANGE_MULTIMAINT_MERGE configuration variable. (Closes: #590842) * licensecheck: Add .pas, .inc, .dtd., .xsl, and .mod files to the default check list. (Closes: #534988, #591305) * build-rdeps: Escape regular expression metacharacters in package names. (Closes: #590832) * Build-Depends on po4a (>= 0.40) so po4a recognizes .TQ macro. [ Cyril Brulebois ] * uscan: Get rid of extra quoting in dpkg --compare-versions calls. (Closes: #590178) [ Carsten Hey ] * debsign: Add options --re-sign and --no-re-sign to let the user choose whether an already signed file should be resigned. (Closes: #580821)	James Vega		13 years ago
24	* debc: * debc: + Call changelog_parse correctly. (Closes: #588947) + Update bash completion to complete *.changes files and package names. Thanks to Stefano Rivera for the patch. (Closes: #584703)	James Vega		13 years ago
23	[ James Vega ] [ James Vega ] * Remove mergechanges from the set of commands which use completion of package names. (Closes: #578167) * bts: + Use sendmail to send mails with extra headers when $(DEB)EMAIL aren't present. (Closes: #577564) + Document that $(DEB)EMAIL must be in the environment to send email using either --mutt or --smtp-host. (Closes: #578334) + Cleanup the help output and add some options which were only documented in the man page. + Allow specifying multiple tag modifiers (+, -, =) in one tag stanza. (Closes: #578118) + Document the valid values for the status key in the select command. (Closes: #583067) * debsnap: + Iterate over the list of files listed for a hash until we find one that matches the requested package. (Closes: #584734) + Warn and move on to the next file if no files are present for a given hash or none match the requested package. (Closes: #587265) + Handle error responses from snapshot.debian.org. (Closes: #587217) + Use the basename of the file being downloaded as the name under which to save it. (Closes: #584735) + Do not remove the destination directory when --force is given. (Closes: #587517) * Remove --ignore-dirname options (and deprecation notices) from all scripts. 6.5 years is long enough to stop using that option. * diff2patches: Document the patch naming scheme and use of “debian/” as the destination directory when “debian/patches/” doesn't exist. (Closes: #552693) * mk-build-deps: + Add options to build packages which depend on solely Build-Depends or Build-Depends-Indep. (Closes: #498898) + Include build-essential in Depends. (Closes: #565889) * debi: Use “dpkg -O” instead of parsing dpkg-query's output to upgrade only packages which are already installed. (Closes: #563390) * debcheckout: Specifically call out that Debian hosts are already handled in DEBCHECKOUT_AUTH_URLS' description. Thanks to martin f. krafft for the suggested wording. (Closes: #530581) * debchange: When running “dch -r”, use <dist>-backports if a backports upload is detected. (Closes: #588502) * uupdate: Use “0ubuntu1” for the Debian revision of the version number when running uupdate on Ubuntu systems. Based on a patch by Guillaume Martres. (Closes: #577998) * Ship French man pages in UTF-8 now that #196762 is fixed. [ Martin Zobel-Helas ] * Remove svk from Recommends, it is no longer in the archive. (Closes: #581224) [ Raphael Geissert ] * checkbashisms: + Makefile handling: - Simplify make variables as shell variables. (Closes: #535368) - Convert all $$ to $. - Recognize SHELL setting in Makefile when being set as an override. - Ignore make's '-' for ignore errors. - Fix some false positives due to target names. + Detect incorrect use of ^ instead of ! for negation in pattern matching collections. (Closes: #497489) + Detect use of {post,pre}{increment,decrement} in arithmetic expansion. (Closes: #572006) + Detect use of Bash's “printf -v var ...” or the %b and %q format specifiers. + Detect use of the Bash's “coproc” keyword. + Detect use of Bash's “;;&” and ”;&” operators. + Add support for handling line continuations. (Closes: #531327) + Fix a false positive with file redirection. + Fix handling of indented heredoc delimiters. + Fix some parsing of quoted strings. + Detect use of exponentiation. + Detect use of the 'jobs' built-in. + Detect use of command with options other than “-p”. + Fix a false positive with redirection to an fd specified via a variable. + Detect unexpected EOF for unclosed heredocs, quoted strings, and line continuations. [ Simon McVittie ] * mk-build-deps: + Build an Arch: any package if any of the Build-Depends have architecture requirements. (Closes: #580600) + Allow specifying for which architecture to build the package. [ Charles Plessy ] * debchange: Add “--team” support. (Closes: #588714)	James Vega	2.10.65	13 years ago
22	[ Stefano Zacchiroli ] [ Stefano Zacchiroli ] * devscripts.1: generic documentation for $DEBEMAIL and $DEBFULLNAME [ James Vega ] * Devscripts::Versort: Correct _versort so the lists it returns aren't shorter than the ones passed in to _versort. (Closes: #577654) * debcheckout: Switch from using the Switch module to Perl 5.10's switch feature.	James Vega	2.10.64	14 years ago
21	bts: Correct the address used to email the submitter when us... bts: Correct the address used to email the submitter when using the "bts done" command.	James Vega	2.10.61	14 years ago
20	The "Welcome to the New Year" release. The "Welcome to the New Year" release. [ James Vega ] * checkbashisms: Detect use of {x..z} expansion. Thanks to Raphael Geissert. (Closes: #560774) * who-uploads: Show usage if no arguments are given. Thanks to Kumar Appaiah. (Closes: #560955) * uscan: + Add missing escape of '\' in man page. Thanks to Marco Túlio Gontijo for the patch. (Closes: #562587) + Add missing verb in description of FTP syntax. Thanks to Marco Túlio Gontijo for the patch. (Closes: #562586) * annotate-output: Allow specifying a timestamp format. (Closes: #539720) * bts: + Always include "thanks" at the end of the control block. (Closes: #542962) + Allow specifying which fields will be shown by "bts status". (Closes: #499283, #323782) + Add "verbose" option to "bts status", which will also show fields that don't have a set value. + Add "done" command which sends a close command as well as Ccing the bug submitter. (Closes: #482751) * build-rdeps: + Add --origin option to specify which origin to use. + Use the Release file to determine which Sources file(s) to search for the given origin. Thanks to Michael Schutte for the patch. (Closes: #545115) [ Patrick Schoenfeld ] * licensecheck: Add support for some common variants of the WTFPL [ Ryan Niebur ] * deb-reversion: Fix use with recent dpkg-dev, thanks to Salvatore Bonaccorso (Closes: #559702) [ Adam D. Barratt ] * Bump Standards-Version to 3.8.3. No changes required. * build-rdeps: Correct spelling error in manpage ("ommitted" -> "omitted"). * checkbashisms: Correct spelling error in manpage ("preceeded" -> "preceded"). * decbommit: Correct spelling error in manpage ("commiting" -> "committing").	James Vega	2.10.60	14 years ago
19	[ James Vega ] [ James Vega ] * debrelease: Do not use .svn/deb-layout to determine debsdir if --debs-dir was used. (Closes: #558172) * checkbashisms: Fix a false positive detection of ". $(foo bar)/baz" as attempting to pass arguments to a sourced script. (Closes: #557639) [ Joachim Breitner ] * debcommit: Add support for having only debian/ under a svn, cvs or darcs VCS (Closes: #450878)	James Vega	2.10.59	14 years ago
18	* Urgency "high" for security fix fix * Urgency "high" for security fix fix [ Ryan Niebur ] * uscan: fix a regression from the security fix when the command is given parameters. use Text::ParseWords::shellwords to parse the given command. * dch: fix comparison of versions when the new and current version are the same (Closes: #545099) [ Adam D. Barratt ] * bts: Refer to the "--no-ack" option rather than the incorrect "--no-acks" in the description of the BTS_SUPPRESS_ACKS variable. Thanks, Jakub Wilk. (Closes: #542961) * licensecheck: Add missing blank line in POD. Thanks, Nicolas Francois. * uscan: Fix regressions introduced by the security fix in the previous upload. The parser now correctly keeps track of the last match when /g is used to avoid infinite loops. Thanks, Raphael Geissert and Martín Ferrari. (Closes: #544931) * l10n updates; thanks, Nicolas Francois: (Closes: #545327) + Update French manpage translations + Fix addendum format for dcontrol in po4a/devscripts-po4a.conf + Use --previous when invoking po4a * debian/control: Bump version of po4a build-dependency to 0.31 to ensure support for --previous.	Adam D. Barratt	2.10.55	14 years ago
17	The "Debconf fish!" upload The "Debconf fish!" upload [ Adam D. Barratt ] * bts: + Add a missing "use IO::File" to make "bts select file:foo" work. Thanks, Raphaël Hertzog. (Closes: #538288) + Add the "affects" command to mark a bug as affecting packages other than the package it was filed against. * checkbashisms: Detect the use of "source" when the sourced filename contains a tilde (Closes: #528592) or consists of a single character (Closes: #535252). Thanks, Raphael Geissert and Ryan Niebur. * debcommit: Add darcs support. Thanks to Joachim Breitner for the patch. (Closes: #536037) * nmudiff: + Fix specification of BCc to control@bugs so that it's interpreted as an option to mutt and not as a recipient address. Thanks, Filippo Giunchedi. (Closes: #534585) + Add a missing "feel" to the delayed/XX template. Thanks, Raphael Geissert. * rmadison: + Add patch from Ubuntu to make lookups against their database work again. (The server moved from people.ubuntu.com to people.canonical.com) (Closes: #537302) + When using curl, follow redirects by default. (Also from the Ubuntu patch). * debian/control: Replace descriptions of cvs-* with those from README, because they're better. [ Patrick Schoenfeld ] * bts: Implement a --mutt parameter, which allows mails to be sent using mutt. * debchange: Implement a dist indication mechanism that parses an 'Upload to $DIST' line and sets the distribution accordingly, when the --release parameter is used. (Closes: #515346) * debi: + Implement a --with-depends switch to install depencies of the package together with the package (Closes: #511061) + Implement a --tool switch to choose the tool for installing dependencies * dget: Make it clear in manpage and usage information, that dget is capable of processing several URLs or packages (Closes: #535977) * dscverify: + Implement a --verbose option to disable suppressing of GPG output (Closes: #525670) + Add a notice to the manpage of dscverify that the debian-keyring package has the potential to be out of date and how this can be worked around (Closes: #438679) + Document standard keyring locations in the dscverify manpage * licensecheck: Skip empty files instead of reporting that they don't have a copyright (Closes: #535337) * nmudiff: Use 'bts select' to test, weither a check already has a patch tag set or not and only set it, if not (Closes: #519678) * Add a script listing to devscripts.1 which is auto-generated from debian/control (Closes: #504008)	Adam D. Barratt	2.10.53	14 years ago
16	* debdiff: Make --diffstat work again; accidentally broken i... * debdiff: Make --diffstat work again; accidentally broken in 2.10.48. * uupdate: Fix invocation of cat when attempting to apply diffs. Thanks, Yannick Roehlly. (Closes: #533415) debian/control: Update Standards-Version to 3.8.2 (no changes needed)	Adam D. Barratt	2.10.52	14 years ago
15	* debchange: * debchange: + Use == for numeric comparison, not eq. + Mention in the help output and manpage that a dummy changelog entry may be supplied in conjunction with --release in order to avoid spawning an editor. + Add a configuration variable and command line option to allow the recent change to --release's "auto-save" behaviour to be disabled. For consistency with other debchange options, the default is to retain the behaviour introduced in 2.10.48 - i.e. that the changelog must be explicitly saved after the use of --release. (Closes: #524393) * debcommit: If the installed version of dpkg-dev supports retrieving a list of appropriate bugs, automatically generate bzr --fixes arguments for Launchpad bugs as well as Debian bugs. Thanks, Colin Watson. (Closes: #525823) * debsign: Make the PGP signing method work again. Thanks, Florian Weimer. (Closes: #518821) * getbuildlog: Add a missing "use lib" to allow the special "last" and "last-all" versions to work correctly. Thanks, Iustin Pop. (Closes: #523982) * licensecheck: Add detection of the AGPL. Thanks, Didier Raboud. (Closes: #520903) * namecheck: Fix the formatting of a number of POD strings, also making them easier to translate. Thanks, Florentin Duneau. (Closes: #526047) * rc-alert: + Allow the generated list of bugs to be restricted to those affecting packages with particular debtags facets. Thanks, Jan Hauke Rahm. (Closes: #523523) + Allow the generated list of bugs to be sorted using popcon results. Thanks, Jan Hauke Rahm. (Closes: #478833) * rmadison: Allow a default URL to be specified in the configuration file. Thanks, Roland Mas. (Closes: #524198) * uscan: Remove a superfluous and repeated copy of the site name in an FTP error message. Thanks, Vaclav Ovsik. * Makefile: Remove cruft relating to French manpages, which has been handled by the po4a setup for a while now.	Adam D. Barratt	2.10.49	14 years ago
14	[ Adam D. Barratt ] [ Adam D. Barratt ] * Update Standards Version to 3.8.1 (no changes required) * debchange: Fix a couple of syntax errors in the "does an orig tarball exist?" test introduced for #500932. * debdiff: + Don't bail if diff returned an exit status of 2 when comparing files. If there are binary files in either of the trees being compared then that's expected as the files can't be reliably compared. + Don't claim that the exit status on failure will be anything other than 255 (i.e. the result of die()ing). * nmudiff: Adapt to handle the fact that debdiff will now return an exit status of 1 when comparing non-identical source packages. * debian/copyright: Explicitly refer to the GPL-2 and GPL-3 common license files rather than the "GPL" symlink. [ Patrick Schoenfeld ] * debchange: When renaming a directory (because of version change) and noticing that no matching orig tarball exist, emit a warning. (Closes: #500932) * uscan: Use maximum compression rate while repacking files from bzip2/zip into gzip. Thanks Nelson A. de Oliveira. (Closes: #522442) [ James Vega ] * debchange: As per the other edit flags, do not modify the original changelog when using `debchange -r' unless the user saves the temporary changelog. (Closes: #422450)	Adam D. Barratt	2.10.48	15 years ago
13	[ Adam D. Barratt ] [ Adam D. Barratt ] * dcontrol: Produce "friendly" error messages if liburi-perl and/or libwww-perl aren't installed. * debdiff: + Don't treat an absence of differences as an error when comparing source packages. (Closes: #515683) + Set the exit status correctly when comparing source packages. If differences were found, debdiff will now exit with a status of 1, as per debdiff(1). + Support bzip2 and lzma compressed orig tarballs. (Closes: #473969) * debuild: Support bzip2 and lzma compressed orig tarballs. (Closes: #473974) * licensecheck: + Document --no-conf. + Fix an uninitialised variable warning when --no-conf is used. Thanks. Cristian Greco. (Closes: #515047) * nmudiff: + Rework the arguments passed to mutt in order to avoid problems attaching the diff with recent versions of mutt. Thanks, Adeodato Simó. (Closes: #518127) + Allow the specification of a particular DELAYED queue, rather than including the "DELAYED/XX" placeholder. May be specified as 0 to remove mention of DELAYED. (Closes: #518126) * rc-alert: Modify the description of the "I" flag to reference the squeeze-ignore tag rather than etch-ignore. * debian/control, README: Add liburi-perl to the description of dcontrol. [ James Vega ] * bts: Include the module name when calling MIME::Base64::encode_base64 since MIME::Base64 is only being 'require'd not 'use'd. Thanks Євгеній Мещеряков. (Closes: #516117) * debchange: Do not use an empty gecos field when trying to determine the maintainer's name. (Closes: 516423) [ Christoph Berg ] * dcontrol: New script to query binary and source package control files at http://qa.debian.org/cgi-bin/dcontrol.	Adam D. Barratt	2.10.47	15 years ago
12	* bts: * bts: + If the debbugs host in use is bugs(-).d.o, use bugs-master.d.o when reporting spam to match recent changes to the BTS. + If -n / --no-action was given on the command line, print the URL that would have been used to report spam rather than sending the report. + Accept the new "squeeze" and "squeeze-ignore" tags. debchange: + Add lenny-backports and lenny-volatile to the list of recognised distributions. (Closes: #514818) + Don't accept "sarge", "etch" or "lenny" as valid distributions. dak requires suite names (e.g. "stable") rather than codenames. + Modify --bpo to produce a changelog suitable for uploading to lenny-backports rather than etch-backports by default. If the latest changelog entry is for an etch backport, a new etch-backports stanza will be produced instead. * licensecheck: + Remove C /* / comments. Based on a patch by Jörg Sommer. + Identify another couple of forms of GPL wording. (Closes: #514811) + Add .xs (Perl XS files) and .vala (GNOME Vala source files) to the default list of files to process. (Closes: #513770, #514337) + Fix a bug in a regular expression which meant that .h files weren't included in the default list of files to search. + Add support for the Boost, Python and zlib/libpng licenses. Thanks, Cristian Greco. (Closes: #514812) README.newscripts: Correct the "svn propset" syntax added in the previous upload. * debian/lintian.overrides: New file to allow us to override lintian thinking that the mention of snapshot.debian.net in debsnap's description is a reference to an upstream homepage.	Adam D. Barratt	2.10.46	15 years ago

Older »