~ubuntu-branches/ubuntu/trusty/devscripts/trusty-security : changes

~ubuntu-branches/ubuntu/trusty/devscripts/trusty-security » Changes from revision 145

From Revision 145 to 126

Rev	Summary	Authors	Tags	Date
145	* SECURITY UPDATE: directory traversal issue in uupdate * SECURITY UPDATE: directory traversal issue in uupdate - scripts/uupdate.sh: remove symlinks before applying patches, and restore them afterwards. - http://anonscm.debian.org/cgit/collab-maint/devscripts.git/commit/?id=0fef671 - CVE-2014-1833	Marc Deslauriers	2.14.1ubuntu0.1	8 years ago
144	Actually install sadt. (Closes: #736683) Actually install sadt. (Closes: #736683)	James McCoy	2.14.1	10 years ago
143	[ Martin Pitt ] [ Martin Pitt ] * autopkgtest: Add "allow-stderr" restriction to avoid failing tests because of the HTTP server log on stderr. [ James McCoy ] * uscan: + Repack the tarball and verify it is a compressed archive without allowing arbitrary code execution. Fixes CVE-2013-6888. + Use find's -exec to call rm directly instead of piping to xargs. (Closes: #732006, CVE-2013-7085) + Follow tar's recommended security practices - Use --keep-old-files --no-overwrite-dir - Ensure parent directory of directory used for repacking archive isn't accessible to other users. + Fix handling of 'dirname' exclusions, so 'dirname/' isn't required. [ Salvatore Bonaccorso ] uscan: Fix unitialized value warning when copyright is not in copyright-format 1.0. (Closes: #732807)	James McCoy	2.13.9	10 years ago
142	Upload current Debian git head to fix autopkgtest. Upload current Debian git head to fix autopkgtest. autopkgtest: Add "allow-stderr" restriction to avoid failing tests because of the HTTP server log on stderr.	Martin Pitt	2.13.8git1	10 years ago
141	[ James McCoy ] [ James McCoy ] * uscan: Fix arbitrary command execution when using USCAN_EXCLUSION. (Closes: #731849) [ Adam D. Barratt ] * Honour USCAN_EXCLUSION. (Closes: #731885)	James McCoy	2.13.8	10 years ago
140	[ James McCoy ] [ James McCoy ] * namecheck: Fix “406 Not Acceptable” error when querying Alioth. (Closes: #725228) * uscan: + Allow specifying file exclusion rules in d/copyright so uscan can automatically repack upstream archives which contain non-DFSG content. Thanks to Andreas Tille, gregor herrmann, and Rafael Laboissiere for the patches. (Closes: #685787) + Require LWP::Protocol::https instead of Crypt::SSLeay to access https sites. (Closes: #624317) * test/: + Pass --no-conf to commands which may be influenced by ~/.devscripts + Fix a test failure in test_uscan_online due to different version format. rc-alert: Be more flexible in the formatting of the HTML being parsed. (Closes: #729779) * who-uploads: Use long keyid format to avoid ambiguity. (Closes: #674579) [ Evgeni Golov ] * debcheckout: allow setting the user for auth mode in the config. (Closes: #722171) [ Joachim Breitner ] * debcommit: Fix --release with darcs when the repository is clean. (Closes: #728177) [ Christoph Berg ] * origtargz: Document pristine-tar support in the manpage. * rmadison: Support -r (--regex) parameter. (This is still unsupported on qa.debian.org, but possible on some 3rd-party repositories like apt.postgresql.org.) [ Benjamin Drung ] * test/test_debchange: Strip distribution data outdated warnings. (Closes: #726694) [ Translation updates ] * German, Chris Leick. * French, David Prévot. [ Julien Cristau ] * debchange: the default setting for urgency is now 'medium' (Closes: #730343)	James McCoy	2.13.5	10 years ago
139	No change rebuild for trusty. No change rebuild for trusty.	Stéphane Graber	2.13.4build1	10 years ago
138	[ James McCoy ] [ James McCoy ] * Document which scripts use libdistro-info-perl. (Closes: #708311) * Make curl return a proper exit code for HTTP errors. (Closes: #720508) * mk-build-deps: Define the deb's version when parsing a debian/control file. (Closes: #721939) * checkbashisms: Sort the keys of the bashisms hashes to provide consistently ordered output. This avoids false positive failures in the test suite. [ Charles Pigott ] * Fix POD issues. (LP: #1226318, Closes: #719828) [ Translation updates ] * French, David Prévot.	James McCoy	2.13.4	10 years ago
137	[ gregor herrmann ] [ gregor herrmann ] * debcommit: Add the source package name to commit/tag messages. (Closes: #704236) [ Paul Wise ] * In chdist bash completion, don't print warnings if ~/.chdist is missing * Support 'new' in the rmadison URL list. [ James McCoy ] * dpkg-buildpackage: Use "dpkg-checkbuilddeps -A" for arch-indep builds. Bump dpkg-dev Depends to 1.16.4 accordingly. * Suppress "given/when is experimental" warnings when using Perl 5.18. * mk-build-deps: Take Build-Conflicts(-Indep) into account. (Closes: #712227) * debcommit: Use "git status --porcelain" to check for a dirty working directory. (Closes: #712166) * uscan: Add "Accept: /" header to fix downloading from Alioth. Thanks to Dmitry Smirnov for the patch. (Closes: #712261) * transition-check: Work around Pod::Simple change which causes Perl 5.18's pod2man to fail. (Closes: #714599) * licensecheck: + Check haskell files. Thanks to Jens Petersen for the patch. + Handle differing lengths of comment leaders when autodetecting comments. (Closes: #714835) * uscan/rc-alert: Fix roff errors in man pages. Thanks to Eric S. Raymond for the patch. (Closes: #712701) * dscverify: Use ~/.gnupg/trustedkeys.gpg, if available. (Closes: #600048) [ Chris Boot ] * bts: Fix no-mutt option. (Closes: #709999) [ Daniel Kahn Gillmor ] * Enable OpenPGP signature verification (Closes: #610712) [ Yaroslav Halchenko ] * licensecheck: Check .go (Go) files (Closes: #711467) * wnpp-check: Add bug URL to output and reorder columns to ease reading. (Closes: #715572) [ Bernhard R. Link ] * uscan: properly cope with colons and minus signs in upstream versions. (Closes: #658999) [ Phillip Hands ] * licensecheck: + allow plural: copyright notices + ignore "copyright holders" + alternative BSD-3 wording "authors" and "_any_ contributors" + ignore #defines containing (c) + fix "copyright ownership" + ignore "copyright statement" + ignore "copyright string" + ignore coyright (claim\|is\|in), and fix test + ignore "copyright to"	James McCoy	2.13.3	10 years ago
136	[ Julian Gilbey ] [ Julian Gilbey ] * Correct git location in debian/copyright file (Closes: #703853) [ James McCoy ] * licensecheck: Regex-escape file contents that are used as part of a pattern. (Closes: #704434, LP: #1164261) * bts: + Accept the "jessie" and "jessie-ignore" tags. (Closes: #705817) + Email $pkg@packages.debian.org when reassigning a bug to src:$pkg. (Closes: #707636) * uscan: Define local replacements for die/warn instead of setting $SIG{__DIE__}/$SIG{__WARN__} to prevent breaking die/warn in other modules. (Closes: #669942) * licensecheck: Fix invalid regular expression syntax. (Closes: #706232) * debchange: + Set Wheezy as the default --bpo target. (Closes: #703633) + Recognize oldstable backports while oldstable is supported. (Closes: #707616) * rc-alert: Change description of I flag to reference wheezy instead of lenny. (Closes: #683491) * who-permits-upload: + Use consistent formatting in the "SEE ALSO" section of the POD. + Fix spelling mistakes. + Fix handling of encoding. * Move debian/bug/* so dh_bugfiles handles installing them. * Upload to unstable. [ Christoph Berg ] * dget: "--all pkg" will download all binaries for source package pkg. [ Raphael Geissert ] * checkbashisms: Fix false positives in $_ checks. (Closes: #691389) [ Arno Töll ] * New script who-permits-upload, which retrieves information about Debian Maintainer access control lists. (Closes: #688830) [ David Prévot ] * Formating manpages review. (Closes: #707299) [ Translation updates ] * French, David Prévot. * German, Chris Leick.	James McCoy	2.13.2	11 years ago
135	No change rebuild to change default Ubuntu distro from rarin... No change rebuild to change default Ubuntu distro from raring to saucy.	Stéphane Graber	2.13.1build1	11 years ago
134	[ Laurent Rineau ] [ Laurent Rineau ] * licensecheck: - Fix the detection of (L\|A)GPL. (Closes: #700938) - Fix comments pattern detection. (Closes: #700944) [ Benjamin Drung ] * wnpp-check: Correct download links to fix regression from previous release. * Switch to debhelper 9. * Convert Python scripts to python3 (Closes: #680313). * Move git repository to collab-maint. * Remove Julian Gilbey, Mohammed Adnène Trojette, Christoph Berg, Stefano Zacchiroli, Adam D. Barratt, and Luk Claes from uploaders list. Thanks for your work. [ James McCoy ] * debdiff: Handle control files with odd permissions. Thanks to Julian Gilbey for the patch. (Closes: #702610) * mk-build-deps: Skip malformed stanzas instead of outright failing. (Closes: #679631) [ Dmitrijs Ledkovs ] * wrap-and-sort: Add trailing comma option (Closes: #703323). [ Markus Wanner ] * uscan: more debug info to allow checking uversionmangle patterns.	Benjamin Drung	2.13.1	11 years ago
133	Add trailing comma option to wrap-and-sort. Add trailing comma option to wrap-and-sort.	Dmitrijs Ledkovs	2.13.0ubuntu2	11 years ago
132	* Merge from Debian experimental. Remaining changes: * Merge from Debian experimental. Remaining changes: - Convert python scripts to python3. (Closes: #680313) Debian bug #695259 needs to be fixed to get the change into Debian.	Benjamin Drung	2.13.0ubuntu1	11 years ago
131	Open control file as bytes and write out encoded utf-8. (LP: Open control file as bytes and write out encoded utf-8. (LP: #1099589).	Dmitrijs Ledkovs	2.12.6ubuntu3	11 years ago
130	Readd devscripts python2 module for ubuntu-dev-tools. (LP: #... Readd devscripts python2 module for ubuntu-dev-tools. (LP: #1099091).	Dmitrijs Ledkovs	2.12.6ubuntu2	11 years ago
129	* Convert python scripts to python3. Closes: #680313. * Convert python scripts to python3. Closes: #680313. * Drop python-unittest2 b-d (only needed for python < 2.7).	Matthias Klose	2.12.6ubuntu1	11 years ago
128	Actual install German translation. Actual install German translation.	Benjamin Drung	2.12.6	11 years ago
127	[ James McCoy ] [ James McCoy ] * bts: + Provide a clearer error message when Authen::SASL isn't installed. (Closes: #689816) + Don't require a usertag after 'bts usertag <bug> ='. (Closes: #689815) + Don't require a package after 'bts affects <bug> ='. (Closes: #690131) * Add German translation of man pages. Thanks to Chris Leick. (Closes: #687985) [ Benjamin Drung ] * Fix Subversion typo and write all instances of it with an capital initial letter. Thanks to Regid Ichira for the finding. (Closes: #689953) * debuild: - Fix failure if called with --preserve-env and GREP_OPTIONS is set. Thanks to Aaron Culich for the patch. (Closes: #501056, LP: #581319) - Add missing bits to support dpkg-genchanges hook. Thanks to Maciej Malycha for the patch. (LP: #1065201) * wrap-and-sort: Sort Pre-Depends list (LP: #1070599) [ David Prévot ] * French translation update.	Benjamin Drung	2.12.5	11 years ago
126	[ James McCoy ] [ James McCoy ] * dget: Avoid an infinite loop when a .changes/.dsc file references itself. (Closes: #687670) * debdiff: + Set $TMPDIR when running interdiff so its temp files get cleaned up on exit. + Fallback to manual diff of source package if interdiff fails. (Closes: #685202) * dcmd: Don't add "--" to the command being executed. The user has to know where this should be used/if it can be used. (Closes: #687964) * debcheckout: Fix collision in short options. Use -P for --package. (Closes: #688150) [ Benjamin Drung ] * licensecheck: Recognize licenses in (fixed-form) Fortran code. Thanks to Francesco Poli for the patch and the example. (Closes: #687452)	James McCoy	2.12.4	11 years ago

Older »