From: Raspbian automatic forward porter Date: Fri, 13 Mar 2026 06:59:49 +0000 (+0000) Subject: Merge version 1.23.5+rpi1 and 1.23.7 to produce 1.23.7+rpi1 X-Git-Tag: archive/raspbian/1.23.7+rpi1^0 X-Git-Url: https://dgit.raspbian.org/%22http:/www.example.com/%22mailto:mocancezar%40gmail.com//%22mailto:i18n-csb%40linuxcsb.org/%22/%22http:/www.example.com/%22mailto:mocancezar%40gmail.com/%22mailto:i18n-csb%40linuxcsb.org/%22?a=commitdiff_plain;h=b45e01cdb14b259907ae8f07bc2a389f53c08bf1;p=dpkg.git Merge version 1.23.5+rpi1 and 1.23.7 to produce 1.23.7+rpi1 --- b45e01cdb14b259907ae8f07bc2a389f53c08bf1 diff --cc debian/changelog index 7e3606a1,6681025c..ae07a2ea --- a/debian/changelog +++ b/debian/changelog @@@ -1,13 -1,70 +1,81 @@@ - dpkg (1.23.5+rpi1) forky-staging; urgency=medium ++dpkg (1.23.7+rpi1) forky-staging; urgency=medium + + [changes brought forward from 1.20.5+rpi1 by Peter Michael Green at Sun, 02 Aug 2020 12:08:02 +0000] + * Hack up Vendor.pm so it doesn't fail + (see https://lists.debian.org/debian-dpkg/2020/08/msg00004.html ) + + [changes introduce in 1.21.17+rpi1 by Peter Michael Green] + * disable testsuite. + - -- Raspbian forward porter Tue, 27 Jan 2026 04:55:09 +0000 ++ -- Raspbian forward porter Fri, 13 Mar 2026 06:59:48 +0000 ++ + dpkg (1.23.7) unstable; urgency=medium + + [ Guillem Jover ] + * dpkg-deb: Remove ancient code to handle buggy old .deb format variants. + * Perl modules: + - Dpkg::Source::Package::V1: Do not print source root on modified files + list. + - Dpkg::Source::Package::V1: Fix building from within the source tree. + + -- Guillem Jover Sat, 07 Mar 2026 00:41:13 +0100 + + dpkg (1.23.6) unstable; urgency=medium + + [ Guillem Jover ] + * dpkg-query: Fix segfault with empty -S argument. LP: #2092676 + * dpkg-deb: Be more robust against truncated ar archives. + Reported by Yashashree Gund . + * dpkg-deb: Reject ar archives with 0 sized tar members. + Reported by Yashashree Gund . + * libdpkg, scripts: Detect corrupt ar archive with non-even byte sizes. + * dpkg-source: Fix running from within the source tree. + Reported by Umut (on IRC). + * dpkg-source: Support running --commit from within the source tree w/o + «.». Closes: #1127383 + * dpkg-source: Fix format in maintainer error message. + Thanks to Marko Zajc . + * dpkg-scanpackages: Add new --no-implicit-arch option. Closes: #1128325 + * Perl modules: + - Dpkg::Shlibs::Objdump::Object: Clarify code comment. + - Dpkg::Source::Package::V2: Do not print source root on modified files + list. Closes: #1126558 + - Dpkg::Source::Patch: Speed up patched filename retrieval in patches. + - Dpkg::Source::Patch: Add comment about the use of tr{}{} as char counter. + - Dpkg::OpenPGP::Backend::GnuPG: Add missing Dpkg::Gettext import. + Closes: #1128406 + - Dpkg::OpenPGP::Backend::GnuPG: Refactor _file_read_header(). + - Dpkg::OpenPGP::Backend::GnuPG: Detect and warn on LibrePGP artifacts. + - Dpkg::Email::Address: Warn on email domains with a single label. + Closes: #1126508 + - Dpkg::Source::Patch: Fix code comment. + - Dpkg::Source::Patch: Add new has_errors() method. + - Dpkg::Source::Package::V2: Delay unrepresentable error after local + changes list. Closes: #1126665 + - Dpkg::Vendor: Fix taint mode in get_vendor_object(). + - Dpkg::Compression: Remove deprecated function compression_get_property(). + - Dpkg::Archive::Ar: Switch header variables into a hash. + - Dpkg::Archive::Ar: Check that no header field is empty. + * Code internals: + - libdpkg: Use varbuf_str() instead of directly accessing buf. + - scripts: Parse and validate all Changed-By and Maintainer field inputs. + Closes: #1126507 + - libdpkg: Terminate zstd decompression when we have no more data. + Reported by Yashashree Gund . Closes: #1129722 + Fixes CVE-2026-2219. + - dpkg-deb: Refactor ar member size into an intermediate variable. + * Build system: + - Add URL, Maintainer and License fields to .pc file. + * Test suite: + - Add basic Perl taint mode checks. + * Localization: + - Update Dutch translations. + Thanks to Frans Spiesschaert . + Closes: #1127882, #1127884 + - Update Swedish translations. + Thanks to Peter Krefting . Closes: #1128529 + + -- Guillem Jover Thu, 05 Mar 2026 06:54:58 +0100 dpkg (1.23.5) unstable; urgency=medium