-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sun, 24 Nov 2019 14:43:50 +0100
Source: libsolv
Architecture: source
Version: 0.6.36-1
Distribution: unstable
Urgency: medium
Maintainer: Mike Gabriel <sunwea...@debian.org>
Changed-By: Mike Gabriel <sunwea...@debian.org>
Closes: 889509 923002 936923
Changes:
 libsolv (0.6.36-1) unstable; urgency=medium
 .
   [ Mihai Moldovan ]
   * Fix CMake module installation, prepare for DNF support (Closes: #889509).
     Details see below.
 .
   * New upstream release.
     - Fixes CVE-2018-20532 CVE-2018-20533 CVE-2018-20534. (Closes: #923002).
   * debian/patches:
     + Drop 1004_cmake-module-path-fix.patch. Breaks package, since Find*
       modules should actually be installed in the modules directory and this
       file does NOT provide version information.
     + Add 1005_install-cmake-module-into-libdir.patch. Installs
       FindLibSolv.cmake into ${libdir}/cmake/libsolv/.
     + Rename 1006_various-types.patch to 1006_various-typos.patch and refresh.
     + Add 3000_ext-repo_rpmdb_debian-style-home-dir-rpmdb.patch for RPMDB
       handling in home directories, compatible with Debian's rpm package.
     + Add 3010_ext-libsolvext.ver_add-rpm_state_create_real.patch for binary
       compatibility and exporting the newly inserted symbol.
     + Add 3020_tools-rpmdb2solve.c-add-homedir-functionality.patch,
       implementing homedir-based RPMDB support via the -H flag in the
       rpmdb2solve tool.
     + Add 9000_ext_repo_updateinfoxml.c_add-support-for-modular-data-
           aac9f0c2d791fa96bc9423231050f9e18fb973d6.patch to backport the
       modular updateinfo.xml functionality.
   * debian/libsolvext0.symbols:
     + Update.
   * debian/rules:
     + Enable Fedora comps support.
     + Add DEB_DH_MISSING_ARGS with --fail-missing, since the option is
       deprecated in dh_install and has been removed in compat 12. We'll keep it
       around due to using compat 10 for now.
   * debian/libsolv0-dev.install:
     + Install FindLibSolv.cmake correctly.
   * debian/copyright:
     + Add missing files/information.
   * debian/:
     + Add libsolv-tools.lintian-overrides.
     + Add libsolvext0.lintian-overrides.
   * debian/libsolv{-tools,ext0}.lintian-overrides:
     + Silence warning about modifying/reading the dpkg database directly.
       libsolv's capabilities are actually useful here.
   * debian/libsolv{,ext}0.symbols:
     + Add Build-Depends-Package tag mentioning libsolv0-dev package.
 .
   [ Mike Gabriel ]
   * debian/control:
     + Bump Standards-Version: to 4.4.1. No changes needed.
     + Add Rules-Requires-Root: field and set it to "no".
   * debian/*:
     + Drop Py2 python-solv bin.pkg. (Closes: #936923).
Checksums-Sha1:
 d61b92b4e3a14f519d803cdec1f02f18a38eb813 2407 libsolv_0.6.36-1.dsc
 677f26b2746ac33acec6f98148a619810362a076 647054 libsolv_0.6.36.orig.tar.gz
 b2d5b052115d806eed7c6b629a91634becdced7b 19564 libsolv_0.6.36-1.debian.tar.xz
 28eb573a0ec83d47b5706c558f959e2347ba6e1e 8857 libsolv_0.6.36-1_source.buildinfo
Checksums-Sha256:
 464d6d1da3835b45b50e5e9c75a0c61f9fd7aecb416133cd47d6c4a1807a0b86 2407 
libsolv_0.6.36-1.dsc
 1f0cfbddf9166ecc703605309f6dc8cdf15d0e2aa06d91c61110a6e7387f223e 647054 
libsolv_0.6.36.orig.tar.gz
 2a03ffbc55ce97f74c65f1063ef85531c9febabe6576dea3a51396367fee0fe0 19564 
libsolv_0.6.36-1.debian.tar.xz
 3f5c7a44c36123afc89fe8e019a665f8c22e82dc7d7da78f5cfd2e5104d7669e 8857 
libsolv_0.6.36-1_source.buildinfo
Files:
 d4b96232a04d20dc26498fa7fc73c66f 2407 admin optional libsolv_0.6.36-1.dsc
 a540aae13702a8f068c6e88439f21a23 647054 admin optional 
libsolv_0.6.36.orig.tar.gz
 e8306b104f5fba7a6ec1b70d1956ae79 19564 admin optional 
libsolv_0.6.36-1.debian.tar.xz
 fb257bfdfad8ee673a497f999200ded3 8857 admin optional 
libsolv_0.6.36-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=qKby
-----END PGP SIGNATURE-----

Reply via email to