cpio (2.6-18.1+etch1) stable-security; urgency=high * Non-maintainer upload by the security team. * Apply upstream patch for CVE-2007-4476, correcting an allocation weakness in safer_name_suffix() which could lead to a crash -- Devin Carraway Tue, 29 Apr 2008 14:25:09 +0000 cpio (2.6-18) stable; urgency=low * Apply patch from Russell Stuart to fix some malformed creation of ustar archives. closes: #358990. -- Clint Adams Sat, 19 Jan 2008 10:06:16 -0500 cpio (2.6-17) unstable; urgency=high * Fix setlocale glitch. closes: #381348. -- Clint Adams Fri, 4 Aug 2006 09:45:10 -0400 cpio (2.6-16) unstable; urgency=low * Use correct path for rmt. closes: #293632. -- Clint Adams Thu, 6 Jul 2006 20:31:27 -0400 cpio (2.6-15) unstable; urgency=high * Don't fail the preinst if the symlink doesn't exist. -- Clint Adams Wed, 28 Jun 2006 21:24:57 -0400 cpio (2.6-14) unstable; urgency=low * Fix prerm to remove the correct info file. * Clean up /usr/doc/cpio symlink in preinst (fix for #322778 was accidentally removed). closes: #375727. -- Clint Adams Tue, 27 Jun 2006 23:26:22 -0400 cpio (2.6-13) unstable; urgency=high * Updated German program translation from Holger Wansing. closes: #373942. * Patch from Holger Wansing to update the FSF address in cpio.pot. * Fix postinst to install the correct info file. closes: #374143. * Add "Plural-Forms" to Danish .po. * Add build-dependency on gettext, and generate all .gmos at build time. -- Clint Adams Sun, 18 Jun 2006 11:14:20 -0400 cpio (2.6-12) unstable; urgency=low * Updated Danish program translation from Claus Hindsgaul. closes: #359212. * Bump Standards-Version to 3.7.2. * Add watch file. -- Clint Adams Sun, 28 May 2006 10:54:16 -0400 cpio (2.6-11) unstable; urgency=low * Forward-port fix for #88419. closes: #350827. -- Clint Adams Sat, 11 Mar 2006 20:31:55 -0500 cpio (2.6-10) unstable; urgency=medium * Fix potential buffer overflow on 64-bit architectures. [CVE-2005-4268]. closes: #344134. -- Clint Adams Tue, 20 Dec 2005 12:44:50 -0500 cpio (2.6-9) unstable; urgency=high * configure.ac, src/extern.h, src/global.c: actually fix the error with checksums on 64-bit platforms. -- Clint Adams Sun, 30 Oct 2005 17:14:08 -0500 cpio (2.6-8) unstable; urgency=high * src/copyout.c: fix regression of #100456 (checksum errors on 64-bit platforms), thanks to Jim Castleberry. -- Clint Adams Mon, 24 Oct 2005 15:23:44 -0400 cpio (2.6-7) unstable; urgency=low * src/mt.c: don't block on opening tape device. closes: #239130. -- Clint Adams Thu, 20 Oct 2005 21:10:55 -0400 cpio (2.6-6) unstable; urgency=critical * Forward-port Martin Pitt's security patch from Ubuntu: - SECURITY UPDATE: Modify permissions of arbitrary files, path traversal. - copyin.c, copypass.c: Use fchmod() and fchown() before closing the output file instead of chmod() and chown() after closing it. This avoids exploiting this race condition with a hardlink attach to chmod/chown arbitrary files. [CAN-2005-1111]. closes: #305372. - copyin.c: Separate out path sanitizing to safer_name_suffix(): Apart from leading slashes, filter out ".." components from output file names if --no-absolute-filenames is given, to avoid path traversal. [CAN-2005-1229] closes: #306693. -- Clint Adams Thu, 29 Sep 2005 10:22:52 -0400 cpio (2.6-5) unstable; urgency=medium * Fix 'ustar' format mtime overflow. closes: #238177. * Fix symlink dereferencing problem. closes: #322608, #323141, #326090. -- Clint Adams Sun, 4 Sep 2005 10:44:40 -0400 cpio (2.6-4) unstable; urgency=low * Restore previous mt behaviors. * Add/improve density descriptions for DLT IV 4000, 7000, 8000; uncompressed and compressed; thanks to Calum Mackay. closes: #222378. * Ship md5sums. closes: #325617. -- Clint Adams Mon, 29 Aug 2005 17:19:46 -0400 cpio (2.6-3) unstable; urgency=high * Fix inability to install if /usr/doc/cpio symlink did not exist. closes: #322999, #323005. -- Clint Adams Sun, 14 Aug 2005 11:20:05 -0400 cpio (2.6-2) unstable; urgency=medium * Remove old /usr/doc/cpio symlink in postinst, since the 2.5 packages did not remove it properly in prerm. closes: #322778. -- Clint Adams Fri, 12 Aug 2005 16:53:51 -0400 cpio (2.6-1) unstable; urgency=low * New upstream version. closes: #275116, #319028. - No longer has manpage typos reported by A Costa. closes: #307035. - No longer has manpage typo reported by Matthew Vernon. closes: #170558. - Checks for LFS. closes: #165217. * New maintainer. closes: #321333. * Bump Standards-Version to 3.6.2. * Remove /usr/doc symlink code. closes: #320085. * Remove a couple of nasty XSIisms in preinst, prerm, and rules. closes: #253008, #256199. * Fix "Wrong spelling (chechdir) in rules file". closes: #223970. * Drop trailing period from short description. closes: #174470. * Drop support for 'debug' in DEB_BUILD_OPTIONS, and add 'noopt'. -- Clint Adams Thu, 4 Aug 2005 21:56:42 -0400 cpio (2.5-1.2) unstable; urgency=HIGH * NMU * Forward ported patch from Albert Chin-A-Young to fix broken permissions on output file with -O/-F [main.c, CAN-1999-1572, http://groups-beta.google.com/group/gnu.utils.bug/msg/4db088ee6031c9ec] Closes: #293379 -- Joey Hess Fri, 4 Feb 2005 16:43:38 -0500 cpio (2.5-1.1) unstable; urgency=low * Non-maintainer upload according to the release manager's plan. * Fix LSB 1.3 non-compliance (Closes: Bug#184887). -- Roland Mas Sat, 23 Aug 2003 16:07:05 +0200 cpio (2.5-1) unstable; urgency=low * New upstream version (after six years). (Closes: Bug#150342, Bug#132312) * Fixed symlink /usr/doc -> ../share/doc. (Closes: Bug#131461) * Fixed reference to GPL. * Modified postinst to ignore an existing /usr/doc/$package directory. * Improved stripping of binaries. * Removed reference to rmt in the package description. (Closes: Bug#147468) -- Brian Mays Sat, 22 Jun 2002 15:46:48 -0400 cpio (2.4.2-40) unstable; urgency=low * Fixed symlink /usr/doc -> ../share/doc. (Closes: Bug#131039) -- Brian Mays Sun, 27 Jan 2002 15:40:39 -0500 cpio (2.4.2-39) unstable; urgency=medium * Added density description for 0x45 (QIC-3095). (Closes: Bug#117427) * Removed rmt from cpio package. It has moved to the tar package. -- Brian Mays Fri, 23 Nov 2001 13:30:50 -0500 cpio (2.4.2-38) unstable; urgency=low * Added a verbose-skip command line option (by Tomas Pospisek ). (Closes: Bug#114587) -- Brian Mays Thu, 25 Oct 2001 14:28:18 -0400 cpio (2.4.2-37) unstable; urgency=low * Fixed checksum error on 64-byte machines. (Closes: Bug#100456) * Hacked cpio to honor the umask when creating directories with the "-d" option. (Closes: Bug#88419) * Made /etc/rmt a conffile. (Closes: Bug#91226) * Removed "-g" gcc option as per policy. * Fixed typos in find_inode_file function causing it to occasionally miss inodes and, therefore, to copy out the same (hard-linked) file several times to a tar archive. (Closes: Bug#66354) * Fixed error with mt alternatives. (Closes: Bug#84476) * Added additional density codes. (Closes: Bug#104149) -- Brian Mays Wed, 25 Jul 2001 12:01:51 -0400 cpio (2.4.2-35) unstable; urgency=low * Renamed gmt to mt-gnu. (Closes: Bug#84118) -- Brian Mays Tue, 30 Jan 2001 19:42:28 -0500 cpio (2.4.2-34) unstable; urgency=low * Added an environment variable to cpio and mt to specify the remote command. (Closes: Bug#71048) * Added compatibility with the mt-st package. (Closes: Bug#83813) -- Brian Mays Sun, 28 Jan 2001 16:15:44 -0500 cpio (2.4.2-33) unstable; urgency=low * Added density code 0x22 (SLR4DC) to mt. (Closes: Bug#67424) -- Brian Mays Thu, 27 Jul 2000 17:49:56 -0400 cpio (2.4.2-32) frozen unstable; urgency=low * Added patch by Fred Long and Marc SCHAEFER to fix file corruption when a file changes during the backup. (Closes: Bug#53056) * Added patch from Anders Hammarquist to make rmt work with Solaris ufsdump/ufsrestore. (Closes: Bug#58323) -- Brian Mays Thu, 17 Feb 2000 12:43:01 -0500 cpio (2.4.2-31) frozen unstable; urgency=low * Fixed missing element from manpage. (Closes: Bug#56904) -- Brian Mays Thu, 3 Feb 2000 13:39:55 -0500 cpio (2.4.2-30) frozen unstable; urgency=low * Added build-time dependencies. -- Brian Mays Mon, 17 Jan 2000 13:32:18 -0500 cpio (2.4.2-29) unstable; urgency=low * Added patch from Mark Eichin to fix mt's datcompression. (Closes: Bug#52755) -- Brian Mays Fri, 17 Dec 1999 14:14:40 -0500 cpio (2.4.2-28) unstable; urgency=low * Modified cpio so that the -v and -V flags work with --only-verify-crc. (Closes: Bug#49791) -- Brian Mays Wed, 10 Nov 1999 08:42:34 -0500 cpio (2.4.2-27) unstable; urgency=low * Fixed FHS /usr/doc -> /usr/share/doc transition scheme. -- Brian Mays Fri, 1 Oct 1999 12:43:24 -0400 cpio (2.4.2-26) unstable; urgency=low * Added symbolic link /usr/doc/cpio -> /usr/share/doc/cpio. -- Brian Mays Thu, 16 Sep 1999 13:45:04 -0400 cpio (2.4.2-25) unstable; urgency=low * Changed section to "utils". * Made /etc/rmt a wrapper script (with comments detailing its purpose) instead of a symlink. * Removed tar from cpio man page. (Closes: Bug#38043) * Moved doc, man, and info to /usr/share as per the FHS. * Fixed bug in rmt causing problems on systems (such as the Hurd) where sys_errlist is not available. (Closes: Bug#37164) -- Brian Mays Thu, 22 Jul 1999 12:04:32 -0400 cpio (2.4.2-24) unstable; urgency=low * Made Debian scripts create and remove the symbolic links to rmt. (Closes: Bug#33670) -- Brian Mays Mon, 22 Feb 1999 17:24:21 -0500 cpio (2.4.2-23) frozen unstable; urgency=low * Fixed a bug causing cpio to segfault when the tar format is used. * Fixed bugs causing cpio to use the wrong minor device numbers. -- Brian Mays Wed, 6 Jan 1999 09:59:24 -0500 cpio (2.4.2-22) unstable frozen; urgency=low * Fixed "Lwhence\noffset\n" error in rmt manual page. (Fixes: Bug#28960) -- Brian Mays Fri, 6 Nov 1998 11:01:57 -0500 cpio (2.4.2-21) unstable; urgency=low * Modified cpio to use the -n flag also to extract tar archives using the numeric UID/GID instead of the user/group names in /etc/passwd and /etc/groups. -- Brian Mays Thu, 15 Oct 1998 15:20:34 -0400 cpio (2.4.2-20) unstable; urgency=low * Fixed bug in --sparse feature. -- Brian Mays Mon, 5 Oct 1998 12:51:47 -0400 cpio (2.4.2-19) unstable; urgency=low * Added NEWS and README to /usr/doc/cpio. (Fixes: Bug#26338) -- Brian Mays Wed, 2 Sep 1998 13:32:18 -0400 cpio (2.4.2-18) unstable; urgency=low * Added patch from Evan Harris to fix mt's datcompression. (Fixes: Bug#23980) -- Brian Mays Mon, 29 Jun 1998 11:35:57 -0400 cpio (2.4.2-17) unstable; urgency=low * Added patch necessary to build cpio in glibc_2.1. (Provided by Juan Cespedes .) (Fixes: Bug#22643) * Added a --rsh-command command line option (similar to tar's) to cpio and mt. * Made ssh the default remote command. -- Brian Mays Tue, 26 May 1998 13:01:27 -0400 cpio (2.4.2-16) unstable frozen; urgency=low * Fixed problem causing corruption of old style ascii cpio archives. Problem caused by a change in the dev_t type used by glibc. (Fixes: Bug#22857) -- Brian Mays Tue, 26 May 1998 13:01:19 -0400 cpio (2.4.2-15) frozen unstable; urgency=low * Added a patch required for cpio to compile on a PowerPC. Fixes: Bug#21411. * Removed bashisms from the debian/rules makefile. -- Brian Mays Mon, 20 Apr 1998 14:20:36 -0400 cpio (2.4.2-14) unstable; urgency=low * Removed old FSF address from copyright file. -- Brian Mays Thu, 12 Feb 1998 17:45:29 -0500 cpio (2.4.2-13) unstable; urgency=low * Changed the function responsible for processing the count parameter from atoi() to strtol(). This will allow entries such as 0x24 to be used. -- Brian Mays Fri, 5 Dec 1997 17:21:08 -0500 cpio (2.4.2-12) unstable; urgency=low * Added patch to report more information on FTAPE drives. * Made several miscellaneous fixes to source. -- Brian Mays Sun, 26 Oct 1997 15:47:59 -0500 cpio (2.4.2-11) unstable; urgency=low * Libc6 release. -- Brian Mays Tue, 5 Aug 1997 16:53:14 -0400 cpio (2.4.2-10) unstable; urgency=low * Added CR at end of `mt status' output (fixed Bug#7632). -- Brian Mays Tue, 25 Feb 1997 12:15:09 -0500 cpio (2.4.2-9) unstable; urgency=low * Fixed a couple of bugs. * Moved /usr/doc/cpio/ChangeLog.gz to /usr/doc/cpio/changelog.gz. -- Brian Mays Thu, 2 Jan 1997 12:18:39 -0500 cpio (2.4.2-8) unstable; urgency=low * Fixed bug #4427, wrong syscall used to print position of tape. -- Brian Mays Thu, 12 Sep 1996 09:55:21 -0400 cpio (2.4.2-7) unstable; urgency=low * New upstream source. * Added an rmt manpage (from BSD). * First release with the new source format. -- Brian Mays Fri, 23 Aug 1996 23:27:40 -0400