[ubuntu/xenial-proposed] cpio 2.11+dfsg-5ubuntu1 (Accepted)

Marc Deslauriers marc.deslauriers at ubuntu.com
Thu Feb 18 14:45:35 UTC 2016


cpio (2.11+dfsg-5ubuntu1) xenial; urgency=medium

  * Resynchronise with Debian. Remaining changes:
    - Don't build a cpio-win32 package since mingw-w64 is in universe.

cpio (2.11+dfsg-5) unstable; urgency=medium

  [ Salvatore Bonaccorso ]
  * CVE-2016-2037: 1-byte out-of-bounds write (Closes: #812401)

  [ Jérémy Bobbio ]
  * Make the package build reproducibly:
    - Fix mtimes before building binary packages.
    - Stop recording the current time when creating gzip files.
    - Sort file list in md5sums.
    Closes: #774426

  [ Anibal Monsalve Salazar ]
  * Standards-Version: 3.9.6

Date: Thu, 18 Feb 2016 09:36:00 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/cpio/2.11+dfsg-5ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 18 Feb 2016 09:36:00 -0500
Source: cpio
Binary: cpio
Architecture: source
Version: 2.11+dfsg-5ubuntu1
Distribution: xenial
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
 cpio       - GNU cpio -- a program to manage archives of files
Closes: 774426 812401
Changes:
 cpio (2.11+dfsg-5ubuntu1) xenial; urgency=medium
 .
   * Resynchronise with Debian. Remaining changes:
     - Don't build a cpio-win32 package since mingw-w64 is in universe.
 .
 cpio (2.11+dfsg-5) unstable; urgency=medium
 .
   [ Salvatore Bonaccorso ]
   * CVE-2016-2037: 1-byte out-of-bounds write (Closes: #812401)
 .
   [ Jérémy Bobbio ]
   * Make the package build reproducibly:
     - Fix mtimes before building binary packages.
     - Stop recording the current time when creating gzip files.
     - Sort file list in md5sums.
     Closes: #774426
 .
   [ Anibal Monsalve Salazar ]
   * Standards-Version: 3.9.6
Checksums-Sha1:
 bcaa069b1cb185f4180fba5b357ae65c70f5f7bf 1866 cpio_2.11+dfsg-5ubuntu1.dsc
 db17d80369acf691611a38979f42f31e47ee6fac 802940 cpio_2.11+dfsg.orig.tar.xz
 fef8c534a05b4cfb523e2a348e82247f2318f8b5 21140 cpio_2.11+dfsg-5ubuntu1.debian.tar.xz
Checksums-Sha256:
 16f7f8e883f3bc38ccab6a8bcd26b985670eefc81567d965a47bc9091772bbd8 1866 cpio_2.11+dfsg-5ubuntu1.dsc
 f3208df43692895e1ff84cb7625c6cc27b431c9a321fe414faed402b70660cd0 802940 cpio_2.11+dfsg.orig.tar.xz
 8ac99dd80639a970694c2a90e60c411fb58231a0a98e2f52f71d9eb1e9a4b63b 21140 cpio_2.11+dfsg-5ubuntu1.debian.tar.xz
Files:
 676a2a68a95d5df9d3f24a96f4bb91b3 1866 utils important cpio_2.11+dfsg-5ubuntu1.dsc
 54d2f3b3561c3a1ca2c192e94f00bc38 802940 utils important cpio_2.11+dfsg.orig.tar.xz
 212be9a5d615b45e71415b927ba7afb5 21140 utils important cpio_2.11+dfsg-5ubuntu1.debian.tar.xz
Original-Maintainer: Anibal Monsalve Salazar <anibal at debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=RtQ+
-----END PGP SIGNATURE-----


More information about the Xenial-changes mailing list