Change log for libconfuse package in Debian

14 of 4 results
Published in bullseye-release
libconfuse (3.3-2+deb11u1) bullseye; urgency=medium

  * Add debian/patches/CVE-2022-40320.patch from upstream to fix a heap-based
    buffer over-read in cfg_tilde_expand (CVE-2022-40320).  Closes: #1019596.

 -- Aurelien Jarno <email address hidden>  Tue, 04 Oct 2022 00:14:59 +0200
Published in bookworm-release
Published in sid-release
libconfuse (3.3-3) unstable; urgency=high

  * Urgency set to high due to the security issue.
  * Add debian/patches/CVE-2022-40320.patch from upstream to fix a heap-based
    buffer over-read in cfg_tilde_expand (CVE-2022-40320).  Closes: #1019596.
  * Enable hardening flags.  Closes: #993178.
  * Bumped Standards-Version to 4.6.1 (no changes).

 -- Aurelien Jarno <email address hidden>  Mon, 12 Sep 2022 23:08:48 +0200

Available diffs

Superseded in bullseye-release
Superseded in sid-release
libconfuse (3.3-2) unstable; urgency=medium

  * German translation update, by Fabian Baumanis.  Closes: #978117.
  * Update debian/copyright to use a verbatim copy of the copyright
    information instead of a reformated one.
  * Bumped Standards-Version to 4.5.1.

 -- Aurelien Jarno <email address hidden>  Sun, 10 Jan 2021 15:30:20 +0100

Available diffs

Superseded in sid-release
libconfuse (3.3-1) unstable; urgency=medium

  * New upstream version:
    - Rename the source package from confuse to libconfuse to match the
      upstream name.  
    - Build the orig tarball from the git tag instead of using the upstream
      one. This prevent files without source in the orig tarball (autoconf,
      libtool, doxygen, etc.).
    - Drop debian/patches/de.po.patch.
    - Update symbol files.
    - Add new autopkgtests using new upstream tests.
  * Bump debhelper compat to 13. 
  * Update the upstream URL in debian/control and debian/copyright.
  * Add a watch file.

 -- Aurelien Jarno <email address hidden>  Sat, 22 Aug 2020 16:12:56 +0200
14 of 4 results