[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Preparing the announce for d-i wheezy beta 1



Hi all,

based on Kibi's changelog aggregation i've trimmed what i think is really not relevant to release announcement (translation updates in each package, this can be another topic - Salut! ;-) - "bump standards to...", "non-maintainer upload", references to people instead of what changed, ...) and i've come to this initial list of what changed since the Wheezy Alpha1 Installer release.

I am sharing this initial list so you can comment and give tips on what else can be safely trimmed / changed in direction of the installer release announcement.

Surely a notable change (fix) AFAIR:
- #662086 - grub-install failed with raid+lvm [also btrfs and others]

Some topics on apt surely about:
- #674100 - apt: apt-cdrom add generates broken cdroms.list

which appeared on dailys right after Alpha1 and it's already solved.


--
Melhores cumprimentos/Best regards,

Miguel Figueiredo
anna
   * Fix running kernel version detection on hurd-i386.

apt
   * apt-pkg/contrib/mmap.cc:
     - Fix the Fallback option to work correctly, by not calling
       realloc() on a map mapped by mmap(), and by using malloc
       and friends instead of new[].
     - Zero out the new memory allocated with realloc().
   * apt-pkg/pkgcachegen.cc:
     - always reset _error->StackCount in MakeStatusCache (Closes: #677175)
   * apt-pkg/deb/deblistparser.cc:
     - ensure that mixed positive/negative architecture wildcards
       are handled in the same way as dpkg handles them
     - use PackageArchitectureMatchesSpecification filter
   * apt-pkg/cachefilter.cc:
     - add PackageArchitectureMatchesSpecification (Closes: #672603)
   * apt-pkg/cacheset.cc:
     - add PackageContainerInterface::FromGroup to support
       architecture specifications with wildcards on the commandline
   * apt-pkg/pkgcache.cc:
     - do a string comparision for architecture checking in IsMultiArchImplicit
       as 'unique' strings in the pkgcache aren't unique (Closes: #677454)
   * buildlib/configure.mak:
     - print a message detailing how to get config.guess and config.sub
       in case they are not in /usr/share/misc (Closes: #677312)
   * cmdline/apt-get.cc:
     - print a friendly message in 'download' if a package can't be
       downloaded (Closes: #677887)
   * apt-pkg/cdrom.cc:
     - fix regression from 0.9.3 which dumped the main configuration
       _config instead of the cdrom settings (Cnf) (Closes: #674100)
   * cmdline/apt-get.cc:
     - do not show 'list of broken packages' header if no package
       is broken as it happens e.g. for external resolver errors
     - print URIs for all changelogs in case of --print-uris (Closes: #674897)
     - check build-dep candidate if install is forbidden
   * debian/apt-utils.links:
     - the internal resolver 'apt' is now directly installed in
       /usr/lib/apt/solvers, so don't instruct dh to create a broken link
   * doc/apt-verbatim.ent:
     - APT doesn't belong to the product 'Linux', so use 'APT' instead
       as after all APT is a big suite of applications
   * apt-pkg/contrib/cmdline.cc:
     - apply patch to fix a segfault in case
       the LongOpt is empty (Closes: #676331)
     - fix segfault with empty LongOpt in --no-* branch
   * ftparchive/apt-ftparchive.cc:
     - default to putting the Contents-* files below $(SECTION) as apt-file
       expects them there (Closes: #675827)
   * apt-pkg/deb/deblistparser.cc:
     - set pkgCacheGen::Essential to "all" again (Closes: #675449)
   * apt-pkg/algorithms.cc:
     - force install only for one essential package out of a group
   * apt-pkg/aptconfiguration.cc:
     - if APT::Languages=none save "none" in allCodes so that the detected
       configuration is cached as intended (Closes: #674690, LP: #1004947)
   * apt-pkg/cacheiterators.h:
     - add an IsMultiArchImplicit() method for Dep- and PrvIterator
   * doc/apt-cdrom.8.xml:
     - replace CDROM with the proper CD-ROM in text
   * cmdline/apt-key:
     - do not hardcode /etc but use Dir::Etc instead
   * doc/apt-mark.8.xml:
     - in hold, the option name is --file not --filename
   * cmdline/apt-get.cc:
     - complain correctly about :any build-dep on M-A:none packages
   * apt-pkg/deb/deblistparser.cc:
     - add support for arch-specific qualifiers in dependencies
   * apt-pkg/contrib/fileutl.cc:
     - dup() given compressed fd in OpenDescriptor if AutoClose
       is disabled as otherwise gzclose() and co will close it
   * buildlib/inttypes.h.in:
     - remove inttypes.h compatibility as providing such a c99 types
       compatibility conflicts with the usage of c99 type long long
   * apt-pkg/contrib/mmap.cc:
     - have a dummy SyncToFd around in case of ReadOnly access to a
       compressed file as we otherwise on Close() do not delete[] the
       char buffer but munmap() it… (Closes: #673815)
   * debian/control:
     - moving debiandoc-sgml to Build-Depends-Indep was one step too much
       for the buildds as we still build two sgml files in arch:any
   * debian/rules:
     - move internal-solver as 'apt' to his friend dump-solver in
       /usr/lib/apt/solvers to avoid writing a manpage for it
   * methods/http.cc:
     - after many years of pointless discussions disable http/1.1 pipelining
       by default as many webservers and proxies seem to be unable to conform
       to specification must's (rfc2616 section 8.1.2.2) (LP: #996151)
     - add spaces around PACKAGE_VERSION to fix FTBFS with -std=c++11
   * apt-pkg/pkgcachegen.cc:
     - make IsDuplicatedDescription static so that it is really private
       as we don't need a symbol for it as it is not in a header
   * Makefile, buildlib/*.mak:
     - reshuffle dependencies so that parallel building seems to work
     - separate manpages from the rest of the doc building
   * prepare-release:
     - apt-inst version isn't apt versions, so don't override variable
   * apt-pkg/acquire-methods.cc:
     - factor out into private Dequeue() to fix access to deleted pointer
   * apt-pkg/contrib/fileutl.cc:
     - ensure that we close compressed fds, wait for forks and such even if
       the FileFd itself is set to not autoclose the given Fd
   * cmdline/apt-get.cc:
     - use the host architecture, not the build architecture for matching
       of [architecture restrictions] in Build-Depends (Closes: #672927)
     - do not run into loop on new-pre-depends-breaks (Closes: #673536)
   * ftparchive/writer.cc:
     - include Contents-* files in Release files (Closes: #673647)
   * apt-pkg/acquire*.cc:
     - handle redirections in the worker with the right method instead of
       in the method the redirection occured in (Closes: #668111)
   * methods/http.cc:
     - forbid redirects to change protocol
   * methods/mirror.cc:
     - generate an equal sign also for the first arch (Closes: #669142)
   * apt-pkg/contrib/strutl.cc:
     - remove the message size limit from ioprintf and strprintf
   * apt-pkg/contrib/configuration.cc:
     - add a more versatile Dump() method
     - normalize a bit by replacing // and /./ with / in FindFile
     - /dev/null is a special absolute path as it has no subdirectories
   * apt-pkg/acquire-worker.cc:
     - use Dump() to generate the configuration message for sending
   * cmdline/apt-config.cc:
     - make it possible to limit dump to a subtree
     - implement --empty and --format option for dump
   * apt-pkg/cdrom.cc:
     - use Dump() to generate the configuration output
   * apt-pkg/depcache.cc:
     - clearly separate 'positive' and 'negative' dependencies and
       their upgrade-resolution tries in MarkInstall and especially don't
       treat Conflicts differently compared to Breaks here
     - provider is only a possible solution if the provides has the right
       version (or none as we have no versioned provides in debian) and not
       if the version of the provider matches
   * edsp/edspsystem.cc:
     - check with RealFileExists for scenario file as otherwise a directory
       like one provided with RootDir triggers the usage of EDSP
   * debian/libapt-inst1.5.symbols:
     - use the correct library name the symbols header
   * apt-pkg/pkgcachegen.cc:
     - check if NewDescription allocation has failed and error out accordingly
     - check if we work on a valid description in IsDuplicateDescription as
       we end up working on dangling pointers otherwise which segfaults on
       s390x and ppc64 (Closes: #669427)
   * apt-pkg/deb/deblistparser.cc:
     - check length and containing chars for a given description md5sum
   * ensure that apti18n.h is included last as advertised (Closes: #671623)
   * apt-pkg/acquire-worker.cc:
     - revert the use of FileFd::Write in OutFdReady as we don't want error
       reports about EAGAIN here as we retry later. (Closes: #671721)
   * apt-pkg/contrib/fileutl.cc:
     - check that the fd which are closed are valid
     - ensure that we do init d only once and especially not with its own
       content as this causes some "interesting" hickups resulting in segfaults
       as it seems (Closes: #554387, #670979)
     - collect zombie (de)compressor processes on reopen
     - ensure that in error conditions the Fail flag is set
     - ensure that d is set before accessing it
   * apt-pkg/aptconfiguration.cc:
     - use NULL instead of "" for no (un)compress parameters
   * apt-pkg/algorithms.cc:
     - factor out of ListUpdate a AcquireUpdate to be able to provide your
       own pkgAcquire fetcher to the wrapper
   * apt-inst/deb/debfile.h:
     - readd 'md5.h' to the uncleaned header includes to make qapt build
       against us again unchanged to unblock transition (Closes: #669163)

bc
   Closes: #608255: bc uses uninitialized memory
   Closes: #472250: please return support for .dcrc file
   Closes: #488735: notice read and write errors on input and output


beep
   * Add patch catch-sig-term to also stop the beep when receiving SIGTERM.


brltty
   * Severity set to medium as it completely breaks access to d-i.
   * brltty-udeb.*: Use /var/run/brltty.pid instead of /var/run/brltty, as the
     latter is now installed as directory by brltty (Closes: #680208).
   * Update the list of supported displays in package description.
   * brltty-udeb.udev.rules: Add new braille USB IDs to d-i udev rules.
   * control: Add brltty-dbg and libbrlapi-dbg packages.
   * rules: Install debugging information.
   * patches/30-late-fixes-r6572.patch: Add patch to fix crash on brlapi
     activity while devices are unplugged.
   * debian/rules: Disable USB support on kFreeBSD (Closes: #668669).
   * New upstream release.
     - Fixes spurious warning from xbrlapi (Closes: #673880).
   * Drop all cherry-picked patches.
   * Cherry-pick some late fixes from upstream.
   * brltty recommends python now because of /etc/brltty/latex-acces.ctb
     which is written in Python.
   * Install brltty-trtxt.
   * Install brltty-ctb and brltty-ttb as well, and move vstp to
     /usr/bin.
   * control:
     - Move xbrlapi from brltty-x11 to new xbrlapi package.  Should fix
     spurious installation of brltty through orca's recommandation of xbrlapi.
     - Set libbrlapi0.5 Multi-arch: same.
   * libbrlapi-dev.links: Remove, move to ...
   * rules: ... here, install libbrlapi in multiarch path.
   * brltty-x11.{install,manpages}: Move xbrlapi to xbrlapi package.


bsdmainutils
   * Adjustment for weeks starting on Sunday was made at a wrong place. Fixing
     this should give correct week numbers again. (Closes: #676426)
   * A new sentence should trigger a new line in the manpage source.
   * Removed patch for fifo handling because upstream found a better way to
     solve the problem.
   * Moved cronjob configuration out of the cron file into a default file.
     (Closes: #672445)
   * Fixed typo in our patch that adds the introduction of Mac OS X.
     (Closes: #673093)
   * Mention that calendar -l is the same as calendar -A. (Closes: #658133)


busybox
   * enable various xargs features for all flavours, to make it work
     as POSIX requires (notable quotes and backslash processing).
     Also enable -0 option, apparently forgotten at the time (it
     complements find -print0 which is enabled).  (Closes: #680342)
   * replace my ps-get-uptime.patch with busybox-1.20.1-ps.patch
     (it is the same patch, just file formatting changed and it
     is now obvios the patch is applied upstream)
   * added another upstream bugfix patch, busybox-1.20.1-mke2fs.patch,
     to fix mkfs.ext2 breakage.  It is only used in static flavour in
     debian, but producing broken filesystem isn't an option there too.
   * busybox-1.20.1-1.20.2.patch -- change version to 1.20.2.  This is
     the only remaining change to upstream 1.20.2 stable release.
   * enable ping applet for udeb build, +613 bytes on i386.  (Closes: #406114)
   * update shell-ash-export-HOME.patch - DEP-3 headers and a long
     description.  This patch now removes "const" modifier from the
     default PATH variable definition, making it writable.  Full
     description is within the patch comments. (Closes: #679377)
   * 1.20 had a few fixes which I forgot to mention:
     - integer overflow in expression on big endian (Closes: #635370)
       (I dislike the fix since it makes use of 64bit integers
       instead of using unsigned 32bit, but this is how upstream
       fixed it)
     - CVE-2011-2716 udhcpc insufficient checking of DHCP options (Closes: #635548)
       busybox dhcpd now replaces values of HOST_NAME, DOMAIN_NAME,
       NIS_DOMAIN, TFTP_SERVER_NAME with the literal string "bad"
       if these contains any bad characters.
   * applied stable patches from upstream (ash, man, ifupdown, tar)
   * new 1.20.1 upstream bugfix release (debian/patches/1.20.1.patch),
     all patches in upstream/ merged
   * removed reenable-ps-options-for-DESKTOP-case.patch, it was wrong
     (see https://bugs.busybox.net/show_bug.cgi?id=5216)
   * new upstream (mostly bugfix) release
   * got rid of the long-standing debian-specific applets-fallback.patch, once
     upstream added commit 83f103b30e41ab038e "ash: in standalone mode, search
     in $PATH if /proc/self/exe doesn't exist".  I still carry the patch itself,
     but it isn't referenced in the series file anymore.
   * removed patches which were applied upstream, and added a few patches
     from upstream 1.20 stable branch
   * refreshed swaponoff-FreeBSD-support.patch and u-mount-FreeBSD-support.patch
   * refreshed configs for 1.20
   * enabled many httpd options (AUTH_MD5, RANGES, SETUID, CGI, GZIP, ENCODE)
     for static and regular build, which results in ~5Kb binary size difference
     on x86 but enables features users are asking
     (Closes: #548999, #626820, #571743)
   * enabled dpkg-buildflags usage (filtering out -Werror=format-security from
     CFLAGS) (Closes: #670993)
   * ship some docs and examples in static and regular builds (Closes: #671832)
   * enable expand/unexpand and ar-long-options in deb build, - small changes
     to reduce difference from static config.
   * added reenable-ps-options-for-DESKTOP-case.patch
   * DEP-3 headers for init-console.patch


cairo
   * debian/libcairo2-udeb.install:
     + Add the GObject library to the udeb. Needed by GTK+3 nowadays.
   * New upstream bugfix release:
     + debian/patches/07_traps-Clip-the-trapezoid-extents-against-the-clip-ex.patch,
       debian/patches/08_xlib-Allow-applications-to-create-0x0-surfaces.patch:
       - Dropped, merged upstream.
     + Refresh patches to apply cleanly again.
   * 07_traps-Clip-the-trapezoid-extents-against-the-clip-ex.patch:
     patch from upstream git fixing crashes in evince (closes: #668619)
   * 08_xlib-Allow-applications-to-create-0x0-surfaces.patch: patch from
     upstream git fixing libreoffice impress slideshow mode (closes: #668172)
   * Exclude cairo-perf-utils from libcairo2-dbg (closes: #669990)
   * Properly remove all stamp files in debian/rules clean.
   * debian/rules:
     + Enable hardened build flags (Closes: #655128).
   * Upload to unstable.
   * debian/patches/06_hurd-map-noreserve.patch:
     + Hurd has no MAP_NORESERVE so don't use it there.
   * New upstream release:
     + debian/control:
       - Update XCB and pixman (build-) dependencies.
     + debian/patches/04-LD_PRELOAD-is-supported-on-Hurd.patch:
       - Dropped, merged upstream.
     + debian/libcairo2.symbols:
       - Update symbols file.


cdebconf
   * Convert the deprecated structure initializer designators to ISO ones.
   * src/template.c : Initialize to 0 the entire allocated structure, instead of
     only the size a pointer.
   * When FGETing a non-existing flag, return false, instead of an error. This
     is closer to the debconf behaviour, although cdebconf cannot be used to set
     arbitrary flag.
   * dpkg-preconfigure: check for the existence of apt-extracttemplates before
     trying to use it.
   * install a cdebconf_text.h, exporting useful macros and function for
     plugins.
   * Pass LDFLAGS when linking shared libs as well as programs.
   * Fix passing of DPKG_MAINTSCRIPT_* to be multi-arch compliant in
     dpkg-reconfigure.
   * Process triggers caused by dpkg-reconfigure. cf #560317.
   * Remove questions if after unregister or purge there's no owner left.
     Closes: #411585.


choose-mirror
   * Manage memory for 'country' variable more carefully.


console-setup
   * rules: Add missing dependency main_build -> ekmap generation, to fix empty
     kmap files generated by parallel builds. Closes: #679171.


cpio
   * Enable hardened build flags
     Closes: #654522
   * Cross-building issues
     - Fix invalid redefinition of stat() during cross-building cpio
       Add 627444-invalid-redefinition-of-stat.patch
     - Use the strip that's provided by the cross-binutils
     Closes: #627444
   * Fix debian-rules-missing-recommended-target


dctrl-tools
   * Closes: #674836 (Builds with wrong CFLAGS):
      - Work around debhelper bug 674912 by defining the default CFLAGS
        using ?= in GNUmakefile.
      - -Werror is not
        a good idea in package builds (it may cause unnecessary FTBFS
        breakage in the future as the toolchain and libraries change).
   * grep-dctrl: Allow distributing atom modifiers over a parenthesed predicate.
     Closes: #319760 (allow -F modifiers to apply to an entire expression)


debhelper
   * dh: When there's an -indep override target without -arch, or vice versa,
     avoid acting on packages covered by the override target when running
     the command for packages not covered by it. Closes: #676462
   * dh_installcatalogs: Turn /etc/sgml/$package.cat into conffiles
     and introduce dependency on trigger-based sgml-base. Closes: #477751
   * Set Multi-Arch: foreign. Closes: #674193
   * Fix versioned dependency on dpkg for xz options. Closes: #672895
   * Improve -v logging. Closes: #672448
   * dh_builddeb: Build udebs with xz compression, level 1, extreme strategy.
     This has been chosen to not need any more memory or cpu when uncompressing,
     while yeilding the best compressions for udebs.
   * Depend on a new enough dpkg for above features. Backporters will need
     to revert these changes.
   * dh_installman: Recognize sections from mdoc .Dt entries. Closes: #670210
   * dh_install: Reorder documentation for clarity. Closes: #672109


debian-archive-keyring
   * Mark as multiarch foreign.
   * Remove the two new keys from trusted.gpg in the postinst and change
     the version check so that we can safely backport them to squeeze
     in a non-split way.
   * Add Debian Archive Automatic Signing Key (7.0/wheezy) (ID: 46925553).
     (Closes: #671105)
   * Add Wheezy Stable Release Key (ID: 65FFB764). (Closes: #665380)
   * Drop the apt dependency to fix the resulting circular dependency.
     (Closes: #672598)
   * Do not require a gnupg homedir. (Closes: #665057)
   * Set `Priority: important' in the source stanza of debian/control.
     (Closes: #611805)
   * Move Lenny keys to removed.
   * Ship each active key in a separate keyring in /etc/apt/trusted.gpg.d/
     as conffiles for simpler usage of apt-secure(8).
   * Remove all active keys from /etc/apt/trusted.gpg as they are shipped
     now as fragment files.
   * Depend on gpgv and only recommend gnupg. (Closes: #387688)
   * Work only on /etc/apt/trusted.gpg when removing keys.
   * Forcely create the trusted.gpg.d symlink.
   * Put debian-archive-keyring.gpg into trusted.gpg.d.
   * Remove old keys from trusted.gpg upon upgrade.


debian-installer-utils
   * Install gnu-mach-color terminfo entry instead of mach-color.


docbook-xml
   * Rebuild against debhelper (>= 9.20120528) to fix postinst that
     unconditionally overwrites files in /etc (see: #477751, closes: #675482).


dosfstools
   * Merging upstream version 3.0.13.
   * Switching to xz compression.
	* debian.control: Corrected otherfs to otherosfs :-)
	* mkdosfs.c: Removed one line printing out debug information.
	* mkdosfs.c: Modified code to work properly under AXP
	* mkdosfs.c: Added patch from Sven Rudolph <sr1@inf.tu-dresden.de>
 	to support creation on disk images as well.
	* Moved into section 'otherfs'
	* Corrected debian.rules to provide $(package)_$(revision).diff.gz
	* Added Conflicts: and Provides: entries in control file to really
	replace mkdosfs.
	* added dosfscheck to the package
	* mkdosfs.c: inserted some brackets to stop gcc from moaning
	* mkdosfs.8: corrected some bold/inverse text phrases
	* mkdosfs.c: initialized a variable to stop gcc from moaning


eglibc
   * patches/any/cvs-pthread-builtin-expect.diff: new patch from upstream to
     use __builtin_expect in public headers only on GCC compilers.  Closes:
     #674412.
   * patches/localedata/submitted-es_MX-decimal_point.diff: fix thousand
     separator, use a space instead of a comma.
   * control.in/main: switch multiarch-support to priority: required.  Closes:
     #677624.
   * patches/hurd-i386/libpthread_librt-link.diff: Remove patch, having
     libpthread bringing librt also brings issues.
   * patches/hurd-i386/libpthread_nort.diff: Add patch to revert upstream librt
     usage.
   * patches/hurd-i386/submitted-AF_LINK.diff: New hurd-only patch to comment
     AF_LINK values, unimplemented on the Hurd (Closes: #678358).
   * patches/hurd-i386/unsubmitted-mremap.diff: New hurd-only patch to comment
     MREMAP flags, unimplemented on the Hurd.
   * patches/localedata/cvs-rupeesign.diff: use new rupee symbol
     in Indian locales.  closes: #671299.
   * patches/hurd-i386/tg-{IPV6_PKTINFO,SOL_IP,____longjmp_chk,catch-signal,
     critical-sections,dl-sysdep.c_SHARED,dup3,ioctl-decode-argument,
     itimer-lock,libc_stack_end,mach-nanosleep,mkdir_root,mlock,null-pathname,
     posix2008,posix_opt.h,readlinkat,hurd-recvfrom,sbrk,select-inputcheck,
     setresid,hurd_socket_server_indexcheck,strtoul_PLT,struct_stat,
     dup3-lock}.diff: Refresh with upstream version and rename to cvs.
   * patches/hurd-i386/cvs-O_CLOEXEC.diff: New patch to accept use of O_CLOEXEC
     in rtld.
   * patches/hurd-i386/submitted-getgroups.diff: New patch to reject
     some out of range values.
   * patches/hurd-i386/submitted-getlogin_r.diff: New patch to fix
     re-entrancy of getlogin_r and return ERANGE when the provided buffer is
     too small.
   * patches/hurd-i386/submitted-ptsname.diff: New patch to fix
     buffer checks in ptsname.
   * patches/hurd-i386/tg-hooks.diff: Add rules to sort _hurd_fork_locks.
   * patches/hurd-i386/submitted-sendto.diff: New patch to fix
     sendto() calls with NULL addr.
   * control/{main,libc}: Remove libpthread-stubs-dev dependency on hurd-i386.
   * patches/hurd-i386/libpthread.diff: Add -lrt in libpthread.a to fix static
     linking.
   * patches/hurd-i386/tg-chflags.diff: New patch to fix and add f?chflags
     prototype.
   * patches/hurd-i386/submitted-exec_filename.diff: New patch to pass argv[0]
     through exec, to fix some shell scripts, e.g. glib testsuite.
   * control.in/main: build-depend on newer hurd package to be able to pass
     argv[0] through exec.
   * libc0.3.symbols.hurd-i386: Add symbols for RPCs for argv[0] through exec.
   * kfreebsd/local-sysdeps.diff: update to revision 4286 (from glibc-bsd).
   * fixup any/local-linuxthreads-setclock.diff. Closes: #673711.
   * debian/control.in/main: set glibc-doc as Multiarch: foreign.
     Closes: #674645.
   * patches/arm/unsubmitted-ldso-abi-check.diff: fix broken armhf specific
     hack.  Closes: #674602.
   * patches/any/cvs-regex.diff: fix access after end of search string in regex
     matcher.  Closes: #672688.
   * patches/any/cvs-getpwuid-nsswitch.diff: fix a memory leak in
     getpwuid/nsswitch.c.  Closes: #674072.
   * patches/localedata/submitted-es_MX-decimal_point.diff: fix
     decimal_point and thousands_sep.  Closes: #673339.
   * patches/any/local-sunrpc-dos.diff: fix a DoS in RPC implementation
     (CVE-2011-4609).  Closes: #671478.
   * patches/kfreebsd/local-use-thr-primitives.diff: bump LinuxThreads
     version.  Closes: #675606.
   * Take-over nsswitch.conf installation from base-files.  Closes:
     #673271.
   * Set libc*-dev "Multi-Arch: same". Add conflicts betwwen libc*-dev
     packages. Move a.out.h and ieee754.h to the arch qualified path.
     Closes: #666760.
   * Add patches/any/cvs-ld.so-rpath-origin.diff to fix an insecure handling
     of privileged programs' RPATHs with $ORIGIN (CVE-2011-1658).  Closes:
     #672119.
   * Refresh all patches to loose the "diff --git" headers.  Closes:
     #673933.


eject
   * Declare Multi-Arch: foreign. Closes: #676780
   * Use dpkg-buildflags for hand-built dmcrypt-get-device, too.
   * Use hardening=+all
   * Added build dependency on dpkg-dev (>= 1.16.1~) for the changes
     above


espeak
   * debian/rules: Move espeak-data to /usr/lib/$multiarch/espeak-data to
     permit...
   * debian/control: ... make espeak-data multiarch: same.


file
   * Removing leading slash in debhelper install files.
   * Switching to xz compression.
  * updated for multi-architecture build (fixes Bug #3332)
  * Un-right-justified the description field
  * Move entry for debian packages to the correct spot and update it for debian 2.0 packages (fixes Bug #3411)
  * Add entry for TrueType fonts to Magdir/fonts
  * added entry for Adobe Postscript PPD files in Magdir/ppd.
  * added entry for linux kernal images to source file Magdir/linux
  * add MAGIC=/etc/magic to make(1) invocation
  * added debian.* files
  * modified Magdir/archive to add debian-split entry to ar archives
  * modified magdir/elf to add more entry for core file


fontconfig
   * Remove /var/lib/defoma/fontconfig.d/id-cache. Closes: #672252, #670982.
   * Apply upstream fix for FTBFS on m68k. Closes: #671072.
   * Defoma version no longer relevant.
     Closes: #565891, #583709, #643127, #652486
   * Hinting type is only system default. Closes: #283256
   * New upstream version
   * Remove defoma support. Closes: #651493.
   * Multi-Arch support
   * Mark fontconfig, fontconfig-config 'Multi-Arch: foreign'.
      Closes: #614208


freebsd-libs
   * 04_libkvm.diff: Remove struct loadavg kludge, B-D on libc0.1-dev (>=
     2.13-31) instead.
   * kvm_size_t_kludge.diff: Temporary kludge to define size_t (requires
     kfreebsd-kernel-headers >= 0.81).  (Closes: #673431)
   * Fix FTBFS with latest kfreebsd-kernel-headers.
   * Remove Debian revisions from versions in libmemstat3, libsbuf6 and libcam6
     symbols files.


freebsd-utils
   * Move /bin/sysctl to /sbin/. (Closes: #679128)
   * Fix FTBFS (missing libutil.h).
   * Remove handling of kbdcontrol.conf, now obsoleted by
     /etc/init.d/keyboard-setup.  (Closes: #677915)
   * Fix FTBFS with latest kfreebsd-kernel-headers.
   * Add missing Depends on kldutils for devd and geom. (Closes: #674582)
   * Start devd after kldutils to ensure kern.module_path has been set.
   * Reduce kern.module_path to only contain versioned directories.
   * Return exit status 0 from the geli initscript if not configured, but
     display a warning.  (Closes: #670412)
   * Fix duplicates of Section: utils or Priority: important in debian/control
     (lintian tag binary-control-field-duplicates-source)


gettext
   * Build with hardened build flags.
   * Use Breaks instead of Conflicts for autopoint (lintian warning).
   * Use $(STRIP) on ELF binaries. not just on libraries.
   * Modified msgfmt to always create little endian .mo files.
     Closes: #671257.
   * Updated config.guess and config.sub.


gnutls26
   * New upstream release.
   * Drop 25_nssldapsfix.diff (already included).
   * Pull debian/patches/25_nssldapsfix.diff from upstream git.
     (LP: #1003841)


groff
   * Pass build flags in a few more places (closes: #653852).
   * Use dpkg-buildflags to enable hardening options (closes: #653852).
   * Adjust paths in groff_mom(7) (closes: #611904).


hw-detect
   * check-missing-firmware.sh: Use 'readlink -f' rather than 'realpath',
     since this is one of only two places using realpath in d-i at the
     moment.
   * check-missing-firmware: Use udpkg to get the contents of debs,
     in order to support other compression methods than gz.


installation-report
   * Reorder steps in template to match current installer order.


kbd
   * Revert the build-dependency change towards gettext:any and let the buildds
     do their work again, closes: #670778.
   * Support cross-building, closes: #670653.
     - Allow the gettext build-dep to be satisfied by a package of any
       architecture.
     - Use dh_auto_configure.
     - Explicitly set the host CC to cross-build the contrib binaries.
   * Trigger font setup when any of CONSOLE_FONT, CONSOLE_MAP, or FONT_MAP are
     present in /etc/kbd/config, closes: #647153.
   * Update manpages.diff: Minor fixes to the setleds(1) manual page, closes:
     #663252.
   * Provide a no-op “status” option for /etc/init.d/kbd.


kmod
   * New upstream release.
   * Implemented systemd-compatible processing of modules-load.d directories
     (Closes: #672960)
   * Properly fix kmod on ia64 with backported patch commit-d30319e.
   * New upstream release. Fixes:
     + An unclear error message. (Closes: #668216)
   * Moved libkmod.pc to the multiarch directory. (Closes: #670005)
   * Do not warn about a missing modules.builtin file for kernel versions
     < 2.6.33. (Closes: #670965)
   * Removed patch work_around_linking_issues, which is properly fixed by
     upstream patch commit-9625375.
   * Made the init script exit without processing /etc/modules if the
     /etc/modules-load.d/modules.conf symlink exists.


libbsd
   * New upstream release. (Closes: #668705)
     - Autoconfiscated, supports cross-building natively. (Closes: #665997)
     - Provide endian encoding/decoding inline functions. (Closes: #635377)
     - Provide expand_number(). (Closes: #635379)
     - Ship <nlist.h> under /usr/include/bsd/. (Closes: #634955, #657772)
     - Ship <libutil.h> under /usr/include/bsd/. (Closes: #640895)
     - Fix header protections when using the overlay. (Closes: #630907)
     - Fix .so symlinks to be relative even when the .so.N shared library
       is on a different directory. (Closes: #580372)
     - Remove all deprecated headers and inclusions.
   * Avoid leaving the system w/o an <nlist.h> previously owned by either
     libelfg0-dev or libelf-dev when upgrading from old libsd-dev versions
     which used to Replace them, by restoring <nlist.h> from <bsd/nlist.h>.


libdebian-installer
   * Add LaCie NAS devices (Kirkwood)  Closes: #670527
   * parser_rfc822: mmap returns MAP_FAILED on error, not NULL.
   * Support PGP signed files in RFC822 parser. (closes: #674060)


libgd2
   * Support multi-arch: (closes: #652496)
     - Mark libgd2-xpm, libgd2-noxpm, libgd2-xpm-dev and libgd2-noxpm-dev
       as same.
     - Adjust d-shlibs and dh-buildinfo build-dependency.


libidn
   * New upstream release.
   * Disable silent rules (to get more info in build logs).


libtasn1-3
   * Upload to unstable.
   * New upstream version.


libtext-format-perl
   * Imported Upstream version 0.56
   * Add Build-Depends-Indep for POD coverage tests.
     Add libtest-pod-coverage-perl and libtest-pod-perl to
     Build-Depends-Indep.
   * Drop fix-spelling-error-in-manpage.patch patch
   * Imported Upstream version 0.54


libx11
   * New upstream release. Visible changes:
     - Add APL support, yay!
     - A few duplicated Compose sequences were tweaked or removed. Affected
       characters are: Ã / µ / Ñ / ñ / ¹ / ² / ³ / Ó / ó / Ǻ / ǻ.
   * Drop patch, fixed upstream:
     - 001-configure-check-if-issetugid-is-declared.diff
   * Add AC_CHECK_DECL(issetugid) to fix FTBFS on kfreebsd (closes: #669670).
   * New upstream release candidate (1.5 RC1)
     - XQueryColors: split a request into multiple requests if necessary
       (closes: #278984)
     - Revert "xcb: Add TCP fallback" (closes: #659558)
   * Don't require (fake)root for debian/rules clean.
   * Drop xorg-sgml-doctools dependency from libx11-doc, the css is now
     included in the html files directly.  Also add Breaks in addition to the
     Replaces on old libx11-dev.
   * Add build-indep and build-arch targets, don't build specs in build-arch.
   * Rediff 006_tailor_pt_BR.UTF-8_Compose.diff and
     015_russian_locale_alias.diff.
   * Upload to unstable.
   * Move xorg-sgml-doctools dependency from -dev to -doc.
   * Move libx11-doc from section libdevel to doc (closes: #648706).
   * New upstream release candidate:
     - Bug fixes, specs clean-up, new compose sequences.
     - Add GetRequestSized.
   * Bump xorg-sgml-doctools build-dep.
   * Refresh patch:
     - 006_tailor_pt_BR.UTF-8_Compose.diff
   * Add symbol:
     - _XGetRequest@Base
   * Bump shlibs accordingly, for the udeb.


libxfont
   * Ease sync for Ubuntu: strip -Bsymbolic-functions from LDFLAGS
     (LP: #992745).


libxi
   * Don't require (fake)root for debian/rules clean.
   * New upstream release.
     - Fix bus error on MIPS N32 (closes: #636920)
   * Bump build deps on x11proto-input-dev
   * Pull some more changes from upstream master:
     - Fix wrong button label and mask copy on OS X (fixes regression in the
       patch for bug#636920)
     - Move version comparison into a helper function
     - Set the RawEvent sourceid (#34240)
   * Upload to unstable.
   * New upstream release candidate:
     - With XI 2.2 support, needed for multitouch.
   * Fix changelog entry for 2:1.4.99.1-1:
     - With XI 2.1 support, no multitouch yet.
   * Bump x11proto-input-dev and libx11-dev build-deps.
   * Update libxi6.symbols with new symbols and bump shlibs.
   * New upstream release.
   * New upstream release candidate:
     - With XI 2.1 support.
   * Update build dependencies accordingly:
     - Bump xutils-dev, x11proto-input-dev, xorg-sgml-doctools.
     - Add xsltproc.
   * Update libxi-dev.install: specs/ and docs/ have been merged.
   * Don't install *.db yet.
   * Add -c4 to dh_makeshlibs.


libxinerama
   * New upstream release.
   * Make libxinerama-dev Multi-Arch: same.
   * Don't require (fake)root for debian/rules clean.


libxkbfile
   * New upstream release.
   * Don't require (fake)root for debian/rules clean.
   * Build-Depend on newer xutils-dev for util-macros 1.8.
   * Build for multiarch.


libxml2
   * Sanitize the output of `xml2-config --libs`.
   * Remove odd output of xml2-config --libs (Closes: #675682).
   * Mark libxml2-dev "M-A: same" again, fixed xml2-config
     (Closes: #674474).
   * debian/control:
     - Remove "M-A: same" from libxml2-dev (Closes: #674474).
     - Add "M-A: foreign" to libxml2-doc.
   * debian/rules:
     - Style change on calling dh using --with.
     - Enable all hardening features.
     - The sed command for removing DEB_HOST_MULTIARCH is not reverted
       because it's generally a good idea to avoid it here.
   * lintian-overrides:
     - libxml2: package-name-doesnt-match-sonames
     - python-libxml2-dbg: hardening-no-fortify-functions
   * New upstream release. (Closes: #148220, #590934)
   * Adjust changelog of previous NMU (Closes: #674739).
   * Try to avoid useless space in /usr/bin/xml-config (Closes: #674474).
   * Fix CVE-2011-3102: off by one pointer access in xpointer.c
     (Closes: #674191).


libxrender
   * New upstream release.
   * Don't require (fake)root for debian/rules clean.
   * Add Multi-Arch: same for libxrender-dev.
   * Bump xutils-dev build-dep for newer macros.


libxslt
   * Patch to fix CVE-2012-2825 (Closes: #679283).
   * debian/control: mark libxslt1-dev as not M-A (Closes: #671902).
   * Byte-compile Python modules again (Closes: #671901).


localechooser
   * Re-enable Welsh
   * Add SS BQ and SX to regionmap.


lowmem
   * Remove more big files from console-setup.
   * Add an override for "not-using-debconf". We know what we're doing, pal!


man-db
   * New upstream release:
     - Optimise apropos when given many arguments (LP: #927028).
     - apropos prints an error message and returns non-zero when it finds no
       matches (closes: #672661).
     - Avoid fatal errors when opening a 64-bit GDBM database from a 32-bit
       process (LP: #1001189).
   * Configure with --with-xz=xz --with-lzip=lzip.
   * Adjust debian/watch to track .tar.xz releases.
   * Override hardening-no-fortify-functions Lintian warning for
     /usr/bin/manpath, as a false positive.


micro-evtd
   * debian/udeb/micro-evtd.command: Fixed bashisms. Thanks to Martin Michlmayr
     for the report and patch. (Closes: #666218)
   * debian/copyright: Update Format URL and debian/ copyright declaration.
   * debian/patches/bashisms.patch: Patch out remaining bashisms from scripts.
   * debian/patches/dont-copy-eventscript.patch: Place runtime files (e.g.
     micro-evtd.status) in /var/run instead of next to the program.
   * debian/micro-evtd.postinst: Clean up runtime files accidentally placed
     into /usr/sbin in previous revision.


mkvmlinuz
   * Add build-arch and buld-indep targets to debian/rules.
   * Switch package section from devel to utils.
   * Use hardening compiler flags
   * Compress initrd with xz to significantly reduce
     vmlinuz size. (Closes: #549681)
   * Add -fno-stack-protector (Closes: #509007)
   * Kill lintian warnings.
     - Spelling error in mkvmlinuz manpage
     - Fix lintian overrides


mtools
   * New upstream version
     Closes: #676367, #567027
   * Merged upstream:
     01-217413-plainio.patch
     02-manpages.patch
     04-manpages.patch
     07-474817-m486.patch
     08-393878-scsi.c.patch
     09-468744-mtools.1.patch
     10-remove-iX-lp.patch
     11-truncation-fix.patch
   * Enable hardened build flags
   * Drop the dependency of the biarch packages on libtinfo5
     (Closes: #678440).
     - Convert /usr/share/doc/lib{32,64}tinfo5 back to directories.
   * New patch 05-fix-poll-test.diff adapted from the 20120608 upstream
     patchlevel, correcting the CF_FUNC_POLL test which inadvertently
     failed if standard input was redirected, as is the case on the Debian
     buildds (Closes: #676461).
   * Assume working poll() for the biarch packages where we cannot run the
     configure check.
   * Update terminfo descriptions to the 20120602 upstream patchlevel.
     - Correct 'op' for bterm (Closes: #671227).
   * Change section of ncurses-{base,term} to misc (see #671616).
   * Move the Breaks against old binutils-gold versions to libtinfo-dev.
   * Conflict with libc6-i386 (<= 2.9-18) in lib32tinfo{5,-dev}.


netcfg
   * Fix link detection progress bar.
   * Make link detection timeout preseedable.
   * Ignore pfsync0, pflog0 and usbus0 devices on GNU/kFreeBSD.
   * Use 127.0.1.1 hack in /etc/hosts only on kernels that support it.
     (Closes: #649747)
   * Also probe /dev/eth* and wl* on hurd-i386.
   * Fix debconf backup capability handling.
     (Closes: #636211)
   * Add ppc64 to the Architecture field.


network-console
   * Add support for public-key authentication (Closes:#592550, LP: #184108).
   * Mark authorized_keys_fetch_failure for translation, sublevel 6.
   * Set LED signal on LaCie Kirkwood NAS devices when SSH is ready
     (Closes: #670941).


newt
   * Close bugs fixed in -9: Closes: #670039. Closes: #670012. Closes: #658319.
   * Don't override hardened CFLAGS. Closes: #658430.
   * Fix: whiptail gave incorrect result for ESC pressed when NO selected.
     Closes: #665784.


openssh
   * Tighten libssl1.0.0 and libcrypto1.0.0-udeb dependencies to the current
     "fix" version at build time (closes: #678661).
   * Display dynamic part of MOTD from /run/motd.dynamic, if it exists
     (closes: #669699).
   * New upstream release (closes: #671010,
     http://www.openssh.org/txt/release-6.0).
     - Fix IPQoS not being set on non-mapped v4-in-v6 addressed connections
       (closes: #643312, #650512, #671075).
     - Add a new privilege separation sandbox implementation for Linux's new
       seccomp sandbox, automatically enabled on platforms that support it.
       (Note: privilege separation sandboxing is still experimental.)
   * Fix a bashism in configure's seccomp_filter check.
   * Add a sandbox fallback mechanism, so that behaviour on Linux depends on
     whether the running system's kernel has seccomp_filter support, not the
     build system's kernel (forwarded upstream as
     https://bugzilla.mindrot.org/show_bug.cgi?id=2011).
   * Disable padlock engine again, causes problems for hosts not supporting it.
   * Fix renegiotation when using TLS > 1.0.  This breaks tor.  Patch from
     upstream.  (Closes: #675990)
   * Enable the padlock engine by default.
   * Change default bits from 1024 to 2048 (Closes: #487152)
   * New upstream version
     - Fixes CVE-2012-2333 (Closes: #672452)


pango1.0
   * New upstream release.
   * Refreshed and updated patches.
   * New upstream release.
     - Fix GI annotation syntax. Closes: #640855
   * debian/control.in: Bump Build-Depends on libglib2.0-dev to (>= 2.31.0).
   * debian/patches/00git_transfer_annotations.patch: Removed, merged upstream.


pciutils
   * Update pci.ids with version 2012.06.25
   * Enable hardened build flags


pcmciautils
   * Mark pcmciautils and pcmciautils-udeb Architecture: linux-any.
   * Use dpkg-buildflags to enable hardening options.


pcre3
   * There is no use in including debug information for the libraries from
     the udeb in the debug package; more importantly, because the
     installation system isn't multiarch, if they are included they result
     in arch specific files in arch independent paths (debug package is
     Multi-arch:same). Removed. (Closes: #670018)


pixman
   * Pass LS_CFLAGS=" " to configure to prevent -march=loongson2f from
     being passed to gcc, which would break on loongson2e (see fdo bug
     #51451). This fixes the test suite failures on mipsel, and should
     avoid any crashes depending on user systems.
   * Cherry-pick from upstream master branch to fix FTBFS on *i386:
     - da6193b1fc “mmx: add missing _mm_empty calls”
   * New upstream release.
   * New upstream release candidate.
   * Remove demos/parrot.jpg before building the source package to avoid
     “binary file contents changed” until it's shipped in the upstream
     tarball.
   * New upstream release candidate.
   * Add new symbols and bump shlibs accordingly:
     - pixman_region32_clear
     - pixman_region_clear


preseed
   * Point the keymap alias to keyboard-configuration/xkb-keymap instead of the
     now-gone console-keymaps-at.


python-defaults
   * dh_python2:
     - remove even more \.so.* dangling symlinks
     - rewrite shebangs by default (disable via --no-shebang-rewrite),
       examples:
        + "/usr/bin/env python*" → "/usr/bin/python*"
        + "/usr/local/bin/python foo" → "/usr/bin/python foo"
        + "/usr/bin/python2" → "/usr/bin/python"
     - new --shebang option to replace all shebangs in bin dirs
       (example: --shebang /usr/bin/python2.6)
     - no longer generates python2.X | python2.Y depenendies for public modules
       (Closes: #625740)
     - translate Python version numbers into Debian ones for those
       require.txt items that have a pydist file with (uscan like) rules
       or PEP386 flag (Closes: #653740)
   * Improve dh_python2 manpage a bit, add information about cleaning debug
     packages (Closes: #653741)
   * pyversions, dh_python2, pycompile: allow to override system's list of
     supported Python versions via DEBPYTHON_SUPPORTED and default Python
     version via DEBPYTHON_DEFAULT env. variables
   * Debhelper's python2 sequence now inserts dh_python2 before dh_installinit
     (closes: #670418)
   * Bump upstream version to match current unstable/wheezy python2.7 version
   * Move idle.xpm symlink from python to idle and add Breaks/Replaces
   * Move /usr/bin/pyversions from python to python-minimal since that's where
     the actual script it's a symlink to lives, add Breaks/Replaces
   * Correct Python package names with hyphens in them being ignored
     (Closes: #657665)
   * Drop -n from /usr/bin/idle invocations in debian/idle.desktop and
     debian/idle.menu (Closes: #482156)
   * Update Python policy
     - Describe addition of /usr/bin/python2 due to upstream changes
     - Remove redundant text on Python provides and clarify when they should be
       used
     - Update description of functionality related to X-Python-Version for
       Wheezy
     - Update X/XS-Python-Versions to also include X-Python-Version examples
     - Add appropriage Breaks/Replaces
   * Bump upstream version to match current unstable/wheezy python2.7 version
   * dh_python2, pyversions: make comparison of X(S)-Python-Version field names
     case-insensitive (Closes: #676224)
   * Python 2.7.3 release.
   * Update to 20120615, taken from the 2.7 branch.
   * The wininst-* files cannot be built within Debian from the included
     sources, needing a zlib mingw build, which the zlib maintainer isn't
     going to provide. Closes: #639407.
   * Let pydoc handle dist-packages the same as site-packages.
     Closes: #671021.
   * python2.7-doc: Fix underscore.js symlink. Closes: #671795, #676339.
   * Build _heapq as a builtin (and move it to -minimal).


rootskel
   * Remove rootskel-bootfloppy. The age of the floppy is officially over.
     Closes: #653840
    * src/sbin/init-kfreebsd: Start devd to process all pending events
     before init (see #493865)
   * Generate debian/templates in build-arch as well as build, so they don't go
     missing on non-source uploads.


rootskel-gtk
   * Use Tibetan Machine Uni font for Tibetan
   * Generate debian/templates in build-arch as well as build, so it doesn't
     go missing on binary-only builds.
   * Revert changes made to use spacefun theme in installer.
   * Use the Wheezy Joy theme for the installer.


ruby1.8
   * debian/rules: avoid running DRB tests, since they crash and leave runaway
     processes that make buildds hang forever. With this, I expect that we
     don't need to set timeouts for the test suite at all (Closes: #674942).
   * Added patch to make ruby1.8-dev depend on gcc-4.6,
     since Ruby will hard code that as the compiler for building C extensions.
     Any C extension will FTBFS if gcc-4.6 is not installed (Closes: #675347).
   * Guard test suit run with a explicit timeout to avoid FTBFS on kfreebsd-*
     due to a timeout after 150 minutes of inactivity (Closes: #673594). For
     now, the timeout is  1 hour, which should be enough time to run the test
     suite on other architectures, and is less than the 150 minutes tolerated
     by kfreebsd-*.
   * Force compilation with gcc-4.6. This avoids segfaults when ruby1.8 is
     compiled with gcc-4.7 (See #674541).
   * debian/patches/use-ldflags.patch: patch to make Ruby
     use any existing LDFLAGS environment variable. This should make ruby1.8 be
     properly built with hardening (Closes: #667957).


s390-netdevice
   * Switch the CTC driver name from cu3088 to ctcm.


sgml-base
   * Generate the super catalog from /etc/sgml directory contents.
     This does not solve #477751, but the upcoming debhelper changes will solve
     that bug based on this work.
   * Do not truncate the manual pages during build.


sgml-data
   * QA upload.
   * Now package sgml-data suggests package w3-recs instead of missing
     package doc-html-w3. (Closes: #612239)
   * Fixed such lintian warnings and notes:
     + sgml-data source:
       - package-file-is-executable debian/control
       - debian-rules-missing-recommended-target build-arch
       - debian-rules-missing-recommended-target build-indep
       - dh-clean-k-is-deprecated
     + sgml-data:
       - conflicts-with-version sp (<= 1.1.1-2)
       - possible-documentation-but-no-doc-base-registration
   * QA upload.
   * Rebuild with a version of debhelper fixing #477751.
   * Remove open-coded occurrence of this issue. (Closes: #675488)


slang2
   * Disable the die-on-testfailure patch: the failures are not regressions.
     Ship slang2 as-was for wheezy, rather than go look for trouble.
   * Add "-O0" to build options to avoid tickling a bug somewhere in libslang;
     probably with uninitized memory. Closes: #675125.
   * Add patch to ensure test failures cause automated testing to fail on
     Debian and catch this sort of thing.
   * Re-insert CFLAGS that may not be obsolete ...
   * Don't ship pre-built config.h in examples directory : it makes the -dev
     package arch-dependent. Closes: #674495.
   * dropped obsolete CFLAGS
   * debian/control: Conflicts replaced with Breaks (lintianisation)
   * Debian source package compression to '.xz'
     use default hardening (Closes: #656128).
   * no longer install upstream UPGRADE.txt file with instructions
     how to upgrade from slang v1.
   * no longer install upstream README files with hints about
     location of documentation files in upstream source tree.
   * added doc-base registration for slsh html documentation.
   * added libslang2.symbols file.
   * added debian/clean file to remove auto-generated files.
   * use autoconf to re-generate configure script.
   * docs and examples separated from debhelper .install files
   * debian/control:
     + dropped conflict with obsolete slang0.99.34-dev
     + minor lintianisation:
       * libslang2-modules long description is updated.
       * XC-Package-Type --> Package-Type.
       * dropped redundant "Priority: optional"
   * install compressed slangfun.txt doc file.
   * Fix wrong parens in control file. Closes: #669514.
   * Fix broken multiarch in libslang2-modules


sqlite3
   * New upstream release.
   * New upstream release (closes: #674078).
   * New upstream release, adjust patches to apply clean.
   * Increase MAX_DEFAULT_PAGE_SIZE and SQLITE_MAX_SCHEMA_RETRY for Firefox and
     Iceweasel (closes: #672573).
   * Remove double -ldl entry from Libs.private in sqlite3.pc
     (closes: #653170).
   * Drop hardening-wrapper build dependency (closes: #672575), adjust
     debian/rules to still build with hardening enabled.
   * Make the package backportable without changes other than a changelog
     entry (closes: #672663).


sysfsutils
   * Support multi-arch: (closes: #663040)
     - Mark libsysfs2 as same.
     - Mark sysfsutils as foreign.
     - Adjust debhelper and cdbs build-dependencies.
     - Fixup -dev installation.
   * debian/sysfsutils.init:
     - add support for changing permissions of folders too.      closes: #658365
   * debian/control:
     - add build-dep on autotools-dev to replace ancient autotools helpers.


syslinux
   * Using official package-type for udeb packages in control now.
   * Switching to xz compression.
   * Updating todo file.
   * Making some editorial changes in copyright file.
   * Adding patch to fix FTBFS with 3.4.x kernels (Closes: #676405).
   * Adding patch to add alternative locations in for configuration files
     for the bootloader configuration.
   * Updating compression handling for udeb with newer debhelper.
   * Build-depending on gcc-4.6 for the time being in order to avoid
     miscompiling default gcc-4.7 (Closes: #672520).
   * Removing bootloader configuration files for extlinux in postrm when
     purging package (Closes: #672380).


u-boot
   * Remove code duplication in kerma-sheevaplug-mvsdio.diff.
     closes: #674230.
   * New upstream version.
     - Update mipsel-native-endianness.diff.
     - Update no-error-on-set-but-unused-variables.diff (partially merged).
     - Drop kirkwood_spi-irq_mask.diff (merged).
     - Drop kirkwood-disable-l2c.diff (merged).


udpkg
   * Add -c mode to list the files contained in a deb.
     Unlike dpkg, this only lists the files, not other information.


userdevfs
   * Look in /run/udev too to detect udev running. Closes: #644330


util-linux
   * agetty: don't use log_err() for non-fatal errors
   * agetty: Eliminate another log_err() call. Closes: #675569
   * sfdisk: fix calculation due to type mismatch (ix86)  Closes: #670127
   * Make sure we have non-null mount options.  Closes: #632118
   * tries to umount /proc when told to umount /some/dir/proc without an
     /etc/mtab entry.  Closes: #634107
   * Deliver {c,}fdisk-udeb on hurd.  Closes: #672551
   * Improve handling of the hardware clock
     - Remove redundant hwclockfirst.sh and hwclock.sh.  The reason for
       this redundant script existing (/etc/localtime not being present
       until after /usr was mounted AFAICT) no longer exists.  The
       hwclock script has been adjusted to run before checkroot.
       Closes: #660365
     - Migrate existing
       UTC= setting in /etc/default/rcS to UTC/LOCAL in /etc/adjtime.
       This removes needless duplication of the setting, and prevents the
       behaviour of hwclock being overridden, and its configuration
       overwritten every shutdown.  Closes: #554345
     - The hwclock init scripts now use /etc/adjtime instead of the
       --utc and --localtime options (based on the UTC setting).
     - Add /etc/default/hwclock and hwclock(5) which permit
       configuration without editing the initscript, and also document
       all the undocumented variables used by the scripts.
       Closes: #481357, #659654
     - The udev hwclock-set script runs hwclock --tzset unconditionally
       in all cases (it's a no-op for UTC).
     - The user running "hwclock --systohc (--utc|--localtime)" is now
       handled correctly.  The clock state is recorded in /etc/adjtime
       and correctly handled on system restart.  This means the UTC
       setting in /etc/default/rcS doesn't create problems by requiring
       two separate changes (changing the UTC setting and running
       hwclock) to do the same thing.
     - Comment out the now-obsolete UTC= setting in /etc/default/rcS,
       with a reference to /etc/adjtime and hwclock(8).
     - systemd uses /etc/adjtime as for hwclock to store the hardware
       clock UTC/LOCAL configuration.  This change means there's a
       single place to store the hardware clock configuration for all
       init systems.


win32-loader
   * Added translations:
     - Khmer (Khoem Sokhem)
     - Latvian (Rūdolfs Mazurs). Closes: #674702
     - Welsh (Daffyd Tomos).


x11-xkb-utils
   * setxkbmap 1.3 0
   * xkbcomp 1.2.4
   * xkbevd 1.1.3
   * Bump x11proto-core-dev build-dep to 7.0.17.
   * Tell dh_install to ignore xkbcomp.pc, nothing uses that AFAIK.


xft
   * New upstream release:
     - Subpixel LCD text rendering improvements (Closes: #641197).


xml-core
   * Rebuild against debhelper (>= 9.20120528) to fix postinst that
     unconditionally overwrites files in /etc (see: #477751, closes: #675483).


xorg-server
   * xvfb-run: kill Xvfb when the script dies.
   * xvfb-run: instead of waiting 3 seconds and hoping that's enough for Xvfb
     to come up (and waiting 2.9 seconds too many in the general case), tell it
     to send us SIGUSR1 when it's ready to accept connections.  This reduces
     "xvfb-run -- xterm -e true" from ~3.2s to ~0.4s on a quick test.
   * xvfb-run: fix xauth handling; setting XAUTHORITY when starting an X server
     isn't actually useful, we need to use the -auth command-line parameter
     instead.  Somehow this seems to have been broken all these years and
     nobody noticed...
   * New upstream release candidate for the 1.12 stable branch:
     - Bring the usual lot of stability fixes.
     - Fix segfault on server shutdown (Closes: #671812).
     - Refactor logging, fixing a format string vulnerability which could lead
       to a denial of service (“only”, thanks to the fortified sources). This
       is CVE-2012-2118 (Closes: #673148).
   * Bump severity to “medium” for those two important fixes.
   * Merge from server-1.12-branch up to 22a1953c4a to get:
     - many XI 2.2 fixes.
     - “os: make timers signal-safe”; fixing infinite loops with the
       synaptics tap handling code.
   * New upstream release.
   * Upload to unstable.
   * New upstream release candidate (1.12.1 RC2).
   * Refresh patches, yay for automated re-indenting…
   * New upstream release.
   * Bump x11proto-input-dev in Build-Depends and Depends.
   * New upstream release candidate (1.12 RC2):
     - Fix FTBFS on ia64 and mips*.
   * Bump x11proto-input-dev build-dep.
   * New upstream release candidate (1.12 RC1).
   * Bump input ABI and serverminver again.
   * Bump x11proto-input-dev build-dep/dep.
   * New upstream snapshot.
   * Bump input ABI and serverminver again.
   * New upstream release snapshot (on the way to 1.12).
   * Bump libpciaccess-dev, x11proto-input-dev build-deps.
   * Update xserver-xorg-dev's dependencies:
     - Add libpixman-1-dev.
     - Bump x11proto-input-dev.
   * Update serverminver with new server and ABI versions.
   * Drop patches (merged upstream):
     - 07-xfree86-fix-build-with-xv-disabled.diff
     - 15-nouveau.diff


zlib
   * Yet more s390x cleanup.  Thanks to the s390x porters for thei
     prompt an efficient buildd monitoring (closes: #678511).
   * Clean up breakage from binnmu since with multiarch binnmus of zlib
     and other multiarch enabled library packages aren't actually
     installable.  Hopefully the multiarch people will get round to
     cleaning up the infrastructure at some point (closes: #678172).
   * Third time lucky.  I love double negative logic on strings.  It's a
     shame the patch for s390x didn't take care of s390...
   * Nope, here we go again...
   * Let's try a different bodge for s390...
   * Yet another special case for s390.
   * Fix cross 32 builds.
   * Pass LDFLAGS to minizip too, but don't bother with TEST_LDFLAGS
     for the main build since it accomplishes nothing (closes: #672310).
   * Disallow simutaneous 64 and 32 bit cross package builds.
   * s390x doesn't actually have 32 bit, only 31 bit, and making the
     compiler options consistent is too hard.
   * Move primary shared library to /lib for wpa_supplicant (closes: #591013).
   * Clean up ironic breakage in patch for hardening (closes: #672310).
   * Support biarch on s390x (closes: #637898).
   * Enable hardening flags (closes: #672310).
   * New upstream release.


Reply to: