cpio (2.15+dfsg-2.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Apply upstream patch to fix FTBFS with gcc-15. (Closes: #1096467)

 -- Chris Hofstaedtler <zeha@debian.org>  Sun, 21 Dec 2025 13:24:40 +0100

cpio (2.15+dfsg-2) unstable; urgency=medium

  [ Miriam España Acebal <miriam.espana@canonical.com> ]
  * d/prerm, d/postinst: fix path according to /usr movement (LP: #2052295)

  [ Zixing Liu <zixing.liu@canonical.com> ]
  * Use compat level 13 (Closes: #1073111, #851631).
    - Switch to use autoconf Debian Helper template.
    - Switch to use dh generated alternatives scripts.
    - Remove all manual installation steps from d/rules.

  [ Anibal Monsalve Salazar ]
  * Standards-Version: 4.7.0

 -- Anibal Monsalve Salazar <anibal@debian.org>  Sat, 27 Jul 2024 22:34:40 +1000

cpio (2.15+dfsg-1) unstable; urgency=medium

  * New upstream release
    Noteworthy changes in this release:
    - Fix operation of --no-absolute-filenames --make-directories 
    - Restore access and modification times of symlinks in copy-in
      and copy-pass modes.
  * Update debian/watch 
  * Move files to /usr
    Patch by Helmut Grohne <helmut@subdivi.de>
    Closes: #1059756

 -- Anibal Monsalve Salazar <anibal@debian.org>  Mon, 15 Jan 2024 20:38:45 +1100

cpio (2.14+dfsg-1) unstable; urgency=medium

  * New upstream release
    Closes: #1049402
    Noteworthy changes in this release:
    - New option --ignore-dirnlink
      Valid in copy-out mode, it instructs cpio to ignore the actual number
      of links reported for each directory member and always store 2
      instead.
    - Changes in --reproducible option
      The --reproducible option implies --ignore-dirlink.  In other words,
      it is equivalent to --ignore-devno --ignore-dirnlink --renumber-inodes.
    - Use GNU ls algorithm for deciding timestamp format in -tv mode
    - Bugfixes
      - Fix cpio header verification.
      - Fix handling of device numbers on copy out.
      - Fix calculation of CRC in copy-out mode.
      - Rewrite the fix for CVE-2015-1197.
      - Fix combination of --create --append --directory.
      - Fix appending to archives bigger than 2G.
  * Update uploaders list
    Closes: #925021
  * Standards-Version: 4.6.2
  * Fix Path traversal vulnerability due to partial revert of fix for CVE-2015-1197
    Closes: #1059163
  * cpio-win32 is no longer needed
    Closes: #1059238

 -- Anibal Monsalve Salazar <anibal@debian.org>  Fri, 22 Dec 2023 16:38:54 +1100

cpio (2.13+dfsg-7.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Suggest libarchive-dev (Closes: #662718).
  * d/copyright: Convert to machine-readable format.
  * Fix CRC with new ASCII format when file > 2GB (Closes: #962188).

 -- Bastian Germann <bage@debian.org>  Wed, 14 Sep 2022 21:45:55 +0200

cpio (2.13+dfsg-7) unstable; urgency=medium

  [ Salvatore Bonaccorso ]
  * Fix dynamic string reallocations (Closes: #992192)

 -- Anibal Monsalve Salazar <anibal@debian.org>  Sun, 22 Aug 2021 15:21:53 +1000

cpio (2.13+dfsg-6) unstable; urgency=high

  * Fix regression of original fix for CVE-2021-38185
    Add patch 992098-regression-of-orig-fix-for-CVE-2021-38185 
    Closes: #992098

 -- Anibal Monsalve Salazar <anibal@debian.org>  Fri, 13 Aug 2021 13:06:27 +1000

cpio (2.13+dfsg-5) unstable; urgency=medium

  * Fix CVE-2021-38185
    Add patch 992045-CVE-2021-38185-rewrite-dynamic-string-support
    Closes: #992045

 -- Anibal Monsalve Salazar <anibal@debian.org>  Wed, 11 Aug 2021 01:18:33 +1000

cpio (2.13+dfsg-4) unstable; urgency=medium

  * Source only upload to enable migration.
    Closes: #969660 

 -- Anibal Monsalve Salazar <anibal@debian.org>  Thu, 17 Sep 2020 21:16:18 +1000

cpio (2.13+dfsg-3) unstable; urgency=medium

  * Fix FTBFS multiple definition of 'program_name'
    src/global.c: Remove superfluous declaration of program_name 
    Add patch 963304-remove-superfluous-declaration-of-program_name
    Closes: #963304

 -- Anibal Monsalve Salazar <anibal@debian.org>  Tue, 07 Jul 2020 23:12:56 -0500

cpio (2.13+dfsg-2) unstable; urgency=medium

  * Fix a regression in handling of CVE-2015-1197 & --no-absolute-filenames by
    reverting part of an upstream commit. (Closes: #946267, #946469)
  * Add Vcs-Git and Vcs-Browser pointing to my personal Salsa repository (in
    lieu of anything at all).
  * Bump Standards-Version to 4.5.0.

 -- Chris Lamb <lamby@debian.org>  Sat, 01 Feb 2020 14:11:00 +0100

cpio (2.13+dfsg-1) unstable; urgency=medium

  * New upstream release. (Closes: #946267)
  * Autoreconf using version 1.16.1 and update autoreconf.patch.
  * Update patches:
    - Drop patch for CVE-2016-2037; applied upstream.
    - Drop CVE-2015-1197.patch; now addressed upstream.
    - Modify doc/Makefile.am (vs. doc/Makefile.in) prior to autoreconfing vs.
      the generated doc/Makefile.in.
    - Refresh whitespace, etc. in patches via pq import/export.
  * debian/control:
    - Bump Standards-Version to 4.4.1
    - Drop misleading Vcs-{Git,Browser}.
    - Use HTTPS Homepage URI.
    - Specify Rules-Requires-Root: binary-targets.

 -- Chris Lamb <lamby@debian.org>  Wed, 20 Nov 2019 13:33:36 -0500

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog cpio`.
