unzip (6.0-31ubuntu1) stonking; urgency=medium

  * Merge with Debian unstable (LP: #2163534). Remaining changes:
    - d/p/unzip60-alt-iconv-utf8.patch: add patch
      + Add patch from archlinux which adds the -O option, allowing a
        charset to be specified for the proper unzipping of non-Latin and
        non-Unicode filenames.
      + Added documentation for `-I` and `-O` options to unzip (man/unzip.1) and
        zipinfo (man/zipinfo.1) man pages (LP #138307).
      + Fixed garbled output when `zipinfo` or `unzip -Z` is called
        without arguments (LP #1429939).
    - d/t/*: add autopkgtests (LP #2023994)
    - d/p/fix-troff-warning.patch: removes monospace directives to fix
      troff warnings (LP #2054670)
    - d/p/fix-code-pages.patch: add patch
      + Fixed bit 11 of General purpose flag support on systems with UTF-8
      system charset (LP #2066389).
      + Fixed OEM code page being always assumed Russian/Cyrillic CP866 on
      any UTF-8 system.
      + Added proper OEM code page detection based on system locale setting.
      + Removed translation from ISO 8859-1 to local charset; assumption that
        any non-unicode archive uses it is for sure wrong as it can be any
        charset used on archive creator's local system; also do not treat
        PKZIP for UNIX 2.51 archives as having ISO 8859-1 charset for the
        same reasons.
      + Enabled UTF-8 output by default on Unix systems.
    - d/t/SmokeTests.py: add tests for unicode file names in different encodings
    - d/p/CVE-2021-4217.patch: add patch to fix null pointer dereference and
      use of uninitialized data.
  * Renamed patch files to drop leading numbers, to match upstream.

 -- Ural Tunaboyu <ural@ubuntu.com>  Fri, 07 Nov 2025 15:39:29 +0100

unzip (6.0-31) unstable; urgency=medium

  * Apply upstream fix for CAN-2026-2034442. Closes: #1142906.
    (heap buffer overflow WRITE in memextract() STORED path)

 -- Santiago Vila <sanvila@debian.org>  Mon, 10 Aug 2026 19:10:00 +0200

unzip (6.0-30) unstable; urgency=medium

  * Stop prefixing patch filenames with numbers.
  * Fix invalid DEP3 metadata.
  * Apply upstream fix for CAN-2026-2034440. Closes: #1142904.
    (heap out-of-bounds read in EF_IZUNIX3 extra field handler)
  * Apply upstream fix for CAN-2026-2034443. Closes: #1142905.
    (stack out-of-bounds NUL write in EF_SMARTZIP handler)
  * Drop "Rules-Requires-Root: no" (default).
  * Drop "Priority: optional" (default).
  * Update standards-version.
  * Disable redundant/duplicate Salsa CI jobs.
  * Drop no longer needed lintian override.

 -- Santiago Vila <sanvila@debian.org>  Sat, 01 Aug 2026 11:50:00 +0200

unzip (6.0-29ubuntu1) resolute; urgency=medium

  * Merge with Debian unstable (LP: #2130170). Remaining changes:
    - d/p/20-unzip60-alt-iconv-utf8.patch: add patch
      + Add patch from archlinux which adds the -O option, allowing a
        charset to be specified for the proper unzipping of non-Latin and
        non-Unicode filenames.
      + Added documentation for `-I` and `-O` options to unzip (man/unzip.1) and
        zipinfo (man/zipinfo.1) man pages (LP #138307).
      + Fixed garbled output when `zipinfo` or `unzip -Z` is called
        without arguments (LP #1429939).
    - d/t/*: add autopkgtests (LP #2023994)
    - d/p/29-fix-troff-warning.patch: removes monospace directives to fix
      troff warnings (LP #2054670)
    - d/p/30-fix-code-pages.patch: add patch
      + Fixed bit 11 of General purpose flag support on systems with UTF-8
      system charset (LP #2066389).
      + Fixed OEM code page being always assumed Russian/Cyrillic CP866 on
      any UTF-8 system.
      + Added proper OEM code page detection based on system locale setting.
      + Removed translation from ISO 8859-1 to local charset; assumption that
        any non-unicode archive uses it is for sure wrong as it can be any
        charset used on archive creator's local system; also do not treat
        PKZIP for UNIX 2.51 archives as having ISO 8859-1 charset for the
        same reasons.
      + Enabled UTF-8 output by default on Unix systems.
    - d/t/SmokeTests.py: add tests for unicode file names in different encodings
    - d/p/CVE-2021-4217.patch: add patch to fix null pointer dereference and
      use of uninitialized data.
  * Dropped patches as they were upstreamed:
    - debian/patches/handle_windows_zip64.patch

 -- Ural Tunaboyu <ural.tunaboyu@canonical.com>  Fri, 07 Nov 2025 15:39:29 +0100

unzip (6.0-29) unstable; urgency=medium

  * Ignore invalid "Total number of disks" field on Microsoft ZIP64 files.
    Closes: #661956, #1064000.
  * Drop conflicting declarations of gmtime() and localtime().
    Should fix build with gcc-15. Closes: #1098043.
  * Fix zipgrep handling of escapes. Closes: #1054628.
  * Stop using update-mime. Closes: #1072396.
  * Add debian/source/lintian-overrides for *.a files.
  * Do not trim Debian changelog.
  * Add debian/salsa-ci.yml.
  * Add Vcs-Git and Vcs-Browser fields.
  * Update Standards-Version.

 -- Santiago Vila <sanvila@debian.org>  Tue, 11 Mar 2025 16:40:00 +0100

unzip (6.0-28ubuntu7) questing; urgency=medium

  * Cherry-pick Debian fix for FTBFS with GCC 15 (LP#: #2125004)

 -- Graham Inggs <ginggs@ubuntu.com>  Fri, 19 Sep 2025 15:09:09 +0000

unzip (6.0-28ubuntu6) oracular; urgency=medium

  * SECURITY UPDATE: Null pointer dereference in unzip (LP: #1957077)
    - debian/patches/CVE-2021-4217.patch: Fix null pointer dereference and
      use of uninitialized data.
    - CVE-2021-4217

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 02 Oct 2024 09:30:34 -0400

unzip (6.0-28ubuntu5) oracular; urgency=medium

  [ Ivan Sorokin ]
  * Add 30-fix-code-pages.patch with the following fixes (LP: #2066389):
    - Fixed bit 11 of General purpose flag support on systems with UTF-8
      system charset.
    - Fixed OEM code page being always assumed Russian/Cyrillic CP866 on
      any UTF-8 system.
    - Added proper OEM code page detection based on system locale setting.
    - Removed translation from ISO 8859-1 to local charset; assumption that
      any non-unicode archive uses it is for sure wrong as it can be any
      charset used on archive creator's local system; also do not treat
      PKZIP for UNIX 2.51 archives as having ISO 8859-1 charset for the
      same reasons.
    - Enabled UTF-8 output by default on Unix systems.

  [ Dmitry Shachnev ]
  * Add tests for unicode file names in different encodings.

 -- Dmitry Shachnev <mitya57@ubuntu.com>  Tue, 11 Jun 2024 21:48:13 +0300

unzip (6.0-28ubuntu4) noble; urgency=high

  * No change rebuild for 64-bit time_t and frame pointers.

 -- Julian Andres Klode <juliank@ubuntu.com>  Mon, 08 Apr 2024 18:21:21 +0200

unzip (6.0-28ubuntu3) noble; urgency=medium

  * d/t/*: Added autopkgtest (LP: #2023994)
  * d/p/29-fix-troff-warning.patch:
    Removes monospace directives to fix troff warnings (LP: #2054670)
  * d/p/20-unzip60-alt-iconv-utf8.patch 
    * Refreshed as ab-style patch.
    * Added documentation for `-I` and `-O` options to `unzip -hh`. 
    * Added documentation for `-I` and `-O` options to unzip (man/unzip.1) and 
      zipinfo (man/zipinfo.1) man pages (LP: #138307).
    * Fixed garbled output when `zipinfo` or `unzip -Z` is called 
      without arguments (LP: #1429939).

 -- Dominik Viererbe <dominik.viererbe@canonical.com>  Thu, 22 Feb 2024 02:48:49 +0200

# For older changelog entries, run 'apt-get changelog unzip'
