libextractor (1:1.3-4+deb9u3build0.16.04.1) xenial-security; urgency=medium

  * fake sync from Debian

 -- Mike Salvatore <mike.salvatore@canonical.com>  Mon, 23 Nov 2020 11:03:49 -0500

libextractor (1:1.3-4+deb9u3) stretch-security; urgency=high

  * Fix out-of-bounds read vulnerability in common/convert.c (Closes: #917214,
    CVE-2018-20430).
  * Fix NULL pointer dereference in OLE2 extractor (Closes: #917213,
    CVE-2018-20431).

 -- Bertrand Marc <bmarc@debian.org>  Thu, 27 Dec 2018 21:52:52 +0100

libextractor (1:1.3-4+deb9u2) stretch-security; urgency=high

  * Fix CVE-2018-14346 (Closes: #904903), a stack-based buffer overflow
    in unzip.c.
  * Fix CVE-2018-14347 (Closes: #904905), infinite loop vulnerability in
    mpeg_extractor.c.
  * Fix CVE-2018-16430 (Closes: #907987), missing 0-terminator on corrupted
    ZIP files.

 -- Bertrand Marc <bmarc@debian.org>  Sat, 08 Sep 2018 15:30:55 +0200

libextractor (1:1.3-4+deb9u1) stretch; urgency=medium

  * Fix CVE-2017-15266, CVE-2017-15267, CVE-2017-15600, CVE-2017-15601,
    CVE-2017-15602, CVE-2017-15922 and CVE-2017-17440. Leon Zhao discovered
    several security vulnerabilities, NULL Pointer Dereferences, heap-based
    buffer overflows, integer signedness errors and out-of-bounds read that
    may lead to a denial-of-service (application crash) or have other
    unspecified impact.

 -- Bertrand Marc <bmarc@debian.org>  Thu, 28 Dec 2017 11:39:33 +0100

libextractor (1:1.3-4) unstable; urgency=medium

  * Update debian/patches/ffmpeg2.9.patch with a new commit taken from upstream
    svn, to make libextractor build with FFmpeg 2.9 (Closes: #803835).
  * Standards-version: 3.9.8.
  * debian/control: use secure URI for the Vcs-* fields.

 -- Bertrand Marc <beberking@gmail.com>  Tue, 26 Apr 2016 22:57:06 +0200

libextractor (1:1.3-3) unstable; urgency=medium

  * Update long description to list the supported formats.
  * Add a patch cherry-picked from upstream to fix FTBFS with FFmpeg 2.9
    (Closes: #803835).
  * Add a patch cherry-picked from upstream to support GIF 5.1
    (Closes: #803282).
  * debian/control: pre-depends on ${misc:Pre-Depends} instead of
    multiarch-support.
  * Standards-version: 3.9.6.

 -- Bertrand Marc <beberking@gmail.com>  Sun, 15 Nov 2015 17:12:45 +0100

libextractor (1:1.3-2) unstable; urgency=medium

  * Build-depend on libmagic-dev and libavresample-dev to enable additional
    plugins, thanks to Andreas Cadhalpun and update libexctractor3.symbols
    accordingly (Closes: #755810).
  * Build-depend on libjpeg-dev instead of libjpeg8-dev, thanks to Ondřej Surý
    (Closes: #763478).

 -- Bertrand Marc <beberking@gmail.com>  Tue, 30 Sep 2014 22:56:51 +0200

libextractor (1:1.3-1) unstable; urgency=medium

  * Make uscan check the archive signature:
    + add the upstream key to debian/upstream-signing-key.pgp.
    + add the binary key to debian/source/include-binaries.
    + add pgpsigurlmangle to debian/watch.
  * Imported Upstream version 1.3.
  * Standards version 3.9.5:
    + remove dependency on dpkg (>= 1.15.4) | install-info.
  * Build-depend on libtiff-dev instead of libtiff4-dev (Closes: #736021).
  * Add a missing build-dependency on texinfo.

 -- Bertrand Marc <beberking@gmail.com>  Sun, 19 Jan 2014 09:54:16 +0100

libextractor (1:1.2-1) unstable; urgency=low

  * Imported Upstream version 1.2

 -- Bertrand Marc <beberking@gmail.com>  Mon, 28 Oct 2013 11:53:20 +0100

libextractor (1:1.1-1) unstable; urgency=low

  * Imported Upstream version 1.1 (Closes: #690095).
  * Move the git repository to collab-maint.
  * Remove the underscore_in_plugin_path patch, included upstream.
  * debian/control: Update build dependencies according to README.
  * debian/rules: remove override_dh_configure to enable all plugins.
  * Merge libextractor and libextractor-plugins. Keeping them separated is
    difficult to maintain and does not worth it.
  * debian/rules: remove .a files.
  * debian/rules: remove useless override_dh_builddeb.
  * debian/control: remove duplicate section field.
  * Add a symbols file for libextractor3.
  * Remove useless debian/source/options.
  * Standards version 3.9.4.
  * debian/copyright: the licence is now GPL-3+, update years.

 -- Bertrand Marc <beberking@gmail.com>  Sat, 13 Jul 2013 11:19:57 +0200

# For older changelog entries, run 'apt-get changelog libextractor3'
