libextractor (1:1.9-3) unstable; urgency=medium

  * Import patch from upstream to fix build with libexiv2-27, thanks
    to Peter Green (Closes: #950171).
  * Standards-version: 4.5.0, no changes needed.
  * Move debhelper compat to version 12:
    + debian/control: build-depends on debhelper-compat (=12).
    + debian/control: remove build-dep on dh-autoreconf.
    + debian/rules: remove --with autoreconf.
    + debian/rules: replace dh_install --fail-missing with dh_missing.
    + remove debian/compat.
  * debian/rules: remove old dbgsym-migration.

 -- Bertrand Marc <bmarc@debian.org>  Sat, 29 Feb 2020 15:50:38 +0100

libextractor (1:1.9-2) unstable; urgency=high

  * Add a patch from upstream to fix heap-based buffer over-read
    (Closes: #935553, CVE-2019-15531).

 -- Bertrand Marc <bmarc@debian.org>  Sat, 31 Aug 2019 17:47:24 +0200

libextractor (1:1.9-1) unstable; urgency=medium

  * New upstream version 1.9.
  * Remove CVE-2018-20430.patch and CVE-2018-20431.patch, applied upstream.
  * Standards-version: 4.4.0, no changes needed.
  * Unused symbols are now hidden, removing them from symbols file.

 -- Bertrand Marc <bmarc@debian.org>  Thu, 15 Aug 2019 17:57:55 +0200

libextractor (1:1.8-2) unstable; urgency=high

  * Fix out-of-bounds read vulnerability in common/convert.c (Closes: #917214,
    CVE-2018-20430).
  * Fix NULL pointer dereference in OLE2 extractor (Closes: #917213,
    CVE-2018-20431).
  * Standards-version: 4.3.0, no changes needed.

 -- Bertrand Marc <bmarc@debian.org>  Thu, 27 Dec 2018 19:45:49 +0100

libextractor (1:1.8-1) unstable; urgency=medium

  [ Ondřej Nový ]
  * d/changelog: Remove trailing whitespaces.

  [ Bertrand Marc ]
  * Update debian/watch to version 4.
  * New upstream version 1.8.
  * Remove debian/patches, included upstream.
  * debian/copyright: update years.
  * Add the Build-Depends-Package field to libextractor3.symbols.
  * debian/control: remove conflicts, breaks and replace from pre-oldstable.

 -- Bertrand Marc <bmarc@debian.org>  Tue, 27 Nov 2018 12:07:53 +0100

libextractor (1:1.7-1) unstable; urgency=medium

  * New upstream version 1.7:
    + fix stack-buffer-underflow (Closes: #904903, CVE-2018-14346).
    + fix infinite loop in extract (Closes: #904905, CVE-2018-14347). 
    + fix build with FFmpeg 4.0 (Closes: #888373).
  * Move the package to salsa and update Vcs-browser and Vcs-git accordingly.
  * Remove build-dependency on mp4v2, as the plugin is not working anyway.
  * Remove CVE-2017-15922.patch and CVE-2017-17440.patch, included upstream.
  * Add a patch to fix missing 0-terminator on corrupted ZIP files
    (Closes: #907987, CVE-2018-16430).
  * Standards-version: 4.2.1.

 -- Bertrand Marc <bmarc@debian.org>  Sun, 09 Sep 2018 07:15:53 +0200

libextractor (1:1.6-2) unstable; urgency=medium

  * Add patches from upstream to fix CVE-2017-15922 (Closes: #880016) and
    CVE-2017-17440 (Closes: #883528).
  * Standards-version: 4.1.3.

 -- Bertrand Marc <bmarc@debian.org>  Thu, 28 Dec 2017 18:10:52 +0100

libextractor (1:1.6-1) unstable; urgency=medium

  * New upstream version 1.6: fixes CVE-2017-15266, CVE-2017-15267,
    CVE-2017-15600, CVE-2017-15601, CVE-2017-15602 (Closes: #878314).
  * Standards-version: 4.1.1.
  * Use https instead of ftp in debian/watch.

 -- Bertrand Marc <bmarc@debian.org>  Sat, 21 Oct 2017 19:21:55 +0200

libextractor (1:1.4-1) unstable; urgency=medium

  * debian/control: fix Vcs-git and Vcs-browser fields.
  * Use my @debian.org address for the maintainer field and in debian/copyright.
  * Migrate from a manual "-dbg" package to an automatic generated debug symbol
    package:
    + debian/control: remove libextractor-dbg.
    + debian/rules: use --dbgsym-migration in override_dh_strip.
  * Make libextractor3 and libextractor-dev multiarch: same.
  * Use an armored upstream signing key and add the new upstream key in
    debian/upstream/signing-key.asc.
  * New upstream version 1.4.
  * debian/copyright:
    + use copyright format 1.0.
    + update years.
  * Standards-version: 4.1.0.
  * Remove ffmpeg2.9 and libgiflib5.1 patches, applied upstream.
  * Add one new symbol to debian/libextractor3.symbols.
  * Add a patch updating m4/ax_create_pkgconfig_info.m4 to fix libextractor.pc,
    thanks to Sven Joachim (Closes: #876554).

 -- Bertrand Marc <bmarc@debian.org>  Sun, 24 Sep 2017 09:26:18 +0200

libextractor (1:1.3-4) unstable; urgency=medium

  * Update debian/patches/ffmpeg2.9.patch with a new commit taken from upstream
    svn, to make libextractor build with FFmpeg 2.9 (Closes: #803835).
  * Standards-version: 3.9.8.
  * debian/control: use secure URI for the Vcs-* fields.

 -- Bertrand Marc <beberking@gmail.com>  Tue, 26 Apr 2016 22:57:06 +0200

# For older changelog entries, run 'apt-get changelog libextractor3'
