p7zip (16.02+dfsg-6) unstable; urgency=medium

  * Replace 13-CVE-2017-17969.patch with a version used by recent security
    update for stretch, which add a range check for another counter variable.

 -- Robert Luberda <robert@debian.org>  Mon, 05 Feb 2018 20:27:45 +0100

p7zip (16.02+dfsg-5) unstable; urgency=medium

  * Hopefully fix ZIP Shrink: Heap Buffer Overflow (CVE-2017-17969). Thanks
    to Antoine Beaupré for the initial patch, based on upstream changes in
    7Zip 18.00.beta (closes: #888297).
  * Fix `deprecated use of operator++ on bool variable' g++ warning.
  * Fix a typo in man page introduced in 09-man-update.patch
    (closes: #873943).
  * Bump debhelper's compat level to 11.
  * Use 'https' URL in debian/watch (lintian).
  * Standards-Version: 4.1.3.

 -- Robert Luberda <robert@debian.org>  Sun, 28 Jan 2018 23:32:37 +0100

p7zip (16.02+dfsg-4) unstable; urgency=medium

  * Fix a typo in p7zip script that prevented the `--keep' option from working
    completely (closes: #868238).
  * Bump debhelper's compat level to 10.
  * Standards-Version: 4.0.0.

 -- Robert Luberda <robert@debian.org>  Sat, 15 Jul 2017 07:46:41 +0200

p7zip (16.02+dfsg-3) unstable; urgency=medium

  * Remove `-pie' from hardening options (closes: #859442).

 -- Robert Luberda <robert@debian.org>  Mon, 10 Apr 2017 23:29:04 +0200

p7zip (16.02+dfsg-2) unstable; urgency=medium

  * Apply upstream patch to fix nullptr dereference (CVE-2016-9296)
    (closes: #844344).

 -- Robert Luberda <robert@debian.org>  Sat, 19 Nov 2016 08:52:29 +0100

p7zip (16.02+dfsg-1) unstable; urgency=low

  * New upstream version.
  * Remove no longer needed patches introduced in the previous upload.

 -- Robert Luberda <robert@debian.org>  Mon, 15 Aug 2016 12:52:33 +0200

p7zip (15.14.1+dfsg-2) unstable; urgency=high

  * Fix the heap buffer overflow in HFS handler (CVE-2016-2334) and
    out of bounds read in UDF handler (CVS-2016-2335) using patches from
    https://sourceforge.net/p/p7zip/discussion/383043/thread/9d0fb86b/
    (closes: #824160).

 -- Robert Luberda <robert@debian.org>  Sun, 15 May 2016 11:35:38 +0200

p7zip (15.14.1+dfsg-1) unstable; urgency=low

  * New upstream version.
  * Add CPP/ANDROID/Lzham/obj/* that contains some pre-compiled object
    files to Files-Excluded in debian/copyright.
  * Remove no longer needed patches: CVE-2015-1038.patch, 06-s390.patch,
    07-endian-detection.patch, 08-mips.patch, and refresh other patches.
  * Standards-Version: 3.9.8.

 -- Robert Luberda <robert@debian.org>  Sat, 16 Apr 2016 22:46:11 +0200

p7zip (15.09+dfsg-4) unstable; urgency=low

  * Upload to unstable.
  * Mention in README.Debian that p7zip-full is needed for 7z archives
    compressed with PPMD method (closes: #693509).
  * Replace `7z' with `7zr' in the short description of p7zip to make
    in consistent with the description of p7zip-full (closes: #636664).
  * Switch Vcs-Git to https, and Vcs-Browser to cgit.

 -- Robert Luberda <robert@debian.org>  Sun, 13 Mar 2016 09:54:38 +0100

p7zip (15.09+dfsg-3) experimental; urgency=low

  * Refactor and enhance the p7zip wrapper script:
    + update the p7zip script to the version from the contrib directory;
    + make it call either 7za or 7zr command, whichever one is available;
    + remove `if [ "$?" != 0 ]' statements, as they won't work with `set -e';
    + use the standard error for reporting;
    + implement the --stdout, --force, --keep options (closes: #656340,
      LP: #220646, #259239)
    + update p7zip(1) man page to shortly describe new options and give more
      details about the script's behavior.

  * Make p7zip-full package depend on p7zip package to have the p7zip command
    available for the users of p7zip-full (LP: #1156460):
    + add necessary Depends, Breaks and Replaces;
    + convert /u/s/d/p7zip-full into a symlink to /u/s/d/p7zip;
    + install the html documentation into p7zip-full only and update
      02-man.patch to mention that.

  * Add 09-man-update.patch in order to:
    + update man pages based on the current usage output of the commands;
    + remove references to the -p{Password} option from the 7zr(1), as the
      command does not support it (LP: #558609);
    + mention in 7z(1) that 7z might be slower than 7za (closes: #636667);
    + reword "the highest compression ratio" phrase to make it referring
      to the 7z format instead of the 7z programs (closes: #636179).
  * Reword the packages' descriptions and p7zip(1) man page similarly.

  * Do not install documentation from fm sub-directory (which describes
    Windows GUI not available in Debian); skip license.htm as well (to make
    lintian happy).
  * Add 10-drop-fm-doc.patch to remove from the html documentation references
    to files mentioned in the previous entry. Also strip in the documentation
    the .exe extension from 7z commands (LP: #181402).
  * No longer install ChangeLog.gz to changelog.gz symlink.
  * Replace duplicated style.css files with symlinks.
  * Register html documentation in the doc-base system.
  * Add 11-README-no-instructions.patch to remove build instructions from the
    README file.
  * Acknowledge the 9.20.1~dfsg.1-4.1 NMU (closes: #788734).
  * Close Ubuntu's 'newer version available' report (LP: #1414569).
  * Bump Standards-Version to 3.9.7.
  * Add lintian override for a spelling typo in a word used as a proper name.
  * Update README.Debian and add a NEWS entry for the dependency changes.

 -- Robert Luberda <robert@debian.org>  Sun, 06 Mar 2016 16:58:28 +0100

# For older changelog entries, run 'apt-get changelog p7zip'
