libwmf (0.2.8.4-6.2+deb6u2) squeeze-lts; urgency=medium * Non-maintainer upload by the Debian LTS team. * Add patch to fix CVE-2015-4695: meta_pen_create heap buffer overflow Thanks to Fernando Muñoz . Closes: #784205 * Add patch to fix CVE-2015-4696: wmf2gd/wmf2eps use after free Thanks to Caolán McNamara for the patch. Closes: #784192 -- Raphaël Hertzog Mon, 29 Jun 2015 12:15:30 +0200 libwmf (0.2.8.4-6.2+deb6u1) squeeze-lts; urgency=medium * CVE-2015-4588: Add RLE Decoding check Fix taken from Redhat BZ https://bugzilla.redhat.com/show_bug.cgi?id=1227243 * CVE-2015-0848: Only DecodeImage if pixel is one byte Fix taken from Redhat BZ https://bugzilla.redhat.com/show_bug.cgi?id=1227243 Closes: #787644 -- Guido Günther Fri, 19 Jun 2015 13:48:03 +0200 libwmf (0.2.8.4-6.1) unstable; urgency=high * Non-maintainer upload. * Fixed Use-after-free vulnerability in the embedded GD library (Closes: #526434) (CVE-2009-1364) -- Giuseppe Iuculano Wed, 06 May 2009 09:19:49 +0200 libwmf (0.2.8.4-6) unstable; urgency=low * Upload to unstable. -- Loic Minier Fri, 13 Apr 2007 22:04:10 +0200 libwmf (0.2.8.4-5) experimental; urgency=low * Convert the package to the new Gtk modules handling; closes: #382511. - Bump up the libgtk2.0-dev build-dep to >= 2.10.1-1. - Call dh_gtkmodules with an appropriate LD_LIBRARY_PATH. - Drop debian/postinst and debian/postrm. -- Loic Minier Wed, 21 Mar 2007 10:51:18 +0100 libwmf (0.2.8.4-4) unstable; urgency=low * Adopt for interim maintenance upon the end of the Gtk 2.10 transition; closes: #415574. * Depend on ${misc:Depends}. * For additional safety, use $(libwmf_pkg) instead of hardcoding the package name with SONAME. * Bump up Debhelper compatibility level to 5. -- Loic Minier Wed, 21 Mar 2007 10:46:43 +0100 libwmf (0.2.8.4-3) unstable; urgency=low * Orphaning. * debian/watch: Update upstream URL. -- Matej Vela Tue, 20 Mar 2007 10:10:00 +0100 libwmf (0.2.8.4-2) unstable; urgency=high * src/player.c: Fix integer overflow vulnerability. [CVE-2006-3376] Closes: #381538. -- Matej Vela Sat, 5 Aug 2006 12:15:57 +0200 libwmf (0.2.8.4-1) unstable; urgency=low * New upstream release. * Acknowledge NMU. Thanks, Daniel! Closes: #347236. * Upstream is using a recent enough libtool; leave it alone. * Build depend on libxt-dev to placate AC_PATH_X. * Conforms to Standards version 3.7.2. -- Matej Vela Sun, 23 Jul 2006 20:06:00 +0200 libwmf (0.2.8.3-3.1) unstable; urgency=low * NMU. * Update to use automake1.7, since automake1.6 was removed. Closes: #335137. -- Daniel Schepler Mon, 9 Jan 2006 16:59:46 +0100 libwmf (0.2.8.3-3) unstable; urgency=low * Update libwmf-dev dependencies: - Replace xlibs-dev with libsm-dev, libice-dev, libx11-dev. Closes: #332260. - Replace libpng12-0-dev with libpng12-dev. * debian/copyright: Update FSF address. * debian/watch: Add. * Conforms to Standards version 3.6.2. -- Matej Vela Wed, 5 Oct 2005 18:36:53 +0200 libwmf (0.2.8.3-2) unstable; urgency=low * debian/defoma: Handle missing Family hints. Closes: #301311. * Move libwmf-dev to libdevel. -- Matej Vela Fri, 25 Mar 2005 21:21:01 +0100 libwmf (0.2.8.3-1) unstable; urgency=low * New upstream release. Closes: #255979. - Uses . Closes: #220989, #224142. * Instead of relying on hardcoded paths from gsfonts, use Defoma to generate an XML fontmap. (This makes libwmf-fontmap unnecessary.) Closes: #287984. * src/font.c (wmf_ipa_font_init): Always check the generated fontmap. * src/font.c (ipa_font_add_cache): Compare cache entries by name rather than by path in order to correctly handle aliases. * Build-depend on libx11-dev rather than xlibs-dev. Closes: #247274. * Install gdk-pixbuf loader. Closes: #263911. * debian/rules: - Automatically update libtool and config.sub. Closes: #267510. - Specify build and host type to configure. - Honor DEB_BUILD_OPTIONS=noopt. * Conforms to Standards version 3.6.1. -- Matej Vela Thu, 24 Mar 2005 13:47:38 +0100 libwmf (0.2.8-1.1) unstable; urgency=low * NMU from the Minneapolis BSP. * Fixed freetype header problem, was causing FTBFS bugs in other packages. (Closes: #220989) -- Scott Dier Sat, 13 Dec 2003 19:27:27 -0600 libwmf (0.2.8-1) unstable; urgency=low * New upstream release. * Update libpng-dev build dependency to libpng12-0-dev. * Remove undocumented(7) symlinks. * Conforms to Standards version 3.5.8. -- Matej Vela Sun, 29 Dec 2002 22:24:49 +0100 libwmf (0.2.7-1) unstable; urgency=low * New upstream release. * Conforms to Standards version 3.5.7. -- Matej Vela Mon, 14 Oct 2002 20:49:18 +0200 libwmf (0.2.6-1) unstable; urgency=low * New upstream version, compiled with libpng3. Closes: #156761. * Configured to use /usr/share/fonts/type1/gsfonts in order to work with older gsfonts. Raised gsfonts to a dependency. Closes: #141203. * ltmain.sh: Use James Troup's workaround for #98342. * Switched to debhelper 4. * debian/rules: Remove `debug' support and enable `-g' by default. According to #157131, the slow down is insignificant. -- Matej Vela Mon, 26 Aug 2002 21:35:25 +0200 libwmf (0.2.2-4) unstable; urgency=high * Make libwmf-dev replace misplaced .la files in libwmf0 (<< 0.1.21-1). Closes: #144299. -- Matej Vela Sat, 27 Apr 2002 11:26:42 +0200 libwmf (0.2.2-3) unstable; urgency=high * Remove virtual library packages from build dependencies to avoid conflicts. Closes: #143900. -- Matej Vela Sun, 21 Apr 2002 18:59:24 +0200 libwmf (0.2.2-2) unstable; urgency=low * Link with expat instead of libxml2, solving some AbiWord problems. Closes: #139464. -- Matej Vela Sat, 13 Apr 2002 19:31:19 +0200 libwmf (0.2.2-1) unstable; urgency=high * New upstream version. * Hope it makes it to testing now. Closes: #117766. * Use the updated description from libwmf.spec. Closes: #111292. -- Matej Vela Sun, 11 Nov 2001 09:59:07 +0100 libwmf (0.2.1-1) unstable; urgency=low * New upstream version. * configure now puts FreeType 2 includes at the beginning; Conflicts no longer necessary. -- Matej Vela Sun, 2 Sep 2001 17:08:43 +0200 libwmf (0.2.0-1) unstable; urgency=medium * New upstream version. * src/ipa/fig/device.h: POSIX time(2) requires an argument. * Merged in previous NMU. Closes: #96017. * Updated config.guess and config.sub once again. Closes: #98336. * debian/rules: Use `dh_shlibdeps -l'. Closes: #104309. * Added {freetype[0-2],libttf}-dev to Build-Conflicts and libwmf-dev's Conflicts to avoid header mismatches (`-I/usr/include' from xml-config comes first). * Switched to debhelper 3. * Conforms to Standards version 3.5.6. -- Matej Vela Wed, 1 Aug 2001 00:50:15 +0200 libwmf (0.1.21-1.1) unstable; urgency=low * Run libtoolize to get support for new architectures. Closes: #96017 -- LaMont Jones Mon, 9 Jul 2001 21:39:34 -0600 libwmf (0.1.21-1) unstable; urgency=low * New upstream version. * Updated wmftofig.1, wmftopng.1, and xwmf.1; wrote wmftoeps.1. * debian/control: Renamed libwmf0-dev to libwmf-dev since it is unlikely that different versions will be installed at the same time. * debian/rules: Put the copyright and changelogs in libwmf0 only, and symbolic links to /usr/share/doc/libwmf0 in other packages. * Conforms to Standards version 3.2.1: * debian/rules: Added support for the `debug' build option. -- Matej Vela Sat, 6 Jan 2001 23:02:08 +0100 libwmf (0.1.16-2) unstable; urgency=low * Conforms to Standards version 3.1.0: * Installing the /usr/doc symbolic links. * debian/control: Added build dependancies. * debian/control: libwmf0-dev suggests libwmf-doc, and vice versa. -- Matej Vela Sat, 6 Nov 1999 21:56:34 +0100 libwmf (0.1.16-1) unstable; urgency=low * New upstream version. * Added a dependancy on netpbm. Closes: Bug#45448. * Applied containing libtool support (accepted by upstream). * Wrote wmftofig.1. * Conforms to Standards version 3.0.1: * Changed debian/copyright to reference `/usr/share/common-licenses/LGPL-2'. -- Matej Vela Wed, 8 Sep 1999 13:01:36 +0200 libwmf (0.1.11-1) unstable; urgency=low * New upstream version. * Conforms to Standards version 2.5.1. -- Matej Vela Thu, 3 Jun 1999 10:54:34 +0200 libwmf (0.1.10-1) unstable; urgency=low * New upstream version. -- Matej Vela Fri, 28 May 1999 18:37:13 +0200 libwmf (0.1.9-1) unstable; urgency=low * New package. -- Matej Vela Sat, 8 May 1999 22:23:58 +0200