htmldoc (1.9.11-4+deb11u3) bullseye; urgency=medium
* CVE-2022-24191
Infinite loop in the gif_read_lzw function can lead to a
pointer arbitrarily pointing to heap memory and resulting
in a buffer overflow.
* CVE-2022-27114
Integer Overflow bugs in image.cxx, malloc function may
return a heap block smaller than the expected size, and
it will cause a buffer overflow/Address boundary error in
the jpeg_read_scanlines function.
* CVE-2022-28085
A heap buffer overflow in the function pdf_write_names
in ps-pdf.cxx may lead to arbitrary code execution and
Denial of Service (DoS).
-- Håvard Flaget Aasen Sun, 15 May 2022 10:13:03 +0200
htmldoc (1.9.11-4+deb11u2) bullseye; urgency=medium
* Non-maintainer upload by the LTS Team.
* CVE-2022-0534
A crafted GIF file could lead to a stack out-of-bounds read,
which could result in a crash (segmentation fault).
-- Thorsten Alteholz Fri, 25 Feb 2022 22:03:02 +0100
htmldoc (1.9.11-4+deb11u1) bullseye; urgency=medium
* Add patch from upstream to fix CVEs:
CVE-2021-40985, CVE-2021-43579.
-- Håvard Flaget Aasen Mon, 15 Nov 2021 17:13:36 +0100
htmldoc (1.9.11-4) unstable; urgency=medium
* Add patches to fix many CVE's. Closes: #989437
Fix: CVE-2021-23158, CVE-2021-23165, CVE-2021-23180, CVE-2021-23191,
CVE-2021-23206, CVE-2021-26252, CVE-2021-26259, CVE-2021-26948.
* Switch to DEP-14 layout
-- Håvard Flaget Aasen Thu, 03 Jun 2021 21:29:16 +0200
htmldoc (1.9.11-3) unstable; urgency=medium
* Add patch to mitigate buffer-overflow caused by integer-overflow in
image_load_gif() Closes: #984765 and fixes CVE-2021-20308
-- Håvard Flaget Aasen Mon, 10 May 2021 16:10:41 +0200
htmldoc (1.9.11-2) unstable; urgency=medium
* Update build-dependency to libfltk1.3-dev Closes: #982276
-- Håvard Flaget Aasen Mon, 08 Feb 2021 15:46:44 +0100
htmldoc (1.9.11-1) unstable; urgency=medium
* New upstream release.
* New maintainer Closes: #854222
* d/control: Update Standards-Version to 4.5.1
* d/upstream/metadata:
- Update Bug-Submit
- Drop deprecated fields
* d/patches
- Append .patch to patches
- New patch to make documentation be encoded with utf8
* d/copyright
- Update years
- Include myself under debian/*
- Update copyright notice for png/*
- Update copyright notice for htmldoc/http*
* d/htmldoc-common.install: Include folder with desktop icons
-- Håvard Flaget Aasen Mon, 28 Dec 2020 09:16:07 +0100
htmldoc (1.9.8-2) unstable; urgency=medium
* QA upload.
[ Niels Thykier ]
* Bump debhelper-compat to 13.
[ Helmut Grohne ]
* Mark htmldoc Multi-Arch: foreign. (Closes: #920494)
-- Niels Thykier Thu, 16 Apr 2020 21:16:16 +0000
htmldoc (1.9.8-1) unstable; urgency=medium
* QA upload.
* New upstream release
* Remove 0007-CVE-2019-19630.patch, applied upstream
* Update Standards-Version to 4.5.0
* Remove d/gbp.conf and salsa-ci-yml, not needed.
* Update copyright year in d/copyright
-- Håvard Flaget Aasen Sat, 04 Apr 2020 19:27:17 +0200
htmldoc (1.9.7-1) unstable; urgency=medium
* QA upload
* New upstream version 1.9.7
* Add patch to fix a buffer underflow issue with GCC on Linux.
- Fixes: CVE-2019-19630
* Change debian/compat to debhelper-compat
* Update Standards-Version to 4.4.1
* Update patches
* Bump dh to 12
-- Håvard Flaget Aasen Sun, 22 Dec 2019 00:13:14 +0100
htmldoc (1.9.3-1) unstable; urgency=medium
* QA upload.
* New upstream release.
* Drop patches applied upstream.
* Drop debian/clean, which is no longer required.
* Bump Standards-Version to 4.1.4.
-- Reiner Herrmann Wed, 11 Apr 2018 20:04:27 +0200
htmldoc (1.9.2-2) unstable; urgency=medium
* QA upload.
[ Reiner Herrmann ]
* Remove operating system check during .desktop installation, to install
.desktop and related files also on non-Linux systems.
[ Helmut Grohne ]
* Do not build documentation during arch-only build. (Closes: #894627)
-- Reiner Herrmann Tue, 03 Apr 2018 18:28:27 +0200
htmldoc (1.9.2-1) unstable; urgency=medium
* QA upload.
* New upstream release. (Closes: #738050)
- support for UTF-8 input files (Closes: #355044)
- support for ndash and mdash entities (Closes: #351447)
- fix for incorrect Ubuntu patch that broke pdf links (LP: #1662226)
* Update upstream homepage. (Closes: #854256)
* Update watch file to new location.
* Add upstream signing key.
- check signature with uscan
* Add upstream metadata file.
* Refresh patches and drop upstream applied ones.
* Convert d/rules to dh-based build.
- enable all hardening options
* Replace OpenSSL build dependency with GnuTLS
- upstream dropped OpenSSL support
* Drop obsolete menu file.
* Drop old README.Debian.
* Drop unused htmldoc.overrides.
* Add several build-related patches and minor cleanup/improvements.
* Register documentation at doc-base.
* Convert debian/copyright to copyright format 1.0.
* Mark htmldoc-common as Multi-Arch: foreign.
-- Reiner Herrmann Tue, 27 Mar 2018 18:22:33 +0200
htmldoc (1.8.27-9) unstable; urgency=medium
* QA upload.
* Set maintainer to the QA group.
* Comment out VCS -- 503-compliant.
* Comment out Homepage -- taken over by a dissertation fraudster.
* Make errors during build fatal. Closes: #876250.
* Drop ancient Replaces/Conflicts.
* dh 11.
* R³.
-- Adam Borowski Sun, 04 Feb 2018 01:28:08 +0100
htmldoc (1.8.27-8) unstable; urgency=low
* Use dpkg-buildflags if available.
* Update Standards-Version.
-- Jeff Licquia Sun, 06 May 2012 21:17:09 -0400
htmldoc (1.8.27-7) unstable; urgency=low
* Add patch from upstream bug tracker to fix libpng 1.5 builds.
Closes: #650562.
-- Jeff Licquia Sun, 04 Dec 2011 22:44:12 -0500
htmldoc (1.8.27-6) unstable; urgency=low
* Add build-arch and build-indep to debian/rules per the
(potential?) release goal for wheezy.
* Update Standards-Version.
-- Jeff Licquia Mon, 21 Nov 2011 10:47:20 -0500
htmldoc (1.8.27-5) unstable; urgency=low
* Acknowledge and pull in security team NMU. Closes: #537637.
* Switch to 3.0 (quilt) source format, and separate patches.
* Tweak build system to produce more useful information on build
failures.
* Build-Depend on libxpm-dev to fix a FTBFS with newer X11 dev packages.
Closes: #554803.
* Fix lintian warnings.
-- Jeff Licquia Sun, 20 Feb 2011 12:58:34 -0500
htmldoc (1.8.27-4.1) unstable; urgency=high
* Non-maintainer upload by the testing Security Team.
* Fixed CVE-2009-3050: Stack-based buffer overflow when setting custom page
output size (Closes: #537637)
-- Giuseppe Iuculano Tue, 06 Oct 2009 23:11:59 +0200
htmldoc (1.8.27-4) unstable; urgency=low
* Add watch file.
* Update Standards-Version.
* Fix Homepage to work in browsers that don't automatically try
the "www" prefix on bare domains. Closes: #504322.
* Update debhelper compatibility version.
-- Jeff Licquia Sun, 29 Mar 2009 22:49:56 -0400
htmldoc (1.8.27-3) unstable; urgency=low
* Add Homepage and Vcs-* fields in debian/control.
* Update Standards-Version.
* Fix missing figures in HTML documentation. Closes: #412354.
* Miscellaneous lintian cleanups.
-- Jeff Licquia Sun, 20 Jan 2008 20:48:50 -0500
htmldoc (1.8.27-2) unstable; urgency=low
* Make sure we can upgrade from earlier versions of htmldoc, with
the man page move. Closes: #388809.
-- Jeff Licquia Mon, 25 Sep 2006 08:07:07 -0400
htmldoc (1.8.27-1) unstable; urgency=low
* New upstream version.
* Fix priority.
* Move man page to htmldoc-common.
-- Jeff Licquia Sun, 3 Sep 2006 14:21:46 -0400
htmldoc (1.8.26-1) unstable; urgency=low
* New upstream version.
* Fix the man page to report the proper charset parameters.
Closes: #340473.
* We now seem to be able to handle PNG images without crashing.
Closes: #257427.
* Update Standards-Version.
-- Jeff Licquia Sat, 19 Aug 2006 16:05:49 -0400
htmldoc (1.8.25-1) unstable; urgency=low
* New upstream version. Closes: #346067.
* Upstream fix for headers/footers. Closes: #230980.
* Upstream fix for 64-bit segfaults. Closes: #351569.
-- Jeff Licquia Mon, 6 Feb 2006 20:01:09 -0500
htmldoc (1.8.24-2) unstable; urgency=low
* Add Replaces/Conflicts to aid upgrades from before the package
split. Closes: #320840.
-- Jeff Licquia Tue, 2 Aug 2005 18:37:53 -0500
htmldoc (1.8.24-1) unstable; urgency=low
* New upstream version... Closes: #291704.
* ...which does proper typecasting on char array indexes.
Closes: #222204.
* Thanks to all the NMUs. Closes: #196882, #241101, #300460.
* Rebuilt with new C++. Closes: #318460.
* Fix build dependencies to not require specific versions of the
JPEG and PNG libraries.
* Fix debian/docs so we don't have to list docs/* individually.
* Set bindir on install rule.
* Enable OpenSSL support. Closes: #281791.
* Fix somewhat confusing URI in man page. Closes: #279846.
* Split /usr/share/htmldoc and documentation into a separate
htmldoc-common package. Closes: #233375.
-- Jeff Licquia Sun, 17 Jul 2005 10:28:53 +0000
htmldoc (1.8.23-1.3) unstable; urgency=high
* Non-maintainer upload.
* Closes: #300460 (htmldoc: segfault when generating ps or pdf), using
patch by Mark Hymers .
* urgency=high since it is an RC bug.
-- Lars Wirzenius Sun, 3 Apr 2005 17:01:00 +0300
htmldoc (1.8.23-1.2) unstable; urgency=high
* NMU sent in delayed queue
* Closes: #241101 "segfault when generating ps or pdf"
* urgency high since it is a RC bug
-- Ludovic Rousseau Fri, 30 Jul 2004 22:02:10 +0200
htmldoc (1.8.23-1.1) unstable; urgency=low
* NMU in accordance with Jeff.
* Rebuild for current sid (Closes: #196882).
-- Yann Dirson Thu, 20 Nov 2003 17:16:47 +0100
htmldoc (1.8.23-1) unstable; urgency=low
* New upstream version. Closes: #192807.
* Rebuilt against new libfltk. Closes: #192794.
* Updated Standards-Version.
* Updated copyright file.
* Fixed a minor problem in the Description field of debian/control.
-- Jeff Licquia Sat, 10 May 2003 15:19:07 -0500
htmldoc (1.8.22-3) unstable; urgency=low
* Rebuilt with g++ 3.2 and latest libfltk1.1. Closes: #176145.
-- Jeff Licquia Sun, 23 Feb 2003 14:53:36 -0500
htmldoc (1.8.22-2) unstable; urgency=low
* By request of the FLTK maintainer, build with libfltk1.1 now.
Closes: #166564.
* Tell dh_installdocs to not munge the package scripts, so the
compatibility symlink goes away.
-- Jeff Licquia Tue, 29 Oct 2002 01:12:36 -0500
htmldoc (1.8.22-1) unstable; urgency=low
* New upstream version. Closes: #164660.
* Build with libpng3 now.
* Send usage output to stderr. Closes: #156961.
-- Jeff Licquia Sun, 27 Oct 2002 01:34:48 -0500
htmldoc (1.8.20-1) unstable; urgency=low
* New upstream version. Closes: #144478.
-- Jeff Licquia Mon, 17 Jun 2002 11:52:44 -0500
htmldoc (1.8.17-2) woody-proposed-updates; urgency=high
* Fixed bug in configure.in; --without-openssl-* wasn't recognized.
Considered high priority because the previous version of htmldoc is
linked against OpenSSL because of this bug, which is a violation of
the GPL.
-- Jeff Licquia Mon, 17 Jun 2002 11:37:31 -0500
htmldoc (1.8.17-1) unstable; urgency=low
* New upstream version.
* Rebuilt to fix JPEG problems. Closes: #95464, #98633.
-- Jeff Licquia Sun, 20 Jan 2002 15:02:22 -0500
htmldoc (1.8.14-1) unstable; urgency=low
* New upstream version.
* Updated Debian policy issues.
* libfltk1 apps no longer require svgalib. Closes: #59807.
-- Jeff Licquia Mon, 17 Sep 2001 23:48:48 -0500
htmldoc (1.8.13-0.1) unstable; urgency=low
* Non maintainer upload.
* New upstream version. Closes: Bug#87142
* Fix Build-Depends
* Modify configure.in and configure to remove OpenSSL support for now
-- Wichert Akkerman Thu, 5 Jul 2001 15:54:36 +0200
htmldoc (1.8.4-1.1) unstable; urgency=low
* Non maintainer upload.
* Rebuilt against current sid to fix the undefined symbol when
running htmldoc (closes: #88273).
* debian/control: Add Build-Depends.
* debian/rules: Don't call dh_suidregister anymore since it is
obsolete.
-- Torsten Landschoff Sat, 7 Apr 2001 21:40:12 +0200
htmldoc (1.8.4-1) unstable; urgency=low
* New upstream version.
* Removed changes to link with OpenGL - upstream has fixed the problem.
* Added Debian menu support.
* Set to dynamically link with libjpeg, libpng, and libz, instead of
using the versions provided in the source.
-- Jeff Licquia Mon, 17 Jan 2000 22:49:51 -0600
htmldoc (1.7-3) unstable; urgency=low
* Added -lGL to configure.in to restore the GUI, since FLTK started
using OpenGL. (closes bug #51165)
-- Jeff Licquia Sun, 28 Nov 1999 22:00:15 -0600
htmldoc (1.7-2) unstable; urgency=low
* /usr/doc -> /usr/share/doc.
-- Jeff Licquia Sat, 30 Oct 1999 13:47:33 -0500
htmldoc (1.7-1) unstable; urgency=low
* Initial Release.
-- Jeff Licquia Wed, 16 Jun 1999 17:44:13 -0500