ELBA-2022-12816

ELBA-2022-12816 - dpkg Bug Fix update

Type:	BUG
Severity:	NA
Release Date:	2022-01-24

Description

[1.18.25-10]
- Backport 'Finally trying correct triplet for Fedora'

[1.18.15-9]
- Remove unsupported --sort=name tar option (not available in .el7)

[1.18.25-8]
- Requires perl(MIME::Lite) on dpkg-dev (rhbz #1678637)
- Adds check section and performs unit tests but ignores failures

[1.18.25-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[1.18.25-6]
- po4a is now available on ppc64 and we can build dpkg there

[1.18.25-5]
- Revert 'Bundle a version of tar to make it compatible in EL7'
- Keep BR: perl(Digest)
- Remove --clamp-mtime option on tar of el7.
- Add Requires perl(Digest::MD5) and perl(Digest::SHA*) on dpkg-perl (#1628409)

[1.18.25-4]
- Fix conflicts with man pages on el

[1.18.25-3]
- Bundle a version of tar to make it compatible in EL7 (BZ#1626465)

[1.18.25-2]
- Rebuild with fixed binutils

[1.18.25-1]
- Update dpkg to 1.18.25
- Security fix: directory traversal via /DEBIAN symlink

[1.18.24-9]
- Requires(post): coreutils (#1598872)

[1.18.24-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
- https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot

[1.18.24-7]
- Perl 5.28 rebuild

[1.18.24-6]
- Escape macros in %changelog

[1.18.24-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.18.24-4]
- Fix minor rpmlint warnings
- Make the dependency of perl-interpreter conditional

[1.18.24-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[1.18.24-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.18.24-1]
- Update dpkg to 1.18.24

[1.18.22-3]
- Perl 5.26 rebuild

[1.18.22-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.18.22-1]
- Update dpkg to 1.18.22 (#1294258)

[1.18.15-1]
- New major release, 1.18.15, adaptations based on files of debian directory in
debian package.

[1.17.27-1]
- New upstream vesion, 1.17.27, fixes CVE-2015-0860
- Add start-stop-daemon because could be useful: https://github.com/gammu/gammu/issues/75 (RH
system not support start-stop-daemon)
- Drop dpkg-tar-invocation.patch it is already is sources.

[1.17.25-8]
- Perl 5.24 rebuild

[1.17.25-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.17.25-6]
- Following debian/libdpkg-perl.install _libexecdir/dpkg/parsechangelog moved
into dpkg-perl.
- Removed duplicated entries of _datadir/dpkg/*.mk in %files, following
debian/dpkg-dev.install now only in dpkg-dev.

[1.17.25-5]
- Fix rhbz #1271133
- Spec cleanups.

[1.17.25-4]
- Require perl(:MODULE_COMPAT_) symbol by packages that provide Perl modules

[1.17.25-3]
- call 'tar --no-recursion -T -' and not 'tar -T - --no-recursion' (#1241508)

[1.17.25-1]
- Update to 1.17.25 (Debian stable), adjustments following files
dpkg-1.17.25/debian/*.install, *.postinst, etc.
- Rebased dpkg-perl-libexecdir.patch and dpkg-perl-libexecdir.epel6.patch
- Removed old defattr tags.
- Added License tag.

[1.16.16-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.16.16-5]
- Fix build for all versions, previous try wasn't correct and back with
dpkg-perl-libexecdir.patch .
- Added dpkg-perl-libexecdir.epel6.patch just for fix epel <= 6 .
- Cleaned some trailing whitespaces.
- Use _localstatedir instead /var .

[1.16.16-4]
- Revert location of dpkg/parsechangelog .
- Fix build for all versions, including epel-6 .

[1.16.16-3]
- Better upstream URL .

[1.16.16-2]
- Some fixes and added support for epel-6 .
- Removed Patch0: dpkg-perl-libexecdir.patch .
- move %{_libdir}/dpkg/parsechangelog to archable package .

[1.16.16-1]
- Security update to 1.16.16

[1.16.15-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[1.16.15-1]
- Update to 1.16.15, fixes: CVE-2014-3864, CVE-2014-3865 , rhbz #1103026

[1.16.14-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.16.14-1]
- Update to 1.16.14, fixes CVE-2014-0471, rhbz #1092210 .

[1.16.12-1]
- Update to 1.16.12
- added /etc/dpkg/origins/... , by Oron Peled, rhbz #973832
- fix few files listed twice.

[1.16.10-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[1.16.10-7]
- Perl 5.18 rebuild

[1.16.10-6]
- add support to logrotate, by Oron Peled, rhbz #979378
- added some new %doc and debian/copyright, by Oron Peled, rhbz #979378
- rpmlint cleanups, by Oron Peled, rhbz #979378

[1.16.10-5]
- rhbz #979378
- Obsolete the old dpkg-devel.noarch (replaced by dpkg-dev)
(Obsoletes: dpkg-devel < 1.16)
- Readd to dpkg-perl: Requires: dpkg = -
- Patchset Signed-off-by: Oron Peled
- [PATCH 1/4] move dpkg.cfg from /etc to /etc/dpkg
- [PATCH 2/4] fix some pkgdatadir, pkgconfdir file locations
- [PATCH 3/4] move 'dpkg-dev.mo' files to dpkg-perl
- [PATCH 4/4] minor fix to dpkg-perl ownerships
- move from dpkg to dpkg-dev, rhbz #979378
- dpkg-mergechangelogs and its man-pages
- dpkg-buildflags and its man-pages
- remove man pages dups, also rhbz #979378
dpkg-architecture.1.gz
dpkg-buildflags.1.gz
dpkg-buildpackage.1.gz
dpkg-checkbuilddeps.1.gz
dpkg-distaddfile.1.gz
dpkg-genchanges.1.gz
dpkg-gencontrol.1.gz
dpkg-gensymbols.1.gz
dpkg-mergechangelogs.1.gz
dpkg-name.1.gz
dpkg-parsechangelog.1.gz
dpkg-scanpackages.1.gz
dpkg-scansources.1.gz
dpkg-shlibdeps.1.gz
dpkg-source.1.gz
dpkg-vendor.1.gz

[1.16.10-4]
- provided virtual -static package rhbz #967215

[1.16.10-3]
- Copied from dpkg-1.16.10/debian/dpkg.postinst, on post install, runs create_database, create_logfile.
- Based on dpkg.install and dselect.install
created some missing directories in /var/lib/dpkg and in /etc/dpkg .
- Drop Requirement dpkg of dpkg-perl.
- Fix a FIXME , all perls moved to dpkg-perl.
- TODO: set logrotates, see debian/dpkg.logrotate.

[1.16.10-2]
- apply fix by Oron Peled bug #648384, adds dpkg-perl as noarch

[1.16.10-1]
- Add BR perl-podlators for pod2man in F19 development or just BR perl
- Add some other importants BR: doxygen flex xz-devel po4a dotconf-devel
- Fix packages names which are debianized, so packages will be: dpkg-perl
and dpkg-dev (and dpkg-devel for headers of dpkg).
- Some clean ups.
- dpkg-perl must be arched.

* Sat May 04 2013 Oron Peled
- Bump version to Debian/wheezy
- Call autoreconf: make sure we don't reuse Debian packaged
stuff (config.guess, etc.)
- CVE patches not needed -- is already fixed upstream
- Removed dpkg-change-libdir.patch:
- Patching Makefile.in is wrong (can patch Makefile.am with autoreconf)
- Less patch churn for non-critical paths
- Accept /usr/lib/dpkg/parsechangelog
- Accept /usr/lib/dpkg/methods

[1.15.5.6-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

[1.15.5.6-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

[1.15.5.6-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

[1.15.5.6-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

[1.15.5.6-6]
- Fix CVE-2010-1679
- Fix CVE-2011-0402

[1.15.5.6-5]
- Apply minimal fix for rhbz #642160

[1.15.5.6-4]
- Fix CVE-2010-0396

[1.15.5.6-3]
- review changes

[1.15.5.6-2]
- review changes

[1.15.5.6-1]
- Upgrade to latest upstream
- review changes

[1.15.4.1-1]
- Upgrade to latest upstream
- review changes

[1.14.23-3]
- more review changes

[1.14.23-1]
- bump version and make some of the review changes

[1.14.20-5]
- made changes for review

[1.14.20-4]
- Change release to -4 as server refused -3

[1.14.20-3]
- split the package into dkpg, dpkg-dev & dselect

[1.14.20-2]
- recode man files to UTF8

[1.14.20-1]
- Rebuild ans add build requires ncurses-devel

[1.14.5-1]
- initial packaging

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (x86_64)	dpkg-1.18.25-10.el7.src.rpm	349f0d654bd2e9f2ea1ee2bd8812e157	-
	dpkg-1.18.25-10.el7.x86_64.rpm	e85985bf6de9cd7895336aa29358a550	-
	dpkg-dev-1.18.25-10.el7.noarch.rpm	f506a5062f8750488fb95dd92703fb8c	-
	dpkg-devel-1.18.25-10.el7.x86_64.rpm	01577eee48b4125728a3f477defa12ba	-
	dpkg-perl-1.18.25-10.el7.noarch.rpm	b5cf0e53cbb00e2afd3f7b05b706a383	-
	dselect-1.18.25-10.el7.x86_64.rpm	c85ddd4f91a4152400c759e368bdc7b1	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team