rzip (2.1-2ubuntu0.16.04.1) xenial-security; urgency=medium

  * SECURITY UPDATE: Heap buffer overflow (integer overflow)
    - debian/patches/CVE-2017-8364.patch: Fix heap buffer overflow by
      allocating a large enough bufferPatch taken from the OpenSUSE leap
      42.2 package.
    - CVE-2017-8364

 -- Mike Salvatore <mike.salvatore@canonical.com>  Thu, 29 Nov 2018 12:21:05 -0500

rzip (2.1-2) unstable; urgency=low

  [ Daniel Echeverry ]
  * QA upload.
  * Switch compat level 4 to 9.
  * Switch to dpkg-source 3.0 (quilt) format. Closes: #664444
  * Add debian/watch
  * debian/control
    + Set QA team as Maintainer
    + Remove dpatch in B-D
    + Add ${misc:Depends}. Closes: #715176
    + Add Homepage field
    + Bump Standards-Version to 3.9.4
    + Bump debhelper to 9 in B-D
  * debian/patches
    + Add 60fix_manpage.diff
      + Fix hyphen-used-as-minus-sign lintian warning
      + Fix some typos. Closes: #355835
    + Add description in 50fhs.patch
    + Add 70hardeningflags.diff
      + Add CPPFLAGS, CFLAGS and LDFLAGS to use hardening flags
  * debian/copyright
    + Update to DEP5 copyright format 1.0
  * debian/rules
    + Use new-style dh format
  * Add debian/rzip.clean
    + Clean up generate and build files

  [ Ryan Kavanagh ]
  * Remove Makefile and config.h on clean

 -- Daniel Echeverry <epsilon77@gmail.com>  Wed, 14 Aug 2013 21:46:23 -0500

rzip (2.1-1) unstable; urgency=low

  * New upstream fixes a bug that prevented some files from being
    uncompressed.  Closes: #353109.
  * The man page in the previous version incorrectly stated the default
    compression level; this was a mistake while backporting changes for 2.0-2.
    The patch with the error has been removed and the man page again correctly
    states the default compression level (-6).  Closes: #299327.
  * 10mod_time.dpatch from David Frey: preserve modification times.  Closes:
    #315382.
  * 20long-options.dpatch: implement GNU-style long options.  Closes: #297701.
  * 30man_spelling corrects a spelling error.  Spotted by A Costa.  Closes:
    #355835.
  * 40runzip.dpatch: link rzip to runzip as the bzip2 and gzip packages do.
    Closes: #319158.
  * 50fhs.dpatch: Don't install man pages into /usr/man.
  * Update standards version.
  * Provide a more enlightening description of rzip in debian/control.
  * Fixup copyright file to correctly attribute copyrights for md4.* and
    rzip.c.

 -- Alec Berryman <alec@thened.net>  Tue, 11 Apr 2006 23:28:05 +0100

rzip (2.0-2) unstable; urgency=medium

  * Fix to enable decompression of large sparsely-populated files
    (backported from CVS).  Closes: #265200

 -- Alec Berryman <alec@thened.net>  Sat, 21 Aug 2004 14:16:40 -0400

rzip (2.0-1) unstable; urgency=low

  * Initial packaging.  Closes: #236690

 -- Alec Berryman <alec@thened.net>  Sat, 10 Jul 2004 20:16:33 -0400

