Change logs for zsh source package in Kinetic

  • zsh (5.9-1) unstable; urgency=low
    
      * [73d31738,d4d20348,2ae4a398] Import new upstream release 5.9.
      * Retroactively set urgency=low in 5.8.1.2-test-2. This allows us to
        upload 5.9-1 to unstable with urgency=low as well.
      * [2af324df] Add patch to fix two typos in man pages found by Lintian
      * [2e260363] Drop lintian override for hardening-no-fortify-functions,
        no more needed.
      * [05e8cdc5] Declare compliance with Debian Policy 4.6.1. No further
        changes were needed.
    
     -- Axel Beckert <email address hidden>  Sun, 15 May 2022 01:20:26 +0200
  • zsh (5.8.1-1) unstable; urgency=high
    
      * [1a490c705,12eb3e53,a13f7a2b] Import new upstream security and bugfix
        release 5.8.1.
        + [c187154f,fdb8b0ce,bdc4d70a] Fixes CVE-2021-45444, a vulnerability
          in prompt expansion which could be exploited through e.g. VCS_Info
          to execute arbitrary shell commands without a user's knowledge.
        + [92d7d4dd] Refresh patches as needed. Drop cherry-picked patch with
          commit 754658af, included in upstream bugfix release.
      * [2556a97c] Drop debian/zsh-static.NEWS, zsh-static will stay. Thanks
        to those who gave feedback about our proposed zsh-static removal back
        in 2015, especially Vincent Bernat.
      * [0fbb22e7] Extend zsh-static package description to explain its use
        cases. Thanks to shirish शिरीष to make us aware of this deficency of
        the package description by asking the right questions (back in
        2015). :-)
      * [daf87c89] zsh-static: Drop dep. on zsh, recommend zsh-common instead.
      * [2f5cd2e1] Update lintian overrides wrt. to change tag formats.
      * [cf14eeb5] Add lintian override for bash-term-in-posix-shell. It's zsh
        code and it's guarded by a check if we're running zsh or not.
      * [ca06fcef] Add lintian overrides for bin-sbin-mismatch false positives.
      * [db8c6c1c] debian/zsh5: Add ${static} suffix also to alternative path
        in warning.
      * [dc50ace5] Update copyright years in debian/copyright. Thanks Lintian!
      * [e872908c] debian/copyright: Remove obsolete upstream URLs. (FTP + SF)
      * [60187dd3] debian/watch: Drop comment about FTP timeouts.
      * [34379187] Make paths in lintian overrides agnostic to upstream versions
      * [566bf8c1] Add lintian overrides for all occurrences of
        very-long-line-length-in-source-file. They're all false positives.
      * [32c07ee0] Update copyright years in debian/copyright. Thanks Lintian!
    
     -- Axel Beckert <email address hidden>  Sat, 12 Feb 2022 23:00:09 +0100