lz4 (0.0~r114-2ubuntu1+esm2) trusty-security; urgency=medium

  [ Marc Deslauriers ]
  * SECURITY UPDATE: memory corruption due to an integer overflow bug
    - debian/patches/CVE-2021-3520.patch: check outputSize in lib/lz4.c.
    - CVE-2021-3520

 -- Leonidas Da Silva Barbosa <leo.barbosa@canonical.com>  Thu, 27 May 2021 13:46:28 -0300

lz4 (0.0~r114-2ubuntu1+esm1) trusty-security; urgency=medium

  * SECURITY UPDATE: Integer overflow in the LZ4 algorithm implementation.
    - debian/patches/CVE-2014-4611.patch: Fix integer overflow. 
    - CVE-2014-4611
  * SECURITY UPDATE: Integer overflow allow attackers to cause a DoS
    (memory corruption) or possibly have unspecified other impact via a crafted
    literal run.
    - debian/patches/CVE-2014-4715-1.patch: Quickfix integer overflow.
    - debian/patches/CVE-2014-4715-2.patch: New fuzzer test.
    - debian/patches/CVE-2014-4715-3.patch: Stronger fuzzer tests.
    - debian/patches/CVE-2014-4715-4.patch: Stronger integer overflow fix and
      stronger fuzzer tests.
    - CVE-2014-4715

 -- Eduardo Barretto <eduardo.barretto@canonical.com>  Mon, 01 Apr 2019 13:41:49 -0300

lz4 (0.0~r114-2ubuntu1) trusty; urgency=medium

  * debian/patches/fix-endianness-check.patch: Include <stdlib.h> before using
    __GLIBC__.  Checking for __GLIBC__ without including a header that defines
    it doesn't work very well, so the endianness falls back to the hardcoded
    arch list, which incorrectly identifies ppc64el as big endian.

 -- William Grant <wgrant@ubuntu.com>  Mon, 14 Apr 2014 16:25:20 +0100

lz4 (0.0~r114-2) unstable; urgency=low

  * Update patches/add-support-kfreebsd.patch.
    Support programs.Makefile too.

 -- Nobuhiro Iwamatsu <iwamatsu@debian.org>  Sat, 22 Mar 2014 14:23:35 +0900

lz4 (0.0~r114-1) unstable; urgency=low

  * Snapshot, taken from the trunk (r113).
  * Remove support-library-version.patch
    Applied to upstream.
  * Update add-ldflags.patch.
  * Add patches/fix-install.patch.
    Fix install library.
  * Update symbols file.
  * Add patches/add-support-kfreebsd.patch.
    Support install on kFreeBSD.

 -- Nobuhiro Iwamatsu <iwamatsu@debian.org>  Sat, 22 Mar 2014 01:53:20 +0900

lz4 (0.0~r113-2) unstable; urgency=low

  * Update debian/control.
    - Add Conflict and Replaces field of libz4-1-dbg (Closes: #741003).
    - Update package description (Closes: #741001).

 -- Nobuhiro Iwamatsu <iwamatsu@debian.org>  Mon, 10 Mar 2014 08:34:29 +0900

lz4 (0.0~r113-1) unstable; urgency=low

  * Snapshot, taken from the trunk (r113).
  * Update debian/rules.
    - Change build tool from cmake to GNU make.
  * Update debian/control.
    - cmake from Build-Depends
    - Update Standards-Version to 3.9.5
  * Update symbols file.
  * Add patches/add-dlflags.patch.
  * Add patches/support-library-version.patch.
  * Remove old patches.
  * Change package name and install script name.
  * Add manpage of lz4.

 -- Nobuhiro Iwamatsu <iwamatsu@debian.org>  Wed, 05 Mar 2014 10:50:41 +0900

lz4 (0.0~r109-1) unstable; urgency=low

  * Snapshot, taken from the trunk (r109).

 -- Nobuhiro Iwamatsu <iwamatsu@debian.org>  Wed, 25 Dec 2013 07:26:12 +0900

lz4 (0.0~r107-1) unstable; urgency=low

  * Snapshot, taken from the trunk (r107).
  * Update patches.
  * Update symbol file.

 -- Nobuhiro Iwamatsu <iwamatsu@debian.org>  Wed, 23 Oct 2013 19:51:48 +0900

lz4 (0.0~r99-1) unstable; urgency=low

  * New upstream released.
  * Add symbols file.
  * Update debian/control.
    - Update Vcs-Git and Vcs-Browser field.

 -- Nobuhiro Iwamatsu <iwamatsu@debian.org>  Wed, 31 Jul 2013 12:28:38 +0900

lz4 (0.0~r94-2) unstable; urgency=low

  * Fix install path on 32bit build. (Closes: #710458)
    Update patches/0001-Fix-install-path.patch.
  * Remove unrecognized command line option '-march=native'. (Closes: #710459)
    Add patches/remove_optimize.

 -- Nobuhiro Iwamatsu <iwamatsu@debian.org>  Fri, 31 May 2013 14:05:43 +0900

lz4 (0.0~r94-1) unstable; urgency=low

  * Initial release. (Closes: #698256)

 -- Nobuhiro Iwamatsu <iwamatsu@debian.org>  Sat, 04 May 2013 08:31:31 +0900
