document changes between 5.1 and 5.2
Signed-off-by: Eli Schwartz <eschwartz@archlinux.org>
This commit is contained in:
Eli Schwartz
parent
b05a3c10bf
commit
9ddd0be027
1 changed files with 116 additions and 0 deletions
116
NEWS
116
NEWS
|
|
@ -1,5 +1,121 @@
|
|||
VERSION DESCRIPTION
|
||||
-----------------------------------------------------------------------------
|
||||
5.2.0 - completely remove delta support (CVE-2019-18183)
|
||||
- add support to pacman and pacman-key for downloading PGP
|
||||
signing keys using the WKD protocol (FS#63171)
|
||||
- completely remove the --force option
|
||||
- renovate and simplify the UI for -F (FS#47949)
|
||||
- hooks: rename type File to Path, for accuracy
|
||||
- add the meson build system as an alternative to autotools, and
|
||||
distribute it in autotools dist tarballs
|
||||
- switch from system() to exec() when using alternative download
|
||||
agents for XferCommand; this prevents a potential source of
|
||||
shell injection (CVE-2019-18182)
|
||||
- ignore .hook suffix when sorting libalpm hooks
|
||||
- update the minimum requirement of bash to 4.4
|
||||
- scripts: pass on options such as set -x to child processes
|
||||
- show group and installed status during -Fs
|
||||
- user-visible log when validity check fails due to access
|
||||
- port pactest to python3
|
||||
- process --needed before group selection when resolving the
|
||||
dependencies to prompt for (FS#22870)
|
||||
- don't error when a group exists but all packages are ignored
|
||||
- bash completion now completes when it should, and doesn't
|
||||
complete when it shouldn't (FS#59965)
|
||||
- improve error message when gpg support is missing (FS#60880)
|
||||
- don't emit confusing errors when a package is simultaneously
|
||||
replaced and upgraded (FS#50875, FS#55534)
|
||||
- better warning message when skipping duplicate targets
|
||||
(FS#49377)
|
||||
- libalpm: parse {check, make}depends when reading database
|
||||
(FS#60347)
|
||||
- add [ignored] to -Qu output for packages in repos that are not
|
||||
Usage = Upgrade (FS#59854)
|
||||
- prevent 301 redirect loop from hanging libalpm
|
||||
- use standard, consistent units in the download progress
|
||||
(FS#59201)
|
||||
- fix segfault when Usage is specified without a value
|
||||
- include timezones in pacman.log
|
||||
- bash-completion: use POSIX character classes for portability
|
||||
- correctly report a download failiure for 404s
|
||||
- fix handling of signals during SIGSEGV
|
||||
- fix buffer overread in pacman/callback
|
||||
- fix crash when downloading files with a Content-Disposition
|
||||
that has no directory component
|
||||
- pacman-conf, testpkg are now properly localized
|
||||
- when -F returns zero results, set a failing exit code
|
||||
- improve wording for the error message when a package cannot be
|
||||
removed due to dependencies
|
||||
- fix segfaults and other incorrect behavior when using -Qip if
|
||||
pacman was compiled without GPGME support
|
||||
- makepkg:
|
||||
- implement extendable source/signature verification routines
|
||||
within libmakepkg (FS#49076)
|
||||
- if pacman is in use, wait until it is available before
|
||||
continuing (FS#28840)
|
||||
- add support for lzip, lz4 and zst compressed packages
|
||||
(FS#56676, FS#59081)
|
||||
- add new checksum algorithm, b2sum
|
||||
- various improvements to PKGBUILD linting
|
||||
- when signing packages, report package filename on failure
|
||||
- fix pkgver() function not aborting on errors
|
||||
- remove checksum algorithm whirlpoolsum as it has not worked
|
||||
for a long time
|
||||
- reject PKGBUILDs with both split and non-split package
|
||||
functions
|
||||
- send status messages to stderr rather than stdout (FS#17173)
|
||||
- ensure debug buildflags are unset when they are supposed to be
|
||||
- buildenv and executable detection, definitions for the
|
||||
PKGBUILD schema, and makepkg.conf loading are now part of
|
||||
libmakepkg
|
||||
- fix broken check for the fakeroot binary
|
||||
- improve the error message for invalid dependency versioning
|
||||
- add routine for linting $SOURCE_DATE_EPOCH
|
||||
- fix the error code when no PKGBUILD exists
|
||||
- use --unneeded when removing build deps to allow runtime-only
|
||||
deps to work well with makepkg -sir (FS#32723)
|
||||
- compute package sizes correctly across different filesystems
|
||||
- use shared clones for git sources to save space when building
|
||||
- fix reporting of invalid archive extensions
|
||||
- correctly handle hg sources with updates on a non-default
|
||||
branch
|
||||
- install pkg-config file for libmakepkg's library directory
|
||||
- propagate error codes when package failed to sign correctly
|
||||
- be compatible with file 5.37's application/gzip MIME type
|
||||
- forbid non-ASCII pkgname and pkgver (FS#49342)
|
||||
- fix exiting on failure without ensuring dependencies are
|
||||
prompted for removal (FS#63000)
|
||||
- quiet superfluous warnings for missing debug source files for
|
||||
artificial symbols
|
||||
- add routine for linting $PACKAGER to check that it has a
|
||||
valid name and email address, and document the desired format
|
||||
in makepkg.conf(5)
|
||||
- add rust support for *FLAGS and debug-prefix-map
|
||||
- correctly handle a system file command with seccomp enabled
|
||||
(FS#58626)
|
||||
- try to more thoroughly clean up logpipe during unusual exit
|
||||
states such as CTRL-C
|
||||
- when installing packages with -sir, be more robust against
|
||||
conflicting makedepends by always uninstalling them first
|
||||
- fix exit code when removing deps fails
|
||||
- reproducible builds: suppress filesystem-specific archive
|
||||
metadata from built packages as they are not needed
|
||||
- pacman-key:
|
||||
- just accept one file to verify, and enforce detached sigs
|
||||
(FS#52022)
|
||||
- after recent GnuPG updates, ensure the Web of Trust is still
|
||||
used
|
||||
- clean keys during import to reduce size consumed by unusable
|
||||
signatures
|
||||
- repo-add:
|
||||
- add support for zst compressed databases
|
||||
- print the name of the database when extracting
|
||||
- do not infinitely loop on malformed arguments with embedded
|
||||
globs
|
||||
- add option to prevent downgrading (FS#17752)
|
||||
- various documentation updates
|
||||
5.1.3 - Sanitize file name received from Content-Disposition header
|
||||
during -U (CVE-2019-9686)
|
||||
5.1.2 - pacman-conf: add missing DisableDownloadTimeout support
|
||||
- Include version when checking optdepend install status
|
||||
during -Qi (FS#60106)
|
||||
|
|
|
|||
Loading…
Add table
Reference in a new issue