Closes: #875974

Closes: #875960

The extra priority has been removed in recent versions of
debian policy.

Alioth is being obsoleted.

Gbp-Dch: Ignore

Fixes heap-based buffer over-read in the atol8 function.

Closes: #874539

Closes: #861609

Closes: #859456

The mail alias for the team is now defuct, so make the single
remaining uploader the primary maintainer.

Closes: #859455

Upstream renamed it to README.md but forgot to make sure it was
distributed in the tarball. This should be fixed in
https://github.com/libarchive/libarchive/commit/8f52de24723593d268d4
and once a tarball is built from this we should re-add README(.md).

This was done via:
gbp pq rebase && gbp pq export

Dropping all but one (the last one added is apparently not
part of 3.2.2).

Upstream version 3.2.2

# gpg: Signature made sön 26 feb 2017 20:37:35 CET
# gpg:                using RSA key FAE1E5B64652BE798E278CC20BC47DC64D135306
# gpg:                issuer "andreas@fatal.se"
# gpg: Good signature from "Andreas Henriksson <andreas@fatal.se>" [ultimate]
# gpg:                 aka "Andreas Henriksson <ah@debian.org>" [ultimate]

- Cherry-pick upstream commit 98dcbbf0
  "Fail with negative lha->compsize in lha_read_file_header_1()"
  Secunia SA74169, CVE-2017-5601

Closes: #853278
Gbp-Dch: Full

- Fixes for upstream issues 747, 761, 767 also known as
  CVE-2016-8689, CVE-2016-8688, CVE-2016-8687

Gbp-Dch: Full
Closes: #840934
Closes: #840935
Closes: #840936

Add autotools build to .travis.yml
Downgrade minimal supported autoconf version to 2.68 (Travis CI)