adsys (0.16.3~24.04.2ubuntu0.24.04.1) noble-security; urgency=medium

  * SECURITY UPDATE: Hang in Transport.
    - 1e71bd86e4a302b4e731bc06da6eb51679c7bd49: Prevent hanging Transport from
      bad SETTINGS frame in vendor/golang.org/x/net/http2/transport.go
    - Author: Nicholas S. Husin <nsh@golang.org>
    - CVE-2026-33814

 -- Kyle Kernick <kyle.kernick@canonical.com>  Thu, 11 Jun 2026 16:54:32 -0600

adsys (0.16.3~24.04.2) noble; urgency=medium

  * internal/ad/adsys-gpolist: Allow searching GPO list by UserPrincipalName.
    (LP: #2125134)

 -- Marcin Wilk <marcin.wilk@canonical.com>  Thu, 23 Oct 2025 13:54:18 +0200

adsys (0.16.3~24.04.1) noble; urgency=medium

  * debian/tests: Use the correct Go binary to run the autopkgtests
    (LP: #2091940)

 -- Denison Barbosa <denison.barbosa@canonical.com>  Mon, 02 Jun 2025 08:32:11 -0400

adsys (0.16.3~24.04) noble; urgency=medium

  * Backport adsys 0.16.3 to noble (LP: #2091940)
  * Bump Go version to 1.23
  * Bump Go toolchain version to 1.23.6
  * Fixes and improvements to certificate autoenrollment
    - Improve log messages to help understand issues and failures
    - Fix LDAP queries on multiple domains environments
    - Allow default behavior to get supported certificate templates
      to be overriden through cepces configuration
    - Fix URL for NDES enrollment
  * Resize buffer to parse very large GPOs
  * Add corpus to fuzz tests to increase their precision
  * Remove d/.prerm purge stanza
  * Documentation improvements
    - Add architecture diagrams to documentation
    - Add ref glossary
    - Change spelling to US
    - Home and landing pages refresh
  * Run certificates auto enroll script with debug enabled based on daemon
    verbosity
  * Add support for Polkit >= 124
  * Refresh policy definition files to support latest Ubuntu releases
  * CI and quality of life changes not impacting package functionality:
    - Enable CI to run on pull requests from adsys forks
    - Update links to new server documentation
  * Bump dependencies to latest:
    - golang.org/x/crypto (0.31.0)
    - golang.org/x/net (0.37.0)
      + Fixes CVE-2024-45338
    - golang.org/x/sys (0.29.0)
    - golang.org/x/text (0.22.0)
    - google.golang.org/grpc (1.71.0)
    - google.golang.org/protobuf (1.36.6)
    - github.com/charmbracelet/bubbles (0.20.0)
    - github.com/charmbracelet/bubbletea (1.3.4)
    - github.com/charmbracelet/glamour (0.9.1)
    - github.com/charmbracelet/lipgloss (1.1.0)
    - github.com/fatih/color (1.18.0)
    - github.com/leonelquinteros/gotext (1.7.0)
    - github.com/pkg/sftp (1.13.9)
    - github.com/spf13/cobra (1.9.1)
    - github.com/stretchr/testify (1.10.0)
    - github.com/golangci/golangci-lint (1.64.8)
  * CI dependencies not impacting package functionality:
    - canonical/has-signed-canonical-cla (2)
    - codecov/codecov-action (5)
    - jidicula/clang-format-action (4.15.0)
    - peter-evans/create-pull-request (7)

 -- Denison Barbosa <denison.barbosa@canonical.com>  Mon, 31 Mar 2025 06:49:09 -0400

adsys (0.14.3~24.04ubuntu0.1) noble-security; urgency=medium

  * SECURITY UPDATE: Denial of service in parse function.
    - Use strings.EqualFold instead of direct comparison and
      strings.ToLower in .../html/doctype.go, .../html/foreign.go, and
      .../html/parse.go. Based on
      https://go.googlesource.com/net/+/8e66b04771e35c4e4125e8c60334b34e2423effb
      upstream patch.
    - CVE-2024-45338

 -- Hlib Korzhynskyy <hlib.korzhynskyy@canonical.com>  Tue, 07 Jan 2025 13:50:46 -0330

adsys (0.14.3~24.04) noble; urgency=medium

  [Davi Henrique]
  * Ignore casing when fetching Registry.pol (LP: #2080390)
  * Add configurable timeout for listing GPOs (LP: #2081966)

  [Felipe Alencastro]
  * Add support for DCONF usb settings (LP: #2081968)

 -- Denison Barbosa <denison.barbosa@canonical.com>  Tue, 19 Nov 2024 06:28:25 -0400

adsys (0.14.2~24.04ubuntu0.1) noble-security; urgency=medium

  * No change rebuild due to golang-1.22 update

 -- Evan Caville <evan.caville@canonical.com>  Mon, 11 Nov 2024 10:15:58 +1000

adsys (0.14.2~24.04) noble; urgency=medium

  * Fix DCONF policy manager removing user DB on empty policy (LP: #2078245)
  * Ignore casing in domain/ section of sssd.conf (LP: #2078246)
  * Fix parsing of slash usernames (i.e. domainuser) (LP: #2078247)
  * Fix errno in get_ticket_path() (LP: #2078473)

 -- Denison Barbosa <denison.barbosa@canonical.com>  Fri, 30 Aug 2024 10:28:07 -0400

adsys (0.14.1ubuntu0.24.04.1) noble-security; urgency=medium

  * No change rebuild due to golang-1.22 update

 -- Nishit Majithia <nishit.majithia@canonical.com>  Tue, 16 Jul 2024 11:09:41 +0530

adsys (0.14.1build1) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- William Grant <wgrant@ubuntu.com>  Mon, 01 Apr 2024 16:04:17 +1100

# For older changelog entries, run 'apt-get changelog adsys'
