isc-kea (3.0.3-2ubuntu2) stonking; urgency=medium

  * d/p/openssl4.patch: fix FTBFS issues for OpenSSL 4.0 (LP: #2155026)

 -- Athos Ribeiro <athos@ubuntu.com>  Mon, 13 Jul 2026 11:23:06 -0300

isc-kea (3.0.3-2ubuntu1) stonking; urgency=medium

  * d/control: build against libmysqlclient instead of libmariadb
  * d/control: make Vcs-Git point to the Ubuntu packaging branch
  * d/gbp.conf: adapt configuration for the Ubuntu packaging
  * d/salsa-ci-yml: disable the salsa-ci-debian child pipeline

 -- Paride Legovini <paride@debian.org>  Mon, 29 Jun 2026 10:26:22 +0200

isc-kea (3.0.3-2) unstable; urgency=medium

  [ Paride Legovini ]
  * d/control: replace B-D on mysql-defaults with libmariadb-dev
    (Closes: #1137459)
  * d/rules: set KEA_PKG_TYPE_IN_CONFIGURE=deb at configure time.
    Fixes custom-library-search-path lintian errors.
  * d/control: bump Standards-Version to 4.7.4, no changes needed
  * d/control: drop redundant fields: Rules-Requires-Root, Priority
  * d/kea-admin.l-o: drop unused script-not-executable override
  * Salsa CI: do not fail on lintian warning: privacy-breach-generic
  * d/control: set X-Style: black
  * debian/*: apply X-Style: black via debputy reformat

  [ Luca Boccassi ]
  * Install and use sysusers.d/tmpfiles.d config files

 -- Paride Legovini <paride@debian.org>  Mon, 29 Jun 2026 10:17:33 +0200

isc-kea (3.0.3-1) unstable; urgency=medium

  * New upstream version 3.0.3

 -- Athos Ribeiro <athos@debian.org>  Wed, 25 Mar 2026 07:23:44 -0300

isc-kea (3.0.2-3) unstable; urgency=medium

  * d/control: replace libboost-system-dev with libboost-numpy-dev
    (Closes: #1127214)
  * d/patches: fix build for boost 1.90 (Closes: #1129820)

 -- Athos Ribeiro <athos@debian.org>  Wed, 11 Mar 2026 16:51:47 -0300

isc-kea (3.0.2-2) unstable; urgency=medium

  * d/rules: generate docs after dh_auto_build

 -- Athos Ribeiro <athos@debian.org>  Thu, 19 Feb 2026 22:39:43 -0300

isc-kea (3.0.2-1) unstable; urgency=medium

  [ Paride Legovini ]
  * d/salsa-ci.yml: run Ubuntu tests on Resolute (current devel release)
  * d/watch: split paragraphs as required by debian-watch(5)

  [ Athos Ribeiro ]
  * d/watch: match xz compressed files
  * New upstream version 3.0.2 (Closes: #1109369)
  * d/t/control: add missing dpkg-dev test dependency
  * d/kea-common.install: install radius hook configs
  * d/kea-dev.install: install kea.pc pkgconf file
  * d/not-installed: do not install meson-info data
  * d/control:
    - update uploader email
    - add missing build dependencies
  * d/rules: use meson+ninja build system

 -- Athos Ribeiro <athos@debian.org>  Wed, 18 Feb 2026 13:42:10 -0300

isc-kea (2.6.4-1) unstable; urgency=medium

  * New upstream version 2.6.4 (Closes: #1112307)
  * d/watch: update to format version 5

 -- Paride Legovini <paride@debian.org>  Thu, 28 Aug 2025 22:03:50 +0200

isc-kea (2.6.3-2) unstable; urgency=medium

  [ Jonas Jelten ]
  * d/usr.sbin.kea-lfc: add lock permission to logger_lockfile (LP: #2121327)

  [ Athos Ribeiro ]
  * d/control: bump standards version
  * d/copyright: update Debian copyright

 -- Athos Ribeiro <athos.ribeiro@canonical.com>  Wed, 27 Aug 2025 13:35:39 -0300

isc-kea (2.6.3-1) unstable; urgency=medium

  * New upstream version 2.6.3.
    Closes: #1106737 by fixing:
    - CVE-2025-32801:
      Loading a malicious hook library can lead to local privilege escalation
    - CVE-2025-32802:
      Insecure handling of file paths allows multiple local attacks
    - CVE-2025-32803:
      Insecure file permissions can result in confidential information leakage
    Thanks: Salvatore Bonaccorso
  * d/*.service: restrict RuntimeDirectory and StateDirectory.
    This is part of the fix of the aforementioned CVEs.
  * d/kea-common.postinst: make /etc/kea owned by _kea:_kea and chmod 0750
  * d/p/0009-disable-database-tests.patch: refresh (context)
  * d/p/0010-set-control-sockets-location.patch drop patch (upstreamed)
  * d/p/0011-kea-ctrl-agent-authentication.patch: drop patch (upstreamed)
  * d/t/smoke-test: execute some test commands as the _kea user.

 -- Paride Legovini <paride@debian.org>  Mon, 02 Jun 2025 19:00:06 +0200

isc-kea (2.6.1-2) unstable; urgency=medium

  [ Gioele Barabucci ]
  * d/control: Remove outdated debconf version constraint (Closes: #1096119)

  [ Paride Legovini ]
  * d/po/pt.po: add Portuguese debconf translation.
    Thanks to Américo Monteiro (Closes: #1065408)
  * d/po/pt_BR.po: add Brazilian Portuguese debconf translation.
    Thanks to Paulo Henrique de Lima Santana (Closes: #1098449)
  * d/po/ro.po: add Romanian debconf translation.
    Thanks to Remus-Gabriel Chelu (Closes: #1101800)

 -- Paride Legovini <paride@debian.org>  Wed, 02 Apr 2025 09:44:44 +0200

isc-kea (2.6.1-1) unstable; urgency=medium

  [ Paride Legovini ]
  * d/control: drop useless Build-Depends: elinks.
  * CI: Add Salsa CI pipeline for Ubuntu.
    Thanks to Ahmed Siam, Otto Kekäläinen

  [ Helmut Grohne ]
  * d/control, d/rules: reduce Build-Depends
    - Drop unused docbook, docbook-xsl, elinks, xsltproc.
    - Annotate procps <!nocheck>.
    - Reduce python3-dev to python3 as no extension is being built.
    - Annotate python3 with :any to support cross building.
    - Declaratively enable python3 sequence addon. (Closes: #1080444)

  [ Carles Pina i Estany ]
  * Added po-debconf Catalan translation

  [ Athos Ribeiro ]
  * New upstream version 2.6.1. (Closes: #1087295)
  * d/p/0009-disable-database-tests.patch: refresh patch
  * d/tests/kea-dhcp4*: explicitly configure subnet ID.
    These are no longer optionally auto generated.
  * d/p/0002-kea_admin_fix.patch: drop patch.
    The local paths being removed are spread among several other files and
    the code paths using them are not accessed when running the installed
    version of these files/binaries.
  * d/salsa-ci.yml: update ubuntu series to plucky

 -- Athos Ribeiro <athos.ribeiro@canonical.com>  Mon, 06 Jan 2025 15:21:15 -0300

isc-kea (2.4.1-3) unstable; urgency=medium

  [ Paride Legovini ]
  * d/t/smoke-test: add sleep to allow for the services to start
  * d/t/kea-ctrl-agent-debconf override systemd restart limit.
    Thanks to Andreas Hasenack
  * ci: salsa pipeline: disable the crossbuild-arm64 job
  * ci: salsa pipeline: fail on Lintian warnings
  * d/*.l-o: drop unused overrides
  * kea-dev: build and install kea-msg-compiler.
    Thanks to Quentin Armitage (Closes: #1065362)
  * d/kea-dev.l-o: override no-manual-page for kea-msg-compiler
  * ci: salsa pipeline: enable reprotest, without build_path variation.
    Thanks to Holger Levsen
  * d/p/0001-support_kfreebsd.patch: drop patch.
    The development of Debian GNU/kFreeBSD terminated in July 2023.
  * d/p/0011-kea-ctrl-agent-authentication.patch: add dep-3 headers
  * d/*.init: fix SysV init scripts.
    Thanks to Stefan Klein (Closes: #1055438)
  * d/rules: disable LTO on ppc64el as it causes crashes.
    Thanks to Sergio Durigan Junior (LP: #2055151)

  [ Andreas Hasenack ]
  * apparmor: also allow reading the pid file.
    At least kea-ctrl-agent attempts to read the pid file, and it makes
    sense to allow that. Also make the change for all other profiles.

 -- Paride Legovini <paride@debian.org>  Fri, 29 Mar 2024 16:38:54 +0100

isc-kea (2.4.1-2) unstable; urgency=medium

  * Team upload.

  [ Athos Ribeiro ]
  * d/*.service: Remove dhcp{4,6} WantedBy statements

  [ Paride Legovini ]
  * d/po/fr.po: add French templates translation.
    Thanks to Jean-Pierre Giraud (Closes: #1059863)
  * d/copyright: update copyright years for debian/*

  [ Andreas Hasenack ]
  * apparmor: add missing include directive.
    Add a missing include directive to all profiles include the
    site-specific additions and overrides. (Closes: #1064513)

 -- Andreas Hasenack <andreas@canonical.com>  Mon, 26 Feb 2024 10:32:35 -0300

isc-kea (2.4.1-1) unstable; urgency=medium

  * New upstream version 2.4.1

 -- Athos Ribeiro <athos.ribeiro@canonical.com>  Thu, 14 Dec 2023 17:21:04 -0300

isc-kea (2.4.0-1) unstable; urgency=medium

  [ Paride Legovini ]
  * d/control: add Athos Ribeiro to Uploaders
  * d/*.init: specify the daemons' full path.
    Thanks to Alessandro Vesely (Closes: #1052338)

  [ Athos Ribeiro ]
  * New upstream version 2.4.0 (Closes: #1040523)
  * d/patches: refresh patches
  * d/rules: remove cleanup for kea_connector2.py
  * d/t/kea-dhcp4: check if lease lifetime is valid

 -- Athos Ribeiro <athos.ribeiro@canonical.com>  Thu, 26 Oct 2023 09:17:18 -0300

isc-kea (2.2.1-3) unstable; urgency=medium

  [ Andreas Hasenack ]
  * apparmor: allow kea-ctrl-agent to access IPv6 sockets
    (Closes: #1052764)

 -- Paride Legovini <paride@debian.org>  Wed, 27 Sep 2023 14:47:14 +0200

isc-kea (2.2.1-2) unstable; urgency=medium

  * d/po/de.po: add German debconf translation.
    Thanks to Christoph Brinkhaus (Closes: #1041710)
  * d/po/es.po: add Spanish debconf translation.
    Thanks to Camaleón (Closes: #1041772)
  * d/po/nl.po: add Dutch debconf translation.
    Thanks to Frans Spiesschaert (Closes: #1041875)

 -- Athos Ribeiro <athos.ribeiro@canonical.com>  Sun, 10 Sep 2023 10:09:52 -0300

isc-kea (2.2.1-1) unstable; urgency=medium

  * d/u/signing-key.asc: update upstream signing key
  * New upstream version 2.2.1
  * Fix typo in debconf string.
    Thanks to Helge Kreutzmann (Closes: #1041394)

 -- Athos Ribeiro <athos.ribeiro@canonical.com>  Fri, 04 Aug 2023 07:37:08 -0300

isc-kea (2.2.0-8) unstable; urgency=medium

  [ Athos Ribeiro ]
  * d/rules: add strict shlibs control file

  [ Andreas Hasenack ]
  * Restrict access to the default RESTful API on 127.0.0.1:8000 to
    authenticated users (Closes: #1033367) (LP #2007312):
    - Add debconf templates to restrict API access
    - d/control: add debconf build-deps
    - d/kea-ctrl-agent.postinst: handle kea-api password creation
    - d/kea-ctrl-agent.config: prepare debconf questions
    - d/kea-ctrl-agent.postrm: purge api password file
    - d/p/0011-kea-ctrl-agent-authentication.patch
    - d/t/kea-ctrl-agent.service: require a non-empty kea api password file
    - d/t/control, d/t/kea-ctrl-agent-debconf: test debconf options
    - d/t/smoke-tests, d/t/kea-dhcp4: support kea-ctrl-agent authentication
  * d/NEWS: update with noteworthy changes

 -- Athos Ribeiro <athos.ribeiro@canonical.com>  Tue, 04 Jul 2023 10:40:32 -0300

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog kea-common`.
