libvncserver (0.9.15+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * debian/control:
    + Bump Standards-Version: to 4.7.2. No changes needed.
    + In B-D, switch from pkg-config to pkgconf.
  * debian/libvncclient1.symbols:
    + Update symbols.
  * debian/copyright:
    + Auto-generate copyright.in file for better copyright changes tracking.
    + Entirely rewrite copyright attributions.

 -- Mike Gabriel <sunweaver@debian.org>  Thu, 10 Apr 2025 12:51:42 +0200

libvncserver (0.9.14+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * debian/control:
    + Bump Standards-Version: to 4.6.2. No changes needed.
  * debian/patches:
    + Drop all patches. All included in this upstream release.
  * debian/libvncserver-dev.install:
    + Add CMake module for LibVNCServer.
  * debian/*.symbols:
    + Update symbols for 0.9.14.
  * debian/{rules,source/lintian-overrides}:
    + Drop finished dbgsym-migration specific rules.
  * debian/copyright:
    + Update copyright attributions.

 -- Mike Gabriel <sunweaver@debian.org>  Mon, 06 Feb 2023 17:38:46 +0100

libvncserver (0.9.13+dfsg-5) unstable; urgency=medium

  [ Thosten Alteholz ]
  * debian/patches:
    + CVE-2020-29260: Add CVE-2020-29260.patch. Resolve memory leak in
      function rfbClientCleanup(). (Closes: #1019228).

  [ Mike Gabriel ]
  * debian/watch:
    + Use tags-path on Github, not releases-path.

 -- Mike Gabriel <sunweaver@debian.org>  Sun, 20 Nov 2022 13:10:45 +0100

libvncserver (0.9.13+dfsg-4) unstable; urgency=medium

  * debian/patches:
    + Trivially rebase patches 0001 and 0002.
    + Add 0003-rfb-increase-update-buf-size.patch. Allow larger screen sizes.
      (Closes: #1010449).
  * debian/control:
    + Bump Standards-Version: to 4.6.1. No changes needed.

 -- Mike Gabriel <sunweaver@debian.org>  Fri, 03 Jun 2022 09:47:24 +0200

libvncserver (0.9.13+dfsg-3) unstable; urgency=medium

  * debian/watch:
    + Fix Github watch URL.

 -- Mike Gabriel <sunweaver@debian.org>  Thu, 29 Apr 2021 14:22:25 +0200

libvncserver (0.9.13+dfsg-2) unstable; urgency=medium

  [ Marco Trevisan (Treviño) ]
  * debian/patches:
    + Fix crashes when using desktop sharing with gnome-remote-desktop
      (LP: #1915410; closes: #982940).

  [ Mike Gabriel ]
  * debian/patches/series:
    + White-space cleanup.
  * debian/control:
    + Bump Standards-Version: to 4.5.1. No changes needed.
  * debian/watch:
    + Switch to format version 4.
  * debian/copyright:
    + Amend attributions. The files common/md5.* don't exist anymore.

 -- Mike Gabriel <sunweaver@debian.org>  Sun, 28 Feb 2021 15:37:06 +0100

libvncserver (0.9.13+dfsg-1) unstable; urgency=medium

  * New upstream release:
    - CVE-2018-21247: When connecting to a repeater, only send initialised
      string
    - CVE-2019-20839: libvncclient: bail out if unix socket name would overflow
    - CVE-2019-20840: fix crash because of unaligned accesses in
      hybiReadAndDecode()
    - CVE-2020-14396: libvncclient/tls_openssl: do not deref a NULL pointer
    - CVE-2020-14397: libvncserver: add missing NULL pointer checks
    - CVE-2020-14398: libvncclient: handle half-open TCP connections
    - CVE-2020-14399: libvncclient: fix pointer aliasing/alignment issue
    - CVE-2020-14400: libvncserver: fix pointer aliasing/alignment issue
    - CVE-2020-14401: libvncserver: scale: cast to 64 bit before shifting
    - CVE-2020-14402: libvncserver: encodings: prevent OOB accesses
    - CVE-2020-14403: encodings: prevent OOB accesses
    - CVE-2020-14404: libvncserver: encodings: prevent OOB accesses
    - CVE-2020-14405: libvncclient/rfbproto: limit max textchat size
  * debian/patches:
    + Drop all patches. All applied upstream.
    + Add README file explaining on our patch naming scheme.
  * debian/*.symbols:
    + Update symbols.
  * debian/control:
    + Bump DH compat level to version 13.

 -- Mike Gabriel <sunweaver@debian.org>  Mon, 29 Jun 2020 14:44:43 +0200

libvncserver (0.9.12+dfsg-9) unstable; urgency=medium

  * Bump Standards-Version: to 4.5.0. No changes needed.
  * debian/patches:
    + Add CVE-2019-15690/0001-heap-buffer-overflow.patch. (Closes: #954163).

 -- Antoni Villalonga <antoni@friki.cat>  Sat, 21 Mar 2020 12:51:24 +0100

libvncserver (0.9.12+dfsg-8) unstable; urgency=medium

  * debian/changelog:
    + Typo fix in previous upload stanza.
  * debian/patches:
    + Add 0005_LibVNCCient-fix-regression-in-tight-raw-decoding.patch.
      LibVNCClient: Fix regression in Tight/Raw decoding. (Closes: #950330).

 -- Mike Gabriel <sunweaver@debian.org>  Sat, 01 Feb 2020 23:05:21 +0100

libvncserver (0.9.12+dfsg-7) unstable; urgency=medium

  * debian/patches:
    + Add 0003_rfbserver-dont-close-fd-0-accidentally.patch and
      0004_avoid-pthread-join-if-backgroundLoop-is-FALSE.patch. Follow-up fixes
      for concurrency issue during client closure between client and
      clientOutput thread. (See #905786).

 -- Mike Gabriel <sunweaver@debian.org>  Wed, 08 Jan 2020 10:36:05 +0100

libvncserver (0.9.12+dfsg-6) unstable; urgency=medium

  [ Sebastien Bacher ]
  * debian/tests:
    + Use the correct compiler for proposed autopkgtest cross-testing support.
      (Closes: #946615).

  [ Mike Gabriel ]
  * debian/patches:
    + Add 0002_fix-crash-because-of-unaligned-accesses-in-hybiReadAndDecode.patch.
      Fix FTBFS on sparc64 architecture. (Closes: #947808).

 -- Mike Gabriel <sunweaver@debian.org>  Thu, 02 Jan 2020 15:04:42 +0100

libvncserver (0.9.12+dfsg-5) unstable; urgency=medium

  [ Mike Gabriel ]
  * debian/control:
    + Add Ds (libvncserver-dev): libgcrypt20-dev, liblzo2-dev and libsasl2-dev.
      (As found under B-D). (Closes: #946865).
  * debian/tests/control:
    + White-space cleanup.

  [ Antoni Villalonga ]
  * Add debian/.gitlab.yml salsa tests.

  [ Sebastien Bacher ]
  * debian/control:
    + Use the correct team name in the Vcs references

 -- Mike Gabriel <sunweaver@debian.org>  Wed, 18 Dec 2019 09:51:48 +0100

libvncserver (0.9.12+dfsg-4) unstable; urgency=medium

  [ Antoni Villalonga ]
  * debian/control:
    + Remove obsolete D (libvncserver-dev): libvncserver-config. (Closes:
      #946598).

 -- Mike Gabriel <sunweaver@debian.org>  Wed, 11 Dec 2019 21:58:16 +0100

libvncserver (0.9.12+dfsg-3) unstable; urgency=medium

  * Re-upload to unstable as-is.

 -- Mike Gabriel <sunweaver@debian.org>  Wed, 11 Dec 2019 08:02:19 +0100

libvncserver (0.9.12+dfsg-2) experimental; urgency=medium

  * debian/changelog:
    + Weave-in NMU changelog stanzas from previous security uploads
      (0.9.11+dfsg-1.1 through to 0.9.11+dfsg-1.3).
  * debian/patches:
    + Use subdirs for CVE issues.
    + Re-add erroneously removed patch/fix for CVE-2018-20750.
    + Rebase patch/fix for CVE-2019-15681.

 -- Mike Gabriel <sunweaver@debian.org>  Fri, 29 Nov 2019 09:50:45 +0100

libvncserver (0.9.12+dfsg-1) experimental; urgency=medium

  * New upstream release to experimental. (Closes: #918777).
  * debian/{control,compat}:
    + Switch to debhelper-compat notation. Bump DH compat level to version 12.
  * debian/control:
    + Bump Standards-Version: to 4.4.1. No changes needed.
    + Add Rules-Requires-Root: field and set it to "no".
    + Move package maintenance to Debian Remote Maintainers team, after
      personal communication with Peter Spiess-Knafl. Thanks for all
      previous contributions. Also, make myself uploader.
    + Update Vcs-*: fields. Packaging VCS has been moved over to
      salsa.debian.org.
    + Update B-Ds; Use cmake for building this package from now on.
      Autotools support has been dropped by upstream.
    + Add B-D: liblzo2-dev. Avoid building embedded miniLZO implementation.
    + Add B-D: libsasl2-dev.
  * debian/patches:
    + Drop all previous added CVE security fixes. All applied upstream.
    + Drop 0001-ignore_webclients.patch. No automake support available in
      upstream sources anymore.
    + Drop remove-libpng.patch. Not required anymore since cmake build switch.
    + Add 0001_cmake-multiarch-support.patch. Fix install_targets, so that they
      install to multi-arch libdir.
    + CVE-2019-15681: Add CVE-2019-15681.patch. rfbserver: don't leak stack
      memory to the remote. (Closes: #943793).
  * debian/rules:
    + Add get-orig-source target for maintainers' convenience.
    + Fully switch to cmake based build. Make sure WITH_PNG gets disabled.
    + Enable all hardening flags.
  * debian/{control,libvncserver-config.*}:
    + Drop bin:pkg libvncserver-config. Replace by pkgconfig .pc files.
  * debian/libvnc*.symbols:
    + Update symbols files.
    + Add *Build-Depends-Package: meta-data fields.
  * debian/libvncserver-dev.install:
    + Drop *.a files. No built by cmake based build implementation anymore.
  * debian/{control,rules}:
    + Drop dbg:pkgs, start a very late dbgsym migration.
  * debian/source/lintian-overrides:
    + Override debug-symbol-migration-possibly-complete. It will be in
      bullseye+1.
  * debian/copyright:
    + Use secure URL in Format: field.
  * debian/libvncserver-dev.examples:
    + Install examples/ folder into dev:pkg.
  * debian/{changelog,control,copyright}:
    + Strip white-spaces off at EOLs.
  * debian/tests/smoketest-libvnc*:
    + Stop using $ADDTMP, replace by $AUTOPKGTEST_TMP.
  * debian/upstream/metadata:
    + Add DEP-12 compliant metadata file

 -- Mike Gabriel <sunweaver@debian.org>  Thu, 28 Nov 2019 23:43:20 +0100

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libvncserver1`.
