ncurses (6.5+20250216-2ubuntu0.1) questing-security; urgency=medium

  * SECURITY UPDATE: stack-based buffer overflow in infocmp
    - debian/patches/CVE-2025-69720.patch: clamp length to
      MAX_TERMINFO_LENGTH before copying into buf2 in analyze_string.
    - CVE-2025-69720

 -- Paulo Flabiano Smorigo <pfsmorigo@canonical.com>  Tue, 30 Jun 2026 21:25:27 +0000

ncurses (6.5+20250216-2build1) questing; urgency=medium

  * Rebuild to include updated RISC-V base ISA RVA23

 -- Heinrich Schuchardt <heinrich.schuchardt@canonical.com>  Sat, 06 Sep 2025 14:15:06 +0000

ncurses (6.5+20250216-2) unstable; urgency=medium

  * Update upstream signing key.
  * Upgrade Standards-Version to 4.7.2, no changes needed.

 -- Sven Joachim <svenjoac@gmx.de>  Thu, 06 Mar 2025 17:01:55 +0100

ncurses (6.5+20250216-1) unstable; urgency=medium

  * New upstream patchlevel.

 -- Sven Joachim <svenjoac@gmx.de>  Tue, 18 Feb 2025 17:01:53 +0100

ncurses (6.5+20250125-2) unstable; urgency=medium

  * Upload to unstable.

 -- Sven Joachim <svenjoac@gmx.de>  Fri, 31 Jan 2025 16:55:43 +0100

ncurses (6.5+20250125-1) experimental; urgency=low

  * New upstream patchlevel.
  * Refresh Debian patches.
  * Update years in debian/copyright.

 -- Sven Joachim <svenjoac@gmx.de>  Wed, 29 Jan 2025 17:00:06 +0100

ncurses (6.5-2) unstable; urgency=medium

  * Upload to unstable.

 -- Sven Joachim <svenjoac@gmx.de>  Thu, 09 May 2024 10:58:21 +0200

ncurses (6.5-1) experimental; urgency=medium

  * New upstream release.
  * Update symbols files and bump shlibs.
    - Update the minimal version for symbols added after the 6.4 release
      to 6.5.
  * Update patch 01-debian-no-ada-doc.diff for the changed location of the
    Ada documentaton.

 -- Sven Joachim <svenjoac@gmx.de>  Sun, 05 May 2024 18:31:39 +0200

ncurses (6.4+20240414-1) unstable; urgency=medium

  * New upstream patchlevel.
    - Fix inconsistent description of wmouse_trafo() (Closes: #1059778).
    - Modify wenclose() to handle pads (Closes: #1059783).
    - Improve manpage discussion of mouseinterval() (Closes: #1058560).
  * Add a new "terminfocheck" target to debian/rules to compare the built
    terminfo files against the system database, and use it in binary-indep
    builds in a new pkg.ncurses.terminfocheck build profile.
  * Add a smoke autopkgtest for infocmp, testing that its output for the
    'dumb' terminfo entry matches expectations (see #868266).
  * Add another smoke autopkgtest to ensure that the backspace/delete key
    definitions match expectations (see Policy §9.8).
  * If DEB_BUILD_OPTIONS matches "terse", configure with --disable-echo.
  * Stop patching terminfo.src for the Debian-specific terminfo aliases
    xterm-debian and rxvt-m, create symlinks for them instead.
    - Drop patch 02-debian-xterm.diff.
    - Merge patch 02-debian-rxvt.diff into 02-debian-backspace.diff.
  * Refresh patch 02-debian-backspace.diff.
  * Upgrade Standards-Version to 4.7.0, no changes needed.

 -- Sven Joachim <svenjoac@gmx.de>  Tue, 16 Apr 2024 21:28:36 +0200

ncurses (6.4+20240113-1) unstable; urgency=medium

  * New upstream patchlevel.
  * Refresh Debian patches.
  * Update years in debian/copyright.
  * Install ncurses6-config.1 via "make install" to ensure it contains
    correct cross-references (Closes: #1060211).
  * Add a regression autopkgtest to ensure that there are no '3X'
    references in manpages (see #618429, #1004901, #1057651, #1060211).
  * Build-Depend on pkgconf rather than on pkg-config.
  * Drop kfreebsd-specific code from debian/rules.

 -- Sven Joachim <svenjoac@gmx.de>  Mon, 15 Jan 2024 20:34:12 +0100

ncurses (6.4+20231209-1) unstable; urgency=medium

  * New upstream patchlevel.
    - Remove xterm+sm+1006 from tmux (Closes: #1057688).
    - Update man/edit_man.sh to allow for "\%" markers embedded after
      bold font escapes in manpage cross-references (Closes: #1057651).

 -- Sven Joachim <svenjoac@gmx.de>  Mon, 11 Dec 2023 17:03:08 +0100

ncurses (6.4+20231121-1) unstable; urgency=medium

  * New upstream patchlevel.
    - Amend fix for #1055882, correcting nul terminator check in
      waddnstr (Closes: #1056340).

 -- Sven Joachim <svenjoac@gmx.de>  Wed, 22 Nov 2023 17:10:27 +0100

ncurses (6.4+20231118-1) unstable; urgency=medium

  * New upstream patchlevel.
    - Modify reset command to avoid altering clocal if the terminal uses
      a modem (prompted by discussion with Werner Fink, Michal Suchanek,
      Closes: #60377).
    - Correct loop termination condition in waddnstr() and waddnwstr()
      (Closes: #1055882).
  * Refresh Debian patches.
    - Drop the workaround for #933053 from patch 02-debian-xterm.diff,
      it had been non-functional since version 6.2+20210905-1.
  * Move all libraries below /usr (Closes: #1055940).
  * Install libtermcap.so as a symlink rather than a linker script.
  * Explicitly configure the non-wide builds with --disable-widec.

 -- Sven Joachim <svenjoac@gmx.de>  Mon, 20 Nov 2023 17:30:14 +0100

ncurses (6.4+20231016-1) unstable; urgency=medium

  * New upstream patchlevel.
    - Make the recent change to setupterm optional and disable it
      by default (Closes: #1054022).

 -- Sven Joachim <svenjoac@gmx.de>  Tue, 17 Oct 2023 17:34:56 +0200

ncurses (6.4+20231007-1) unstable; urgency=medium

  * New upstream patchlevel.
    - Improve manual description of immedok (Closes: #1053603).
    - Fix a few formatting issues with manpages (Closes: #1053123).
  * Update libtinfo6 symbols file, adding eight new symbols.
  * Refresh Debian patches.
  * Set BUILD_{C,CPP,LD}FLAGS for the native architecture to fix cross
    builds which had been broken on arm64 and amd64 by changes in
    dpkg-buildflags 1.22.0.

 -- Sven Joachim <svenjoac@gmx.de>  Thu, 12 Oct 2023 17:07:15 +0200

ncurses (6.4+20230625-2) unstable; urgency=medium

  * Save some build time by not building the static libraries along the
    shared ones, they are configured and built separately.
  * Get rid of debian/rxvt.ti (Closes: #1037071) and record relevant
    Debian changes in a new patch 02-debian-rxvt.diff.
    - Set kbs=^? according to the Debian keyboard policy.
    - Provide rxvt-m as an alias to rxvt-basic.
  * Pass "-Xusr/lib" to dh_missing in the binary-indep target to work
    around spurious failures in full builds (see #1039941).
  * Drop patch debian-alacritty.diff.  Alacritty users should upgrade vim
    to version 2:9.0.1658-1 or higher, or start vim with $TERM set to
    xterm-256color.
  * Take over the foot and foot-direct terminfo entries from the
    foot-terminfo package in ncurses-term (see #1041685).
    - Add a versioned Provides on foot-terminfo to ncurses-term in order
      to help with partial upgrades.

 -- Sven Joachim <svenjoac@gmx.de>  Sun, 23 Jul 2023 16:58:09 +0200

ncurses (6.4+20230625-1) unstable; urgency=low

  * New upstream patchlevel.
  * Add Breaks against tmux (<< 3.3a-4) to libtinfo6 (see #1038269).
  * Remove Replaces/Conflicts/Provides relationships with pre-buster
    packages in lib{32,64}ncurses-dev.
  * Set maintainer to ncurses@packages.debian.org, add Craig to Uploaders.
  * Stop stripping libncurses++w.a manually.
  * Move the cons25-debian terminfo entry from ncurses-base to
    ncurses-term, it had only been used in Debian GNU/kFreeBSD 6.0.
  * Tighten the dependency of ncurses-term on ncurses-base, so that they
    are always from the same version.
  * New patch debian-alacritty.diff: remove xterm+focus from the alacritty
    terminfo entry, as it triggers misbehavior in Vim version before
    9.0.1619 (see #1038401).
  * Stop building the libtinfo5, libncurses5 and libncursesw5 packages
    (Closes: #1025964).
  * Upload to unstable.

 -- Sven Joachim <svenjoac@gmx.de>  Sat, 01 Jul 2023 10:15:14 +0200

ncurses (6.4+20230603-1) experimental; urgency=low

  * New upstream patchlevel.
    - Improve checks for malformed terminfo data (report/analysis by
      Jonathan Bar Or, Michael Pearse, Emanuele Cozzi (CVE-2023-29491,
      Closes: #1034372)).
    - Drop compatibility with obsolete versions of tack, e.g., pre-1.08
      (Closes: #1034549).
  * Drop cherry-picked patches, applied upstream.
  * Configure with "--disable-setuid-environ" instead of
    "--disable-root-environ" and drop patch debian-env-access.diff.
  * Refresh remaining Debian patches.
    - Drop the hunk for screen-base from 02-debian-backspace.diff.
      Upstream sets kbs in screen-base to xterm+kbs now, so this is
      handled via the "--with-xterm-kbs" configure option.
  * Configure with "--disable-root-access" to further restrict programs
    running with elevated privileges.
  * Update symbols files for the new symbols tiparm_s and tiscan_s,
    and the newly exported symbols _nc_safe_fopen and _nc_safe_open3.
  * Remove the ncurses{w,}5-config compatibility symlinks
    (Closes: #1029977).
  * Remove old upstream SHA1 signing key C52048C0C0748FEE from
    debian/upstream/signing-key.asc.
  * Export ARFLAGS = -crv in debian/rules to ensure deterministic static
    libraries (see #1029404).
  * Stop building the empty transitional packages libtinfo-dev
    and libncurses{,w}5-dev (Closes: #1032708, #1032740, #1032741).
  * Move the ncurses-base terminfo files to /usr/share/terminfo
    (Closes: #1028202, #622286).
    - Add a Breaks on cryptsetup-initramfs (<< 2:2.6.1) to ncurses-base
      (see #1028234).
  * Remove various Breaks/Replaces relationships with package versions
    predating buster.
  * Update years in debian/copyright.

 -- Sven Joachim <svenjoac@gmx.de>  Thu, 15 Jun 2023 18:34:20 +0200

ncurses (6.4-4) unstable; urgency=medium

  * Run autoconf-dickey in the toplevel and test/ directories rather
    than autoreconf-dickey, as the latter picks up the backup file of
    configure.in below the .pc/ directory, which is unwanted and does
    not work (Closes: #1035621).

 -- Sven Joachim <svenjoac@gmx.de>  Sun, 07 May 2023 16:33:47 +0200

ncurses (6.4-3) unstable; urgency=medium

  * Configure with "--disable-root-environ" to disallow loading of
    custom terminfo entries in setuid/setgid programs, mitigating the
    impact of CVE-2023-29491 (see #1034372).
    - Update the symbols files for the newly exported symbol
      _nc_env_access.
    - New patch fix-configure-root-args-option.diff cherry-picked from
      the 20230415 patchlevel, fixing a copy/paste error which caused
      the "--disable-root-environ" configure option to pick up code
      meant to be used by the "--disable-root-args" option instead.
    - New patch debian-env-access.diff, changing the behavior of the
      "--disable-root-environ" configure option to not restrict programs
      run by the superuser, equivalent to the "--disable-setuid-environ"
      option introduced in the 20230423 patchlevel.

 -- Sven Joachim <svenjoac@gmx.de>  Sat, 06 May 2023 17:16:54 +0200

ncurses (6.4-2) unstable; urgency=medium

  * Add Breaks against vim-common (<< 2:9.0.1000-2) to ncurses-base
    and ncurses-term (Closes: #1027435).
  * New patch fix_crash_on_very_long_tc-use_clause.diff, cherry-picked
    from the 20230121 patchlevel: correct limit-check when dumping tc/use
    clause via tic -I (report by Gabriel Ravier, Closes: #1029399).
  * Work around dh_strip bug #875780 by stripping libncurses++w.a manually
    (Closes: #1029404).

 -- Sven Joachim <svenjoac@gmx.de>  Wed, 25 Jan 2023 21:21:49 +0100

ncurses (6.4-1) unstable; urgency=medium

  * New upstream release.
    - Correct PS vs PE names in bracketed+paste (report by Bram
      Moolenaar, Addresses: #1027435).
  * Update symbols files and bump shlibs.

 -- Sven Joachim <svenjoac@gmx.de>  Mon, 02 Jan 2023 08:49:50 +0100

ncurses (6.3+20221224-2) unstable; urgency=medium

  * Upload to unstable.

 -- Sven Joachim <svenjoac@gmx.de>  Tue, 27 Dec 2022 21:00:02 +0100

ncurses (6.3+20221224-1) experimental; urgency=medium

  * New upstream patchlevel.
    - Revise kon/kon2/jfbterm to undo "linux2.6" change to
      smacs/rmacs/enacs (Closes: #1012800).
    - Improve pointer/limit checks associated with deleting a screen
      (Closes: #1015756).
  * Refresh Debian patches.
  * Convert lintian overrides to the new format in Lintian 2.115.
  * Add a new override for source-is-missing in the Ada documentation
    (see #1019980).
  * Upgrade Standards-Version to 4.6.2, no changes needed.

 -- Sven Joachim <svenjoac@gmx.de>  Mon, 26 Dec 2022 20:22:07 +0100

ncurses (6.3+20220423-2) unstable; urgency=medium

  * Update patch 02-debian-xterm.diff: drop "dec+sl" from xterm-new and
    derived terminfo descriptions (Closes: #1010270).

 -- Sven Joachim <svenjoac@gmx.de>  Thu, 05 May 2022 19:01:43 +0200

ncurses (6.3+20220423-1) unstable; urgency=medium

  * New upstream patchlevel.
    - Add a limit-check to guard against corrupt terminfo data
      (report/testcase by NCNIPC of China (CVE-2022-29458),
      Closes: #1009870).
    - Minor clarification to clear.1 (Closes: #999437).
  * Refresh Debian patches.
  * Update symbols files.
  * Ensure that the README file in ncurses-examples has correct
    permissions (Closes: #1003929).
  * Add a lintian override to ncurses-examples for a false positive
    bash-term-in-posix-shell in tput-initc.
  * Update debian/ncurses-term.links to avoid a broken symlink
    /usr/share/terminfo/r/rxvt-color.
  * Remove libmd-dev build dependency on kfreebsd, no longer needed.

 -- Sven Joachim <svenjoac@gmx.de>  Tue, 26 Apr 2022 19:52:23 +0200

ncurses (6.3-2) unstable; urgency=medium

  * Add Breaks on neovim (<< 0.6.0) to ncurses-base (Closes: #999777).
  * Drop patch 02-debian-drop-rin-from-screen-256color.diff
    (Closes: #1003546).  Tmux users should upgrade to version 3.0 or
    higher, or set TERM to something else than screen-256color.
  * Make ncurses-base the primary package into which the Debian FAQ
    and TODO files are installed.
  * Add libmd-dev to Build-Depends on kfreebsd-any to work around FTBFS
    if /usr/lib/$(DEB_HOST_MULTIARCH)/pkgconfig does not exist.
  * Install the example programs into /usr/libexec/ncurses-examples.

 -- Sven Joachim <svenjoac@gmx.de>  Mon, 17 Jan 2022 18:02:04 +0100

ncurses (6.3-1) unstable; urgency=medium

  * New upstream release.
  * Update symbols files and bump shlibs.
    - Update the minimal version for symbols added after the 6.2 release
      to 6.3.
  * Drop the lintian override for ncurses-examples introduced in version
    6.1+20181013-2, it no longer triggers.
  * Do not force removal of obsolete packages which terminfo files have
    been taken over by ncurses-term (Closes: #994433).

 -- Sven Joachim <svenjoac@gmx.de>  Mon, 15 Nov 2021 17:54:06 +0100

ncurses (6.2+20210905-1) unstable; urgency=low

  * New upstream patchlevel.
    - Extend --disable-pkg-ldflags option to also control whether
      $LDFLAGS from the build is provided in -config and .pc files.
      Use that option in debian/rules (Closes: #986764).
    - Drop symbols GCC_PRINTF and GCC_SCANF from curses.h.in, to
      simplify use (Closes: #993179).
  * Drop patch 02-fix-mlterm.diff, applied upstream.
  * Refresh remaining Debian patches.
  * Update symbols files for new symbols erasewchar_sp, killwchar_sp
    and _nc_reset_tparm.
  * Bump autoconf-dickey build dependency to (>= 2.52+20210509), as per
    test/configure.in.
  * Ship stterm and stterm-256color terminfo entries in ncurses-term.
  * Take over terminfo entries from the deceased Debian packages
    jfbterm, kon2, libiterm1 and tn5250 in ncurses-term.
  * Update list of terminfo entries shipped by other Debian packages.
  * Update years in debian/copyright.

 -- Sven Joachim <svenjoac@gmx.de>  Thu, 09 Sep 2021 19:56:22 +0200

ncurses (6.2+20201114-4) unstable; urgency=medium

  * Source-only upload for migration to testing, no changes.

 -- Sven Joachim <svenjoac@gmx.de>  Thu, 26 Aug 2021 18:39:10 +0200

ncurses (6.2+20201114-3) unstable; urgency=medium

  [ Debian Janitor ]
  * Remove constraints unnecessary since stretch:
    + ncurses-term: Drop versioned constraint on suckless-tools in Replaces.
    + ncurses-term: Drop versioned constraint on suckless-tools in Breaks.
    + libtinfo5: Drop versioned constraint on dialog in Breaks.

  [ Jordi Mallach ]
  * Introduce a libncursesw6-udeb package, needed by newer nano versions
    (Closes: #976275).

  [ Sven Joachim ]
  * Add new upstream signing key 19882D92DDA4C400C22C0D56CC2AF4472167BE03
    to debian/upstream/signing-key.asc.

 -- Sven Joachim <svenjoac@gmx.de>  Sun, 22 Aug 2021 08:29:53 +0200

ncurses (6.2+20201114-2) unstable; urgency=medium

  * New patch 02-fix-mlterm.diff, cherry-picked from the 20201205 upstream
    patchlevel.
    - Correct mlterm3 kf1-kf4 (Closes: #975322).
    - Add flash to mlterm3.
  * Refresh Debian patches.

 -- Sven Joachim <svenjoac@gmx.de>  Fri, 01 Jan 2021 16:02:10 +0100

ncurses (6.2+20201114-1) unstable; urgency=medium

  * New upstream patchlevel.
    - Add tmux-direct terminfo entry (Closes: #895754).
  * Add Breaks on cowdancer (<< 0.89~) to libncurses6 (Closes: #971672).
  * Upgrade Standards-Version to 4.5.1, no changes needed.

 -- Sven Joachim <svenjoac@gmx.de>  Thu, 19 Nov 2020 18:08:43 +0100

ncurses (6.2+20200918-1) unstable; urgency=medium

  * New upstream patchlevel.
    - Corrected condition for appending curses.events to the generated
      curses.h (report by Sven Joachim, Closes: #970577).
   * Version the Provides of the transitional -dev packages
     by libncurses-dev.

 -- Sven Joachim <svenjoac@gmx.de>  Sun, 20 Sep 2020 11:16:40 +0200

ncurses (6.2+20200912-1) unstable; urgency=medium

  [ Sven Joachim ]
  * New upstream patchlevel.
    - Move dlclose() call from lib_mouse.c to delscreen() to avoid a
      case in the former which could be called from SIGTSTP handler
      (Closes: #961097).
  * Update symbols files for new symbol _nc_tiparm.
  * Bump autoconf-dickey build dependency to (>= 2.52+20200111), as per
    configure.in.
  * Bump debhelper compatibility level to 13.
    - Use the substitution feature in that compat level to get rid of the
      debian/*.{install,links}.in files.

  [ Debian Janitor ]
  * Wrap long lines in changelog entries: 5.0-5.

 -- Sven Joachim <svenjoac@gmx.de>  Thu, 17 Sep 2020 19:18:53 +0200

ncurses (6.2-1) unstable; urgency=medium

  [ Debian Janitor ]
  * Rely on pre-initialized dpkg-architecture variables.
  * Fix day-of-week for changelog entries 5.7+20090314-1, 5.6+20080419-
    2.

  [ Sven Joachim ]
  * New upstream release.
  * Refresh Debian patches.
  * Update symbols files and bump shlibs.
    - Update the minimal version for symbols added after the 6.1 release
      to 6.2.
    - Silence the package-placeholder-in-symbols-file lintian warning
      in the ABI5 library packages.
  * Get rid of debian/xterm.ti, and record the changes Debian makes to the
    xterm* terminfo entries in a new patch 02-debian-xterm.diff.
  * Switch debian/copyright to format 1.0, and update the years.
  * Upgrade Standards-Version to 4.5.0, no changes needed.

 -- Sven Joachim <svenjoac@gmx.de>  Sat, 29 Feb 2020 10:05:22 +0100

ncurses (6.1+20191019-1) unstable; urgency=medium

  * New upstream patchlevel.
    - Fix several errata in tic (Closes: #942401).
      + Check for invalid hashcode in _nc_find_type_entry
        and nc_find_name_entry (CVE-2019-17594).
      + Check for invalid hashcode in _nc_find_entry.
      + Check for missing character after backslash in fmt_entry
        (CVE-2019-17595).
  * Refresh patch 03-debian-ncursesconfig-omit-L.diff.
  * Support additional build profiles:
    - Skip building ABI 5 libraries in a pkg.ncurses.nolegacy build profile.
    - Skip building the examples in a pkg.ncurses.noexamples build profile.
    - Do not build libtinfo6-udeb in the noudeb build profile.
  * Add a "Replaces: alacritty (<< 0.3.4~)" to ncurses-term
    (Closes: #933386).
  * Add a Salsa CI pipeline in debian/gitlab-ci.yml.
  * Export BUILD_{C,CPP,LD}FLAGS in debian/rules, making blhc happy.
  * Upgrade Standards-Version to 4.4.1, no changes needed.

 -- Sven Joachim <svenjoac@gmx.de>  Thu, 24 Oct 2019 18:18:57 +0200

ncurses (6.1+20190803-1) unstable; urgency=medium

  * New upstream patchlevel.
    - Amend the change to screen, because tmux relies upon that entry
      and does not support that feature (Closes: #933572).
  * New patch 02-debian-drop-rin-from-screen-256color.diff: remove "rin"
    also from screen-256color, used by some tmux users as their $TERM.
  * Drop patch fix-tabs-manpage-installation.diff, applied upstream.
  * Refresh patch 02-debian-backspace.diff after upstream changes to
    the screen terminfo description.

 -- Sven Joachim <svenjoac@gmx.de>  Thu, 08 Aug 2019 17:39:10 +0200

ncurses (6.1+20190713-2) unstable; urgency=medium

  * Drop "rep" from xterm-new and derived terminfo descriptions
    (Closes: #933053).

 -- Sven Joachim <svenjoac@gmx.de>  Thu, 01 Aug 2019 18:12:18 +0200

ncurses (6.1+20190713-1) unstable; urgency=low

  * New upstream patchlevel.
  * Refresh patch 02-debian-backspace.diff after upstream changes to
    the screen terminfo description.
  * New patch fix-tabs-manpage-installation.diff, reverts a broken
    upstream change which inadvertently installed the tabs.1 manpage
    as a dangling symlink.
  * Update symbols files for new symbol _nc_find_user_entry.
  * Move the tmux and tmux-256color terminfo entries to ncurses-base
    (Closes: #927973).
  * Bump debhelper compatibility level to 12.
    - Build-depend on debhelper-compat (= 12) and drop debian/compat.
  * Drop the -dbg packages (Closes: #849003).
  * Reduce the size of the -dbgsym packages with dh_dwz.
  * Update years in debian/copyright.
  * Upgrade Standards-Version to 4.4.0, no changes needed.

 -- Sven Joachim <svenjoac@gmx.de>  Fri, 19 Jul 2019 17:14:25 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libtinfo6`.
