async-http-client (2.12.3-1ubuntu0.24.04.1) noble-security; urgency=medium

  * SECURITY UPDATE: Cookie injection via ThreadSafeCookieStore
    - debian/patches/CVE-2026-55688.patch: add domain-match check in
      ThreadSafeCookieStore.add() per RFC 6265 §5.3 step 6.
    - CVE-2026-55688

 -- Paulo Flabiano Smorigo <pfsmorigo@canonical.com>  Tue, 18 Aug 2026 19:15:03 +0000

async-http-client (2.12.3-1) unstable; urgency=medium

  * New upstream release
  * Standards-Version updated to 4.6.0.1

 -- Emmanuel Bourg <ebourg@apache.org>  Sat, 18 Sep 2021 10:05:00 +0200

async-http-client (2.12.2-1) unstable; urgency=medium

  * New upstream release
    - Refreshed the patch
  * Standards-Version updated to 4.5.1
  * Switch to debhelper level 13

 -- Emmanuel Bourg <ebourg@apache.org>  Mon, 18 Jan 2021 21:42:56 +0100

async-http-client (2.11.0-1) unstable; urgency=medium

  * Team upload.
  * Update to upstream v2.11.0
  * Use debhelper-compat.
    - Update to compat level 12.
  * Update Standards-Version to 4.5.0
  * Add Rules-Requires-Root: no.
  * Use secure copyright format uri.

 -- Sudip Mukherjee <sudipm.mukherjee@gmail.com>  Tue, 14 Apr 2020 23:21:02 +0100

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libasync-http-client-java`.
