cgoban (1.9.14-22) unstable; urgency=low

  * Harden the IGS client parser against malicious server input: add field
    widths to unbounded sscanf() conversions that copied server-controlled
    data into fixed-size stack buffers (potential remote buffer overflow),
    including the game-list rank and flag fields parsed by gotGameInfo,
    and turn the related parse asserts into graceful returns to prevent a
    remote denial of service (igs-client-input.diff).
  * Bound SGF coordinate handling: length-limit the lVal copy and return the
    existing invalid-location sentinel instead of aborting on a malformed
    coordinate (sgf-input-bounds.diff).
  * Respect externally supplied CFLAGS so that the dpkg-buildflags hardening
    (notably -g, -fstack-clash-protection, -fcf-protection and
    -Werror=format-security) is no longer discarded by the upstream
    WMS_GET_CFLAGS macro (configure-respect-cflags.diff), closes: #1119374.
  * Remove the unused, predictable /tmp reference in grab_cgoban
    (grab-cgoban-tmpfile.diff).
  * Convert debian/copyright to the machine-readable DEP-5 format.
  * Drop the now redundant postinst/postrm: the desktop database is refreshed
    by the desktop-file-utils trigger.
  * Use https in the Homepage field and in debian/watch.
  * Remove trailing whitespace from the package long description.
  * Replace the dead NNGS server connection (nngs.cosmic.org, shut down in
    2005) with an informational message window (nngs-shutdown-notice.diff),
    closes: #426045.
  * Silence the eight -Wformat-overflow/-Wformat-truncation warnings by
    converting the affected sprintf calls to snprintf and enlarging the
    destination buffers to the worst-case formatted size (format-overflow.diff).
  * Clamp porthole dimensions to at least 1x1 before creating the backing
    pixmap, fixing a BadAlloc/BadValue crash from X_CreatePixmap under
    tiling window managers, (debian/patches/crashes-in-awesome.diff),
    closes: #677004, #697815.
  * Do not abort the IGS session on an unparsable server line: replace the
    misleading "ELF sscanf bug" pop-ups with a single stderr diagnostic and
    skip only the offending line (igs-gamelist-graceful.diff).
  * Zero newly created XImages so unpainted pixels are not sent to the X
    server as heap garbage (random coloured noise in the UI); the stone
    renderer only fills the pixels inside each shape (init-image-data.diff).
  * Fix the IGS read loop to correctly accumulate server responses larger
    than the 8 KB input buffer; previously a busy server's game/who list
    left stale bytes that showed as garbage in the terminal (igs-read-buffer.diff).
  * Display the observable-games list compactly, without the blank rows
    that game-number gaps produced on busy servers (games-list-compact.diff).

 -- Martin A. Godisch <godisch@debian.org>  Wed, 17 Jun 2026 05:12:30 +0200

cgoban (1.9.14-21) unstable; urgency=low

  * Rebuilt against current debian unstable.
  * Fixed compiler warnings (debian/patches/unused-result.diff).
  * Updated standards version.

 -- Martin A. Godisch <godisch@debian.org>  Sun, 07 Jun 2026 07:13:18 +0200

cgoban (1.9.14-20.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Fix FTBFS with GCC 15. (Closes: #1096428)

 -- Adrian Bunk <bunk@debian.org>  Sat, 20 Sep 2025 20:04:59 +0300

cgoban (1.9.14-20) unstable; urgency=low

  * Updated path to gnugo.
  * Changed build system to debhelper, closes: #943719.
  * Updated standards version.

 -- Martin A. Godisch <godisch@debian.org>  Wed, 27 Mar 2024 12:14:11 +0100

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog cgoban`.
