fcgiwrap (1.1.0-16build1) plucky; urgency=medium

  * Rebuild against new nginx 1.26.3.

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Mon, 10 Feb 2025 15:42:02 +0100

fcgiwrap (1.1.0-16) unstable; urgency=medium

  * Remove curly brackets from DAEMON_OPTS in systemd service file so
    the options are treated as multiple arguments (closes: #925894).
    Thanks to Chen-Yu Tsai <wens@csie.org>.
  * Update $systemdsystemunitdir to move systemd files to the UsrMerged
    path, for the DEP17m2 transition (closes: #1073778).

 -- Jordi Mallach <jordi@debian.org>  Wed, 26 Jun 2024 09:01:31 +0200

fcgiwrap (1.1.0-15) unstable; urgency=medium

  [ Mitchell Dzurick ]
  * d/t/git-http-backend: make www-data own $AUTOPKGTEST_TMP/test1/.git
    git introduced more aggressive security checking, so the dep8 test needs
    to explicitly change ownership of the new git directory.
    (LP: #2067942, Closes: #1072394)

  [ Jordi Mallach ]
  * Update Standards-Version to 4.7.0, with no changes needed.
  * Update copyright years.
  * Replace pkg-config with pkgconf in Build-Depends.
  * Remove obsolete dependency on lsb-base.
  * Add a Documentation key to systemd service file pointing to manpage.
  * Replace systemctl call in prerm with deb-systemd-invoke.

 -- Jordi Mallach <jordi@debian.org>  Wed, 05 Jun 2024 12:56:01 +0200

fcgiwrap (1.1.0-14) unstable; urgency=medium

  * Brown paper bag release.
  * Fix typo in systemd socket definition which actually made the
    security fixes in -13 not effective (closes: #1023688, #1026251).

 -- Jordi Mallach <jordi@debian.org>  Sat, 17 Dec 2022 18:23:54 +0100

fcgiwrap (1.1.0-13) unstable; urgency=medium

  [ Jordi Mallach ]
  * Tighten permissions and ownership of fcgiwrap socket.
    This was previously mode 0666, thus writable by any user,
    which could lead to trivial privilege escalation to www-data.
    Thanks to Anton Luka Šijanec. (Closes: #1023688)
  * Bump debhelper compat to v13 and use debhelper-compat to declare it.
  * Set Rules-Requires-Root to no.
  * Update copyright years.
  * Make systemd the main dependency, with spawn-fcgi as the alternative.
  * Add missing ${misc:Pre-Depends} to handle init-system-helpers requirement.
  * Update Standards-Version to 4.6.1, with no changes needed.
  * Add a NEWS.Debian entry pointing out that the socket permission change
    might break existing setups if they relied on a world-writable socket.
  * Change all references to /var/run to just /run.

  [ Debian Janitor ]
  * Set upstream metadata fields: Bug-Database, Bug-Submit, Repository-Browse.
  * Trim trailing whitespace.

 -- Jordi Mallach <jordi@debian.org>  Fri, 09 Dec 2022 12:47:07 +0100

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog fcgiwrap`.
