httrack (3.49.12-1) unstable; urgency=medium

  * New upstream release: security and crawl-correctness fixes (remote stack
    overflow in Content-Type/-Encoding parsing, fuzzer-found parser over-reads,
    world-readable cookies.txt, filter-pattern denial of service) plus a new
    --why filter diagnostic; full list in history.txt.
  * Build with _FORTIFY_SOURCE and -fstack-protector-strong.

 -- Xavier Roche <xavier@debian.org>  Fri, 10 Jul 2026 21:11:09 +0200

httrack (3.49.11-1) unstable; urgency=medium

  * New upstream release: crawl correctness and security fixes (network-facing
    buffer overflows, file-type detection, redirect handling) and modernized
    web defaults; full list in history.txt.
  * Add DEP-12 upstream metadata (#466).
  * Bump debhelper compat to 14 (#466).
  * Drop the redundant Priority field and update the NMU lintian override to
    the current tag names (#466).

 -- Xavier Roche <xavier@debian.org>  Sun, 05 Jul 2026 00:03:18 +0200

httrack (3.49.10-2) unstable; urgency=medium

  * Fix FTBFS: tests/28_local-pause failed instead of skipping when python3 is
    absent (the local-server tests need python3, which the buildds lack). Add
    patches/skip-local-pause-test-without-python3.patch to guard the test on
    python3 up front, like its siblings, so it skips cleanly.

 -- Xavier Roche <xavier@debian.org>  Sun, 28 Jun 2026 20:18:46 +0200

httrack (3.49.10-1) unstable; urgency=medium

  * New upstream release: new download-pacing and URL-handling options plus a
    batch of crawl and robustness fixes (full list in history.txt).
  * Rewrite debian/copyright in machine-readable DEP-5 format, crediting the
    bundled minizip, md5 and coucal sources (#415).
  * Lead the webhttrack browser dependency with chromium so httrack is not
    dragged into the firefox-esr autoremoval cascade (#436).
  * Override the embedded-library lint for the bundled minizip (#419).
  * Bump Standards-Version to 4.7.4 (no changes required).

 -- Xavier Roche <xavier@debian.org>  Sun, 28 Jun 2026 14:01:53 +0200

httrack (3.49.9-1) unstable; urgency=medium

  * New upstream release: Content-Type and file-type detection fixes (trust a
    declared Content-Type over a binary URL extension, honor --assume under the
    delayed type check, keep a known extension against a bogus or empty
    Content-Type, and avoid an uninitialised read on an empty Content-Type), and
    restored C++ source-compatibility of the installed headers so reverse
    dependencies (httraqt) build again.

 -- Xavier Roche <xavier@debian.org>  Sun, 21 Jun 2026 17:59:38 +0200

httrack (3.49.8-2) unstable; urgency=medium

  * Rename libhttrack2 to libhttrack3 to follow the SONAME, which the 3.49.8
    ABI bump moved to libhttrack.so.3 (package-name-doesnt-match-sonames). In
    3.49.8-1 the libhttrack2.files glob still matched .so.2, so the runtime
    libraries fell through into the httrack package and libhttrack2 shipped no
    library. The new .files uses a .so.3* wildcard so a future SONAME bump no
    longer silently misplaces the libraries. New binary package, via NEW.
  * Drop the stale debian/libhttrack-swf1.files: the swf module is no longer
    built and no libhttrack-swf1 package exists.

 -- Xavier Roche <xavier@debian.org>  Sat, 20 Jun 2026 14:42:13 +0200

httrack (3.49.8-1) unstable; urgency=medium

  * New upstream release: HTTPS-proxy CONNECT tunnelling and wider srcset
    parsing, a batch of crawler and parser fixes (CSS @import, xmlns
    namespaces, relative paths, RFC 6265 cookies), and security hardening of
    the parser and of buffer copies throughout the engine.
  * Drop the OpenSSL linking exception from the license: OpenSSL 3.0+ is
    Apache-2.0 and GPL-compatible, so it is no longer needed. httrack is now
    plain GPL-3.0-or-later. Updated debian/copyright accordingly.
  * Fix a batch of lintian tags: depend on sensible-utils, point to
    common-licenses/GPL-3, use a secure version=4 watch file, add
    Rules-Requires-Root and Vcs-Browser, and override the false-positive
    source-is-missing on the bundled HTML documentation.
  * Refresh the webhttrack browser dependency: drop the removed alternatives
    (iceape-browser, iceweasel, icecat, mozilla, firefox, mozilla-firefox)
    that no longer exist in Debian and triggered half-broken relationships on
    the QA debcheck page. Depend on firefox-esr | chromium | www-browser
    instead.

 -- Xavier Roche <xavier@debian.org>  Sat, 20 Jun 2026 13:02:08 +0200

httrack (3.49.7-2) unstable; urgency=medium

  * Bump Standards-Version to 4.7.0 (no changes needed).
  * Switch to debhelper-compat (= 13); drop the dh-autoreconf and
    autotools-dev build dependencies.

 -- Xavier Roche <xavier@debian.org>  Sun, 07 Jun 2026 14:13:39 +0200

httrack (3.49.7-1) unstable; urgency=medium

  * New upstream release.
  * Make config.h architecture-independent for Multi-Arch: same. closes:#1133728
  * Fix man page rendering of the -%! security warning. closes:#1061053

 -- Xavier Roche <xavier@debian.org>  Sat, 06 Jun 2026 21:03:05 +0200

httrack (3.49.6-1) unstable; urgency=medium

  * Updated to 3.49.6 (3.49-6)
    Fixed CVE-2017-14062

 -- Xavier Roche <xavier@debian.org>  Tue, 11 Mar 2025 19:43:39 +0100

httrack (3.49.5-1) unstable; urgency=medium

  * Updated to 3.49.5 (3.49-5)
    Fixed CVE-2023-45853

 -- Xavier Roche <xavier@debian.org>  Sat, 27 Jan 2024 14:30:23 +0100

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog httrack-doc`.
