ldns (1.8.4-2build1) plucky; urgency=medium

  * No-change rebuild for Python 3.13 as the default.

 -- Matthias Klose <doko@ubuntu.com>  Fri, 03 Jan 2025 12:05:05 +0100

ldns (1.8.4-2) unstable; urgency=medium

  * d/changelog: restore the wrongly modified previous changelog entry date
  * swig-4.3.patch (Closes: #1091117)

 -- Michael Tokarev <mjt@tls.msk.ru>  Thu, 26 Dec 2024 00:04:32 +0300

ldns (1.8.4-1) unstable; urgency=medium

  * new upstream release
  * d/patches: remove patches applied upstream:
    ldns-rdf-typemap-fixes-for-swig-4.2.0.patch doxygen-in-builddir.patch
  * d/rules: accommodate for changing python paths for _ldns.a
  * d/libldns3t64.symbols: update symbols file
    add 3 new symbols, and REMOVE 3 symbols which are no longer there:
     ldns_edns_set_code ldns_edns_set_data ldns_edns_set_size
    These symbols seems to be internal, previously exported by mistake
  * d/rules: allow parallel build (DEB_BUILD_OPTIONS=parallel=N)

 -- Michael Tokarev <mjt@tls.msk.ru>  Sat, 20 Jul 2024 11:12:30 +0300

ldns (1.8.3-2) unstable; urgency=medium

  * ldns-rdf-typemap-fixes-for-swig-4.2.0.patch (Closes: #1066217)
    From upstream https://github.com/NLnetLabs/ldns/pull/231

 -- Michael Tokarev <mjt@tls.msk.ru>  Sat, 16 Mar 2024 18:04:34 +0300

ldns (1.8.3-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Rename libraries for 64-bit time_t transition.  Closes: #1064167

 -- Lukas Märdian <slyon@debian.org>  Thu, 29 Feb 2024 08:19:16 +0000

ldns (1.8.3-1) unstable; urgency=medium

  * new upstream version 1.8.3
  * d/libldns3.symbols: include new symbols
  * doxygen-in-builddir.patch: patch from upstream
    to fix doxygen build in a separate build directory
  * always build in a subdir (build/main for the main build), -
    no need to hack clean target anymore
  * d/rules: mark all build/install targets as .PHONY
    (makes build target work with build subdir)
  * d/libldns-dev.install: do not install libldns.pc,
    it is already installed by upstream as ldns.pc
  * disable GOST algorithm (Closes: #862207)
    GOST R 34.10-2001 is an obsolete algorithm which should not be used
    in production.  It is not provided by openssl too, a special plugin
    is required to be installed. This change removes it entirely.
    This removes 4 symbols out of libldns3.so:
     ldns_gost2pkey_raw
     ldns_gost_engine
     ldns_key_EVP_load_gost_id
     ldns_key_EVP_unload_gost
    Technicallly we should bump soname when removing symbols from a
    shared library.  Or alternatively, we can provide stubs which just
    return failure.  But in this case there should be no problems, since
    the symbols aren't used by any of rdepends, and they should not be
    used by anything either, given the context.
    If lack of one of these symbols will be problematic we can solve
    it down the line.
  * d/rules: since compat9 dh_auto_* tools export CFLAGS/LDFLAGS already
  * d/changelog: fix typo in previous entry

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 05 Sep 2022 11:39:52 +0300

ldns (1.8.1-1) unstable; urgency=medium

  * New upstream version 1.8.1
    Closes: #1008638 (FTBFS with python 3.10 due to distutils check)
    Closes: #1005646 (FTBFS with OpenSSL 3.0)
    Closes: #1009385 (output of ldns-key2ds changes after compiler changes)
    Closes: CVE-2020-19860 (heap buffer overflow while verifying zone file)
    Closes: CVE-2020-19861 (heap overflow/leakage when reading a zone file)
  * rework the build system, fixing numerous issues:
   - stop overwriting files at install time from different builds
     and ending up using the build with wrong configure options
   - stop running install twice
   - stop removing system-installed files if any on clean
   - stop doing (re)build of everything just for the python build
   - build python bits in the main build and perform extra steps
     only if there's more than one python version to build for
     (this effectively eliminates miltiple builds completely)
   - clarify build with multiple pyversions and why it still fails
   - remove old, now irrelevant, stuff (like overriding options
     which are being in effect anyway, or which has no effect)
   - move variable-based custom install rule for libldns.pc
     into .install file once dh now allows variables in there
   - reduce startup time by eliminating dpkg's default.mk which is slow
   - remove the wrongly-generated staic lib for the python bindings
     (_ldns.{a,la}) in the install rules instead of ignoring them
     in dh_install -X
   - fix add --with-trust-anchor= so it actually works
   - replace dh --with python with Build-Depend: dh-sequence-python3
   - run dh only for supported targets/sequences
  * update symbols file for 1.8 version, adding 6 new symbols
  * remove Makefile-remove-install-libldns-pc.patch
  * update short descriptions of all packages to mention what is
    actually in there instead of being the same for all packages
  * remove Build-Dependes: chrpath & pkg-config (not used)
  * add fix-pyldns-include.patch to fix building pyldns outside source dir
  * d/control: update Stdandards-Version to  4.6.0.1 (no changes)
  * d/watch: rework, simplify, use https, enable pgp signature verification
  * add upstream/signing-key.asc with the followig key:
    E5F8F8212F77A498 "Willem Toorop <willem@nlnetlabs.nl>"
  * remove trailing whitespace from d/changelog
  * add myself to uploaders

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 26 Apr 2022 16:05:17 +0300

ldns (1.7.1-3) unstable; urgency=medium

  * Acknowledge NMU (thanks, Michael Tokarev!)

  [ Robert Edmonds ]

  * debian/rules: Add "--with-trust-anchor=/usr/share/dns/root.key"
    to configure parameters
  * debian/control: Add "Recommends: dns-root-data" to ldnsutils

  [ Daniel Kahn Gillmor ]

  * added myself to uploaders
  * Import upstream patch to fix SHA-256 on GCC 11 (Closes: #1009385)
  * d/watch: update to version 4 (and use https)
  * d/clean: clean up some generated files

 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Wed, 13 Apr 2022 10:27:03 -0700

ldns (1.7.1-2.1) unstable; urgency=medium

  * Non-maintainer upload.
  * add fix-wrong-python-distutils-configure-check.diff to fix the
    incorrect distutils package check (it should be checking the
    return code not the emptiness of the output). This fixes FTBFS
    with new python (3.10) and allows the python3.10 transition to
    happen, but it is not fixing the actual issiue with ldns using
    distutils which should be addressed later.  Closes: #1008638

 -- Michael Tokarev <mjt@tls.msk.ru>  Thu, 07 Apr 2022 16:03:29 +0300

ldns (1.7.1-2) unstable; urgency=low

  * Team upload.
  * Upload to unstable.

 -- Santiago Ruano Rincón <santiago@debian.org>  Wed, 24 Jun 2020 14:08:19 +0200

ldns (1.7.1-1) experimental; urgency=low

  * Team upload.
  * New upstream version 1.7.1
    - Fixes: libldns2: CDS/CDNSKEY RRs are signed with ZSK instead of KSK
      (Closes: #945324)
  * Remove no longer needed patches:
    - 0002-Check-parse-limit-before-t-increment.patch
    - 0003-bugfix-1257-Free-after-reallocing-to-0-size.patch
    - swig4.0-support-from-jitka-plesnkov.patch
  * Stop building python-ldns (Closes: #936832)
  * Add Makefile-remove-install-libldns-pc.patch to avoid FTBFS
  * Bump soname. Rename libldns2 to libldns3
  * Update and rename libldns3.symbols
  * Add debian/salsa-ci.yml
  * Fix FTCBFS: Multiarchify python Build-Depends. (Closes: #929578)
    Patch by Helmut Grohne <helmut@subdivi.de>
  * Specify Rules-Requires-Root: no
  * Bump debhelper-compat to v13

 -- Santiago Ruano Rincón <santiago@debian.org>  Wed, 03 Jun 2020 23:02:22 +0200

ldns (1.7.0-4.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Use upstream patch to fix FTBFS with SWIG 4.0 (Closes: #951899)

 -- Ivo De Decker <ivodd@debian.org>  Fri, 20 Mar 2020 13:39:43 +0000

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libldns3t64`.
