libseccomp (2.1.1-1ubuntu1~trusty5) trusty-security; urgency=medium

  * No change rebuild for trusty-security

 -- Jamie Strandboge <jamie@ubuntu.com>  Tue, 29 Jan 2019 23:39:20 +0000

libseccomp (2.1.1-1ubuntu1~trusty4) trusty-proposed; urgency=medium

  * debian/libseccomp-dev.install: include static library
    (LP: #1703580)

 -- Michael Vogt <michael.vogt@ubuntu.com>  Tue, 11 Jul 2017 12:22:18 +0200

libseccomp (2.1.1-1ubuntu1~trusty3) trusty-proposed; urgency=medium

  * Cherrypick various bpf fixes to support argument filtering on 64-bit
    (LP: #1653487)
    - debian/patches/bpf-use-state-arch.patch: use state->arch instead of
      db->arch in _gen_bpf_arch()
    - debian/patches/db-require-filters-to-share-endianess.patch: require all
      filters in a collection to share the same endianess
    - debian/patches/resolve-issues-caused-by-be.patch: resolve issues caused
      by big endian systems
    - debian/patches/bpf-accumulator-check.patch: test the bpf accumulator
      checking logic
    - debian/patches/bpf-track-accumulator-state.patch: track accumulator
      state and reload it when necessary. This is the fix for LP: #1653487. The
      previous patches are required by this patch.
    - debian/patches/ensure-simulator-has-valid-arch.patch: ensure the
      simulator always has a valid architecture value. This fixes a regression
      in the testsuite introduced by resolve-issues-caused-by-be.patch
    - debian/patches/bpf-accumulator-check-indep.patch: fix a regression in the
      testsuite introduced by bpf-accumulator-check.patch
    - debian/patches/fix-audit-arch-i386.patch: fix arch token for 32-bit x86
      not being defined correctly for the tools

 -- Jamie Strandboge <jamie@ubuntu.com>  Wed, 04 Jan 2017 21:11:30 +0000

libseccomp (2.1.1-1ubuntu1~trusty1) trusty-proposed; urgency=medium

  * Bring libseccomp 2.1.1-1ubuntu1~vivid2, from Ubuntu 14.10, to Ubuntu
    14.04 and add a couple patches to account for new syscalls found in the
    4.4 based hardware enablement kernel. This allows for proper snap seccomp
    confinement on Ubuntu 14.04 when using the hardware enablement kernel
    (LP: #1450642)
    - debian/patches/add-membarrier-and-userfaultfd.patch: Add membarrier and
      userfaultfd syscalls
    - debian/patches/add-mlock2.patch: Add mlock2 syscall
    - debian/tests/data/all-except-s390-4.4.filter: Add autopkgtest that
      verifies all syscalls found in the 4.4 kernel, except for the s390
      specific syscalls, are supported by libseccomp. The s390 specific
      syscalls are not needed since this version of libseccomp does not
      support the s390 architecture.
    - debian/tests/test-filter: Skip the getrandom filter tests since
      SYS_getrandom is not defined in 14.04 environment and the getrandom(2)
      syscall is not even available in the 14.04 release kernel.

 -- Tyler Hicks <tyhicks@canonical.com>  Thu, 15 Dec 2016 23:26:30 +0000

libseccomp (2.1.1-1ubuntu1~vivid2) vivid-proposed; urgency=medium

  * add-finit-module.patch: add finit_module syscalls to x86 and x86-64
    syscall tables
  * update syscalls for modern kernels (skipping MIPS)
    - update syscalls for 3.16:
      + update-x86-syscall-table.patch
      + update-x86_64-syscall-table.patch
      + update-arm-syscall-table.patch
      + update-x32-syscall-table.patch
      + sync-syscall-table-entries.patch
      + sync-syscall-table-entries-fixtypo.patch
    - update syscalls for 3.17:
      + sync-syscall-table-entries-3.17.patch
    - update syscalls for 3.19:
      + sync-syscall-table-entries-3.19.patch
    - LP: #1450642
  * fix-segfault-with-unknown.patch: fix segfault when find unknown syscall
  * debian/patches/add-missing-arm-private-syscalls.path: add missing private
    ARM syscalls
  * add autopkgtests for scmp_sys_resolver and filter testing and
    SYS_getrandom() testing

 -- Jamie Strandboge <jamie@ubuntu.com>  Fri, 08 May 2015 17:10:14 -0400

libseccomp (2.1.1-1) unstable; urgency=low

  * New upstream release (Closes: 733293).
  * copyright: add a few missed people.
  * rules: adjusted for new test target.
  * libseccomp2.symbols: drop accidentally exported functions.
  * control:
    - bump standards, no changes needed.
    - add armel target

 -- Kees Cook <kees@debian.org>  Sat, 12 Apr 2014 10:44:22 -0700

libseccomp (2.1.0+dfsg-1) unstable; urgency=low

  * Rebuild source package without accidental binaries (Closes: 725617).
    - debian/watch: mangle upstream version check.
  * debian/rules: make tests non-fatal while upstream fixes them
    (Closes: 721292).

 -- Kees Cook <kees@debian.org>  Sun, 06 Oct 2013 15:05:51 -0700

libseccomp (2.1.0-1) unstable; urgency=low

  * New upstream release (Closes: 718398):
    - dropped debian/patches/manpage-dashes.patch: taken upstream.
    - dropped debian/patches/include-unistd.patch: not needed.
    - debian/patches/testsuite-x86-write.patch: taken upstream.
    - ABI bump: moved from libseccomp1 to libseccomp2.
  * debian/control:
    - added Arch: armhf, now supported upstream.
    - added seccomp binary package for helper tools.
  * Added debian/patches/manpage-typo.patch: spelling fix.
  * Added debian/patches/build-ldflags.patch: fix LDFLAGS handling.

 -- Kees Cook <kees@debian.org>  Tue, 13 Aug 2013 00:02:01 -0700

libseccomp (1.0.1-2) unstable; urgency=low

  * debian/rules: enable testsuite at build time, thanks to
    Stéphane Graber (Closes: 698803).
  * Added debian/patches/include-unistd.patch: detect location of
    asm/unistd.h correctly.
  * Added debian/patches/testsuite-x86-write.patch: skip the "write"
    syscall correctly on x86.
  * debian/control: bump standards to 3.9.4, no changes needed.

 -- Kees Cook <kees@debian.org>  Wed, 23 Jan 2013 13:11:53 -0800

libseccomp (1.0.1-1) unstable; urgency=low

  * New upstream release.
  * debian/control: only build on amd64 and i386 (Closes: 687368).

 -- Kees Cook <kees@debian.org>  Fri, 07 Dec 2012 11:38:03 -0800

# For older changelog entries, run 'apt-get changelog seccomp'
