libupnp4 (1.8.0~svn20100507-1.2+deb7u1build0.14.04.1) trusty-security; urgency=medium

  * fake sync from Debian

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Thu, 05 Jan 2017 07:45:39 -0500

libupnp4 (1.8.0~svn20100507-1.2+deb7u1) wheezy-security; urgency=high

  * Non-maintainer upload by the LTS team.
  * Fix CVE-2016-8863, a heap buffer overflow in the create_url_list
    function.

 -- Markus Koschany <apo@debian.org>  Fri, 16 Dec 2016 21:44:56 +0100

libupnp4 (1.8.0~svn20100507-1.2) unstable; urgency=high

  * Non-maintainer upload by the Security Team.
  * debian/patches/0001-Security-fix-for-CERT-issue-VU-922681 added, fix
    various stack-based buffer overflows in service_unique_name() function.
    This fix CVE-2012-5958, CVE-2012-5959, CVE-2012-5960, CVE-2012-5961,
    CVE-2012-5962, CVE-2012-5963, CVE-2012-5964, CVE-2012-5965. closes: #699459
  * debian/rules:
    - enable hardening flags.
  * debian/control:
    - add build-dep on dpkg-dev (>= 1.16.1~)

 -- Yves-Alexis Perez <corsac@debian.org>  Fri, 01 Feb 2013 22:53:13 +0100

libupnp4 (1.8.0~svn20100507-1.1) unstable; urgency=low

  * Non-maintainer upload.
  * Don't ship .la files (Closes: #622539).

 -- Luk Claes <luk@debian.org>  Sun, 26 Jun 2011 15:54:50 +0200

libupnp4 (1.8.0~svn20100507-1) unstable; urgency=low

  * New pull from upstream subversion
  * Fixes to BSD build issues (Closes: #573321, FTBFS on Gnu/kFreeBSD)
  * More debug tidying (07-neaten-debug.patch):
    - send UPNP_CRITICAL msgs to the info log as well as to the error log.
    - don't print HTTP headers to stdout as they're already in logfile.
  * Always compile in logging code but don't log unless requested
    (12-debian-always-debug.patch) to help porting other apps.
  * Remove patches 03, 04, 06, 08 and 10, now in upstream (note naming
    difference in upstream's string object accessors).
  * Add $PTHREAD_CFLAGS to libupnp.pc as assumed by {acx,ax}_pthread.m4
    (patch 16, Closes: #581608).

 -- Nick Leverton <nick@leverton.org>  Fri, 14 May 2010 15:34:11 +0100

libupnp4 (1.8.0~svn20090313-1) unstable; urgency=low

  * ACK NMU (thanks to gregor herrmann and Stefan Potyra).
  * Pull from svn, see upstream changes.gz for details
    (Closes: #492160, FTBFS on GNU/kFreeBSD, thanks to Petr Salinger).
  * Update Sections and general Policy to 3.8.4
  * Use debhelper 7 dh instead of dbs
  * Generate and update symbols file
  * Rename libs to libupnp4, libixml4 and libthreadutil4, to allow
    co-installing libupnp3 and libupnp4.
  * New patch 04-string-access-functions.patch: add _strget_ accessors
    to API, to avoid remembering to call UpnpString_get_String in clients.
  * New patch 05-const-tidyup.patch for a few constness fixes.
  * Upstream patch 06-patch-statevar-query.patch for missing CRNL.
  * New patch 07-neaten-debug.patch to improve debug readability
  * New patch 08-renewals-sid.patch to fix autorenewals.
  * New patch 09-update-doc.patch to generate up to date -doc package.
  * New patch 10-upnpinit-ntoa.patch to replace inet_ntoa by inet_ntop.

 -- Nick Leverton <nick@leverton.org>  Mon, 08 Mar 2010 18:26:14 +0000

libupnp4 (1.8.0~cvs20080628-2.1) unstable; urgency=low

  * Non-maintainer upload.
  * New patch 03-fix-duplicate-entries: remove duplicates from file list;
    patch by Stefan Potyra (closes: #543068).

 -- gregor herrmann <gregoa@debian.org>  Sat, 28 Nov 2009 00:47:48 +0100

libupnp4 (1.8.0~cvs20080628-2) unstable; urgency=low

  * Rebuild with source name libupnp4, to allow libupnp3 to remain in
    archive.
  * Various dependencies have been fixed, closes: #490533.
  * Added conflicts with libupnp3* (Closes: #490639)

 -- Nick Leverton <nick@leverton.org>  Sun, 13 Jul 2008 19:58:10 +0100

libupnp (1.8.0~cvs20080628-1) unstable; urgency=low

  * New upstream release
  * Bump soname yet again. This version is still under development but
    it is promised to be a stable API once it is released !
  * Co-exist with libupnp3 to allow controlled transition over API
    change.
  [ unera ]
  * Added lintian overrides.

 -- Nick Leverton <nick@leverton.org>  Sat, 28 Jun 2008 10:18:16 +0100

libupnp (1.6.6-1) unstable; urgency=low

  * New upstream release
  * Remove patch 03-upstream-upnp-rootdevice.patch, now in upstream.
  * Remove buggy patch 02-debian-fixed-length-buffer-for-urls.patch
    (Closes: #482737, reopens #353169).  libupnp4 will include upstream's
    wider changes for ridding the library of fixed-length static buffers.
  * Update watchfile again for better uscan pattern matching
  * Build -dbg symbol package anyway; allow pupnp "--enable-debug" via
    DEB_BUILD_OPTIONS="debug"
  * Update copyright file to reflect all contributors.
  * Tidy up build to use dh_install.

 -- Nick Leverton <nick@leverton.org>  Thu, 19 Jun 2008 18:27:11 +0100

# For older changelog entries, run 'apt-get changelog libupnp4'
