openafs (1.8.16.1-1) unstable; urgency=medium

  * New upstream release:
    - Support Linux versions through 7.1.
    - Support building with GCC 16.
  * Set _FILE_OFFSET_BITS=64 for i386 build (Closes: #1135626).

 -- Benjamin Kaduk <kaduk@mit.edu>  Sun, 26 Jul 2026 20:08:04 -0700

openafs (1.8.16~pre1-1) unstable; urgency=medium

  * New upstream prerelease (and full release that was skipped):
    From 1.8.15:
      - Begin moving from /usr/include/lock.h to /usr/include/afs/afs_lock.h
        (a compat stub remains for now).
      - Fix two bugs where the fileserver could send uninitialized stack data
        over the network in certain cases.
      - Fix a bug where clients handled callback expiration incorrectly for
        newly created files, that could have resulted in stale data being
        returned in some conditions.
      - Support Linux 6.17.
      - Fix a race condition that, when triggered, could lead to spurious
        SIBGUS errors when reading memory-mapped files.
    From 1.8.16pre1:
      - Fix a bug in the Linux 6.17 support that caused dentries to not be
        revalidated properly, which manifested as filename changes made on
        other clients not being visible to the impacted client.
      - Support Linux versions through 7.0 (Closes: #1121457, #1124929).
  * Add Catalan debconf translation; thanks Carles Pina i Estany
    (Closes: #1106327).
  * Import upstream patches for fuse3 support (Closes: #1084418).
  * Update Standards-Version to 4.7.4 (remove Priority from d/control).
  * Drop support for powerpcspe after its removal from -ports.

 -- Benjamin Kaduk <kaduk@mit.edu>  Thu, 30 Apr 2026 15:17:38 -0700

openafs (1.8.14-1) unstable; urgency=medium

  * New upstream release:
    - No changes since pre1
  * Import upstream patches for Linux 6.17 support (Closes: #1119913).

 -- Benjamin Kaduk <kaduk@mit.edu>  Sat, 22 Nov 2025 20:18:24 -0800

openafs (1.8.14~pre1-1) unstable; urgency=medium

  [ Benjamin Kaduk ]
  * New upstreamm prerelease:
    - Support building with gcc-15 (Closes: #1097511)
    - Support Linux versions through 6.16 (Closes: #1112682, #1112187,
      #1104420).
    - Fix a situation that could crash or hang processes accessing AFS that
      receive a signal while waiting for network packets; Go applications were
      particularly impacted.
    - Additional logging and startup time improvements for fileservers.
    - Renumber the RXAFS_StoreACL RPC opcode to help with AFS3 ecosystem
      cleanup stemming from a (non-OpenAFS) implementation that mishandled
      negative ACLs.
    - The dynroot (default config) permissions for the /afs mount point
      directory are now 0555 instead of 0755.
    - Avoid a possible client crash on restart after the configured cache
      size is greatly reduced.
  * Build-Depend on libcrypt-dev since it is linked directly
    (Closes: #1106957)
  * Bump Standards-Version to 4.7.2.

  [ Andreas Beckmann ]
  * Add autopkgtest for openafs-modules-source (Closes: #1100075)
  * Skip tests for PREEMPT_RT_FULL as well as PREEMPT_RT configs.

 -- Benjamin Kaduk <kaduk@mit.edu>  Fri, 26 Sep 2025 12:44:38 -0700

openafs (1.8.13.2-1) unstable; urgency=medium

  * New upstream release:
    - Support Linux versions through 6.13 (Closes: #1089501)
  * Set Rules-Require-Root (Closes: #1093345)

 -- Benjamin Kaduk <kaduk@mit.edu>  Thu, 30 Jan 2025 12:14:18 -0800

openafs (1.8.13-1) unstable; urgency=high

  * New upstream security release:
    - Fix OPENAFS-SA-2024-001: theft of credentials from Unix PAGs
      (CVE-2024-10394)
    - Fix OPENAFS-SA-2024-002: fileserver crash on malformed StoreACL
      (CVE-2024-10396)
    - Fix OPENAFS-SA-2024-003: buffer overflows in XDR responses
      (CVE-2024-10397)
    - Closes: #1087406, #1087407

 -- Benjamin Kaduk <kaduk@mit.edu>  Tue, 12 Nov 2024 13:58:26 -0800

openafs (1.8.12.1-1) unstable; urgency=medium

  * New upstream release:
    - Support Linux versions through 6.10 (Closes: #1077837).
  * Update Standards-Version to 4.7.0 (no changes needed).

 -- Benjamin Kaduk <kaduk@mit.edu>  Thu, 22 Aug 2024 10:35:13 -0700

openafs (1.8.12~pre1-1) unstable; urgency=medium

  * New upstream release candidate.
    From 1.8.12pre1:
      - Support Linux versions through 6.9 (Closes: #1060896).
      - Wait to run rx-perf test until server has started (Closes: #886696).
      - Avoid unsupported relocation type on AArch64 kmods (Closes: 1069781).
    From 1.8.11:
      - Flush Linux VFS dentry caches from `fs flush*` commands, reducing the
        need to write to /proc/sys/vm/drop_caches when troubleshooting.
      - Various bugfixes to avoid crashes and potential memory corruption.
      - Additional warnings in server logs: when an older version of a volume
        is restored, and when bosserver is not started in restricted mode.
      - Improve checks to avoid running RPCs when spurious packets are
        received.
      - Update to CellServDB from grand.central.org from 31 Oct 2023.
      - Address a couple potential sources of performance degradation in
        clients.
      - Refresh cache entries when size mismatches are detected.
  * Drop alternative dependency on kernel-package from openafs-modules-source;
    it has been gone since stretch (Closes: #1014397).
  * Re-enable rx-perf test, disabled since 1.8.8.1-2, after upstream's change.
  * Switch from pkg-config to pkgconf.

 -- Benjamin Kaduk <kaduk@mit.edu>  Sun, 30 Jun 2024 14:42:29 -0700

openafs (1.8.10-2.2) unstable; urgency=medium

  * Non-maintainer upload.
  * Move afsd (back) into /usr/sbin (Closes: #1059432).
    Update path in init script and systemd service unit.

 -- Chris Hofstaedtler <zeha@debian.org>  Wed, 29 May 2024 00:48:42 +0200

openafs (1.8.10-2.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Rename libraries for 64-bit time_t transition.  Closes: #1062829

 -- Benjamin Drung <bdrung@debian.org>  Thu, 29 Feb 2024 02:46:04 +0000

openafs (1.8.10-2) unstable; urgency=medium

  * Update lintian overrides to use appropriate context.
  * Import upstream patches to support Linux versions through 6.6
    (Closes: #1043131)
  * Update README.servers and afs-newcell to reflect rxkad-k5 usage
    (Closes: #1019751)
  * Clean up some more generated upstream files (Closes: #1048470)
  * Update Brazilian Portuguese debconf translation; thanks
    Paulo Henrique de Lima Santana (Closes: 1028070)
  * Add Romanian debconf translation; thanks Remus-Gabriel Chelu
    (Closes: #1033142)
  * Update Swedish debconf translation; thanks Martin Bagge / brother
    (Closes: #1054618)

 -- Benjamin Kaduk <kaduk@mit.edu>  Sat, 23 Dec 2023 21:56:47 -0800

openafs (1.8.10-1) unstable; urgency=medium

  * New upstream release:
    - Support Linux versions through 6.4 (Closes: #1038002)
    - Update to CellServDB from grand.central.org from 9 May 2022.
    - Add -literal option for "fs getfid".
  * Drop dependency on lsb-base.
  * Build-depend on libncurses-dev rather than libncurses5-dev.
  * Update bundled CellServDB to grand.central.org version of 09 May 2022.
  * Bump Standards-Version to 4.6.2 (no changes needed).

 -- Benjamin Kaduk <kaduk@mit.edu>  Fri, 14 Jul 2023 10:30:24 -0700

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog openafs-client`.
