opendmarc (1.4.2-5.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Build with -std=gnu17 to workaround FTBFS with GCC 15
    in Milter headers. (Closes: #1097518)

 -- Adrian Bunk <bunk@debian.org>  Sun, 05 Oct 2025 15:49:13 +0300

opendmarc (1.4.2-5) unstable; urgency=medium

  * Non-maintainer upload.

  [ David Bürgin ]
  * Add patch "cve-2024-25768.patch" for CVE-2024-25768:
    Fix null pointer dereference in opendmarc_policy.c (Closes: #1070390)
  * Replace obsolete pkg-config dependency with pkgconf
  * Bump Standards-Version to 4.7.0 without further change

  [ Chris Hofstaedtler ]
  * Install systemd units into /usr. (Closes: #1058764)

  [ Scott Kitterman ]
  * Move packaging git from my personal namespace to debian
  * Remove myself as maintainer and move David from Uploaders to Maintainer

 -- Scott Kitterman <scott@kitterman.com>  Wed, 07 Aug 2024 20:13:39 -0400

opendmarc (1.4.2-4.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Rename libraries for 64-bit time_t transition.  Closes: #1063084

 -- Benjamin Drung <bdrung@debian.org>  Thu, 29 Feb 2024 12:17:41 +0000

opendmarc (1.4.2-4) unstable; urgency=medium

  * systemd: Revert introduction of sandboxing in opendmarc service, as it
    breaks sending of reports, which is a core function (Closes: #1047168)
  * Drop unused opendbx dependencies from Recommends (Closes: #1053435)

 -- David Bürgin <dbuergin@gluet.ch>  Fri, 08 Dec 2023 20:09:31 +0100

opendmarc (1.4.2-3) unstable; urgency=medium

  [ David Bürgin ]
  * debian/patches: Add missing upstream bug metadata, add new patches:
    - arcares-segfaults.patch: Fix segfaults in ARC-A-Res headers
    - parse-arc-leaks.patch: Fix memory leaks when parsing ARC headers
  * Update debian/watch to monitor GitHub tags instead of releases page
  * Remove obsolete debian/opendmarc.NEWS
  * Remove obsolete lsb-base dependency in opendmarc package
  * systemd: Enable some basic sandboxing features in opendmarc service
  * Bump Standards-Version to 4.6.2 without further change

  [ Remus-Gabriel Chelu ]
  * [INTL:ro] Romanian debconf templates translation (Closes: #1033171)

 -- David Bürgin <dbuergin@gluet.ch>  Sun, 09 Jul 2023 10:40:05 +0200

opendmarc (1.4.2-2) unstable; urgency=medium

  * systemd: Start service after network is online
  * Add patch "check-correct-domain.patch": opendmarc-check: print correct
    domain in loop
  * Bump Standards-Version to 4.6.1 without further change

 -- David Bürgin <dbuergin@gluet.ch>  Tue, 16 Aug 2022 16:04:54 +0200

opendmarc (1.4.2-1) unstable; urgency=medium

  * New upstream release
    - Refresh patches
    - Drop debian/patches/cve-2021-34555.patch, equivalent fix incorporated
      upstream

 -- Scott Kitterman <scott@kitterman.com>  Tue, 18 Jan 2022 12:14:37 -0500

opendmarc (1.4.1.1-2) unstable; urgency=medium

  * Deprecate /lib/opendmarc/opendmarc.service.generate script: instead, edit
    /etc/opendmarc.conf directly, or use "systemctl edit opendmarc.service" to
    create configuration overrides
  * Remove unexplained diff applied to reports/opendmarc-import.in from patch
    "ticket193.patch" (Closes: #995694)
  * Add patch "cleanup-buflen.patch": Fix off-by-one error buffer overrun
  * Align package synopses with opendkim packages

 -- David Bürgin <dbuergin@gluet.ch>  Wed, 03 Nov 2021 09:08:33 +0100

opendmarc (1.4.1.1-1) unstable; urgency=medium

  [ David Bürgin ]
  * New upstream release
    - Refresh patches, delete patches incorporated upstream
    - Update copyright information
  * Add new patches:
    - hold-quarantined-messages-doc.patch: Correct HoldQuarantinedMessages doc
    - insheader.patch: Insert trace headers at index 0
    - check_domain.patch: Make function check_domain static
    - arcseal-segfaults.patch: Fix segfaults in ARC-Seal headers
    - conf_refcnt.patch: Remove invalid assert statement
    - free-arcdomain.patch: Fix memory leak when evaluating ARC chain
    - arc-override-quarantine.patch: Add ARC override for policy "quarantine"
  * Set "Rules-Requires-Root: no" in d/control
  * Bump Standards-Version to 4.6.0 without further change

  [ Camaleón ]
  * [INTL:es] Spanish translation of the debconf template (Closes: #987480)

 -- David Bürgin <dbuergin@gluet.ch>  Tue, 24 Aug 2021 12:03:05 +0200

opendmarc (1.4.0~beta1+dfsg-6) unstable; urgency=high

  * Add patch for CVE-2021-34555 from upstream issue tracker:
    - Do not dereference NULL in multi-value From headers (Closes: #990001)

 -- David Bürgin <dbuergin@gluet.ch>  Fri, 18 Jun 2021 09:37:57 +0200

opendmarc (1.4.0~beta1+dfsg-5) unstable; urgency=high

  * Amend cve-2020-12272.patch to keep libopendmarc2 public ABI unchanged

 -- David Bürgin <dbuergin@gluet.ch>  Wed, 02 Jun 2021 14:17:33 +0200

opendmarc (1.4.0~beta1+dfsg-4) unstable; urgency=high

  * Backport patches from upstream version 1.4.1.1 (Closes: #977766, #977767):
    - CVE-2019-16378: Fix handling of multi-valued From headers
    - CVE-2019-20790: Validate incoming SPF headers
    - CVE-2020-12272: Check DKIM and SPF domain syntax

 -- David Bürgin <dbuergin@gluet.ch>  Sat, 29 May 2021 16:22:50 +0200

opendmarc (1.4.0~beta1+dfsg-3) unstable; urgency=high

  * Cherry-pick patch for CVE-2020-12460 from upstream:
    - Add proper null-termination in opendmarc_xml_parse (Closes: #966464)
  * Shut down debconf with db_stop in opendmarc.postinst,
    patch by "B.R.S.Roso" <rici@roso93.net> (Closes: #965284)
  * Add missing DEP-3 headers tracking upstream bug in d/patches

 -- David Bürgin <dbuergin@gluet.ch>  Sat, 19 Sep 2020 08:40:47 +0200

opendmarc (1.4.0~beta1+dfsg-2) unstable; urgency=medium

  * Mark shared library packages as "Multi-Arch: same" in d/control
  * Add dependency on libjson-perl as suggested in reports/README
  * Do not package README.update-db-schema.mysql (not applicable in Debian)
  * Correct public suffix list file path in default opendmarc.conf
  * Update debhelper to compatibility level 13, and rename d/opendmarc.tmpfile
    as required by new dh_installtmpfiles
  * Silence a debhelper warning by renaming d/opendmarc.service.generate
  * Replace build dependency on opendkim-tools with new miltertest package

 -- David Bürgin <dbuergin@gluet.ch>  Sun, 21 Jun 2020 08:24:04 +0200

opendmarc (1.4.0~beta1+dfsg-1) unstable; urgency=medium

  [ Scott Kitterman ]
  * Also update paths in Debian opendmarc.conf to use /run vice /var/run
  * Bump standards-version to 4.5.0 without further change
  * Update d/watch to point at new Github repository, use version 4
    - Thanks to David Bürgin for the opendkim version that made it easy
  * New upstream release
    - Refresh patches
    - Delete debian/patches/ticket137.patch, ticket146.patch, ticket153.patch,
      and ticket203.patch: incorporated upstream
  * Add David Bürgin to Uploaders

  [ David Bürgin ]
  * Check d/copyright and convert to DEP-5 format
  * Repack upstream sources, excluding non-free Internet Draft documents
  * Add Build-Depends-Package field to d/libopendmarc*.symbols file
  * Use dh_auto_configure instead of ./configure for multiarch support
  * Update debhelper to compatibility level 12 (with accompanying changes in
    d/*.install and similar to silence dh_missing warnings)
  * Update remaining paths in d/* to use /run vice /var/run

 -- David Bürgin <dbuergin@gluet.ch>  Sun, 29 Mar 2020 08:51:08 +0200

opendmarc (1.3.2-7) unstable; urgency=high

  [ Scott Kitterman ]
  * Add change from https://github.com/trusteddomainproject/OpenDMARC/pull/48
    to address incorrect DMARC pass results with multi-from mail (Closes:
    #940081)
    - Addresses CVE-2019-16378
  * Update opendmarc.service to use /run vice /var/run (See #933357)

  [ Adriano Rafael Gomes ]
  * [INTL:pt_BR] Brazilian Portuguese debconf templates translation (Closes:
    #920540)

  [ Lev Lamberov ]
  * [INTL:ru] Russian translation of debconf template (Closes: #920918)

 -- Scott Kitterman <scott@kitterman.com>  Mon, 16 Sep 2019 16:13:59 -0400

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libopendmarc2t64`.
