sslh (1.20-1+deb11u1build0.22.04.1) jammy-security; urgency=medium

  * fake sync from Debian

 -- John Breton <john.breton@canonical.com>  Fri, 29 May 2026 12:19:48 -0400

sslh (1.20-1+deb11u1) bullseye-security; urgency=high

  * Non-maintainer upload by the Debian LTS team.
  * CVE-2025-52936: Prevent a so-called "link following" vulnerability when
    writing the process' PID file. (Closes: #1108284)
  * Add debian/salsa-ci.yml.

 -- Chris Lamb <lamby@debian.org>  Wed, 09 Jul 2025 09:07:17 -0700

sslh (1.20-1) unstable; urgency=medium

  [ Guillaume Delacour ]
  * Remove debian/patches/transparent_mode_local.diff (merged upstream)
  * Replace extra priority by optional
  * Use debhelper 12 to avoid build depends on dh-systemd
  * Update obsolete homepage (Closes: #889575)

  [ Don Armstrong ]
  * New upstream release (Closes: #889576)
  * Refresh static port patch and remove localhost connection patch (for
    testing only)
  * Add patch which avoids requiring Conf::Libconfig, use dynamic ports
  * Bump to Standards-Version 4.4.0; primary change is
    --no-enable/--no-start instead of RUN

 -- Don Armstrong <don@debian.org>  Thu, 05 Sep 2019 10:04:54 -0700

sslh (1.18-1) unstable; urgency=medium

  * New upstream release, include transparent mode local patch from upstream
    (Closes: #823229)
  * Bump to Standards-Version 3.9.8 (no changes needed)
  * Change Vcs-{Browser,Git} to use https instead of http/git
  * Set Documentation key to sslh(8) for systemd unit file

 -- Guillaume Delacour <gui@iroqwa.org>  Tue, 17 May 2016 20:56:14 +0200

sslh (1.17-2) unstable; urgency=medium

  * debian/postrm: Test execution of update-inetd and deluser binaries as they
    are Depends and might be unavailable when removing/pruging
    (Policy 7.2, Closes: #787508)

 -- Guillaume Delacour <gui@iroqwa.org>  Sun, 19 Jul 2015 15:37:28 +0000

sslh (1.17-1) unstable; urgency=medium

  * New upstream release
    + Document logging in /var/log/auth.log (Closes: #735922)
    + Do not require --listen when --inetd is specified (LP: #1382158)
    + disable_ip_freebind_test.diff merged
    + Refresh fixed_version.diff (and use dpkg-parsechangelog)
  * debian/watch: Update unrelated versions mangle regex
  * debian/control: Bump to Standards-Version 3.9.6 (no changes needed)
  * debian/postrm: Don't test binaries presence as already depends on packages
    providing them (lintian command-with-path-in-maintainer-script)
  * Debconf translation: Add nl.po: thanks Frans Spiesschaert (Closes: #766176)
  * Remove parallel building as the build may fail sometimes

 -- Guillaume Delacour <gui@iroqwa.org>  Sun, 31 May 2015 01:22:18 +0200

sslh (1.16-2) unstable; urgency=medium

  * Compile sslh with libcap support only on linux archs, thanks James Cowgill
    (Closes: #760055)

 -- Guillaume Delacour <gui@iroqwa.org>  Mon, 01 Sep 2014 20:36:48 +0200

sslh (1.16-1) unstable; urgency=medium

  * New upstream release: fix some startup problem when interfaces are not
    ready at boot time (IP_FREEBIND support when available) and can use libcap
    for transparent mode
  * Enable libcap and libwrap support at build time
  * Enable dpkg-buildflags: Drop hardening-wrapper Build-Depends and use
    DEB_BUILD_HARDENING instead of DEB_BUILD_MAINT_OPTIONS
  * Remove old .gitignore as upstream has one too
  * debian/sslh.tmpfile: Create /run/sslh for systemd as root because sslh
    write its pid before dropping privileges (Closes: #740560)
  * debian/patches/disable_ip_freebind_test.diff: Remove "Can't bind address"
    upstream test because IP_FREEBIND is now enabled upstream
  * debian/docs: upstream README is now README.md
  * debian/rules:
    + use DESTDIR in addition of PREFIX as upstream change Makefile
  * Refresh debian/patches/disable_valgrind_launch.diff due to upstream
    changes
  * Stop service in case of purge (to be able to remove the user too)
  * Use DEB_BUILD_OPTIONS to speed the build
  * debian/patches/fixed_version.diff: Fix the version of binaries based on
    debian/changelog (instead of relying on git)
  * Update Description as sslh is not only a ssl/ssh multiplexer but a
    protocol multiplexer

 -- Guillaume Delacour <gui@iroqwa.org>  Thu, 07 Aug 2014 00:06:06 +0200

sslh (1.15-1) unstable; urgency=medium

  * New upstream release (Closes: #720680)
  * Drop debian/patches/minor_typo_manpage.diff (no more needed)
  * debian/control: Point Vcs-{Browser,Git} to anonscm.debian.org
  * debian/lintian-overrides: Removed since sslh use fortified functions
  * debian/watch: update pattern from sepwatch
  * debian/default: change default 0.0.0.0 ip to <change-me> to force the
    user to properly set it, thanks Marc Haber (Closes: #720674)
  * debian/control: Bump to Standards-Version 3.9.5 (no changes needed)
  * debian/README.Debian: change configuration examples as sslh can now handle
    XMPP, OpenSSH and OpenVPN servers (Closes: #730098)
  * debian/logcheck.ignore.server: Update pattern, thanks Richard van den Berg
    (Closes: #705430)
  * debian/patches/disable_valgrind_launch.diff: Don't use valgrind in tests
  * Provide systemd support:
    + debian/sslh.service, based on upstream scripts/systemd.sslh.service
    + debian/rules: use "--with systemd" flag in debhelper generic call
    + debian/control: Build-Depends on dh-systemd

 -- Guillaume Delacour <gui@iroqwa.org>  Sun, 02 Feb 2014 12:57:32 +0100

sslh (1.13b-3.2) unstable; urgency=low

  * Non-maintainer upload.
  * Restore debian/patch/ftbfs_localhost.diff, as autobuilders are still not
    all fixed (Closes: #685928)

 -- David Prévot <taffit@debian.org>  Sun, 26 Aug 2012 11:35:48 -0400

# For older changelog entries, run 'apt-get changelog sslh'
