tinyssh (20250501-2) unstable; urgency=medium

  * d/watch: rewrite to version 5, use Github uscan-template
  * d/upstream/signing-key.asc: update, add janmojzis@debian.org email
  * d/control: bump Standards-Version: 4.7.2, no changes
  * d/salsa-ci.yml: remove SALSA_CI_DISABLE_APTLY
  * d/salsa-ci.yml: add SALSA_CI_AUTOPKGTEST_ALLOWED_EXIT_STATUS
  * d/changelog: fix whitespace in 20250501-1 record

 -- Jan Mojžíš <janmojzis@debian.org>  Tue, 16 Sep 2025 08:41:10 +0200

tinyssh (20250501-1) unstable; urgency=medium

  * New upstream version 20250501
    - Fixed minor strict kex violation, thanks to Fabian Bäumer and Marcus
      Brinkmann for the bug report.
    - Updated cryptoint to version 20250414
    - Added support for external lib1305
  * d/copyright: update cryptoint/* license
  * d/salsa-ci.yml add
  * d/control: B-D lib1305-dev [amd64] add

 -- Jan Mojžíš <janmojzis@debian.org>  Fri, 02 May 2025 11:19:28 +0200

tinyssh (20250201-1) unstable; urgency=medium

  * New upstream version 20250201
    - relicensed under CC0-1.0 OR 0BSD OR MIT-0 OR MIT
  * d/copyright: update license to CC0-1.0 OR 0BSD OR MIT-0 OR MIT

 -- Jan Mojžíš <janmojzis@debian.org>  Sat, 01 Feb 2025 15:47:07 +0100

tinyssh (20250126-1) unstable; urgency=medium

  * New upstream version 20250126
  * d/copyright: bump my copyright year
  * d/copyright: update my email to "janmojzis@debian.org"

 -- Jan Mojžíš <janmojzis@debian.org>  Sun, 26 Jan 2025 21:56:43 +0100

tinyssh (20241201-1) unstable; urgency=medium

  * New upstream version 20241201
  * d/t: use 'ssh-keyscan -t ed25519' in tests, to minimize the number of
    warnings in the log
  * d/copyright: add copyright for cryptoint/*
  * d/gbp.conf: dist = DEP14, debian-branch = debian/latest
  * d/control: update homepage to https://github.com/janmojzis/tinyssh/
  * d/copyright: update homepage to https://github.com/janmojzis/tinyssh/
  * d/control: update maintainer to janmojzis@debian.org
  * d/t/valgrindtest.sh add

 -- Jan Mojžíš <janmojzis@debian.org>  Sun, 01 Dec 2024 16:18:32 +0100

tinyssh (20241111-1) unstable; urgency=medium

  * New upstream version 20241111
  * d/control: bump Standards-Version to 4.7.0, no changes
  * d/p/0001-packet_put.c-include-global.h.patch: remove, fixed in upstream
  * d/rules: remove targets override_dh_auto_{configure,build,clean}
  * d/tinysshd.install: fix path
  * d/tinysshd.manpages: fix path
  * d/control: add B-D lib25519-dev, libnruprime-dev, librandombytes-dev

 -- Jan Mojžíš <jan.mojzis@gmail.com>  Tue, 12 Nov 2024 00:21:13 +0100

tinyssh (20240101-3) unstable; urgency=medium

  * d/p/0001-packet_put.c-include-global.h.patch, fix FTBFS (Closes: #1066418)

 -- Jan Mojžíš <jan.mojzis@gmail.com>  Wed, 13 Mar 2024 20:07:05 +0100

tinyssh (20240101-2) unstable; urgency=medium

  [ Chris Hofstaedtler ]
  * Install systemd units into /usr, update hard-coded paths. (Closes: #1060081)

  [ Jan Mojžíš ]
  * d/copyright: use link to the CC0 file
  * d/copyright: bump my copyright year

 -- Jan Mojžíš <jan.mojzis@gmail.com>  Mon, 08 Jan 2024 09:56:58 +0100

tinyssh (20240101-1) unstable; urgency=medium

  * New upstream version 20240101
  * d/p/0001-channel_forkpty.c-fix-race-condition-79.patch removed
  * d/p/0003-channel.c-ignore-SSH_MSG_CHANNEL_EOF-in-terminal-mod.patch removed
  * d/p/0004-implementation-kex-strict-s-v00-openssh.com-82.patch removed
  * d/watch: remove filenamemangle and use characters @ANY_VERSION@@ARCHIVE_EXT@
  * d/gbp.conf: add upstream-signatures = on, track-missing = True

 -- Jan Mojžíš <jan.mojzis@gmail.com>  Mon, 01 Jan 2024 10:58:09 +0100

tinyssh (20230101-4) unstable; urgency=medium

  * d/p/0004-implementation-kex-strict-s-v00-openssh.com-82.patch:
    backported key exchange protocol extension kex-strict-s-v00@openssh.com
    from the upstream. Mitigates CVE-2023-48795 "Terrapin attack".
    (Closes: 1059058)
  * d/t/10rekey added, tests SSH connection rekeying

 -- Jan Mojžíš <jan.mojzis@gmail.com>  Wed, 20 Dec 2023 23:10:12 +0100

tinyssh (20230101-3) unstable; urgency=medium

  * Fix terminal connection if stdin is redirected to /dev/null (ssh -tt -n):
    * d/p/0001-channel_forkpty.c-fix-race-condition-79.patch add
    * d/p/0003-channel.c-ignore-SSH_MSG_CHANNEL_EOF-in-terminal-mod.patch add
    * d/t/09termexec add

 -- Jan Mojžíš <jan.mojzis@gmail.com>  Sun, 17 Dec 2023 23:02:51 +0100

tinyssh (20230101-2) unstable; urgency=medium

  * d/t/05authorizedkeys fixed permissions when creating authorized_keys,
    tnx Lukas Mardian (Closes: 1034513)
  * d/t/{04sftp,05authorizedkeys,06transfer,07kex,08badauth} fixed tests,
    added short sleep to give tcpserver time to start, tnx Lukas Mardian
    (Closes: 1034512)
  * d/control: bump Standards-Version to 4.6.2, no changes

 -- Jan Mojžíš <jan.mojzis@gmail.com>  Sun, 11 Jun 2023 09:12:38 +0200

tinyssh (20230101-1) unstable; urgency=medium

  * New upstream version 20230101
  * d/copyright: updated, generated using 'cme update dpkg-copyright'
  * d/copyright: update to CC0
  * d/gbp.conf: debian-branch = main

 -- Jan Mojžíš <jan.mojzis@gmail.com>  Sun, 01 Jan 2023 09:33:58 +0100

tinyssh (20220801-2) unstable; urgency=medium

  * d/watch fixed url

 -- Jan Mojžíš <jan.mojzis@gmail.com>  Tue, 25 Oct 2022 17:08:45 +0200

tinyssh (20220801-1) unstable; urgency=medium

  * New upstream version 20220801
  * d/gbp.conf added new gbp.conf configuration file
  * d/control: bump Standards-Version to 4.6.1, no changes

 -- Jan Mojžíš <jan.mojzis@gmail.com>  Mon, 01 Aug 2022 08:28:20 +0200

tinyssh (20220311-2) unstable; urgency=medium

  [ Colin Watson ]
  * d/rules: ensure non-zero exit status when dh_auto_build fails

  [ Jan Mojžíš ]
  * debian/systemd/tinysshd: update systemd service to accept status code 111

 -- Jan Mojžíš <jan.mojzis@gmail.com>  Wed, 16 Mar 2022 17:19:43 +0100

tinyssh (20220311-1) unstable; urgency=medium

  * New upstream version 20220311
    - fixed build on big-endian platforms

 -- Jan Mojžíš <jan.mojzis@gmail.com>  Sat, 12 Mar 2022 12:55:53 +0000

tinyssh (20220305-1) unstable; urgency=medium

  * d/watch - fixed github perl regexp
  * d/control - bump debhelper compat level to 13
  * d/control - bump to standards version 4.6.0 (no modifications)
  * d/control - added Rules-Requires-Root: no
  * d/tests - added 07kex test, tests supported KEX including
    new sntrup761x25519-sha512@openssh.com
  * d/tests - removed unnecessary restrictions allow-stderr, needs-root
  * d/tests - added 08badauth test, it tests if tinysshd rejects login
    when authorized_keys are stored in directory with group/other writable
    permitions
  * d/rules - fixed cross-compile build
  * d/tinysshd.manpages man/tinysshd-{make,print}key.1 renamed to
    man/tinysshd-{make,print}key.8
  * d/rules - disable some case tests to allow reproducible build
  * New upstream version 20220305
    - removed sntrup4591761x25519-sha512@tinyssh.org
    - added sntrup761x25519-sha512@openssh.com
    - fixed error message when second channel is requested (Closes: 995146)
    - man/tinysshd-{make,print}key.1 -> man/tinysshd-{make,print}key.8
    - added tinysshnoneauthd binary
    - workaround for incoming packets that doesn't honor
      the max. packet length (Closes: 1006801)
  * d/watch - fixed regexp

 -- Jan Mojžíš <jan.mojzis@gmail.com>  Thu, 10 Mar 2022 17:43:02 +0000

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog tinysshd`.
