xerces-c (3.2.4+debian-1.2ubuntu2) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- Steve Langasek <steve.langasek@ubuntu.com>  Sun, 31 Mar 2024 08:34:14 +0000

xerces-c (3.2.4+debian-1.2ubuntu1) noble; urgency=medium

  * Drop build dependency on default-jre-headless.

 -- Matthias Klose <doko@ubuntu.com>  Sat, 16 Mar 2024 20:27:03 +0100

xerces-c (3.2.4+debian-1.2build1) noble; urgency=medium

  * No-change rebuild against libcurl3t64-gnutls

 -- Steve Langasek <steve.langasek@ubuntu.com>  Sat, 16 Mar 2024 07:36:15 +0000

xerces-c (3.2.4+debian-1.2) unstable; urgency=medium

  * Non-maintainer upload.
  * Rename libraries for 64-bit time_t transition.  Closes: #1063272

 -- Steve Langasek <vorlon@debian.org>  Thu, 29 Feb 2024 07:28:56 +0000

xerces-c (3.2.4+debian-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Backport upstream patches from 3.2.5:
    + Fix NetAccessorTest to exit with non-zero status in case of error.
    + Fix CVE-2018-1311: Use-after-free on external DTD scan.  This replaces
      RedHat's mitigation patch (which had a memory leak).
      Closes: #947431

 -- Guilhem Moulin <guilhem@debian.org>  Thu, 28 Dec 2023 21:17:42 +0100

xerces-c (3.2.4+debian-1) unstable; urgency=medium

  [ Debian Janitor ]
  * Update lintian override info format in
    d/libxerces-c-samples.lintian-overrides on line 2.
  * Re-export upstream signing key without extra signatures.
  * Set upstream metadata fields: Repository-Browse.
  * Update standards version to 4.6.1, no changes needed.

  [ William Blough ]
  * New upstream version 3.2.4+debian
  * Refreshed patches
  * Fix FTBFS when cross-building. Closes: #982039

 -- William Blough <bblough@debian.org>  Sun, 25 Dec 2022 21:24:54 -0500

xerces-c (3.2.3+debian-3) unstable; urgency=medium

  * Fix MemHandlerTest1 on 32-bit systems to compensate for CVE-2018-1311 fix

 -- William Blough <bblough@debian.org>  Mon, 14 Dec 2020 11:43:13 -0500

xerces-c (3.2.3+debian-2) unstable; urgency=medium

  [ Sylvain Beucler ]
  * CVE-2018-1311 mitigation: fix use-after-free vulnerability when
    processing external DTD, at the expense of a memory leak.  Users may
    mitigate both by setting the XERCES_DISABLE_DTD environment variable.

  [ William Blough ]
  * Update d/watch to v4
  * Update standards version to 4.5.1 (no changes)

 -- William Blough <bblough@debian.org>  Fri, 11 Dec 2020 11:22:23 -0500

xerces-c (3.2.3+debian-1) unstable; urgency=medium

  * New upstream version 3.2.3+debian

 -- William Blough <bblough@debian.org>  Sat, 11 Apr 2020 15:34:02 -0400

xerces-c (3.2.2+debian-3) unstable; urgency=medium

  * Bump version for source-only upload

 -- William Blough <bblough@debian.org>  Sun, 22 Mar 2020 14:31:48 -0400

xerces-c (3.2.2+debian-2) unstable; urgency=medium

  [ Debian Janitor ]
  * Drop unnecessary dependency on dh-autoreconf.

  [ William Blough ]
  * Move Java-related Build-Depends (for docs) to Build-Depends-Indep.
    Closes: 947899
  * Remove optimization bug workaround for s390x, since the bug no longer
    appears to be present.  Closes: 833754
  * Update standards to 4.5.0 (no changes)
  * Build-Depend on debhelper-compat instead of using debian/compat
  * Update to debhelper 12
  * Add a simple autopkgtest to verify that programs using xerces-c can
    be built.
  * Mark -doc package as Multi-Arch: foreign
  * Mark -dev package as Multi-Arch: same

 -- William Blough <bblough@debian.org>  Tue, 17 Mar 2020 17:05:41 -0400

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libxerces-c-doc`.
