glib-networking (2.58.0-2+deb10u2) buster; urgency=medium * Break balsa older than 2.5.6-2+deb10u1 as the fix for CVE-2020-13645 breaks balsa's certificate verification (see #961792). -- Emilio Pozuelo Monfort Sat, 11 Jul 2020 14:55:23 +0200 glib-networking (2.58.0-2+deb10u1) buster; urgency=medium * Team upload * d/p/Return-bad-identity-error-if-identity-is-unset.patch: Backport fix for CVE-2020-13645 from upstream (Closes: #961756) -- Simon McVittie Tue, 07 Jul 2020 09:30:02 +0100 glib-networking (2.58.0-2) unstable; urgency=medium * Add -Wl,-O1 to our LDFLAGS * Bump Standards-Version to 4.3.0 -- Jeremy Bicha Mon, 24 Dec 2018 09:40:07 -0500 glib-networking (2.58.0-1) unstable; urgency=medium * New upstream translation release * debian/control{,.in}: Bump Standards-Version to 4.2.1, no changes needed -- Iain Lane Tue, 04 Sep 2018 17:56:38 +0100 glib-networking (2.57.92-1) unstable; urgency=medium * New upstream release * Release to unstable -- Jeremy Bicha Mon, 27 Aug 2018 13:07:11 -0400 glib-networking (2.57.90-1) experimental; urgency=medium * debian/*: Update for experimental / 2.57 * New upstream release 2.57.90 (LP: #1786809) - Properly check for server errors in connection tests - Perform certificate verification during, not after, TLS handshake - Avoid trailing dots in SNI hostnames - Send fallback SCSV with fallback connection attempts - Fail unsafe rehandshake attempts initiated by API request - Fix memory leaks when calling g_tls_connection_gnutls_get_certificate() - Use GnuTLS system trust and remove build option to specify cert bundle - Fix criticals when child streams outlast the parent GTlsConnection - Fix crash when setting client cert without private key - Never install GIO modules outside build prefix - Don't install test files if installed tests are disabled - Fix build with -Dpkcs11=false - g_tls_certificate_verify() no longer manually verifies certificate activation/expiration time, matching the current behavior of g_tls_database_verify_chain(). * debian/control*: - Remove libp11-kit BD - upstream has disabled this by default now. - Standards-Version → 4.2.0, no changes required. -- Iain Lane Thu, 16 Aug 2018 10:40:20 +0200 glib-networking (2.56.1-1) unstable; urgency=medium * Team upload * New upstream stable release * Standards-Version: 4.1.5 (no changes required) -- Simon McVittie Thu, 05 Jul 2018 20:51:19 +0100 glib-networking (2.56.0-1) unstable; urgency=medium [ Simon McVittie ] * New upstream stable release * Set Rules-Requires-Root to no * Standards-Version: 4.1.3 (no changes required) [ Jeremy Bicha ] * Release to unstable -- Jeremy Bicha Sat, 17 Mar 2018 10:14:13 -0400 glib-networking (2.55.90-1) experimental; urgency=medium [ Jeremy Bicha ] * Update Vcs fields for migration to https://salsa.debian.org/ [ Iain Lane ] * Branch to experimental, update debian/{watch,gbp.conf,control{,.in}} accordingly. * New upstream release 2.55.90 - Allow static linking - Fix issues found by coverity - Fix unit tests when SSLv3 is unavailable - Fix using different client certs for different connections - Implement DTLS support - Port to Meson build system + debian/rules: Update accordingly. - Try to ensure that GnuTLS is only initialized if TLS is actually used - Update use of GObject to follow current best practices - Use XDG_CURRENT_DESKTOP to determine which proxy module to load * debian/patches/01_connection_test.patch: Update for meson, mark as written by Emilio (ascertained by changelog mining). * debian/control{,.in}: BD on glib 2.55, as required by this version. -- Iain Lane Fri, 16 Feb 2018 16:14:03 +0000 glib-networking (2.54.1-2) unstable; urgency=medium * Update Vcs fields for conversion to git * Add debian/gbp.conf * Bump Standards-Version to 4.1.2 -- Jeremy Bicha Sat, 16 Dec 2017 11:58:23 -0500 glib-networking (2.54.1-1) unstable; urgency=medium * New upstream release * Switch from dh_install --fail-missing to dh_missing --fail-missing * Remove no longer needed Breaks/Replaces * Bump Standards-Version to 4.1.1 -- Michael Biebl Wed, 01 Nov 2017 00:39:37 +0100 glib-networking (2.54.0-1) unstable; urgency=medium * New upstream translations release -- Jeremy Bicha Tue, 12 Sep 2017 14:53:20 -0400 glib-networking (2.53.90-1) unstable; urgency=medium * New upstream release * Bump Standards-Version to 4.1.0 -- Jeremy Bicha Wed, 30 Aug 2017 12:21:26 -0400 glib-networking (2.50.0-1) unstable; urgency=medium * New upstream release. * Bump dh compat to 10 (automatic dh-autoreconf). * debian/rules: remove '*.la' and use --fail-missing. -- Andreas Henriksson Mon, 19 Sep 2016 21:01:51 +0200 glib-networking (2.49.90-1) unstable; urgency=medium * New upstream beta release. * Update build-dependencies according to configure.ac changes: - drop intltool * Convert from cdbs -> dh * Add debian/docs to ship NEWS -- Andreas Henriksson Tue, 30 Aug 2016 20:41:07 +0200 glib-networking (2.48.2-1) unstable; urgency=medium * New upstream release. * Install systemd user service for the glib-pacrunner D-Bus session service. -- Michael Biebl Tue, 10 May 2016 23:59:04 +0200 glib-networking (2.48.1-1) unstable; urgency=medium * New upstream release. * Drop glib-networking-dbg package now that we have automatic dbgsym packages. * Ensure proper upgrade from glib-networking-dbg to new dbgsym packages by using dh_strip --dbgsym-migration. Bump Build-Depends on debhelper accordingly. * Bump debhelper compatibility level to 9. * Bump Standards-Version to 3.9.8. -- Michael Biebl Tue, 03 May 2016 00:49:56 +0200 glib-networking (2.48.0-1) unstable; urgency=medium * New upstream release. * Refresh debian/patches/01_connection_test.patch to apply without fuzz. -- Andreas Henriksson Thu, 24 Mar 2016 15:36:21 +0100 glib-networking (2.46.1-1) unstable; urgency=medium * New upstream release. * Refresh patches. * Drop the Build-Conflicts against glib-networking, the test-suite passes now with that package installed. -- Michael Biebl Tue, 13 Oct 2015 15:42:48 +0200 glib-networking (2.46.0-1) unstable; urgency=medium * New upstream release 2.46.0 + Various minor cleanups and small memory leak fixes + Added a new test case for client certificate chain handling * Bump glib BD to ≥ 2.46, as per configure.ac. -- Iain Lane Fri, 25 Sep 2015 17:16:27 +0100 glib-networking (2.45.1-1) experimental; urgency=medium * Update Vcs-* for experimental. * New upstream release 2.45.1 + tls/gnutls: Implement g_tls_client_connection_copy_session_state(), to allow implementing FTP-over-TLS in gvfs. * Bump glib BD to ≥ 2.45.1, as per configure.ac. -- Iain Lane Fri, 01 May 2015 15:47:16 +0100 glib-networking (2.44.0-2) unstable; urgency=medium * Upload to unstable. * debian/watch: Update to consider stable releases only. -- Iain Lane Fri, 01 May 2015 11:51:38 +0100 glib-networking (2.44.0-1) experimental; urgency=medium * New upstream release 2.44.0 -- Iain Lane Mon, 30 Mar 2015 16:50:37 +0100 glib-networking (2.43.92-1) experimental; urgency=medium * New upstream release 2.43.92 + Fix TLS session caching when using session tickets -- Iain Lane Thu, 19 Mar 2015 17:20:45 +0000 glib-networking (2.43.91-1) experimental; urgency=medium * New upstream release 2.43.91 - tls/gnutls: Removed a workaround for connecting to servers with weak DH parameters, which was apparently only needed because gnutls was prioritizing DHE over RSA. - tls/gnutls: We now require gnutls 3.x again. (In fact, 2.42.1 and 2.43.1 accidentally used a 3.x-only function, so we already required it, we were just failing to declare that fact.) - tls/tests: Skip certain tests when running against old gnutls or GLib releases. (glib-networking 2.43.91 itself does not require GLib 2.43, but one of the test cases does.) * Drop glib BD back to 2.42 as per configure.ac; the problematic test is automatically skipped upstream if necessary now. * Increase libgnutls28-dev BD to 3.0, as per configure.ac -- Iain Lane Wed, 04 Mar 2015 12:54:23 +0000 glib-networking (2.43.1-1) experimental; urgency=medium * debian/watch: Watch unstable version too, for experimental. * New upstream release 2.43.1, including changes: + The GTlsClientConnection "use-ssl3" property now falls back to TLS 1.0 if SSL 3.0 has been disabled, rather than just failing. Also, we now use the gnutls %LATEST_RECORD_VERSION option by default (to allow connecting to certain servers that were incorrectly patched for the POODLE attack), but also make sure to remove that option in the fallback ("use-ssl3") mode (to allow connecting to other servers that are differently broken). + tls/gnutls: Miscellaneous warning, debugging, and leak fixes. * Bump glib BD to 2.43 (greater than configure.ac; one test requires this version). * Standards-Version → 3.9.6, no changes required. -- Iain Lane Tue, 25 Nov 2014 18:27:15 +0000 glib-networking (2.42.0-2) unstable; urgency=medium * debian/patches/01_connection_test.patch: + Disable tls/connection tests. They are racy and so unreliable. Closes: #762588. * debian/rules: + Set VERBOSE so we get more information when a test fails. -- Emilio Pozuelo Monfort Wed, 22 Oct 2014 23:41:04 +0200 glib-networking (2.42.0-1) unstable; urgency=medium * New upstream release. -- Andreas Henriksson Tue, 23 Sep 2014 20:36:57 +0200 glib-networking (2.41.92-2) unstable; urgency=medium * Target unstable -- Sjoerd Simons Sat, 20 Sep 2014 10:18:53 +0200 glib-networking (2.41.92-1) experimental; urgency=medium * debian/tests/installed-tests: Use dbus-run-session instead of dbus-launch. * New upstream release 2.41.92 - tls/gnutls: Incorrectly-ordered certificate chains are now accepted - tls/gnutls: Closing an already-closed GTlsConnection now correctly returns TRUE rather than G_IO_ERROR_CLOSED -- Iain Lane Fri, 19 Sep 2014 15:36:11 +0100 glib-networking (2.41.4-1) experimental; urgency=medium [ Martin Pitt ] * Unset $http_proxy during autopkgtest; the test suite doesn't get along with it, and doesn't need internet access. [ Andreas Henriksson ] * New upstream development release. * Bump glib build-dependency to >= 2.41.3 (current experimental version) since testsuite fails if we use 2.40.0 (current testing/unstable version). -- Andreas Henriksson Sat, 06 Sep 2014 14:10:53 -0700 glib-networking (2.40.1-2) unstable; urgency=medium * Team upload. [ Dimitri John Ledkov ] * Switch to gnutls28. (Closes: #747451) -- Andreas Henriksson Sat, 05 Jul 2014 13:30:46 +0200 glib-networking (2.40.1-1) unstable; urgency=medium [ Iain Lane ] * Fix Vcs-Browser URL [ Emilio Pozuelo Monfort ] * New upstream bugfix release. -- Emilio Pozuelo Monfort Sat, 26 Apr 2014 20:46:19 +0200 glib-networking (2.40.0-2) unstable; urgency=medium * Upload to unstable. -- Emilio Pozuelo Monfort Wed, 02 Apr 2014 15:59:58 +0200 glib-networking (2.40.0-1) experimental; urgency=medium [ Martin Pitt ] * Add xauth test depends, it is only a recommends of xvfb. [ Andreas Henriksson ] * New upstream release. -- Andreas Henriksson Mon, 24 Mar 2014 22:28:24 +0100 glib-networking (2.39.90-1) experimental; urgency=medium * New upstream release. -- Andreas Henriksson Tue, 18 Feb 2014 19:56:24 +0100 glib-networking (2.39.3-1) experimental; urgency=medium * New upstream development release. * debian/control.in: + Bump glib build dependency. + Standards-Version is 3.9.5, no changes needed. -- Emilio Pozuelo Monfort Sun, 16 Feb 2014 18:51:31 +0100 glib-networking (2.38.2-1) unstable; urgency=low [ Vincent Cheng ] * Add missing entries in debian/copyright. (Closes: #725998) [ Iain Lane ] * Use dh-autoreconf to update libtool.m4 for new ports. [ Emilio Pozuelo Monfort ] * New upstream release. * Upload to unstable. -- Emilio Pozuelo Monfort Sat, 15 Feb 2014 12:59:52 +0100 glib-networking (2.38.1-1) experimental; urgency=low * debian/control{,.in}: Add XS-Testsuite header * New upstream release + glibpacrunner: Don't crash if there is an internal libproxy error. + tls/tests: Fix installed tests to not accidentally depend on having the source tree still exist. * debian/control: Have the tests depend on ca-certificates. -- Iain Lane Thu, 17 Oct 2013 16:01:40 +0100 glib-networking (2.38.0-1) experimental; urgency=low * New upstream release * debian/control: Build-Depend on GLib >= 2.38 and libproxy >= 0.4 (test failures with 0.3) * Build & package installed tests * Add autopkgtest to run the installed tests -- Iain Lane Wed, 25 Sep 2013 11:45:34 +0000 glib-networking (2.36.1-2) unstable; urgency=low * Merge experimental branch, upload to unstable. * Bump Standards-Version to 3.9.4, no changes necessary. -- Martin Pitt Wed, 08 May 2013 07:04:53 +0200 glib-networking (2.36.1-1) experimental; urgency=low * New upstream release. -- Iain Lane Tue, 23 Apr 2013 11:28:54 +0100 glib-networking (2.36.0-1) experimental; urgency=low * New upstream release. -- Emilio Pozuelo Monfort Mon, 25 Mar 2013 16:04:44 +0100 glib-networking (2.35.9-1) experimental; urgency=low * New upstream release. -- Emilio Pozuelo Monfort Tue, 05 Mar 2013 18:39:07 +0100 glib-networking (2.35.8-1) experimental; urgency=low * New upstream release. + debian/control.in: - Update build dependencies. -- Emilio Pozuelo Monfort Sat, 23 Feb 2013 19:31:23 +0100 glib-networking (2.34.0-1) experimental; urgency=low * New upstream release. + debian/control.in: - Update build dependencies. -- Emilio Pozuelo Monfort Tue, 23 Oct 2012 16:50:01 +0200 glib-networking (2.33.14-1) experimental; urgency=low * New upstream release. * Bump Build-Depends on libglib2.0-dev to (>= 2.33.14) so we don't pick up the version from unstable. This will also generate a tight enough dependency. -- Michael Biebl Thu, 20 Sep 2012 21:12:58 +0200 glib-networking (2.33.12-1) experimental; urgency=low * New upstream version, matching glib 2.33.12. * debian/control.in: Bump glib build dependency to >= 2.33.12. * debian/control.in: Switch Vcs-* to experimental branch. * debian/watch: Watch for unstable versions while we are tracking the 2.34 development versions. -- Martin Pitt Thu, 06 Sep 2012 05:55:23 +0200 glib-networking (2.32.3-1) unstable; urgency=low * New upstream release. -- Michael Biebl Tue, 15 May 2012 20:31:34 +0200 glib-networking (2.32.1-1) unstable; urgency=low * New upstream release: - gnutls: added /etc/ssl/ca-bundle.pem to the list of files to check for to use as the default CA list. (This is what openSUSE uses; not relevant for Debian/Ubuntu). - Translation updates. * debian/copyright: Rewrite to use copyright 1.0 format. * debian/control.in: Bump Standards-Version to 3.9.3. -- Martin Pitt Mon, 16 Apr 2012 23:43:39 +0200 glib-networking (2.32.0-2) unstable; urgency=low * Upload to unstable. -- Michael Biebl Fri, 30 Mar 2012 08:53:25 +0200 glib-networking (2.32.0-1) experimental; urgency=low * New upstream release. -- Michael Biebl Tue, 27 Mar 2012 02:08:13 +0200 glib-networking (2.31.22-1) experimental; urgency=low * New upstream development release. * Bump Build-Depends on cdbs and debhelper for multiarch support. -- Michael Biebl Tue, 20 Mar 2012 02:56:17 +0100 glib-networking (2.31.20-1) experimental; urgency=low * New upstream development release. * debian/control.in: Update Build-Depends. * debian/rules: Explicitly enable libproxy and gnutls support for more reliable build results. * Enable PKCS#11 support. -- Michael Biebl Thu, 08 Mar 2012 09:48:53 +0100 glib-networking (2.30.2-1) unstable; urgency=low * New upstream release. * Instead of removing files via debian/rules, just be a bit more specific what we want to install in debian/glib-networking-services.install. -- Michael Biebl Sun, 15 Jan 2012 13:21:18 +0100 glib-networking (2.30.1-3) unstable; urgency=low * Upload to unstable. -- Michael Biebl Fri, 18 Nov 2011 21:41:27 +0100 glib-networking (2.30.1-2) experimental; urgency=low * Break pre-multiarch glib (for modules path transition). * glib-networking autodetects the path, no change needed. * Split glib-networking for multiarch support: - glib-networking contains the gio modules (m-a: same). - g-n-services contains the D-Bus services (m-a: foreign). - g-n-common contains the data. * Add build-conflict about glib-networking itself (fails the test suite). -- Josselin Mouette Sun, 13 Nov 2011 16:32:49 +0100 glib-networking (2.30.1-1) experimental; urgency=low * New upstream bug fix release. -- Martin Pitt Fri, 21 Oct 2011 12:02:55 +0200 glib-networking (2.30.0-1) experimental; urgency=low * New upstream release. * debian/control: - Bump Build-Depends on libglib2.0-dev to (>= 2.29.18). - Set pkg-gnome-maintainers@lists.alioth.debian.org as Maintainer. * Remove patches, all merged upstream: - debian/patches/01_tls_small_keys.patch - debian/patches/02_gerror_crash.patch - debian/patches/03_tls_compat.patch - debian/patches/04_rehandshake.patch - debian/patches/05_virtualhosts.patch - debian/patches/06_gnutls3.patch * debian/copyright: - Update FSF address. * debian/watch: - Track .xz tarballs. -- Michael Biebl Sun, 16 Oct 2011 19:18:55 +0200 glib-networking (2.28.7-2) unstable; urgency=low * Include a handful of changes from upstream git to improve TLS support. + 01_tls_small_keys.patch: allow small TLS keys that some embedded servers use. + 02_gerror_crash.patch: fix a crash when passed a NULL GError. + 03_tls_compat.patch: use %COMPAT in the protocol lists to handle some broken servers. Closes: #636911. + 04_rehandshake.patch: handle rehandshake requests. + 05_virtualhosts.patch: don’t reuse sessions for different virtual hosts on the same IP, some broken servers don’t like that. + 06_gnutls3.patch: support GnuTLS 3.x, in case the transition starts soon. * Require an intltool version with working quilt support. -- Josselin Mouette Fri, 23 Sep 2011 20:30:16 +0200 glib-networking (2.28.7-1) unstable; urgency=low * New upstream release. * debian/control.in: Fix Vcs-* path for experimental → unstable. * debian/control.in: Bump Standards-Version to 3.9.2 (no changes necessary). * debian/watch: Fix syntax to actually recognize the current version. * debian/watch: Fetch bzip2 tarballs. * debian/rules: Remove unnecessary *.la files. -- Martin Pitt Wed, 25 May 2011 07:48:14 +0200 glib-networking (2.28.6.1-1) unstable; urgency=low * New upstream bugfix release * debian/patches/Only-set-GTLS-errors-when-errors-have-occurred.patch - Removed, fixed upstream * debian/patches/work-around-intltool-issue.patch - Remove, no longer necessary -- Sjoerd Simons Tue, 26 Apr 2011 22:23:37 +0100 glib-networking (2.28.6-1) unstable; urgency=low * New upstream release * debian/patches/Only-set-GTLS-errors-when-errors-have-occurred.patch - Added. Only reports errors when sending if errors occurred * debian/patches/work-around-intltool-issue.patch - Added. Work around intltool discovering translations in applied patched (Debian bug #560704) -- Sjoerd Simons Tue, 26 Apr 2011 19:10:10 +0100 glib-networking (2.28.4-2) unstable; urgency=low [ Rodrigo Moya ] * debian/rules: - Remove *.a files in the correct arch-specific dir [ Sebastian Dröge ] * debian/control.in: + Add debug package. -- Sebastian Dröge Thu, 14 Apr 2011 14:06:31 +0200 glib-networking (2.28.4-1) unstable; urgency=low * New upstream stable release. + debian/control.in: - Build-depend on gsettings-desktop-schemas-dev, depend on gsettings-desktop-schemas. -- Emilio Pozuelo Monfort Sat, 26 Mar 2011 08:48:49 +0000 glib-networking (2.28.0-1) unstable; urgency=low * New upstream stable release. -- Emilio Pozuelo Monfort Tue, 22 Feb 2011 20:21:29 +0000 glib-networking (2.27.90-1) experimental; urgency=low * New upstream release. + debian/control.in: - Bump libglib2.0-dev build requirement. -- Emilio Pozuelo Monfort Sat, 08 Jan 2011 01:58:58 +0000 glib-networking (2.27.5-1) experimental; urgency=low * New upstream release. + debian/control.in: - Bump libglib2.0-dev build requirement. -- Emilio Pozuelo Monfort Thu, 23 Dec 2010 01:50:21 +0000 glib-networking (2.27.4-1) experimental; urgency=low * Initial release. Closes: #607409. -- Emilio Pozuelo Monfort Sat, 18 Dec 2010 01:03:19 +0000