firejail (0.9.44.8-2~bpo8+1) jessie-backports; urgency=medium * Rebuild for jessie-backports. -- Reiner Herrmann Sun, 21 May 2017 11:17:33 +0200 firejail (0.9.44.8-2) unstable; urgency=medium * Cherry-pick upstream patch for memory corruption in noblacklist processing (Closes: #862083). -- Reiner Herrmann Tue, 09 May 2017 21:15:19 +0200 firejail (0.9.44.8-1) unstable; urgency=medium * New upstream release. -- Reiner Herrmann Thu, 19 Jan 2017 23:14:35 +0100 firejail (0.9.44.6-1) unstable; urgency=medium * New upstream release. -- Reiner Herrmann Mon, 16 Jan 2017 19:33:26 +0100 firejail (0.9.44.4-1) unstable; urgency=high * New upstream release. - Security fixes for: CVE-2017-5180, CVE-2017-5206, CVE-2017-5207 (Closes: #850528, #850558) * Drop patches applied upstream. -- Reiner Herrmann Sat, 07 Jan 2017 20:24:40 +0100 firejail (0.9.44.2-3) unstable; urgency=high * Add followup fix for CVE-2017-5180 (Closes: #850160). -- Reiner Herrmann Fri, 06 Jan 2017 13:44:25 +0100 firejail (0.9.44.2-2) unstable; urgency=high * Add upstream fix for CVE-2017-5180 (Closes: #850160). -- Reiner Herrmann Wed, 04 Jan 2017 23:56:30 +0100 firejail (0.9.44.2-1) unstable; urgency=medium * New upstream release. -- Reiner Herrmann Sun, 04 Dec 2016 21:44:08 +0100 firejail (0.9.44-1) unstable; urgency=medium * New upstream release. - Fix sandbox escape via terminal input buffer similar to SELinux's CVE-2016-7545. * Run apps-x11-xorg tests during autopkgtest. * Add xauth to Recommends for x11=xorg sandbox feature. -- Reiner Herrmann Sun, 23 Oct 2016 13:13:17 +0200 firejail (0.9.44~rc1-1) experimental; urgency=low * New upstream release candidate. - Fix program crashes with nvidia driver (Closes: #839868) * Add iptables to Recommends for netfilter feature. * Bump debhelper compat level to 10. - Drop --parallel, which is now default behavior -- Reiner Herrmann Sun, 16 Oct 2016 23:35:47 +0200 firejail (0.9.42-1) unstable; urgency=medium * New upstream release. -- Reiner Herrmann Fri, 09 Sep 2016 19:16:52 +0200 firejail (0.9.42~rc2-1) experimental; urgency=low * New upstream release candidate. - shell prompt no longer overwritten by default (Closes: #834256) * Drop patch for build failure, applied upstream. * Add upstream signing key. * Check upstream signature with uscan. * Install upstream README. * Enable AppArmor support. * Include upstream sysutils tests in autopkgtest run. -- Reiner Herrmann Mon, 29 Aug 2016 21:39:09 +0200 firejail (0.9.42~rc1-2) experimental; urgency=low * Cherry-pick upstream fix for build failure on non-x86 platforms. -- Reiner Herrmann Thu, 28 Jul 2016 19:19:07 +0200 firejail (0.9.42~rc1-1) experimental; urgency=low * New upstream release candidate. * Drop LXC patch applied upstream. * Add ping and wget to test dependencies. * Run autopkgtests in isolation-machine. -- Reiner Herrmann Mon, 25 Jul 2016 22:27:01 +0200 firejail (0.9.40-3) unstable; urgency=low * Replace patch for LXC support with improved version by upstream. Previous fix only worked for firejail as init process, not in user sessions inside containers (like with autopkgtest). -- Reiner Herrmann Tue, 14 Jun 2016 21:46:32 +0200 firejail (0.9.40-2) unstable; urgency=low * Remove obsolete conffiles (Closes: #825877). * Add iptables to test dependencies. * Cherry-pick upstream patch for LXC detection. autopkgtests were failing in LXC because firejail wrongly detected an already existing sandbox. * Add gbp.conf to enable pristine-tar by default. * Add Vcs-* fields; git repository is now in collab-maint. -- Reiner Herrmann Fri, 03 Jun 2016 00:39:17 +0200 firejail (0.9.40-1) unstable; urgency=low * New upstream release. - Fix legacy Opera profile (Closes: #819950) * Add autopkgtests to run upstream's test suite. - skip test target in debian/rules, which is run in autopkgtest -- Reiner Herrmann Mon, 30 May 2016 20:56:06 +0200 firejail (0.9.40~rc1-1) experimental; urgency=low * New upstream release candidate. (Closes: #823191) * Recommend xpra or xserver-xephyr for X11 isolation. * Drop autotools-dev; debhelper is now doing the same. * Bump copyright years to 2016. * Bump Standards-Version to 3.9.8. -- Reiner Herrmann Mon, 02 May 2016 19:33:26 +0200 firejail (0.9.38-1) unstable; urgency=low * New upstream release. * Bump standards version to 3.9.7. -- Reiner Herrmann Sun, 07 Feb 2016 12:07:07 +0100 firejail (0.9.36-1) unstable; urgency=low * New upstream release. - Support for logging of blacklist violations (Closes: #794837) * Updated Homepage field. * Dropped reproducibility patch, which has been applied upstream. * Dropped debian/missing-sources. Upstream removed binaries from release tarball. -- Reiner Herrmann Tue, 29 Dec 2015 20:46:42 +0100 firejail (0.9.34-1) unstable; urgency=low * New upstream release. * Drop libdir patch applied upstream. * Symlink source which lintian thinks is missing. -- Reiner Herrmann Mon, 09 Nov 2015 20:30:16 +0100 firejail (0.9.32-1) unstable; urgency=low * New upstream release. * Added README.Debian. * Added patch to fix the location of the lib dir. -- Reiner Herrmann Sat, 24 Oct 2015 14:24:30 +0200 firejail (0.9.28-1) unstable; urgency=low * New upstream release. - Common include for blacklisted directories (Closes: #789164) - Improved support for other architectures (Closes: #789317) * Enabled all Linux architectures again. * Removed unneeded debian/firejail.bash-completion file. -- Reiner Herrmann Wed, 05 Aug 2015 23:13:40 +0200 firejail (0.9.26-1) unstable; urgency=low * New upstream release. * Enabled all hardening options. * Amended reproducibility patch to use normalized locale. * Dropped usage of outdated bash-completion debhelper. * Limited architectures to supported ones (Closes: #789163). -- Reiner Herrmann Thu, 18 Jun 2015 19:36:29 +0200 firejail (0.9.24-1) unstable; urgency=low * New upstream release. * Dropped patches applied upstream. -- Reiner Herrmann Mon, 06 Apr 2015 12:56:57 +0200 firejail (0.9.22-1) unstable; urgency=low * Initial release (Closes: #777671) -- Reiner Herrmann Sun, 15 Mar 2015 12:51:24 +0100