libseccomp (2.4.3-1ubuntu1) focal; urgency=medium * Merge with Debian; remaining changes: - Add autopkgtests - Include clock_gettime64 in the autopkgtests in addition to clock_gettime, required on armhf. -- Matthias Klose Sat, 04 Apr 2020 17:10:11 +0200 libseccomp (2.4.3-1) unstable; urgency=medium * New upstream release. * Drop patches that have been applied upstream: - tests-rely-on-__SNR_xxx-instead-of-__NR_xxx-for-sysc.patch - api_define__SNR_ppoll_again.patch * Cherry-pick support for the riscv64 architecture. (Closes: #952386) - Add riscv64_support.patch -- Felix Geyer Thu, 12 Mar 2020 23:35:13 +0100 libseccomp (2.4.3-0ubuntu2) focal; urgency=medium * Include clock_gettime64 in the autopkgtests in addition to clock_gettime, required on armhf. -- Steve Langasek Thu, 12 Mar 2020 00:22:37 -0700 libseccomp (2.4.3-0ubuntu1) focal; urgency=medium * New upstream version. -- Matthias Klose Wed, 11 Mar 2020 18:46:05 +0100 libseccomp (2.4.2-2ubuntu3) focal; urgency=medium * No-change rebuild to drop python3.7. -- Matthias Klose Tue, 18 Feb 2020 10:44:06 +0100 libseccomp (2.4.2-2ubuntu2) focal; urgency=medium * No-change rebuild to generate dependencies on python2. -- Matthias Klose Tue, 17 Dec 2019 12:52:20 +0000 libseccomp (2.4.2-2ubuntu1) focal; urgency=medium * Merge with Debian unstable (LP: 1849785). Remaining changes: * Add autopkgtests * Dropped changes (in upstream now): - db-properly-reset-attribute-state.patch - Updated to new upstream 2.4.1 version to fix security issue. - add-log-action.patch: Minimal backport to support the SECCOMP_RET_LOG action that was released in Linux kernel version 4.14. * Dropped changes (in Debian now): - debian/tests/testsuite-live: - build utils with -pthread - build tools/scmp_api_level - debian/control: add valgrind to Build-Depends to get more unit tests. - debian/*.install: change python paths. - debian/libseccomp2.symbols: added new symbols. - debian/rules: add dh_auto_configure before dh_auto_install to pick up all the python versions. - debian/patches/*: removed, all included in new version. -- Christian Ehrhardt Wed, 13 Nov 2019 08:41:54 +0100 libseccomp (2.4.2-2) unstable; urgency=medium [ Christian Ehrhardt ] * d/rules: fix potential FTFBS after full python3 switch * d/t/control: drop python2 test following the removal of the package [ Felix Geyer ] * Remove build-dependency on valgrind for mips64el as it's broken there. * Backport patch to define __SNR_ppoll again. - Add api_define__SNR_ppoll_again.patch * Replace custom patch for cython3 with the upstream fix. -- Felix Geyer Fri, 15 Nov 2019 18:12:53 +0100 libseccomp (2.4.2-1) unstable; urgency=medium [ Christian Ehrhardt ] * New upstream release 2.4.2 for compatibility with newer kernels and fixing FTBFS (LP: #1849785). - drop d/p/python_install_dir.patch (now upstream) - d/rules: adapt to python 3.8 lacking the m modifier on includes see https://wiki.debian.org/Python/Python3.8 - d/p/tests-rely-on-__SNR_xxx-instead-of-__NR_xxx-for-sysc.patch: fix build time test on arm64 [ Felix Geyer ] * Drop Python 2 bindings. (Closes: #936917) - Add cython3.patch to use the Python 3 cython variant. -- Felix Geyer Wed, 13 Nov 2019 00:00:49 +0100 libseccomp (2.4.1-2) unstable; urgency=medium * Remove build-dependency on valgrind for mipsel and x32 as it's broken on those archs. * Set Rules-Requires-Root: no. -- Felix Geyer Fri, 19 Jul 2019 00:03:34 +0200 libseccomp (2.4.1-1) unstable; urgency=medium * New upstream release. - Addresses CVE-2019-9893 (Closes: #924646) * Drop all patches for parisc arch support, merged upstream. * Build-depend on valgrind to run more unit tests. * Run dh_auto_configure for every python 3 version to install the extension in the correct path. * Update the symbols file. * Adapt autopkgtest to new upstream version: - Build against pthread - Build scmp_api_level tool * Upgrade to debhelper compat level 12. - Add d/not-installed file * Fix install path of the python module. - Add python_install_dir.patch * Add autopkgtest for python packages. -- Felix Geyer Wed, 17 Jul 2019 23:23:28 +0200 libseccomp (2.4.1-0ubuntu0.19.10.3) eoan; urgency=medium * db-properly-reset-attribute-state.patch: db: properly reset the attribute state in db_col_reset() -- Jamie Strandboge Fri, 03 May 2019 20:05:37 +0000 libseccomp (2.4.1-0ubuntu0.19.10.2) eoan; urgency=medium * debian/tests/testsuite-live: - build utils with -pthread - build tools/scmp_api_level * debian/tests/src/test-seccomp.c: #include -- Jamie Strandboge Tue, 23 Apr 2019 13:29:31 +0000 libseccomp (2.4.1-0ubuntu0.19.10.1) eoan; urgency=medium [ Marc Deslauriers ] * Updated to new upstream 2.4.1 version to fix security issue. - CVE-2019-9893 * debian/patches/*: removed, all included in new version. * debian/control: add valgrind to Build-Depends to get more unit tests. * debian/*.install: change python paths. * debian/libseccomp2.symbols: added new symbols. * debian/rules: add dh_auto_configure before dh_auto_install to pick up all the python versions. -- Jamie Strandboge Mon, 22 Apr 2019 21:00:38 +0000 libseccomp (2.3.3-4) unstable; urgency=medium [ Ondřej Nový ] * d/copyright: Change Format URL to correct one [ Helmut Grohne ] * Fix FTCBFS: (Closes: #903556) + Multiarchify python Build-Depends. + Annotate cython dependencies with :native for now. + Drop noop dh_auto_build invocations. + Pass a suitable PYTHONPATH for python2. + Pass _PYTHON_SYSCONFIGDATA_NAME for python3. -- Felix Geyer Sun, 10 Feb 2019 12:25:44 +0100 libseccomp (2.3.3-3ubuntu2) disco; urgency=medium * No-change rebuild to build without python3.6 support. -- Matthias Klose Sat, 03 Nov 2018 11:51:23 +0000 libseccomp (2.3.3-3ubuntu1) cosmic; urgency=medium * Merge from Debian testing. Remaining changes: - add-log-action.patch: Minimal backport to support the SECCOMP_RET_LOG action that was released in Linux kernel version 4.14. - Add autopkgtests. -- Tyler Hicks Fri, 06 Jul 2018 18:03:38 +0000 libseccomp (2.3.3-3) unstable; urgency=medium * Fix FTBFS: Adapt to renamed README file. (Closes: #902767) -- Felix Geyer Sun, 01 Jul 2018 20:32:03 +0200 libseccomp (2.3.3-2) unstable; urgency=medium [ Helmut Grohne ] * Support the nopython build profile. (Closes: #897057) [ Felix Geyer ] * Run upstream "live" tests in an autopkgtest. -- Felix Geyer Sun, 13 May 2018 09:53:08 +0200 libseccomp (2.3.3-1) unstable; urgency=medium * New upstream release. (Closes: #895417) - Adds pkey_mprotect syscall. (Closes: #893722) * Refresh parisc patch. * Move libseccomp2 back to /usr/lib. (Closes: #894988) * Make test failures cause the build to fail. (Closes: 877901) * Build python bindings. (Closes: #810712) * Switch to debhelper compat level 10. * Move git repo to salsa.debian.org * Add myself to Uploaders. -- Felix Geyer Sun, 22 Apr 2018 23:55:03 +0200 libseccomp (2.3.1-2.1ubuntu4) bionic; urgency=medium * debian/tests/data/open.fail_filter: The libseccomp autopkgtests were failing with glibc 2.27 due to changes in glibc which resulted in openat() exclusively being used, without any calls to open(). This resulted in the test process exiting normally instead of being killed, as was expected. Fix the test failure by removing openat() from the list of whitelisted syscalls so that the process is killed. -- Tyler Hicks Thu, 01 Mar 2018 18:09:19 +0000 libseccomp (2.3.1-2.1ubuntu3) artful; urgency=medium * debian/rules: Make test failures cause the build to fail (LP: #1657425) -- Tyler Hicks Fri, 06 Oct 2017 18:08:21 +0000 libseccomp (2.3.1-2.1ubuntu2) artful; urgency=medium * add-log-action.patch: Minimal backport to support the SECCOMP_RET_LOG action that will be released in Linux kernel version 4.14. (LP: #1567597) -- Tyler Hicks Tue, 19 Sep 2017 21:37:38 +0000 libseccomp (2.3.1-2.1ubuntu1) zesty; urgency=low * Merge with Debian unstable. Remaining Ubuntu changes: - Add autopkgtests. -- Dimitri John Ledkov Tue, 06 Dec 2016 15:20:21 +0100 libseccomp (2.3.1-2.1) unstable; urgency=medium [ Martin Pitt ] * Non-maintainer upload with Kees' consent. [ Laurent Bigonville ] * Ensure strict enough generated dependencies (Closes: #844496) -- Martin Pitt Thu, 17 Nov 2016 10:16:44 +0100 libseccomp (2.3.1-2ubuntu2) yakkety; urgency=medium * Fix autopkgtest, seccomp resolution now returns negative syscall numbers for multiplexed calls, thus direct access symbols roundtrip is via negative numbers. E.g. 373 -> shutdown -> -113 -> shutdown. -- Dimitri John Ledkov Fri, 10 Jun 2016 18:14:04 +0100 libseccomp (2.3.1-2ubuntu1) yakkety; urgency=medium * Merge with Debian unstable LP: #1580558. Remaining Ubuntu changes: - Add autopkgtests. (Closes: #788577) -- Dimitri John Ledkov Wed, 08 Jun 2016 10:36:11 +0100 libseccomp (2.3.1-2) unstable; urgency=medium * Add hppa (parisc) support (Closes: #820501) -- Luca Bruno Sat, 28 May 2016 20:05:01 +0200 libseccomp (2.3.1-1) unstable; urgency=medium * New upstream release * control: add Vcs-* fields -- Luca Bruno Tue, 05 Apr 2016 22:16:55 +0200 libseccomp (2.3.0-1) unstable; urgency=medium * New upstream release + drop all patches, applied upstream * libseccomp2: update symbols file * control: add myself to uploaders * control: bump policy version -- Luca Bruno Sun, 03 Apr 2016 00:31:09 +0200 libseccomp (2.2.3-3ubuntu3) xenial; urgency=medium * Fix FTBFS. -- Dimitri John Ledkov Wed, 16 Mar 2016 15:28:16 +0000 libseccomp (2.2.3-3ubuntu2) xenial; urgency=medium * Cherrypick git-d2ca11b7cdddbba3782b1e306ceacf19e898faee.diff. (LP: #1554098) -- Dimitri John Ledkov Wed, 16 Mar 2016 14:58:46 +0000 libseccomp (2.2.3-3ubuntu1) xenial; urgency=medium * Merge with Debian unstable. Remaining Ubuntu changes: - Add autopkgtests. (Closes: #788577) -- Martin Pitt Thu, 11 Feb 2016 16:16:01 +0100 libseccomp (2.2.3-3) unstable; urgency=medium [ Martin Pitt ] * debian/patches/add-x86-32bit-socket-calls.patch: add the newly connected direct socket calls. (Closes: #809556) * debian/add-membarrier.patch: add membarrier syscall. * Backport patches for ppc/ppc64 and s390x. (Closes: #800818) -- Kees Cook Tue, 01 Sep 2015 15:37:31 -0700 libseccomp (2.2.3-2ubuntu3) xenial; urgency=low * debian/patches/add-x86-32bit-socket-calls.patch: add the newly connected direct socket calls. (LP: #1526358) -- Andy Whitcroft Wed, 16 Dec 2015 14:30:17 +0000 libseccomp (2.2.3-2ubuntu2) xenial; urgency=medium * debian/add-membarrier.patch: add membarrier syscall. This can be dropped once libseccomp is synced with 4.3 or higher -- Jamie Strandboge Mon, 14 Dec 2015 10:19:37 -0600 libseccomp (2.2.3-2ubuntu1) wily; urgency=medium * Merge with Debian; remaining changes: - add autopkgtests * debian/control: Build on linux-any. * Backport patches for ppc/ppc64. LP: #1427076. * Backport patches for s390x. -- Matthias Klose Fri, 02 Oct 2015 17:45:30 +0200 libseccomp (2.2.3-2) unstable; urgency=medium * debian/control: enable mips64, mips64el, and x32 architectures, thanks to Helmut Grohne (Closes: 797383). -- Kees Cook Tue, 01 Sep 2015 15:37:31 -0700 libseccomp (2.2.3-1) unstable; urgency=medium * New upstream release (Closes: 793032). * debian/control: update Homepage (Closes: 793033). -- Kees Cook Mon, 03 Aug 2015 15:06:08 -0700 libseccomp (2.2.1-2ubuntu1) wily; urgency=medium * Merge with Debian unstable. Remaining Ubuntu changes: - Add autopkgtest (Debian #788577) -- Martin Pitt Wed, 17 Jun 2015 07:36:57 +0200 libseccomp (2.2.1-2) unstable; urgency=medium * debian/{rules,*.install}: move to /lib, thanks to Michael Biebl (Closes: 788923). -- Kees Cook Tue, 16 Jun 2015 12:45:08 -0700 libseccomp (2.2.1-1ubuntu1) wily; urgency=low * Merge from Debian unstable. Dropped following patches (included in upstream): - add-finit-module.patch - update-x86-syscall-table.patch - update-x86_64-syscall-table.patch - update-arm-syscall-table.patch - update-x32-syscall-table.patch - sync-syscall-table-entries.patch - sync-syscall-table-entries-fixtypo.patch - sync-syscall-table-entries-3.17.patch - sync-syscall-table-entries-3.19.patch - fix-segfault-with-unknown.patch - add-missing-arm-private-syscalls.patch * Remaining changes: - add autopkgtests -- Jamie Strandboge Fri, 12 Jun 2015 15:12:22 -0500 libseccomp (2.2.1-1) unstable; urgency=medium * New upstream release (Closes: 785428). - debian/patches dropped: incorporated upstream. * debian/libseccomp2.symbols: include only documented symbols. * debian/libseccomp-dev.install: include static library (Closes: 698508). * debian/control: - add newly supported arm64, mips, and mipsel. - bump standards version, no changes needed. -- Kees Cook Sat, 16 May 2015 08:15:26 -0700 libseccomp (2.1.1-1ubuntu1) wily; urgency=medium * add-finit-module.patch: add finit_module syscalls to x86 and x86-64 syscall tables * update syscalls for modern kernels (skipping MIPS) - update syscalls for 3.16: + update-x86-syscall-table.patch + update-x86_64-syscall-table.patch + update-arm-syscall-table.patch + update-x32-syscall-table.patch + sync-syscall-table-entries.patch + sync-syscall-table-entries-fixtypo.patch - update syscalls for 3.17: + sync-syscall-table-entries-3.17.patch - update syscalls for 3.19: + sync-syscall-table-entries-3.19.patch - LP: #1450642 * fix-segfault-with-unknown.patch: fix segfault when find unknown syscall * debian/patches/add-missing-arm-private-syscalls.path: add missing private ARM syscalls * add autopkgtests for scmp_sys_resolver and filter testing and SYS_getrandom() testing -- Jamie Strandboge Fri, 08 May 2015 17:08:43 -0400 libseccomp (2.1.1-1) unstable; urgency=low * New upstream release (Closes: 733293). * copyright: add a few missed people. * rules: adjusted for new test target. * libseccomp2.symbols: drop accidentally exported functions. * control: - bump standards, no changes needed. - add armel target -- Kees Cook Sat, 12 Apr 2014 10:44:22 -0700 libseccomp (2.1.0+dfsg-1) unstable; urgency=low * Rebuild source package without accidental binaries (Closes: 725617). - debian/watch: mangle upstream version check. * debian/rules: make tests non-fatal while upstream fixes them (Closes: 721292). -- Kees Cook Sun, 06 Oct 2013 15:05:51 -0700 libseccomp (2.1.0-1) unstable; urgency=low * New upstream release (Closes: 718398): - dropped debian/patches/manpage-dashes.patch: taken upstream. - dropped debian/patches/include-unistd.patch: not needed. - debian/patches/testsuite-x86-write.patch: taken upstream. - ABI bump: moved from libseccomp1 to libseccomp2. * debian/control: - added Arch: armhf, now supported upstream. - added seccomp binary package for helper tools. * Added debian/patches/manpage-typo.patch: spelling fix. * Added debian/patches/build-ldflags.patch: fix LDFLAGS handling. -- Kees Cook Tue, 13 Aug 2013 00:02:01 -0700 libseccomp (1.0.1-2) unstable; urgency=low * debian/rules: enable testsuite at build time, thanks to Stéphane Graber (Closes: 698803). * Added debian/patches/include-unistd.patch: detect location of asm/unistd.h correctly. * Added debian/patches/testsuite-x86-write.patch: skip the "write" syscall correctly on x86. * debian/control: bump standards to 3.9.4, no changes needed. -- Kees Cook Wed, 23 Jan 2013 13:11:53 -0800 libseccomp (1.0.1-1) unstable; urgency=low * New upstream release. * debian/control: only build on amd64 and i386 (Closes: 687368). -- Kees Cook Fri, 07 Dec 2012 11:38:03 -0800 libseccomp (1.0.0-1) unstable; urgency=low * New upstream release. - bump ABI. - drop build verbosity patch, use upstream V=1 instead. * libseccomp-dev.manpages: fix build location (Closes: 682152, 682471). * debian/patches/pkgconfig-macro.patch: use literals for macro. -- Kees Cook Fri, 03 Aug 2012 16:59:41 -0700 libseccomp (0.1.0-1) unstable; urgency=low * New upstream release. - drop patches taken upstream: - libexecdir.patch - pass-flags.patch -- Kees Cook Fri, 08 Jun 2012 12:32:22 -0700 libseccomp (0.0.0~20120605-1) unstable; urgency=low * Initial release (Closes: #676257). -- Kees Cook Tue, 05 Jun 2012 11:28:07 -0700