libseccomp (2.5.1-1ubuntu1~18.04.2) bionic-security; urgency=medium * No-change rebuild in the -security pocket. -- Marc Deslauriers Fri, 19 Nov 2021 06:48:33 -0500 libseccomp (2.5.1-1ubuntu1~18.04.1) bionic; urgency=medium * Updated to new upstream 2.5.1 version for updated syscalls support (LP: #1891810) - Removed the following patches that are now included in the new version: + d/p/fix-aarch64-syscalls.patch + d/p/db-consolidate-some-of-the-code-which-adds-rules.patch + d/p/db-add-shadow-transactions.patch - Deleted the patch to add a local copy of architecture specific header files from linux-libc-dev/focal as this is not needed anymore + d/p/add-5.4-local-syscall-headers.patch - debian/control: Added gperf to Build-Depends as this is now required by upstream - debian/libseccomp2.symbols: Added new symbols * Add system call headers for powerpc required for backport to xenial - d/p/add-5.8-powerpc-syscall-headers.patch -- Alex Murray Mon, 01 Mar 2021 13:49:23 +1030 libseccomp (2.4.3-1ubuntu3.18.04.3) bionic; urgency=medium * d/p/db-consolidate-some-of-the-code-which-adds-rules.patch * d/p/db-add-shadow-transactions.patch (LP: #1861177) Backport upstream patches to address performance regression introduced in libseccomp 2.4. -- Ioanna Alifieraki Mon, 29 Jun 2020 13:52:22 +0100 libseccomp (2.4.3-1ubuntu3.18.04.2) bionic; urgency=medium * Updated to new upstream 2.4.3 version for updated syscalls support and test-suite robustness - d/p/add-5.4-local-syscall-headers.patch: Add local copy of the architecture specific header files which specify system call numbers from linux-libc-dev in focal to ensure unit tests pass on older releases where the linux-libc-dev package does not have the required system calls defined and use these during compilation of unit tests - d/p/db-properly-reset-attribute-state.patch: Drop this patch since is now upstream - LP: #1876055 * Add missing aarch64 system calls - d/p/fix-aarch64-syscalls.patch - LP: #1877633 -- Alex Murray Tue, 02 Jun 2020 14:09:28 +0930 libseccomp (2.4.1-0ubuntu0.18.04.2) bionic-security; urgency=medium [ Marc Deslauriers ] * Updated to new upstream 2.4.1 version to fix security issue. - CVE-2019-9893 * debian/patches/*: removed, all included in new version. * debian/control: add valgrind to Build-Depends to get more unit tests. * debian/libseccomp2.symbols: added new symbols. * debian/docs: removed, new version doesn't have README file. [ Jamie Strandboge ] * db-properly-reset-attribute-state.patch: db: properly reset the attribute state in db_col_reset() -- Jamie Strandboge Fri, 03 May 2019 20:09:03 +0000 libseccomp (2.3.1-2.1ubuntu4.1) bionic; urgency=medium * d/p/lp-1755250-add-the-statx-syscall.patch: add statx support (LP: #1755250) * d/p/lp-1815415-*: Add syscalls up to kernel 4.15 (LP: #1815415) -- Christian Ehrhardt Fri, 08 Feb 2019 09:17:23 +0100 libseccomp (2.3.1-2.1ubuntu4) bionic; urgency=medium * debian/tests/data/open.fail_filter: The libseccomp autopkgtests were failing with glibc 2.27 due to changes in glibc which resulted in openat() exclusively being used, without any calls to open(). This resulted in the test process exiting normally instead of being killed, as was expected. Fix the test failure by removing openat() from the list of whitelisted syscalls so that the process is killed. -- Tyler Hicks Thu, 01 Mar 2018 18:09:19 +0000 libseccomp (2.3.1-2.1ubuntu3) artful; urgency=medium * debian/rules: Make test failures cause the build to fail (LP: #1657425) -- Tyler Hicks Fri, 06 Oct 2017 18:08:21 +0000 libseccomp (2.3.1-2.1ubuntu2) artful; urgency=medium * add-log-action.patch: Minimal backport to support the SECCOMP_RET_LOG action that will be released in Linux kernel version 4.14. (LP: #1567597) -- Tyler Hicks Tue, 19 Sep 2017 21:37:38 +0000 libseccomp (2.3.1-2.1ubuntu1) zesty; urgency=low * Merge with Debian unstable. Remaining Ubuntu changes: - Add autopkgtests. -- Dimitri John Ledkov Tue, 06 Dec 2016 15:20:21 +0100 libseccomp (2.3.1-2.1) unstable; urgency=medium [ Martin Pitt ] * Non-maintainer upload with Kees' consent. [ Laurent Bigonville ] * Ensure strict enough generated dependencies (Closes: #844496) -- Martin Pitt Thu, 17 Nov 2016 10:16:44 +0100 libseccomp (2.3.1-2ubuntu2) yakkety; urgency=medium * Fix autopkgtest, seccomp resolution now returns negative syscall numbers for multiplexed calls, thus direct access symbols roundtrip is via negative numbers. E.g. 373 -> shutdown -> -113 -> shutdown. -- Dimitri John Ledkov Fri, 10 Jun 2016 18:14:04 +0100 libseccomp (2.3.1-2ubuntu1) yakkety; urgency=medium * Merge with Debian unstable LP: #1580558. Remaining Ubuntu changes: - Add autopkgtests. (Closes: #788577) -- Dimitri John Ledkov Wed, 08 Jun 2016 10:36:11 +0100 libseccomp (2.3.1-2) unstable; urgency=medium * Add hppa (parisc) support (Closes: #820501) -- Luca Bruno Sat, 28 May 2016 20:05:01 +0200 libseccomp (2.3.1-1) unstable; urgency=medium * New upstream release * control: add Vcs-* fields -- Luca Bruno Tue, 05 Apr 2016 22:16:55 +0200 libseccomp (2.3.0-1) unstable; urgency=medium * New upstream release + drop all patches, applied upstream * libseccomp2: update symbols file * control: add myself to uploaders * control: bump policy version -- Luca Bruno Sun, 03 Apr 2016 00:31:09 +0200 libseccomp (2.2.3-3ubuntu3) xenial; urgency=medium * Fix FTBFS. -- Dimitri John Ledkov Wed, 16 Mar 2016 15:28:16 +0000 libseccomp (2.2.3-3ubuntu2) xenial; urgency=medium * Cherrypick git-d2ca11b7cdddbba3782b1e306ceacf19e898faee.diff. (LP: #1554098) -- Dimitri John Ledkov Wed, 16 Mar 2016 14:58:46 +0000 libseccomp (2.2.3-3ubuntu1) xenial; urgency=medium * Merge with Debian unstable. Remaining Ubuntu changes: - Add autopkgtests. (Closes: #788577) -- Martin Pitt Thu, 11 Feb 2016 16:16:01 +0100 libseccomp (2.2.3-3) unstable; urgency=medium [ Martin Pitt ] * debian/patches/add-x86-32bit-socket-calls.patch: add the newly connected direct socket calls. (Closes: #809556) * debian/add-membarrier.patch: add membarrier syscall. * Backport patches for ppc/ppc64 and s390x. (Closes: #800818) -- Kees Cook Tue, 01 Sep 2015 15:37:31 -0700 libseccomp (2.2.3-2ubuntu3) xenial; urgency=low * debian/patches/add-x86-32bit-socket-calls.patch: add the newly connected direct socket calls. (LP: #1526358) -- Andy Whitcroft Wed, 16 Dec 2015 14:30:17 +0000 libseccomp (2.2.3-2ubuntu2) xenial; urgency=medium * debian/add-membarrier.patch: add membarrier syscall. This can be dropped once libseccomp is synced with 4.3 or higher -- Jamie Strandboge Mon, 14 Dec 2015 10:19:37 -0600 libseccomp (2.2.3-2ubuntu1) wily; urgency=medium * Merge with Debian; remaining changes: - add autopkgtests * debian/control: Build on linux-any. * Backport patches for ppc/ppc64. LP: #1427076. * Backport patches for s390x. -- Matthias Klose Fri, 02 Oct 2015 17:45:30 +0200 libseccomp (2.2.3-2) unstable; urgency=medium * debian/control: enable mips64, mips64el, and x32 architectures, thanks to Helmut Grohne (Closes: 797383). -- Kees Cook Tue, 01 Sep 2015 15:37:31 -0700 libseccomp (2.2.3-1) unstable; urgency=medium * New upstream release (Closes: 793032). * debian/control: update Homepage (Closes: 793033). -- Kees Cook Mon, 03 Aug 2015 15:06:08 -0700 libseccomp (2.2.1-2ubuntu1) wily; urgency=medium * Merge with Debian unstable. Remaining Ubuntu changes: - Add autopkgtest (Debian #788577) -- Martin Pitt Wed, 17 Jun 2015 07:36:57 +0200 libseccomp (2.2.1-2) unstable; urgency=medium * debian/{rules,*.install}: move to /lib, thanks to Michael Biebl (Closes: 788923). -- Kees Cook Tue, 16 Jun 2015 12:45:08 -0700 libseccomp (2.2.1-1ubuntu1) wily; urgency=low * Merge from Debian unstable. Dropped following patches (included in upstream): - add-finit-module.patch - update-x86-syscall-table.patch - update-x86_64-syscall-table.patch - update-arm-syscall-table.patch - update-x32-syscall-table.patch - sync-syscall-table-entries.patch - sync-syscall-table-entries-fixtypo.patch - sync-syscall-table-entries-3.17.patch - sync-syscall-table-entries-3.19.patch - fix-segfault-with-unknown.patch - add-missing-arm-private-syscalls.patch * Remaining changes: - add autopkgtests -- Jamie Strandboge Fri, 12 Jun 2015 15:12:22 -0500 libseccomp (2.2.1-1) unstable; urgency=medium * New upstream release (Closes: 785428). - debian/patches dropped: incorporated upstream. * debian/libseccomp2.symbols: include only documented symbols. * debian/libseccomp-dev.install: include static library (Closes: 698508). * debian/control: - add newly supported arm64, mips, and mipsel. - bump standards version, no changes needed. -- Kees Cook Sat, 16 May 2015 08:15:26 -0700 libseccomp (2.1.1-1ubuntu1) wily; urgency=medium * add-finit-module.patch: add finit_module syscalls to x86 and x86-64 syscall tables * update syscalls for modern kernels (skipping MIPS) - update syscalls for 3.16: + update-x86-syscall-table.patch + update-x86_64-syscall-table.patch + update-arm-syscall-table.patch + update-x32-syscall-table.patch + sync-syscall-table-entries.patch + sync-syscall-table-entries-fixtypo.patch - update syscalls for 3.17: + sync-syscall-table-entries-3.17.patch - update syscalls for 3.19: + sync-syscall-table-entries-3.19.patch - LP: #1450642 * fix-segfault-with-unknown.patch: fix segfault when find unknown syscall * debian/patches/add-missing-arm-private-syscalls.path: add missing private ARM syscalls * add autopkgtests for scmp_sys_resolver and filter testing and SYS_getrandom() testing -- Jamie Strandboge Fri, 08 May 2015 17:08:43 -0400 libseccomp (2.1.1-1) unstable; urgency=low * New upstream release (Closes: 733293). * copyright: add a few missed people. * rules: adjusted for new test target. * libseccomp2.symbols: drop accidentally exported functions. * control: - bump standards, no changes needed. - add armel target -- Kees Cook Sat, 12 Apr 2014 10:44:22 -0700 libseccomp (2.1.0+dfsg-1) unstable; urgency=low * Rebuild source package without accidental binaries (Closes: 725617). - debian/watch: mangle upstream version check. * debian/rules: make tests non-fatal while upstream fixes them (Closes: 721292). -- Kees Cook Sun, 06 Oct 2013 15:05:51 -0700 libseccomp (2.1.0-1) unstable; urgency=low * New upstream release (Closes: 718398): - dropped debian/patches/manpage-dashes.patch: taken upstream. - dropped debian/patches/include-unistd.patch: not needed. - debian/patches/testsuite-x86-write.patch: taken upstream. - ABI bump: moved from libseccomp1 to libseccomp2. * debian/control: - added Arch: armhf, now supported upstream. - added seccomp binary package for helper tools. * Added debian/patches/manpage-typo.patch: spelling fix. * Added debian/patches/build-ldflags.patch: fix LDFLAGS handling. -- Kees Cook Tue, 13 Aug 2013 00:02:01 -0700 libseccomp (1.0.1-2) unstable; urgency=low * debian/rules: enable testsuite at build time, thanks to Stéphane Graber (Closes: 698803). * Added debian/patches/include-unistd.patch: detect location of asm/unistd.h correctly. * Added debian/patches/testsuite-x86-write.patch: skip the "write" syscall correctly on x86. * debian/control: bump standards to 3.9.4, no changes needed. -- Kees Cook Wed, 23 Jan 2013 13:11:53 -0800 libseccomp (1.0.1-1) unstable; urgency=low * New upstream release. * debian/control: only build on amd64 and i386 (Closes: 687368). -- Kees Cook Fri, 07 Dec 2012 11:38:03 -0800 libseccomp (1.0.0-1) unstable; urgency=low * New upstream release. - bump ABI. - drop build verbosity patch, use upstream V=1 instead. * libseccomp-dev.manpages: fix build location (Closes: 682152, 682471). * debian/patches/pkgconfig-macro.patch: use literals for macro. -- Kees Cook Fri, 03 Aug 2012 16:59:41 -0700 libseccomp (0.1.0-1) unstable; urgency=low * New upstream release. - drop patches taken upstream: - libexecdir.patch - pass-flags.patch -- Kees Cook Fri, 08 Jun 2012 12:32:22 -0700 libseccomp (0.0.0~20120605-1) unstable; urgency=low * Initial release (Closes: #676257). -- Kees Cook Tue, 05 Jun 2012 11:28:07 -0700