charybdis (3.5.5-2) unstable; urgency=medium

  [ Unit 193 ]
  * d/rules: Fix tabs-vs-spaces for a few comments.
  * d/rules: Re-enable hardening, append LDFLAGS to link only as needed.
  * d/rules: Simplify logic for checking which TLS library to use.

  [ Antoine Beapré ]
  * switch to embedtls by default: linking across servers work (and not
    with gnutls) and there are no licensing issues (like openssl)
    (Closes: #705369)

 -- Antoine Beaupré <anarcat@debian.org>  Thu, 03 Aug 2017 12:47:26 -0400

charybdis (3.5.5-1) unstable; urgency=medium

  [ Antoine Beaupré ]
  * new upstream release to factor in patches
  * add missing dependency on lsb-base
  * remove -dbg package, now automatically built

  [ Unit 193 ]
  * stop Build-Depending on libgcrypt11-dev transition package (Closes: #864096)
  * fix watchfile to follow github

 -- Antoine Beaupré <anarcat@debian.org>  Thu, 20 Jul 2017 20:31:56 -0400

charybdis (3.5.4-1) experimental; urgency=medium

  * new upstream release
  * two patches to fix GnuTLS support

 -- Antoine Beaupré <anarcat@debian.org>  Tue, 28 Feb 2017 16:36:40 -0500

charybdis (3.5.3-1) unstable; urgency=high

  * new upstream release
  * fix security issue "certificate fingerprint spoofing through crafted
    SASL messages", CVE-2016-7143 (Closes: #836714)
  * drop patch null-deref-fix.patch, factored in upstream
  * ignore alpha/beta/RC releases upstream, we want to follow the stable
    stuff

 -- Antoine Beaupré <anarcat@debian.org>  Mon, 05 Sep 2016 18:16:17 -0400

charybdis (3.5.2p1-2) unstable; urgency=high

  * remove redundant service handlers already installed by dh_installinit
  * fix potential security issue: do not recurse with chmod
  * add upstream patch to workaround ssld crash

 -- Antoine Beaupré <anarcat@debian.org>  Wed, 17 Aug 2016 13:44:08 -0400

charybdis (3.5.2p1-1) unstable; urgency=medium

  * new upstream release
  * clarify patches forward status
  * update standards version, no change
  * convert TODO to org mode
  * mark a todo as done
  * use "service" instead of "invoke-rc.d"
  * re-enable hardening flags, still failing
  * bump standards version: no change
  * update copyright file to follow standards and silence warnings
  * update watch file to follow new upstream location
  * restart daemon in one shot, after upgrade completed

 -- Antoine Beaupré <anarcat@debian.org>  Sat, 13 Aug 2016 15:16:59 -0400

charybdis (3.5.0-1) unstable; urgency=medium

  * new upstream release, see this post for details:
    http://www.charybdis.io/2016/01/05/charybdis-3.5.0-release.html
    (Closes: #703546)
  * fix homepage to use the new upstream URL (Closes: #812527)
  * remove patches factored in upstream:
    * gnutls30: upstream supports both 2.x and 3.x, apparently
    * non-static-sqlite: now a flag, that we use
    * fix-paths: merged upstream
    * CVE-2015-5290: fixed upstream
    * gnutls, libratbox-gnutls-add-gnutls-v3-api-compatibility-wit: fixed
      upstream
    * ircd.conf: will never be merged upstream, just move it during the build
  * forwarded extra-clean patch upstream
  * new patches:
    * reproducible: make builds reproducible (Closes: #768328)
    * gnutls34.patch: fix build under gnutls 3.4 (Closes: #812655)

 -- Antoine Beaupré <anarcat@debian.org>  Mon, 15 Feb 2016 20:16:45 -0500

charybdis (3.4.2-5) unstable; urgency=high

  * switch to new anonscm hostnames
  * initialise gnutls properly (Closes: #768339, #705369)
  * add fix for CVE-2015-5290, cherry-picked from upstream d5f856c^..172b58f

 -- Antoine Beaupré <anarcat@debian.org>  Fri, 13 Nov 2015 16:35:35 -0500

charybdis (3.4.2-4) unstable; urgency=medium

  * remove duplicate library depends with shlibs (Closes: #750833)
  * make git-dch work
  * bump standards version (no change) and fix homepage

 -- Antoine Beaupré <anarcat@debian.org>  Mon, 09 Jun 2014 20:29:47 -0400

charybdis (3.4.2-3) unstable; urgency=low

  [Hideki Yamane]
  * specify "-fi" option to autoreconf fix FTBFS (Closes: #724077)

  [Antoine Beaupré]
  * do not ship files in /var/run

 -- Antoine Beaupré <anarcat@debian.org>  Sat, 20 Jul 2013 11:02:06 -0400

charybdis (3.4.2-2) unstable; urgency=low

  * fix configure.ac patch so it has proper format (Closes: #715511)
  * update to standards 3.9.4, no change

 -- Antoine Beaupré <anarcat@debian.org>  Wed, 17 Jul 2013 20:40:50 -0400

charybdis (3.4.2-1) unstable; urgency=low

  * new upstream release (Closes: #684191, #701438, #711152)
  * significantly cleanup the install layout so that libraries are all in
    a private directory, .la files are not installed (Closes: #655624),
    binaries are in /usr/bin again (with charybdis- prefix), and the
    manpage doesn't conflict with other ircd(8) manpages.
  * this makes charydbis *not* conflict with other ircds
  * upgrade to dh 9 for better autotools support and hardening flags
  * hardening flags are disabled because of upstream issues, see TODO
  * change branch layout to follow upstream layout: upstream is on the
    master branch
  * dropped patches:
    * default-nicklen: upstream bumped it to 31 (we were at 30)
    * CVE-2012-6084.patch: merged upstream
    * cleanup-bandb-properly: merged upstream
    * no_hardcoded_bandb_dpath: forgot why it is there (?!)
    * no_rpath: we ship in private directories
  * remaining patches have been re-forwarded upstream as their old
    bugtracker was destroyed
  * new patches:
    * extra-clean: some generated files were left around after clean
    * gnutls.patch: restore gnutls support removed from upstream, but
      readded at our request - gnutls support is still problematic
      however, see: #705369 for followup
  * rerolled patch non-static-sqlite to fix ftbs with ld --as-needed
    (Closes: #655012)
  * fix permissions on /etc/charybdis so it's not readable by all
  * provide debugging symbols, in a separate package

 -- Antoine Beaupré <anarcat@debian.org>  Tue, 04 Jun 2013 22:04:22 -0400

charybdis (3.3.0-8) unstable; urgency=low

  * patch: use libgnutls 3.0 at least

 -- Antoine Beaupré <anarcat@debian.org>  Sun, 25 Mar 2012 21:44:05 -0400

charybdis (3.3.0-7.1) unstable; urgency=low

  * Non-maintainer upload.
  * Fix remote denial of service vulnerability
    CVE-2012-6084 (Closes: #697092).

 -- John Paul Adrian Glaubitz <glaubitz@physik.fu-berlin.de>  Wed, 02 Jan 2013 20:57:36 +0100

charybdis (3.3.0-7) unstable; urgency=low

  * patch: default NICKLEN to 30 to fit a commonly used value and the new
    default default (used on irc.staticbox.net at least)

 -- Antoine Beaupré <anarcat@debian.org>  Tue, 29 Nov 2011 18:09:43 -0500

charybdis (3.3.0-6) unstable; urgency=low

  * Conflict with ircd-ratbox (Closes: #649070)
  * Conflict with oftc-hybrid (Closes: #649071)

 -- Antoine Beaupré <anarcat@debian.org>  Mon, 21 Nov 2011 20:03:27 -0500

charybdis (3.3.0-5) unstable; urgency=low

  * add all undocumented copyrights - some files do not have copyright
    headers still, it is assumed they are GPL-2

 -- Antoine Beaupré <anarcat@debian.org>  Thu, 10 Nov 2011 23:07:37 -0500

charybdis (3.3.0-4) unstable; urgency=low

  * add debug flags, simplify configure args passing
  * fix my email address
  * fixup gnutls dependencies

 -- Antoine Beaupré <anarcat@debian.org>  Mon, 07 Nov 2011 17:53:33 -0500

charybdis (3.3.0-3) unstable; urgency=low

  * make maximum nick length customizable
  * make this compile in squeeze without OpenSSL

 -- Antoine Beaupré <anarcat@koumbit.org>  Sun, 06 Nov 2011 16:27:49 -0500

charybdis (3.3.0-2) unstable; urgency=low

  * remove logfiles on purge
  * port to non-linux kernels
  * IPv6 support
  * provide ircd
  * fix initscript stop
  * allow building with OpenSSL
  * patches, forwarded upstream:
    * do not build with rpath
    * fix clean target

 -- Antoine Beaupré <anarcat@debian.org>  Sun, 06 Nov 2011 12:28:43 -0500

charybdis (3.3.0-1) unstable; urgency=low

  * Initial release (Closes: #485553)
  * patches, forwarded upstream:
    * non-static sqlite
    * proper ircd.conf sample file
    * fix various install paths
    * no hardcoded bandb environment

 -- Antoine Beaupré <anarcat@debian.org>  Wed, 26 Oct 2011 23:16:38 -0400
