ldns (1.6.17-1ubuntu0.1) trusty-security; urgency=medium

  * SECURITY UPDATE: incorrect modes for private keys
    - d/patches/0003-bugfix-573-ldns-keygen-write-private-mode-0600.patch:
      write private keys with correct mode in examples/ldns-keygen.c.
    - CVE-2014-3209
  * SECURITY UPDATE: double free for answers > 4096
    - debian/patches/0004-bugfix-548-Double-free-for-answers-4096.patch:
      set answer_pkt in resolver.c.
    - No CVE number
  * SECURITY UPDATE: double-free in ldns_fget_token_l
    - debian/patches/CVE-2017-1000231.patch: check parse limit before t
      increment in parse.c.
    - CVE-2017-1000231
  * SECURITY UPDATE: double-free in ldns_str2rdf_long_str
    - debian/patches/CVE-2017-1000232.patch: free after reallocing to 0
      size in str2host.c.
    - CVE-2017-1000232

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Tue, 21 Nov 2017 13:12:52 -0500

ldns (1.6.17-1) unstable; urgency=low

  * New upstream version 1.6.17
  * Use updated watch file
  * Refresh patches for 1.6.17 release
  * Install libldns.pc to /usr/lib/pkg-config (Closes: #696025)
  * Update symbols file that has removed some internal symbols

 -- Ondřej Surý <ondrej@debian.org>  Tue, 11 Feb 2014 15:22:50 +0100

ldns (1.6.16-1) unstable; urgency=low

  * New upstream version 1.6.16
  * Update patches for release 1.6.16

 -- Ondřej Surý <ondrej@debian.org>  Wed, 10 Jul 2013 12:47:56 +0200

ldns (1.6.13-4) unstable; urgency=low

  * Add correct Breaks/Replaces, fix typo and version (Closes: #694468)

 -- Ondřej Surý <ondrej@debian.org>  Tue, 27 Nov 2012 12:05:04 +0100

ldns (1.6.13-3) unstable; urgency=low

  * Also move manual page for ldns-config to libldns-dev package

 -- Ondřej Surý <ondrej@debian.org>  Fri, 07 Sep 2012 14:36:11 +0200

ldns (1.6.13-2) unstable; urgency=low

  * Convert python-ldns package to dh_python2
  * Move ldns-config to /usr/sbin and to libldns-dev where it belongs

 -- Ondřej Surý <ondrej@debian.org>  Fri, 13 Jul 2012 12:43:03 +0200

ldns (1.6.13-1) unstable; urgency=low

  [ Daniel Baumann ]
  * Removing gost symbols in libldns1 if needed (Closes: #649695)

  [ Ondřej Surý ]
  * Generate symbols file in dh_makeshlibs target
  * Imported Upstream version 1.6.13 (Closes: #674458)
  * Add new symbols introduced in 1.6.13

 -- Ondřej Surý <ondrej@debian.org>  Mon, 28 May 2012 09:32:24 +0200

ldns (1.6.12-2) unstable; urgency=low

  [ Robert S. Edmonds ]
  * debian/: add libldns1-dbg debugging symbol package

 -- Ondřej Surý <ondrej@debian.org>  Mon, 26 Mar 2012 13:56:03 +0200

ldns (1.6.12-1) unstable; urgency=low

  * Fix brace-expansion-in-debhelper-config-file warning
  * Imported Upstream version 1.6.12
  * Update patch for new release

 -- Ondřej Surý <ondrej@debian.org>  Mon, 16 Jan 2012 15:34:20 +0100

ldns (1.6.11-1) unstable; urgency=low

  * Conditionally enable GOST algorithm support based on OpenSSL version
  * Make GOST symbols optional to allow easy backporting
  * Imported Upstream version 1.6.11
  * Update patches to the new release
  * Update libldns1 symbols (and make GOST symbols mandatory again, it
    will break ABI if they are missing)

 -- Ondřej Surý <ondrej@debian.org>  Thu, 29 Sep 2011 17:38:20 +0200

ldns (1.6.10-2) unstable; urgency=low

  * Add dependency on libssl-dev to libldns-dev (Closes: #629888)

 -- Ondřej Surý <ondrej@debian.org>  Thu, 09 Jun 2011 11:20:41 +0200

ldns (1.6.10-1) unstable; urgency=low

  * Link libtool to current directory in the clean target if not found
    (Closes: #623320)
  * Update Vcs-* links
  * Imported Upstream version 1.6.10

 -- Ondřej Surý <ondrej@debian.org>  Tue, 31 May 2011 15:54:59 +0200

ldns (1.6.9-2) unstable; urgency=low

  * Don't perform checks, because upstream target test is broken
  * Enable GOST algorithm (Closes: #620598)

 -- Ondřej Surý <ondrej@debian.org>  Sun, 03 Apr 2011 12:07:36 +0200

ldns (1.6.9-1) unstable; urgency=low

  * Imported Upstream version 1.6.9

 -- Ondřej Surý <ondrej@debian.org>  Fri, 18 Mar 2011 13:48:47 +0100

ldns (1.6.8-1) unstable; urgency=low

  * Imported Upstream version 1.6.8

 -- Ondřej Surý <ondrej@debian.org>  Mon, 24 Jan 2011 15:50:09 +0100

ldns (1.6.7-1) unstable; urgency=low

  * New upstream release

 -- Ondřej Surý <ondrej@debian.org>  Fri, 14 Jan 2011 12:13:33 +0100

ldns (1.6.6-2) unstable; urgency=high

  * Install ldns.py into python-ldns package (Closes: #609955)

 -- Ondřej Surý <ondrej@debian.org>  Fri, 14 Jan 2011 10:53:30 +0100

ldns (1.6.6-1) unstable; urgency=low

  * New upstream release
  * Add Changelog to debian/docs (Closes: #592437)

 -- Ondřej Surý <ondrej@debian.org>  Thu, 12 Aug 2010 13:06:10 +0200

ldns (1.6.5-1) unstable; urgency=low

  * New upstream release
  * Fix _ldns.so install command

 -- Ondřej Surý <ondrej@debian.org>  Wed, 04 Aug 2010 16:08:00 +0200

ldns (1.6.5~rc1-1) unstable; urgency=low

  * New upstream RC release
  * Updated patches to 1.6.5rc1

 -- Ondřej Surý <ondrej@debian.org>  Mon, 07 Jun 2010 20:23:13 +0200

ldns (1.6.4-5) unstable; urgency=low

  * allow installing with just one version of python (Closes: #583350)
  * add explicit call to python-support and quilt from debhelper

 -- Ondřej Surý <ondrej@debian.org>  Fri, 26 Mar 2010 17:01:28 +0100

ldns (1.6.4-4) unstable; urgency=low

  * Add support for all python versions (Closes: #571494)

 -- Ondřej Surý <ondrej@debian.org>  Mon, 01 Mar 2010 13:29:06 +0100

ldns (1.6.4-3) unstable; urgency=low

  * Disable building with binutils-gold

 -- Ondřej Surý <ondrej@debian.org>  Tue, 02 Feb 2010 14:51:07 +0100

ldns (1.6.4-2) unstable; urgency=low

  * Don't uselessly link to all libraries around

 -- Ondřej Surý <ondrej@debian.org>  Thu, 28 Jan 2010 22:33:05 +0100

ldns (1.6.4-1) unstable; urgency=low
   
  * New Upstream version 1.6.4
  * Bump standards version to 3.8.3
  * Enable pyldns bindings (python-pyldns package)
  * Use DESTDIR= instead of prefix= when doing 'make install'
  * Don't uselessly link to all libraries around

 -- Ondřej Surý <ondrej@debian.org>  Thu, 28 Jan 2010 11:39:17 +0100

ldns (1.6.1-1) unstable; urgency=low

  * New Upstream Version

 -- Ondřej Surý <ondrej@debian.org>  Sat, 24 Oct 2009 11:14:17 +0200

ldns (1.6.0-1) unstable; urgency=low

  * New Upstream Version

 -- Ondřej Surý <ondrej@debian.org>  Thu, 30 Jul 2009 21:31:34 +0200

ldns (1.5.1-1) unstable; urgency=low

  * New upstream release.
  * Merged upstream:
    - debian/patches/01_put_ldns_library_check_to_bottom.dpatch
    - debian/patches/02_buffer_overflow_in_rr.c.dpatch

 -- Ondřej Surý <ondrej@debian.org>  Tue, 03 Mar 2009 11:53:42 +0100

ldns (1.4.0-2) unstable; urgency=low

  * Make dh_makeshlibs call versioned.
  * Cherry pick possible buffer overflow in rr.c from 1.5.x branch.

 -- Ondřej Surý <ondrej@debian.org>  Tue, 10 Feb 2009 17:05:45 +0100

ldns (1.4.0-1) unstable; urgency=low

  * New upstream release.
  * Merged upstream:
    - debian/patches/01_ldns-1.3.0.ldns-new-dnssec-tools.dpatch
    - debian/patches/02_ldns-1.3.0.ldns-read-zone.dpatch
    - debian/patches/03_ldns-1.3.0_hex_can_contain_space.dpatch
    - debian/patches/04_ldns-1.3.0_ldns-compare-zones.dpatch

 -- Ondřej Surý <ondrej@debian.org>  Thu, 20 Nov 2008 20:33:14 +0100

ldns (1.3.0-6) unstable; urgency=low

  * Various improvements and fixes for ldns-compare-zones
    - Change opt_* from int to bool
    - Fix double zones read
    - Canonicalize and sort zones before comparing (can be disabled
      by -z)

 -- Ondřej Surý <ondrej@debian.org>  Tue, 30 Sep 2008 16:52:22 +0200

ldns (1.3.0-5) unstable; urgency=low

  * Reverse read order of zones to keep SOA of first zone in output

 -- Ondřej Surý <ondrej@debian.org>  Sun, 07 Sep 2008 00:58:00 +0200

ldns (1.3.0-4) unstable; urgency=low

  * Must test what I write.  Fix double free in ldns-merge-dnssec.

 -- Ondřej Surý <ondrej@debian.org>  Sat, 06 Sep 2008 14:56:24 +0200

ldns (1.3.0-3) unstable; urgency=low

  * Build ldns-merge-dnssec as well
  * Fix bunch of lintian warnings.

 -- Ondřej Surý <ondrej@debian.org>  Sat, 06 Sep 2008 14:25:27 +0200

ldns (1.3.0-2) unstable; urgency=low

  * debian/patches/01_ldns-1.3.0.ldns-new-dnssec-tools.dpatch:
    - Add two new DNSSEC related tools
  * 02_ldns-1.3.0.ldns-read-zone.dpatch:
    - Small fixups for ldns-read-zone

 -- Ondřej Surý <ondrej@debian.org>  Sat, 06 Sep 2008 13:49:04 +0200

ldns (1.3.0-1) unstable; urgency=low

  * New upstream release (final 1.3.0).

 -- Ondřej Surý <ondrej@debian.org>  Mon, 02 Jun 2008 17:38:34 +0200

ldns (1.2.99.pre.1.3.0.20080528-1) unstable; urgency=low

  * New upstream release candidate.

 -- Ondřej Surý <ondrej@debian.org>  Wed, 28 May 2008 12:10:07 +0200

ldns (1.2.99.pre.1.3.0.20080229-2) unstable; urgency=low

  * Add correct dependencies for libldns-dev ... again
    (Closes: #454905)

 -- Ondřej Surý <ondrej@debian.org>  Wed, 21 May 2008 22:16:38 +0200

ldns (1.2.99.pre.1.3.0.20080229-1) unstable; urgency=low

  * New upstream pre-release, stolen from unbound.
  * Library soname finally sane.
  * Upload to unstable to prepare for unbound upload.

 -- Ondřej Surý <ondrej@debian.org>  Thu, 08 May 2008 11:27:38 +0200

ldns (1.2.99.pre.1.3.0.20080114-1) experimental; urgency=low

  * New upstream pre-release.
  * patches/03_doxygen.pl.dpatch:
    - removed, merged upstream

 -- Ondřej Surý <ondrej@debian.org>  Thu, 28 Feb 2008 17:23:29 +0100

ldns (1.2.99.pre.1.3.0.20071102-1) experimental; urgency=low

  * New upstream pre-release.
  * Release only to experimental.
  * patches/02_dname-off-by-one.dpatch,
    patches/05_ldns-compare-zones.dpatch:
    - removed, merged upstream

 -- Ondřej Surý <ondrej@debian.org>  Fri, 16 Nov 2007 10:12:05 +0100

ldns (1.2.1-2) unstable; urgency=low

  * patches/05_ldns-compare-zones.dpatch:
    - add ldns-compare-zones tool
  * debian/control:
    - build depend on libpcap-dev to allow ldns-dpa build
    - build depend on doxygen to allow documentation build (Closes: #451470)

 -- Ondřej Surý <ondrej@debian.org>  Fri, 16 Nov 2007 09:41:29 +0100

ldns (1.2.1-1) unstable; urgency=low

  * Initial release (Closes: #348970)
  * patches/01_doxygen-u.dpatch:
    - update doxygen configuration
  * patches/02_dname-off-by-one.dpatch:
    - Fix ldns_dname_compare
  * patches/03_doxygen.pl.dpatch:
    - Fix man section in generated man pages
  * patches/04_examples-man-pages.dpatch:
    - Fix some errors in man pages of examples

 -- Ondřej Surý <ondrej@debian.org>  Thu, 11 Oct 2007 13:40:14 +0200

