1
mandos (1.8.4-1) unstable; urgency=medium
3
* Fix "dirs in initrd are not accessible by mandos plugin-runner" by
4
making sure UMASK is set, no matter what other packages have installed
5
in "/usr/share/initramfs-tools/conf-hooks.d". (Closes: #926641)
6
* Fix "LeakSanitizer: detected memory leaks, fails to decrypt"
7
by fixing memory leak in plugin-runner. (Closes: #926643)
8
* debian/mandos-client.dirs: Add
9
"usr/share/initramfs-tools/conf-hooks.d", needed by fix for #926641.
11
-- Teddy Hogeborn <teddy@recompile.se> Tue, 09 Apr 2019 22:05:39 +0200
13
mandos (1.8.3-3) unstable; urgency=medium
15
* Fix "src:mandos: modifies d/control during build" by not doing that
16
anymore. (Closes: #922202)
17
* debian/rules (override_dh_shlibdeps-arch): Commented out.
19
-- Teddy Hogeborn <teddy@recompile.se> Wed, 13 Feb 2019 09:52:39 +0100
21
mandos (1.8.3-2) unstable; urgency=medium
23
* debian/rules (override_dh_shlibdeps-arch): New; conditionally edit
24
debian/control before running dh_shlibdeps.
26
-- Teddy Hogeborn <teddy@recompile.se> Mon, 11 Feb 2019 12:49:57 +0100
28
mandos (1.8.3-1) unstable; urgency=medium
30
* New upstream release.
31
* debian/watch: Make the ".orig" file name suffix non-optional;
32
otherwise uscan thinks that ".orig" is part of the version number.
33
* debian/control (Build-Depends): Changed GnuTLS dependencies; move
34
3.6.6 alternative to first in list, and remove dependencies on the
35
virtual package "gnutls-dev", since we need the version restrictions.
36
(Package: mandos/Depends): Remove dependency on libgnutls28-dev
38
(Package: mandos/Suggests): New; set to "libc6-dev, c-compiler". (Used
39
to find value of "SO_BINDTODEVICE").
40
(Package: mandos-client/Depends): Don't depend on openssl anymore;
41
instead depend on either a gnutls-bin (>= 3.6.6) (in which case TLS
42
key generation will work), or on libgnutls30 (<< 3.6.0) (in which case
43
TLS key generation will not be needed).
45
-- Teddy Hogeborn <teddy@recompile.se> Mon, 11 Feb 2019 07:30:32 +0100
47
mandos (1.8.2-1) unstable; urgency=medium
49
* New upstream release.
50
* debian/mandos-client.postinst (create_keys): Ignore failure to remove
53
-- Teddy Hogeborn <teddy@recompile.se> Sun, 10 Feb 2019 11:44:56 +0100
55
mandos (1.8.1-1) unstable; urgency=high
57
* New upstream release.
58
* debian/mandos-client.postinst (create_keys): Remove any bad keys
59
created by 1.8.0-1. Only create TLS keys if certtool succeeds.
60
* debian/mandos.postinst (configure): Remove any bad keys from
61
clients.conf, and inform the user if any were found.
62
* debian/mandos.templates (mandos/removed_bad_key_ids): New message.
64
-- Teddy Hogeborn <teddy@recompile.se> Sun, 10 Feb 2019 10:00:21 +0100
66
mandos (1.8.0-1) unstable; urgency=medium
68
* New upstream release.
69
* Fix "(tries to) use GnuTLS OpenPGP support" by using raw public keys
70
when available (Closes: #879538)
71
* Fix "mandos : Depends: libgnutls30 (< 3.6.0) but 3.6.5-2 is to be
72
installed" by now also allowing GnuTLS >= 3.6.6 (Closes: #916673)
73
* debian/control (Standards-Version): Update to "4.3.0".
74
(Package: mandos-client/Depends): Change from "cryptsetup" to
75
"cryptsetup (<< 2:2.0.3-1) | cryptsetup-initramfs". Add "debconf (>=
76
1.5.5) | debconf-2.0".
77
(Source: mandos/Build-Depends): Also allow libgnutls30 (>= 3.6.6).
78
(Package: mandos/Depends): - '' - and add debconf (>= 1.5.5) |
80
(Package: mandos/Description): Alter description to match new design.
81
(Package: mandos-client/Description): - '' -
82
(Package: mandos-client/Depends): Move "gnutls-bin | openssl" to here
84
* debian/mandos-client.README.Debian: Add --tls-privkey and --tls-pubkey
85
options to test command.
86
* debian/mandos-client.postinst (create_key): Renamed to "create_keys"
87
- all callers changed - and also create TLS key files. Show notice if
88
new TLS key files were created.
89
* debian/mandos-client.postrm (purge): Also remove TLS key files.
90
* debian/mandos-client.lintian-overrides: Override warnings.
91
* debian/mandos-client.templates: New.
92
* debian/mandos.lintian-overrides: Override warnings.
93
* debian/mandos.postinst (configure): If GnuTLS 3.6.6 or later is
94
detected, show an important notice (once) about the new key_id option
95
required in clients.conf.
96
* debian/mandos.templates: New.
97
* debian/copyright: Update copyright year to 2019.
99
-- Teddy Hogeborn <teddy@recompile.se> Sun, 10 Feb 2019 05:52:49 +0100
101
mandos (1.7.20-1) unstable; urgency=medium
103
* New upstream release.
104
* Fix "[tethys] mandos-client: Mandos client fails while booting but
105
works from chroot into unpacked initramfs" by setting system clock if
106
necessary (Closes: #894495)
107
* Fix "initramfs boot script assumes internal cryptsetup implementation
108
details and is now broken" by only using documented
109
interfaces (Closes: #904899)
110
* debian/mandos-client.dirs: Add
111
"usr/share/initramfs-tools/scripts/local-premount" and
112
"usr/share/initramfs-tools/conf.d", and remove
113
"usr/share/initramfs-tools/conf-hooks.d".
114
* debian/control (mandos-client/Depends): Add "(>= 0.99)" to dependency
115
on "initramfs-tools".
116
* debian/control (Source: mandos/Rules-Requires-Root): New; set to
118
(Standards-Version): Update to "4.2.0".
120
-- Teddy Hogeborn <teddy@recompile.se> Sun, 19 Aug 2018 22:14:04 +0200
122
mandos (1.7.19-1) unstable; urgency=medium
124
* New upstream release.
125
* Fix "fails with "LeakSanitizer has encountered a fatal error"" by not
126
using LeakSanitizer in affected binary (Closes: #886595)
128
-- Teddy Hogeborn <teddy@recompile.se> Thu, 22 Feb 2018 19:47:59 +0100
130
mandos (1.7.18-1) unstable; urgency=medium
132
* New upstream release.
134
-- Teddy Hogeborn <teddy@recompile.se> Mon, 12 Feb 2018 16:00:11 +0100
136
mandos (1.7.17-1) unstable; urgency=medium
138
* New upstream release.
139
* Fix "fails with "LeakSanitizer has encountered a fatal error""
140
by fixing memory leak in plugin-runner (Closes: #886595)
141
* debian/control (Build-Depends): Also depend on "libgnutls28-dev (<<
142
3.6.0) | libgnutls30 (<< 3.6.0)".
143
(Package: mandos/Depends): - '' -
144
* debian/compat: Change to "10".
145
* debian/watch (version): Change to "4".
146
(opts/pgpsigurlmangle): Remove.
147
(opts/pgpmode): New; set to "auto".
148
(URL): Change to "https://ftp.recompile.se/pub/@PACKAGE@/@PACKAGE@
149
@ANY_VERSION@(?:\.orig)?@ARCHIVE_EXT@".
150
* debian/copyright: Update copyright year to 2018.
151
* debian/rules: Support the "noopt" and "parallel" DEB_BUILD_OPTIONS.
152
(override_dh_fixperms-arch): Use the DEB_HOST_MULTIARCH
153
variable directly instead of shelling out to "dpkg-architecture".
154
* debian/control (Standards-Version): Update to "4.1.3".
155
(Build-Depends): Change version of debhelper dependency to ">= 10".
156
* debian/mandos.lintian-overrides
157
(init.d-script-needs-depends-on-lsb-base): Change line number to "46".
159
-- Teddy Hogeborn <teddy@recompile.se> Sat, 10 Feb 2018 19:09:50 +0100
161
mandos (1.7.16-1) unstable; urgency=medium
163
* New upstream release.
164
* debian/copyright (License): Use program name explicitly.
165
(Format): Use https in URL.
166
* debian/control (Priority): Change from "extra" to "optional".
167
(Standards-Version): Update to "4.0.1".
169
-- Teddy Hogeborn <teddy@recompile.se> Sun, 20 Aug 2017 21:05:26 +0200
171
mandos (1.7.15-1) unstable; urgency=medium
173
* New upstream release.
174
* Upstream release fixes "Seems not to be honoring zeroconf option at
175
mandos.conf" (Closes: #855589)
176
* debian/mandos.lintian-overrides (mandos): Add new line
177
"init.d-script-needs-depends-on-lsb-base etc/init.d/mandos (line 49)".
178
* debian/copyright: Update copyright year to 2017.
180
-- Teddy Hogeborn <teddy@recompile.se> Thu, 23 Feb 2017 21:29:36 +0100
182
mandos (1.7.14-1) unstable; urgency=medium
184
* New upstream release.
185
* debian/mandos-client.postinst (create_key): Stop GPG agent after
186
running mandos-keygen.
187
* debian/control (Package: mandos/Depends): Add "systemd-sysv | lsb-base
188
(>= 3.0-6)", change "gnupg" to "gnupg2 | gnupg", and change
189
"libgpgme11-dev" to "libgpgme-dev | libgpgme11-dev".
191
-- Teddy Hogeborn <teddy@recompile.se> Wed, 25 Jan 2017 20:36:03 +0100
193
mandos (1.7.13-1) unstable; urgency=medium
195
* New upstream release.
196
* Fix "fails to install noninteractively" by using the "%no-protection"
197
statement in the GnuPG batch parameter file. (Closes: #840001)
199
-- Teddy Hogeborn <teddy@recompile.se> Sat, 08 Oct 2016 06:31:07 +0200
201
mandos (1.7.12-1) unstable; urgency=medium
203
* New upstream release.
205
-- Teddy Hogeborn <teddy@recompile.se> Wed, 05 Oct 2016 22:06:55 +0200
207
mandos (1.7.11-1) unstable; urgency=high
209
* New upstream release.
210
* debian/control (Source: mandos/Vcs-Bzr): Change to use HTTPS.
211
(Vcs-Browser): - '' -
213
-- Teddy Hogeborn <teddy@recompile.se> Sat, 01 Oct 2016 16:20:48 +0200
215
mandos (1.7.10-1) unstable; urgency=high
217
* New upstream release.
218
* debian/rules (override_dh_fixperms-arch): Also exclude
219
"etc/mandos/plugin-helpers" from changes by dh_fixperms.
220
* debian/mandos-client.postinst: Fix the permissions of
221
"/etc/mandos/plugin-helpers" for those systems which had a fresh
222
install of an older version.
224
-- Teddy Hogeborn <teddy@recompile.se> Thu, 23 Jun 2016 22:00:29 +0200
226
mandos (1.7.9-1) unstable; urgency=medium
228
* New upstream release.
230
-- Teddy Hogeborn <teddy@recompile.se> Wed, 22 Jun 2016 07:30:12 +0200
232
mandos (1.7.8-1) unstable; urgency=medium
234
* New upstream release.
235
* Fix "bad gpgme_op_decrypt: GPGME: Decryption failed." by copying
236
/usr/bin/gpg-agent into initramfs (Closes: #819982)
237
* debian/control (Homepage): Change URL to use HTTPS.
238
(Standards-Version): Update to 3.9.8.
239
* debian/copyright (Source): Change URL to HTTPS.
240
* debian/mandos-client.README.Debian: Change wording to match updated
243
-- Teddy Hogeborn <teddy@recompile.se> Tue, 21 Jun 2016 21:36:10 +0200
245
mandos (1.7.7-1) unstable; urgency=medium
247
* New upstream release.
248
* debian/mandos-client.postinst (configure): If older version, fix
249
permissions on plugin helper directory. Also fix permissions on
250
plugin helper local override directory (/etc/mandos/plugin-helpers),
251
but only if not listed by "dpkg-statoverride".
252
* debian/rules (override_dh_fixperms-arch): Exclude plugin helper
253
directory from dh_fixperms.
254
* debian/mandos.postinst (configure): Fix state directory permissions,
255
but only if not listed by "dpkg-statoverride".
256
* debian/mandos-client.lintian-overrides: Do not warn about permissions
257
on plugin helper directory.
258
* debian/mandos.dirs (usr/lib/tmpfiles.d): Added.
260
-- Teddy Hogeborn <teddy@recompile.se> Sat, 19 Mar 2016 22:58:49 +0100
262
mandos (1.7.6-1) unstable; urgency=medium
264
* New upstream release.
265
* debian/control (Source: mandos/Build-Depends-Indep): Remove
267
(Source: mandos/Build-Depends-Indep): Change "python-gi |
268
python-gobject" to "python-gi"; i.e. remove "python-gobject".
270
-- Teddy Hogeborn <teddy@recompile.se> Sun, 13 Mar 2016 22:58:23 +0100
272
mandos (1.7.5-1) unstable; urgency=high
274
* New upstream release.
275
* debian/mandos.postinst (configure): If old version was 1.7.4-1 or
276
1.7.4-1~bpo8+1, fix situation where clients.pickle file is owned by
279
-- Teddy Hogeborn <teddy@recompile.se> Tue, 08 Mar 2016 01:09:55 +0100
281
mandos (1.7.4-1) unstable; urgency=medium
283
* New upstream release.
284
* initramfs-tools-script: Fix "Call to configure_network in initramfs
285
script broken due to set -e" by surrounding call by "set +x" and "set
286
-e" (Closes: #816513)
287
* debian/control: (Source: mandos/Build-Depends-Indep): Change
288
"python-gobject | python-gi" to "python-gi | python-gobject"
289
(Package: mandos/Depends): - '' -
291
-- Teddy Hogeborn <teddy@recompile.se> Sat, 05 Mar 2016 23:10:07 +0100
293
mandos (1.7.3-1) unstable; urgency=medium
295
* New upstream release.
297
-- Teddy Hogeborn <teddy@recompile.se> Mon, 29 Feb 2016 22:26:38 +0100
299
mandos (1.7.2-1) unstable; urgency=medium
301
* New upstream release.
302
* Fix "Uses unneeded and obsolete version specific python packages"
303
by removing version-specific dependencies (Closes: #811159)
304
* debian/control (Source: mandos/Build-Depends): Add (>= 3.3.0) to
305
"libgnutls28-dev" and "gnutls-dev".
306
(Source: mandos/Build-Depends-Indep): Remove "python2.7-gnutls",
307
"python2.7", "python2.7-dbus", "python2.7-avahi", and
308
"python2.7-gobject"; replace with "python (>= 2.7), python (<< 3)",
309
"python-dbus", "python-avahi", "python-gobject | python-gi".
310
(Package: mandos/Depends): Remove "python-gnutls" and
311
"python2.7-gnutls", add "libgnutls28-dev (>= 3.3.0) | libgnutls30 (>=
312
3.3.0)". Add "python (<< 3)". Remove "python2.7-dbus",
313
"python2.7-avahi", "python2.7-gobject", and "python2.7-urwid".
314
Replace "python-gobject" with "python-gobject | python-gi" and "gnupg
315
(<< 2)" with "gnupg".
316
(Package: mandos-client/Depends): Replace
317
"gnupg (<< 2)" with "gnupg".
318
(Source: mandos/Standards-Version): Change to 3.9.7.
319
* debian/copyright (Copyright): Update copyright year.
321
-- Teddy Hogeborn <teddy@recompile.se> Sun, 28 Feb 2016 16:09:01 +0100
323
mandos (1.7.1-2) unstable; urgency=medium
325
* debian/control (Package: mandos/Depends): Fix "Please drop versioned
326
dependency on initscripts package" by removing initscripts dependency
328
* debian/rules (override_dh_fixperms) Fix "FTBFS when built with
329
dpkg-buildpackage -A (No such file or directory)" by splitting into
330
"override_dh_fixperms-arch" and "override_dh_fixperms-indep".
333
-- Teddy Hogeborn <teddy@recompile.se> Sat, 05 Dec 2015 02:27:40 +0100
335
mandos (1.7.1-1) unstable; urgency=medium
337
* New upstream release.
339
-- Teddy Hogeborn <teddy@recompile.se> Sat, 24 Oct 2015 19:43:40 +0200
341
mandos (1.7.0-1) unstable; urgency=medium
343
* New upstream release.
344
* debian/control (Standards-Version): Updated to "3.9.6".
345
(Build-Depends): Add "libnl-route-3-dev".
346
(Package: mandos-client/Recommends): Added "gnutls-bin | openssl" for
347
the generating of DH parameters.
348
* debian/mandos-client.README.Debian: Update example command line to use
349
new MANDOSPLUGINHELPERDIR environment variable. Also document the new
351
* debian/mandos-client.postinst: Create DH parameters file.
352
* debian/mandos.prerm: Don't run init script, use only invoke-rc.d.
353
* debian/mandos-client.postinst: Don't use absolute paths to commands.
354
* debian/mandos-client.postrm: Don't use absolute paths to commands.
355
Also remove dhparams.pem file.
356
* debian/copyright (Copyright): Update copyright year.
357
* Upstream changed systemd service file to implicitly be of
358
"Type=dbus". (Closes: #786845)
360
-- Teddy Hogeborn <teddy@recompile.se> Mon, 10 Aug 2015 22:00:29 +0200
362
mandos (1.6.9-1) unstable; urgency=medium
364
* New upstream release.
365
* debian/control (Build-Depends): Fix "still uses GnutLS 2.x" by
366
changing from "libgnutls-dev" to "libgnutls28-dev | gnutls-dev"
369
-- Teddy Hogeborn <teddy@recompile.se> Sun, 05 Oct 2014 22:05:06 +0200
371
mandos (1.6.8-1) unstable; urgency=medium
373
* New upstream release.
374
* debian/control (Source: mandos/Build-Depends-Indep): Since upstream
375
now requires Python 2.7, depend on exactly the python2.7 package and
376
all the Python 2.7 versions of the python modules.
377
(Package: mandos/Depends): - '' - but still depend on python (>=2.7)
378
and the generic versions of the Python modules; this is for mandos-ctl
379
and mandos-monitor, both of which are compatible with Python 3, and
380
use #!/usr/bin/python.
382
-- Teddy Hogeborn <teddy@recompile.se> Wed, 06 Aug 2014 22:55:24 +0200
384
mandos (1.6.7-1) unstable; urgency=medium
386
* New upstream release.
388
-- Teddy Hogeborn <teddy@recompile.se> Thu, 17 Jul 2014 05:22:45 +0200
390
mandos (1.6.6-1) unstable; urgency=medium
392
* New upstream release.
393
* debian/mandos.postinst: Fix typo in comment.
394
* debian/control (mandos/Recommends): Changed to "ssh-client | fping".
395
(mandos-client/Recommends): New; set to "ssh".
397
-- Teddy Hogeborn <teddy@recompile.se> Sun, 13 Jul 2014 22:49:21 +0200
399
mandos (1.6.5-3) unstable; urgency=medium
401
* debian/control (mandos-client/Depends): Add "dpkg-dev (>=1.16.0)";
402
initramfs-tools-hook runs "dpkg-architecture -qDEB_HOST_MULTIARCH".
405
-- Teddy Hogeborn <teddy@recompile.se> Fri, 06 Jun 2014 04:27:15 +0200
407
mandos (1.6.5-2) unstable; urgency=medium
409
* debian/rules (override_dh_auto_test-arch): New; does nothing. Fixes
410
FTBFS for build-indep.
412
-- Teddy Hogeborn <teddy@recompile.se> Tue, 13 May 2014 08:08:31 +0200
414
mandos (1.6.5-1) unstable; urgency=medium
416
* New upstream release.
417
* debian/copyright: Change year to "2014".
418
* debian/control (Build-Depends, Build-Depends-Indep): Moved build
419
dependencies of "mandos" package to "Build-Depends-Indep".
420
* debian/upstream/signing-key.asc: New; upstream source public key.
421
* debian/control (Standards-Version): Updated to "3.9.5".
422
* debian/control (mandos/Depends): Remove the dependency on
423
"avahi-daemon (>= 0.6.31-3) | systemd-sysv". It is unnecessary
424
since we have a workaround in debian/mandos.postinst anyway.
426
-- Teddy Hogeborn <teddy@recompile.se> Sun, 11 May 2014 22:16:33 +0200
428
mandos (1.6.4-1) unstable; urgency=medium
430
* New upstream release.
431
* debian/control (Build-Depends): Add Python dependencies to
432
successfully run self-tests.
433
* debian/copyright: GPLv3 now has its own license file - use it.
434
* debian/watch: Set PGP signature URL.
436
-- Teddy Hogeborn <teddy@recompile.se> Sun, 16 Feb 2014 14:09:25 +0100
438
mandos (1.6.3-1) unstable; urgency=low
440
* New upstream release.
441
* debian/control (Build-Depends): Added "systemd".
442
* debian/mandos.dirs (lib/systemd/system): New.
443
* debian/mandos-client.README.Debian: Refer to architecture libdir.
444
* debian/control (mandos/Depends): Add "avahi-daemon (>= 0.6.31-3) |
446
* debian/mandos.postinst: If avahi-daemon is version 0.6.31-2 or older,
447
edit /etc/init.d script headers Required-Start
448
and Required-Stop to have "avahi" instead of
449
"avahi-daemon", before insserv(8) sees it.
450
* debian/mandos-client.lintian-overrides: Libdir changes.
451
* debian/rules (override_dh_fixperms): - '' -
453
-- Teddy Hogeborn <teddy@recompile.se> Tue, 21 Jan 2014 22:01:30 +0100
455
mandos (1.6.2-1) unstable; urgency=low
457
* New upstream release.
458
* debian/compat: Changed to "9".
459
* debian/control (Build-Depends): Changed debhelper version to (>= 9).
460
(Standards-Version): Updated to "3.9.4".
461
(DM-Upload-Allowed): Removed.
462
(mandos/Depends): Add "initscripts (>= 2.88dsf-13.3)" to be able to
463
use the "/run" directory (for mandos.pid).
464
* debian/copyright (Copyright): Update year.
465
* Fix "Mandos/gnutls fails to establish connection, "an algorithm that
466
is not enabled was negotiated"" fixed by upstream. (Closes: #702120)
468
-- Teddy Hogeborn <teddy@recompile.se> Thu, 24 Oct 2013 22:33:40 +0200
470
mandos (1.6.1-1) unstable; urgency=low
472
* New upstream release.
473
* debian/control (mandos/Depends): No longer depends on
474
python-gnupginterface, but does
475
depend on gnupg (<< 2).
476
(Build-Depends): Depend on debhelper 8.9.7 for using "override-*-arch"
477
and "override-*-indep" targets in debian/rules.
478
* debian/mandos-client.README: Update Linux documentation link.
479
* debian/rules: Completely rewritten to use debhelper v7.
480
* initramfs-tools-hook: Bug fix: Make sure the right version of GnuPG is
481
copied into the initramfs image. Always assume that GPGME is used to
482
avoid searching for it since the path might not be /usr/lib. Thanks
483
to Félix Sipma <felix+debian@gueux.org> for the initial bug report,
484
and also thanks to Dick Middleton <dick@lingbrae.com> for some more
485
debugging. (Closes: #721903)
486
* Fix "bashism in /bin/sh script" fixed by upstream. (Closes: #690639)
488
-- Teddy Hogeborn <teddy@recompile.se> Sun, 13 Oct 2013 19:03:23 +0200
490
1
mandos (1.6.0-1) unstable; urgency=low
492
3
* New upstream release.