Change logs for heimdal source package in Sid

heimdal (7.8.git20221117.28daf24+dfsg-5) unstable; urgency=medium

  * Apply NMU patches. Closes: #1065373.

 -- Brian May <email address hidden>  Sat, 09 Mar 2024 11:01:27 +1100

heimdal (7.8.git20221117.28daf24+dfsg-4.2) unstable; urgency=medium

  [ Matthias Klose ]
  * Filter-out -Werror=implicit-function-declaration, unconditionally set
    by abi=time64.

 -- Steve Langasek <email address hidden>  Fri, 08 Mar 2024 08:21:09 +0000

heimdal (7.8.git20221117.28daf24+dfsg-4.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Rename libraries for 64-bit time_t transition.  Closes: #1064097

 -- Lukas Märdian <email address hidden>  Wed, 28 Feb 2024 08:36:52 +0000

heimdal (7.8.git20221117.28daf24+dfsg-4) unstable; urgency=medium

  * Always build the rk_strlcat and rk_strlcpy symbols even if included in
    glibc. Closes: #1055316.

 -- Brian May <email address hidden>  Wed, 03 Jan 2024 11:43:58 +1100

heimdal (7.8.git20221117.28daf24+dfsg-3) unstable; urgency=medium

  * Fix random "Ticket expired" and "Clock skew too great" errors by setting
    kdc_offset correctly. Closes: #1039992.

 -- Brian May <email address hidden>  Tue, 04 Jul 2023 10:09:56 +1000

heimdal (7.8.git20221117.28daf24+dfsg-2) unstable; urgency=medium

  * Fix incorrect license of Debian files.
  * Fix deprecated dependancies.
  * gsskrb5: fix accidental logic inversions (CVE-2022-45142)
    (Closes: #1030849) - change applied from NMU version
    7.8.git20221117.28daf24+dfsg-1.1
  * Add ro.po file. Closes: #1031897.

 -- Brian May <email address hidden>  Sat, 25 Feb 2023 09:32:57 +1100

heimdal (7.8.git20221117.28daf24+dfsg-1.1) unstable; urgency=high

  * Non-maintainer upload.
  * gsskrb5: fix accidental logic inversions (CVE-2022-45142)
    (Closes: #1030849)

 -- Salvatore Bonaccorso <email address hidden>  Sun, 12 Feb 2023 10:35:50 +0100

heimdal (7.8.git20221117.28daf24+dfsg-1) unstable; urgency=medium

  * New upstream release.

 -- Brian May <email address hidden>  Sat, 10 Dec 2022 16:29:20 +1100

heimdal (7.8.git20221115.a6cf945+dfsg-3) unstable; urgency=medium

  * Source-only upload to enable migration to testingi (2nd attempt).

 -- Brian May <email address hidden>  Sun, 04 Dec 2022 09:56:06 +1100

heimdal (7.8.git20221115.a6cf945+dfsg-1) unstable; urgency=medium

  * New upstream version.
  * Numerous security fixes (Closes: #1024187).
  * asn1: Invalid free in ASN.1 codec (CVE-2022-44640)
  * krb5: PAC parse integer overflows (CVE-2022-42898)
  * gsskrb5: Use constant-time memcmp() for arcfour unwrap (CVE-2022-3437)
  * gsskrb5: Use constant-time memcmp() in unwrap_des3() (CVE-2022-3437)
  * gsskrb5: Don't pass NULL pointers to memcpy() in DES unwrap
    (CVE-2022-3437)
  * gsskrb5: Avoid undefined behaviour in _gssapi_verify_pad()
    (CVE-2022-3437)
  * gsskrb5: Check the result of _gsskrb5_get_mech() (CVE-2022-3437)
  * gsskrb5: Check buffer length against overflow for DES{,3} unwrap
    (CVE-2022-3437)
  * gsskrb5: Check for overflow in _gsskrb5_get_mech() (CVE-2022-3437)
  * gsskrb5: Pass correct length to _gssapi_verify_pad() (CVE-2022-3437)
  * libhx509: Fix denial of service vulnerability (CVE-2022-41916)
  * spnego: send_reject when no mech selected (CVE-2021-44758)
  * Fix regression in _krb5_get_int64 on 32 bit systems.
    https://github.com/heimdal/heimdal/pull/1025
  * Increment soname for libroken.
  * Increment soname for libhcrypto.
  * Remove legacy shared library version requirements.
  * Add symbols to libkadm5srv8.

 -- Brian May <email address hidden>  Sun, 27 Nov 2022 10:44:26 +1100

heimdal (7.7.0+dfsg-6) unstable; urgency=medium

  * Retry deleting dangling windc.so again. Closes: #577229.
  * Create /var/lib/heimdal-kdc/m-key not /var/lib/heimdal-kdc/heimdal.mkey.
    Closes: #964008.
  * Disable use of -rpath in krb5-config.heimdal. Closes: #868840.

 -- Brian May <email address hidden>  Mon, 05 Sep 2022 08:35:33 +1000

heimdal (7.7.0+dfsg-5) unstable; urgency=medium

  * Fix missing closefrom symbol. Closes: #1016884, #1017244.
  * Fix spelling of dependency in changelog.
  * Fix override_dh_fixperms typo, use 700 for /var/lib/heimdal-kdc/
  * Remove default --parallel from dh call.
  * Remove unused debian/upstream/signing-key.asc key.
  * Fix Multi-Arch headers. heimdal-multidev is not co-installable, so
    heimdal-dev cannot be co-installable either.

 -- Brian May <email address hidden>  Fri, 02 Sep 2022 07:59:59 +1000

heimdal (7.7.0+dfsg-4) unstable; urgency=medium

  * Delete dependancy on install-info. Closes: #1013735.
  * Non-maintainer upload.
  * Reduce Build-Depends: (Closes: #980531)
    + Drop unused libhesiod-dev.
    + Drop unused libperl4-corelibs-perl as cf/make-proto.pl no longer uses
      it.
    + Drop unused libx11-dev, libxau-dev, libxt-dev, ss-dev, and
      x11proto-core-dev.
    + Clean generated C tables to actually rebuild them using python3.

 -- Brian May <email address hidden>  Mon, 27 Jun 2022 10:36:10 +1000

heimdal (7.7.0+dfsg-3) unstable; urgency=high

  * Fix CVE-2021-3671: A null pointer de-reference was found in the way
    samba kerberos server handled missing sname in TGS-REQ. Closes: #996586.
  * Fix autoconf 2.7 issues.

 -- Brian May <email address hidden>  Wed, 17 Nov 2021 12:12:45 +1100

heimdal (7.7.0+dfsg-2) unstable; urgency=medium

  * Build using python3. Closes: #936695, #960032.

 -- Brian May <email address hidden>  Tue, 12 May 2020 06:56:04 +1000

heimdal (7.7.0+dfsg-1) unstable; urgency=medium

  * New upstream version.
  * Fix CVE-2019-14870: The DelegationNotAllowed Kerberos feature restriction
    was not being applied when processing protocol
    transition requests (S4U2Self), in the AD DC KDC. Closes: #946786.

 -- Brian May <email address hidden>  Tue, 17 Dec 2019 20:23:41 +1100

heimdal (7.5.0+dfsg-3) unstable; urgency=high

  * CVE-2018-16860: Samba AD DC S4U2Self/S4U2Proxy unkeyed checksum.
    Closes: #928966.
  * CVE-2019-12098: Always confirm PA-PKINIT-KX for anon PKINIT.
    Closes: #929064.
  * Update test certificates to pre 2038 expiry. Closes: #923930.

 -- Brian May <email address hidden>  Tue, 21 May 2019 18:04:35 +1000

heimdal (7.5.0+dfsg-2.1) unstable; urgency=medium

  * Non-maintainer upload
  * Add patch to create headers before building (Closes: 906623)

 -- Hilko Bengen <email address hidden>  Sun, 28 Oct 2018 15:10:44 +0100

heimdal (7.5.0+dfsg-2) unstable; urgency=medium

  * Replace "MAXHOSTNAMELEN" with "MaxHostNameLen" in kdc/kx509.c for The
    Hurd. Closes: #900079.

 -- Brian May <email address hidden>  Sat, 02 Jun 2018 10:01:46 +1000

heimdal (7.5.0+dfsg-1) unstable; urgency=high

  * New upstream version. (Closes: #850723)
    + CVE-2017-17439: Remote unauthenticated DoS in Heimdal-KDC 7.4
      (Closes: #878144, #868157)
    + Refresh patches.
  * Bump Standards-Version to 4.1.2 and compat level to 10.
    + Remove explicit reference to dh-autoreconf.
  * Use uscan to get orig source.
    + Refrain from mangling some bundled RFC texts;
      just exclude the mas they are not installed into any binary anyway.
    + Update d/copyright to DEP-5.
    + Can now use standard uscan/gbp/pristine-tar workflow.
  * Fix some lintian errors/warnings.
    + Strip trailing whitespace from changelog.
    + Fix some duplicate long descriptions.
    + Use optional priority everywhere.
    + Update/remove some overrides.
    + Enforce set -e in maintainer scripts.
    + Enable hardening.
  * Migrate to -dbgsym.
  * Add myself to uploaders.

 -- Dominik George <email address hidden>  Fri, 15 Dec 2017 01:13:04 +0100

heimdal (7.4.0.dfsg.1-2) unstable; urgency=medium

  [ Jelmer Vernooij ]
  * Remove myself from uploaders.

  [ Brian May ]
  * Be explicit with heimdal.mkey filename in postinst. Closes: #868638.
  * Tests should respect DEB_BUILD_OPTIONS=nocheck.  Closes: #868842.

 -- Brian May <email address hidden>  Sun, 23 Jul 2017 10:32:34 +1000

heimdal (7.4.0.dfsg.1-1) unstable; urgency=high

  * New upstream version.
  * Update standards version to 4.0.0.
  * CVE-2017-11103: Fix Orpheus' Lyre KDC-REP service name validation.
    (Closes: #868208).

 -- Brian May <email address hidden>  Sat, 15 Jul 2017 19:47:32 +1000

heimdal (7.1.0+dfsg-13) unstable; urgency=medium

  * Add missing symbols base64_decode and base64_encode back into
    libroken. Closes: #848694.

 -- Brian May <email address hidden>  Wed, 26 Apr 2017 19:38:20 +1000

heimdal (7.1.0+dfsg-12) unstable; urgency=high

  * Fix transit path validation CVE-2017-6594.

 -- Brian May <email address hidden>  Mon, 10 Apr 2017 17:21:35 +1000

heimdal (7.1.0+dfsg-11) unstable; urgency=medium

  * Remove legacy provides/conflicts/replaces headers. Old daemons
    such as ftp have been removed. Closes: #236902, #859664.

 -- Brian May <email address hidden>  Sat, 08 Apr 2017 11:38:13 +1000

heimdal (7.1.0+dfsg-10) unstable; urgency=medium

  * Fix transit path validation CVE-2017-6594.

 -- Brian May <email address hidden>  Sat, 08 Apr 2017 11:38:13 +1000

heimdal (7.1.0+dfsg-9) unstable; urgency=medium

  * Switch back to collab-maint URL until pkg-heimdal permissions are
    fixed, switch to HTTPS Git URL. Closes: #850652
  * Fix regression in krb5-config introduced by canonical_host patch.
    Closes: #850653

 -- Jelmer Vernooij <email address hidden>  Sun, 08 Jan 2017 22:36:15 +0000

heimdal (7.1.0+dfsg-7) unstable; urgency=medium

  * Re-enable accidentally disabled builds on alpha, hppa, arm64, hurd-
    i386, powerpcspe, ppc64, sparc64.

 -- Jelmer Vernooij <email address hidden>  Sun, 08 Jan 2017 19:36:56 +0000

heimdal (7.1.0+dfsg-6) unstable; urgency=medium

  * Actually restrict architectures to anything but MIPS.

 -- Jelmer Vernooij <email address hidden>  Sun, 08 Jan 2017 17:17:35 +0000

heimdal (7.1.0+dfsg-5) unstable; urgency=medium

  * Don't build on MIPS, to work around #884227 for now.
   + Drop no_test_dbinfo patch.

 -- Jelmer Vernooij <email address hidden>  Sun, 08 Jan 2017 00:51:17 +0000

heimdal (7.1.0+dfsg-4) unstable; urgency=medium

  * Add patch canonical_host: avoid use of @CANONICAL_HOST@, which
    breaks reproducibility on e.g. x86.
  * Change Vcs headers to new Git location.
  * Add patch no_test_dbinfo: disable test_dbinfo, as it fails to build
    on MIPS. Works around #844227.

 -- Jelmer Vernooij <email address hidden>  Thu, 05 Jan 2017 20:15:22 +0000

heimdal (7.1.0+dfsg-3) unstable; urgency=medium

  * Fix building arch-only. Closes: #806045

 -- Jelmer Vernooij <email address hidden>  Thu, 29 Dec 2016 15:37:37 +0000

heimdal (7.1.0+dfsg-2) unstable; urgency=medium

  * Disable check-iprop test for the moment as it is flaky.

 -- Jelmer Vernooij <email address hidden>  Tue, 27 Dec 2016 16:02:10 +0000

heimdal (7.1.0+dfsg-1) unstable; urgency=medium

  * New upstream release. Closes: #834654
  * 041_hurd_maxhostnamele: Update to cover lib/krb5/test_plugin.c.
  * fix_git_source: Exclude doxygen output files from source tarballs;
    these contain jsquery copies without source and are autogenerated.
  * Revert accidental patch to de.po that removed translations for
    Debian package.
  * Cherry-pick change to fix check-iprop races. Thanks, Nico Williams.

 -- Jelmer Vernooij <email address hidden>  Fri, 16 Dec 2016 01:46:37 +0000

heimdal (7.0.2+dfsg-1) unstable; urgency=medium

  * New upstream release.
   + Drop 049_testkdc_timeout patch. Applied upstream.
  * Add Catalan translation. Thanks, Sandra. Closes: #827598
  * Add German translation. Thanks, Chris Leick. Closes: #823759
  * heimdal-kcm: Add dependency on lsb-base.

 -- Jelmer Vernooij <email address hidden>  Sat, 10 Dec 2016 18:48:18 +0000

heimdal (7.0.1+dfsg-1) unstable; urgency=medium

  * New upstream snapshot.
   + Fixes tests on 32bit platforms. Closes: #822749
   + Removes ftp, push, pfrom and kftpd.
  * Fix building with arch/indep only. Closes: #806045
  * Drop 031_libedit patch.
  * Drop patch 061_disable_test_plugin, 062_disable_test_iprop.
  * heimdal-kdc: Add missing dependency on lsb-base.
  * Bump standards version to 3.9.8 (no changes).
  * Update watch file.
  * Drop patch 'debug'.

 -- Jelmer Vernooij <email address hidden>  Fri, 05 Aug 2016 16:26:52 +0000

heimdal (1.7~git20160703+dfsg-1) unstable; urgency=medium

  * New upstream snapshot.
   + Drop patch 063_exclude_host: applied upstream.

 -- Jelmer Vernooij <email address hidden>  Sun, 03 Jul 2016 14:25:12 +0000

heimdal (1.7~git20160515+dfsg-1) unstable; urgency=low

  * New upstream snapshot.
  * Update parallel-build: partially applied upstream.
  * Remove host architecture name in generated C files; it makes the
    package unreproducible.

 -- Jelmer Vernooij <email address hidden>  Sun, 15 May 2016 19:27:15 +0000

heimdal (1.7~git20160418+dfsg-3) unstable; urgency=medium

  * Fix dependency on kadm5_err.h, affecting parallel builds. Closes:
    #822406

 -- Jelmer Vernooij <email address hidden>  Sun, 24 Apr 2016 18:13:40 +0000

heimdal (1.7~git20160418+dfsg-2) unstable; urgency=medium

  * Add patch parallel-build: Fix parallel builds. Closes: #800728

 -- Jelmer Vernooij <email address hidden>  Wed, 20 Apr 2016 00:27:13 +0000

heimdal (1.7~git20160418+dfsg-1) unstable; urgency=low

  * New upstream snapshot.
  * Drop patch 043_clean_headers: applied upstream.
  * Bump standards version to 3.9.7 (no changes).
  * Add patch 062_disable_test_iprop: disable iprop test, which is
    broken. Closes: #775148

 -- Jelmer Vernooij <email address hidden>  Sat, 16 Apr 2016 15:03:41 +0000

heimdal (1.7~git20150920+dfsg-4) unstable; urgency=medium

  * Re-remove .la files. Closes: #812398

 -- Jelmer Vernooij <email address hidden>  Sun, 24 Jan 2016 02:51:35 +0000

heimdal (1.7~git20150920+dfsg-3) unstable; urgency=medium

  * Stop shipping heimdal headers and library symlinks directly in
    /usr/include in heimdal-dev. Closes: #810990, #812130
  * Disable plugin test to prevent FTBFS. Closes: #809012

 -- Jelmer Vernooij <email address hidden>  Wed, 20 Jan 2016 23:11:27 +0000

heimdal (1.6~rc2+dfsg-10) unstable; urgency=medium


  * Add patch 060_no_build_string: removes hostname and build time from
    version string, to make build reproducible.
  * Bump standards version to 3.9.6 (no changes).

 -- Jelmer Vernooij <email address hidden>  Sat, 25 Apr 2015 16:34:32 +0000

heimdal (1.6~rc2+dfsg-9) unstable; urgency=medium


  [ Jelmer Vernooij ]
  * Add 051_bug746486-memleak: cherry-pick memory leak fix in KDC from
    upstream. Thanks GALAMBOS Daniel. Closes: #746486
  * Add Turkish debconf translation. Thanks Mert Dirik. Closes: #759877

  [ Andreas Beckmann ]
  * heimdal-clients.postinst: Cleanup obsolete telnet, rsh and pop
    alternatives.  (Closes: #768243)

 -- Jelmer Vernooij <email address hidden>  Mon, 25 Aug 2014 13:52:44 +0200

heimdal (1.6~rc2+dfsg-8) unstable; urgency=low


  * Add branch to Vcs-Git header. Closes: #753843
  * Add note in lintian-overrides about rfc3492. Closes: #753841

 -- Jelmer Vernooij <email address hidden>  Sat, 05 Jul 2014 21:18:49 +0200

heimdal (1.6~rc2+dfsg-7) unstable; urgency=medium


  * Use alternatives for kpasswd, ksu, kdestroy, kswitch, kadmin and ktutil.
    + Allows installation together with krb5-user. Closes: #482528
  * Move kadmin and ktutil from /usr/sbin to /usr/bin. Closes: #168170

 -- Jelmer Vernooij <email address hidden>  Sun, 01 Jun 2014 21:55:06 +0200

heimdal (1.6~rc2+dfsg-6) unstable; urgency=medium


  * Remove duplicate dependency on ${misc:Depends} in heimdal-dev.
  * Use canonical URL in Vcs-Git header.
  * Drop conflicts with rsh-client in heimdal-clients, as rsh is no
    longer shipped.
  * Add 049_testkdc_timeout: Extend timeout waiting for iprop slave to
    come up during tests. Closes: #745683

 -- Jelmer Vernooij <email address hidden>  Fri, 25 Apr 2014 02:30:19 +0200

heimdal (1.6~rc2+dfsg-5) unstable; urgency=medium


  * Restrict flags output by pkg-config further. (#745543)
  * Drop unnecessary build conflict with heimdal-dev.

 -- Jelmer Vernooij <email address hidden>  Wed, 23 Apr 2014 02:21:25 +0200

heimdal (1.6~rc2+dfsg-4) unstable; urgency=medium


  * Fix use of as-needed linker flag.
  * Prevent build errors when system gssapi library has extra symbols.
    Thanks Dimitri John Ledkov. Closes: #745545
  * Enable parallel build. Thanks Dimitri John Ledkov. Closes: #745508
  * Don't list libraries not required for dynamic linking in .pc files.
    Closes: #745543

 -- Jelmer Vernooij <email address hidden>  Mon, 21 Apr 2014 18:15:02 +0200

heimdal (1.6~rc2+dfsg-3) unstable; urgency=medium


  * Use alternatives for klist and kinit. Closes: #205498
  * Add lintian-override for license warning of multi-license RFC 3492.
  * Enable running of testsuite during build.
  * Add unzip (for unzip binary) and netbase (for /etc/services) build
    dependencies, required for testsuite.

 -- Jelmer Vernooij <email address hidden>  Sun, 20 Apr 2014 22:52:30 +0200

heimdal (1.6~rc2+dfsg-2) unstable; urgency=medium


  * Add 046_hurd_sundevdata: Fix definition of _IOT_sundevdata for GNU
    Hurd. Thanks, Svante Signell. Closes: #738669

 -- Jelmer Vernooij <email address hidden>  Sat, 01 Mar 2014 17:48:26 +0000

heimdal (1.6~rc2+dfsg-1) unstable; urgency=medium


  * New upstream snapshot.
   + Removes telnet, rsh and ftp implementations.
    - Drop 027_rsh_use_ktelnet patch.
   + Drop 045_kadm_pcfile, now included upstream.
   + Drop 046_kcm_supports_sigterm, now included upstream.
   + Drop 047_fix_hdb_so_loading, now included upstream.
  * Add 045_hx509_symbol_names: prevent symbol renames.
  * Source lsb functions in init scripts.

 -- Jelmer Vernooij <email address hidden>  Sun, 23 Feb 2014 19:28:46 +0000

heimdal (1.6~git20131207+dfsg-1) unstable; urgency=medium


  * New upstream snapshot from 1.6 branch.
   + Drop 043_hx509_heimbase: applied upstream.
   + Drop 044_krb5_pcfile: applied upstream.
  * Add 046_kcm_supports_sigterm. Closes: #654349
  * Add Provides: heimdal-hdb-api-8 to hdb package, so Samba and others can
    depend on a specific version of the API.
  * Add 047_fix_hdb_so_loading, fixing plugin loading
    in the HDB library. Thanks Andrew Bartlett, Jeff Clark.
  * Bump standards version to 3.9.5. (no changes)
  * Document log destination format in kdc.conf rather than referring to
    krb5_openlog.3 manpage shipped in heimdal-dev. Closes: #674542
  * Drop obsolete bzr-builddeb.conf.

 -- Jelmer Vernooij <email address hidden>  Sat, 07 Dec 2013 13:32:43 +0000

heimdal (1.6~git20131117+dfsg-3) unstable; urgency=low


  * Move generic .pc files from heimdal-multidev to heimdal-dev package
    to prevent conflicts with libkrb5-multidev. Closes: #730267
  * Rename login.1 to login.heimdal.1 to support installing together
    with login. Closes: #729946
  * Set random master key if no explicit password was specified. Closes:
    #730011

 -- Jelmer Vernooij <email address hidden>  Sun, 24 Nov 2013 14:59:33 +0000

heimdal (1.6~git20131117+dfsg-2) unstable; urgency=low


  * Move asn1_compile and asn1_print to heimdal-multidev, since they
    don't conflict with libkrb5-dev.
  * Add 043_hx509_heimbase: fixes use of hx509.h.

 -- Jelmer Vernooij <email address hidden>  Wed, 20 Nov 2013 01:22:08 +0000

heimdal (1.6~git20131117+dfsg-1) unstable; urgency=low


  * New upstream snapshot.
   + Drop texinfo_5.1 and texinfo_b_5.1; applied upstream.
  * Install asn1_compile and asn1_print binaries in heimdal-dev.

 -- Jelmer Vernooij <email address hidden>  Sun, 17 Nov 2013 15:06:09 +0000

heimdal (1.6~git20120403+dfsg1-4) unstable; urgency=low


  * Fix broken symlinks. Closes: #715069.
    * heimdal-multidev depends on libotp0-heimdal and libsl0-heimdal.
    * remove windc symlinks.
  * Bump standards version to 3.9.4.

 -- Brian May <email address hidden>  Tue, 16 Jul 2013 09:25:53 +1000

heimdal (1.6~git20120403+dfsg1-3) unstable; urgency=low


  * Move /usr/share/doc/heimdal-kdc/examples to
    /usr/share/heimdal-kdc. Closes: #710731.
  * Fix textinfo build errors. Closes: #711221.

 -- Brian May <email address hidden>  Mon, 03 Jun 2013 12:06:56 +1000

heimdal (1.6~git20120403+dfsg1-2) unstable; urgency=low


  * Enable libcap-ng-dev only on Linux. Fixes FTBFS on kfreebsd-* and
    hurd-*. Closes: #674923
  * Support extra configure flags through dpkg-buildflags, to (for
    example) enable hardened build flags. Thanks Moritz Muehlenhoff.
    Closes: 668022

 -- Jelmer Vernooij <email address hidden>  Wed, 30 May 2012 12:25:33 +0200

heimdal (1.6~git20120403+dfsg1-1) unstable; urgency=low


  * Fix typo in example kdc.conf section name. LP: #871635
  * New upstream snapshot.
   + Drop 040_hurd_pthread, now applied upstream.
   + Drop 043_hurd_ioctl, now applied upstream.
  * Add dependency on libcap-ng-dev, so KDC can drop privileges.
  * Build-Depend on libperl4-corelibs-perl for prototype script.

 -- Jelmer Vernooij <email address hidden>  Thu, 03 May 2012 17:42:26 +0200

heimdal (1.6~git20120311.dfsg.1-2) unstable; urgency=low


  * Remove unnecessary Priority: fields for binary packages.
  * Bump standards version to 3.9.3 (no changes).
  * Fix description of libwind0-heimdal package.
  * Update 041_hurd_maxhostnamelen to cover a few more uses of
    MAXHOSTNAMELEN. Fixes FTBFS on hurd-i386. Thanks, Pino Toscano.
    Closes: #666073

 -- Jelmer Vernooij <email address hidden>  Thu, 29 Mar 2012 01:59:36 +0200

heimdal (1.6~git20120311.dfsg.1-1) unstable; urgency=low


  * New upstream snapshot.
   + Drop 011_sharedlibs patch, now upstream.
  * Revert incorrect conflicts with kcc in heimdal-clients.
  * Make roken, hx509, heimntlm and wind libraries priority optional.
  * Rename kcc to heimtools, to avoid clashes with 'kcc' utility.
    Closes: #644138
  * Link with --as-needed to prevent unnecessary dependencies.

 -- Jelmer Vernooij <email address hidden>  Wed, 14 Mar 2012 11:54:02 +0100

heimdal (1.5.dfsg.1-3) unstable; urgency=low


  * Add conflicts with kcc to heimdal-clients. Closes: #644138

 -- Jelmer Vernooij <email address hidden>  Mon, 03 Oct 2011 23:50:05 +0200

heimdal (1.5.dfsg.1-2) unstable; urgency=low


  * Re-merge 1.4.0-1 through 1.4.0-8.

 -- Jelmer Vernooij <email address hidden>  Sat, 01 Oct 2011 15:02:33 +0200

heimdal (1.5.dfsg.1-1) unstable; urgency=low


  * New upstream release.
  * Fix symbolic links in heimdal-dev. Closes: #640278
  * Add Vcs-Git header.

 -- Jelmer Vernooij <email address hidden>  Wed, 21 Sep 2011 03:04:31 +0200

heimdal (1.4.0-8) unstable; urgency=low
  * Multiarch support.    In heimdal-multidev, move libraries from /usr/lib/heimdal to    /usr/lib/<triplet>/heimdal.    In heimdal-dev, move symlinks from /usr/lib to /usr/lib/<triplet>. -- Brian May <email address hidden>  Wed, 06 Jul 2011 15:05:25 +1000

heimdal (1.4.0-6) unstable; urgency=low
  * Fix AFS support (closes: #627947), was broken by patches for    The Hurd in version 1.4.0.  * Remove ignored configure flags in debian/rules. -- Brian May <email address hidden>  Sun, 29 May 2011 17:02:16 +1000

heimdal (1.4.0-5) unstable; urgency=low
  * Fix segfaults in kcm by upstream patches (closes: #618992).  * Remove *.la files (closes: #621340). -- Brian May <email address hidden>  Thu, 07 Apr 2011 11:24:49 +1000

heimdal (1.4.0-4) unstable; urgency=low
  * Apply patches for The Hurd (closes: #483281). -- Brian May <email address hidden>  Thu, 24 Feb 2011 10:43:05 +1100

heimdal (1.4.0-3) unstable; urgency=low
  * Make versioned depends for libkafs0-heimdal (closes: #613730). -- Brian May <email address hidden>  Mon, 21 Feb 2011 11:31:48 +1100

heimdal (1.4.0-2) unstable; urgency=low
  * Fix description of heimdal-dbg package (closes: #605663).  * Fix FTBFS with ld --no-add-needed (closes: 607589). -- Brian May <email address hidden>  Thu, 30 Dec 2010 11:20:11 +1100

heimdal (1.4.0-1) unstable; urgency=low


  * New upstream version.
  * Update standards version to 3.9.1.
  * Rewrite debian/rules clean list.

 -- Brian May <email address hidden>  Tue, 02 Nov 2010 12:03:56 +1100

heimdal (1.4.0~git20100726.dfsg.1-1) unstable; urgency=low


  * New upstream version.
  * Update standards version to 3.9.0.

 -- Brian May <email address hidden>  Mon, 26 Jul 2010 15:19:37 +1000

heimdal (1.4.0~git20100605.dfsg.1-3) unstable; urgency=low


  * Retry remove dangling symlinks to windc.so (closes: #577229).
  * Also remove windc.la and windc.a, as they would appear to be pointless.

 -- Brian May <email address hidden>  Thu, 01 Jul 2010 15:16:02 +1000

heimdal (1.4.0~git20100605.dfsg.1-2) unstable; urgency=low


  * Include updated Danish (da) debconf translations (closes: #585575).
  * Removing dangling symlinks to windc.so (closes: #577229).
  * Do not set -e in init.d script (closes: #574425).

 -- Brian May <email address hidden>  Thu, 17 Jun 2010 14:57:18 +1000

heimdal (1.4.0~git20100605.dfsg.1-1) unstable; urgency=low


  * New upstream version.
      * Git version abd5fdab5a7e189ef3f9c6aeafcebf94ddde157d.
      * Check the GSS-API checksum exists before trying to use
        it [CVE-2010-1321].

 -- Brian May <email address hidden>  Sat, 05 Jun 2010 10:31:49 +1000

heimdal (1.4.0~git20100322.dfsg.2-4) unstable; urgency=low


  * Add a db_stop before automatically-added debhelper parts (Closes: #579127).

 -- Brian May <email address hidden>  Wed, 28 Apr 2010 15:18:46 +1000

heimdal (1.4.0~git20100322.dfsg.2-2) unstable; urgency=low


  * Fix watch file to properly mangle upstream release candidate
    versions (closes: #575872).

 -- Brian May <email address hidden>  Thu, 08 Apr 2010 15:07:30 +1000

heimdal (1.4.0~git20100322.dfsg.2-1) unstable; urgency=low


  * Remove non-free RFCs again. Somehow the change went missing from the script
  in debian/scripts/convert_source.

 -- Brian May <email address hidden>  Mon, 22 Mar 2010 15:42:05 +1100

heimdal (1.4.0~git20100221.dfsg.2-3) unstable; urgency=low


  * Remove yucky comerr backport, requires libcomerr2 version 1.41.11-1
    or higher.
  * Rework debian/patches, make similar to prio 1.4.0 versions.
  * Add package-name-doesnt-match-sonames overrides for all shared libraries
    as discussed in #574572.
  * Update configure so it detects libedit library (closes: #574700).

 -- Brian May <email address hidden>  Sun, 21 Mar 2010 11:16:57 +1100

heimdal (1.4.0~git20100221.dfsg.2-2) unstable; urgency=low


  * Fix shlibs versions.

 -- Brian May <email address hidden>  Fri, 19 Mar 2010 16:46:43 +1100

heimdal (1.4.0~git20100221.dfsg.2-1) unstable; urgency=low


  * Last upload went to unstable by mistake. Lets not panic, this version
  should work fine...
  * Remove nonfree RFCs from source code (closes: #574431).
  * Add iprop-log and man page (closes: #574424).

 -- Brian May <email address hidden>  Fri, 19 Mar 2010 13:33:35 +1100

heimdal (1.4.0~git20100221.dfsg.1-2) experimental; urgency=low


  * Update debshlibs dependancies. Anything compiled against the
    version of Heimdal in experimental will require the libraries from
    experimental. May not strictly be required for all libraries, but
    better be safe then sorry.
  * This also will resolves a bug for the experimental version that has
    already been solved in stable (closes: 571206).

 -- Brian May <email address hidden>  Wed, 17 Mar 2010 12:11:51 +1100

heimdal (1.3.1.rc2.dfsg.1-3) unstable; urgency=low


  * Update debshlibs dependancies to require at least version 1.2.dfsg.1-2
  (where version symbols were fixed). Closes: #571206.

 -- Brian May <email address hidden>  Thu, 25 Feb 2010 10:22:26 +1100

heimdal (1.3.1.rc2.dfsg.1-2) unstable; urgency=low


  * heimdal-kdc: Change depends on logrotate to a recommends; while
  functionality will be lost if logrotate isn't installed, it won't cause
  the sky to fall (closes: #565115). Not in my lifetime anyway.
  * Update watch files (closes: #568340).
  * Update my email address.

 -- Brian May <email address hidden>  Thu, 04 Feb 2010 14:42:55 +1100

heimdal (1.3.1.rc2.dfsg.1-1) unstable; urgency=low


  * New upstream package.
  * Include heimdal-dbg (closes: #561940).
  * Apply patch to fix segfaults (closes: #561850).

 -- Brian May <email address hidden>  Tue, 05 Jan 2010 10:33:29 +1100

heimdal (1.3.1.dfsg.1-6) unstable; urgency=low


  * Remove references to quilt from debian/rules (closes: #561401).

 -- Brian May <email address hidden>  Fri, 18 Dec 2009 14:13:16 +1100

heimdal (1.2.e1.dfsg.1-4) unstable; urgency=low


  * heimdal-docs: don't distribute /usr/share/info/dir.gz (closes: #552083).
  * Fix lintian warnings:
    * heimdal-docs: add depends on dpkg (>= 1.15.4) | install-info to fix
      lintian warning.
    * heimdal-kdc: add ${misc:Depends} to depends.
    * Update standards version to 3.8.3
    * Create debian/README.source.

 -- Brian May <email address hidden>  Mon, 26 Oct 2009 10:46:47 +1100

heimdal (1.2.e1.dfsg.1-3) unstable; urgency=low


  * heimdal-kdc: remove FILE: prefix from default kdc.conf file, it does
    not work (closes: #550357).

 -- Brian May <email address hidden>  Wed, 21 Oct 2009 10:14:07 +1100

heimdal (1.2.e1.dfsg.1-2) unstable; urgency=low


  * debian/rules: clean out dependency_libs in the .la files shipped by
    heimdal-dev, so that reverse-dependencies don't fail to build looking
    for libdb when they don't need it.  Thanks to Thomas Viehmann for the
    patch.  Closes: #266003.

 -- Brian May <email address hidden>  Thu, 03 Sep 2009 12:51:24 +1000

heimdal (1.2.e1.dfsg.1-1.1) unstable; urgency=low


  * Non-maintainer upload with permission of maintainer, Closes: #538697 
  * Implement heimdal-multidev package to provide set of headers and
    libraries that can be installed along-side MIT Kerberos Development
    files  

 -- Sam Hartman <email address hidden>  Sat, 25 Jul 2009 13:35:51 -0400

heimdal (1.2.e1.dfsg.1-1) unstable; urgency=low


  * New upstream version.
  * Increase soname of libhx509-3-heimdal to libhx509-4-heimdal.

 -- Brian May <email address hidden>  Mon, 13 Jul 2009 14:43:12 +1000

heimdal (1.2.dfsg.1-5) unstable; urgency=low


  * Fix problems with postinst script. kdc.conf installed gzipped.
  * Fix line 112 of sample kdc.conf - line was intended to be commented out.
    Avoid unmatched } error.
  * Improve call to kadmin init when initially creating database.
  * Improve description of heimdal-clients package. Closes: #527021.

 -- Brian May <email address hidden>  Wed, 13 May 2009 11:27:03 +1000

heimdal (1.2.dfsg.1-4) unstable; urgency=low


  * Update to use unversioned libdb-dev. Closes: #524292.

 -- Brian May <email address hidden>  Thu, 16 Apr 2009 16:28:51 +1000

heimdal (1.2.dfsg.1-2.1) unstable; urgency=low


  * Non-maintainer upload.
  * fix segfaults when using pkinit with wrong PIN. Closes: #499405

 -- Guido Günther <email address hidden>  Sun, 05 Oct 2008 15:12:05 +0200

heimdal (0.7.2.dfsg.1-10) unstable; urgency=low


  * Add Portuguese debconf translation (closes: #408186).
  * Properly quote values in heimdal-kdc's postinst (closes: #408908).
  * Fixes broken conflicts in libsl0-heimdal (closes: #406651).

 -- Brian May <email address hidden>  Thu,  8 Feb 2007 15:27:28 +1100