Change log for serf package in Ubuntu

serf (1.3.10-1build2) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- William Grant <email address hidden>  Mon, 01 Apr 2024 15:40:41 +1100

Available diffs

• diff from 1.3.10-1build1 to 1.3.10-1build2 (302 bytes)

serf (1.3.10-1build1) noble; urgency=medium

  * No-change rebuild against libssl3t64

 -- Steve Langasek <email address hidden>  Tue, 05 Mar 2024 01:23:19 +0000

Available diffs

• diff from 1.3.10-1 (in Debian) to 1.3.10-1build1 (478 bytes)

serf (1.3.10-1ubuntu0.1) mantic-security; urgency=medium

  * No change rebuild due to golang-1.20, golang-1.21 updates

 -- Nishit Majithia <email address hidden>  Thu, 01 Feb 2024 13:37:18 +0530

Available diffs

• diff from 1.3.10-1 (in Debian) to 1.3.10-1ubuntu0.1 (514 bytes)

serf (1.3.10-1) unstable; urgency=medium

  * New upstream release
    - Remove patches applied upstream: openssl-1.1.1i, openssl-3.x,
      bio-ctrl.patch, and py3-compat
  * Adjust symbols-declares-dependency-on-other-package override for new lintian
  * Bump to debhelper compat 13
  * Stop ignoring test results now that they work with OpenSSL 3
  * Point fetch-keys script at new KEYS URL
  * Update upstream signing keys
  * Declare compliance with Policy 4.6.2, no changes needed

 -- James McCoy <email address hidden>  Sun, 11 Jun 2023 13:43:46 -0400

Available diffs

• diff from 1.3.9-11 to 1.3.10-1 (32.7 KiB)

serf (1.3.9-11) unstable; urgency=medium

  [ James McCoy ]
  * Fix build with OpenSSL 3 (Closes: #1006572)
  * Ignore test failures until upstream fixes their tests with OpenSSL 3
  * Declare compliance with Policy 4.6.1, no changes needed

  [ Simon Chopin ]
  * d/p/bio-ctrl.patch: imported from FreeBSD, fixes TLS issues with OpenSSL3
    (LP: #1956040)

  [ Vagrant Cascadian ]
  * debian/rules: Pass relative path to LIBDIR in dh_auto_install override.
    (Closes: #1010043)

 -- James McCoy <email address hidden>  Sat, 14 May 2022 16:57:22 -0400

Available diffs

• diff from 1.3.9-10ubuntu2 (in Ubuntu) to 1.3.9-11 (2.0 KiB)

serf (1.3.9-10ubuntu2) jammy; urgency=medium

  * d/p/bio-ctrl.patch: imported from FreeBSD, fixes TLS issues with OpenSSL3
    (LP: #1956040)

 -- Simon Chopin <email address hidden>  Mon, 14 Mar 2022 09:50:11 +0100

Available diffs

• diff from 1.3.9-10ubuntu1 to 1.3.9-10ubuntu2 (929 bytes)

serf (1.3.9-10ubuntu1) jammy; urgency=medium

  * Drop call to ERR_GET_FUNC, removed in openssl v3.
  * Ignore test results, most test certs are very old and testsuite seems
    to fail in other distributions too.

 -- Dimitri John Ledkov <email address hidden>  Thu, 02 Dec 2021 15:23:17 +0000

Available diffs

• diff from 1.3.9-10 (in Debian) to 1.3.9-10ubuntu1 (1.2 KiB)

serf (1.3.9-10) unstable; urgency=medium

  * ci: Add pkg-config to Depends
  * ci: Add allow-stderr restriction

 -- James McCoy <email address hidden>  Sun, 17 Jan 2021 09:57:34 -0500

Available diffs

• diff from 1.3.9-9 to 1.3.9-10 (493 bytes)

serf (1.3.9-9) unstable; urgency=medium

  * Include upstream patch to fix OpenSSL 1.1.1i compat (Closes: #978353)
  * rules: Remove explicit -Wl,--as-needed, since it is default

 -- James McCoy <email address hidden>  Sat, 16 Jan 2021 10:35:52 -0500

Available diffs

• diff from 1.3.9-8build1 (in Ubuntu) to 1.3.9-9 (2.1 KiB)

serf (1.3.9-8build1) focal; urgency=medium

  * No-change rebuild to restore i386 binaries

 -- Steve Langasek <email address hidden>  Mon, 13 Jan 2020 03:35:31 +0000

Available diffs

• diff from 1.3.9-8 (in Debian) to 1.3.9-8build1 (311 bytes)

serf (1.3.9-8) unstable; urgency=medium

  * Enable building with Python3
    - Use Python3 to generate test certificates
      + Change python-openssl Build-Depends to python3-openssl
    - Add py3-compat patch
      + Use py2/py3 compatible syntax in SConstruct (Closes: #947581)
      + Use py2/py3 compatible syntax in build/*.py (Closes: #943263)
  * Remove debian/distcerts/ in clean target
  * debian/rules:
    - Build tests with the same flags as the library
    - Add support for DEB_BUILD_OPTIONS=terse
    - Remove unnecessary -arch qualifications in override rules
    - Add .PHONY build rule to override build directory
  * debian/control:
    - Remove obsolete version requirement for scons Build-Depends
  * Install libserf-dev examples in /usr/share/doc/libserf-dev instead of
    symlinking to /u/s/d/libserf-1-1
  * Add script to update/minimize signing keys
  * Update/minimize upstream signing keys
  * Declare compliance with Policy 4.4.1, no changes needed
  * Switch to debhelper compat 12 via debhelper-compat

 -- James McCoy <email address hidden>  Mon, 30 Dec 2019 07:55:43 -0500

Available diffs

• diff from 1.3.9-7 to 1.3.9-8 (663.0 KiB)

serf (1.3.9-7) unstable; urgency=medium

  * Backport create_certs.py from upstream to generate certs at test time
    (Closes: #911714)
  * Remove obsolete dbgsym migration
  * Opt-in to debhelper 12 beta
  * Declare compliance with Policy 4.2.1

 -- James McCoy <email address hidden>  Sat, 27 Oct 2018 10:17:10 -0400

Available diffs

• diff from 1.3.9-6 to 1.3.9-7 (16.9 KiB)

serf (1.3.9-6) unstable; urgency=medium

  * Backport r1712790 from upstream to fix NULL pointer dereference.
    Thanks to Colin Watson for investigation and report (Closes: #893688)

 -- James McCoy <email address hidden>  Wed, 21 Mar 2018 21:38:37 -0400

Available diffs

• diff from 1.3.9-4ubuntu1 (in Ubuntu) to 1.3.9-6 (1.3 KiB)

serf (1.3.9-4ubuntu1) bionic; urgency=medium

  * Backport r1712790 from upstream to fix a segfault in
    serf_bucket_aggregate_prepend when prepending a bucket to an empty list.

 -- Colin Watson <email address hidden>  Tue, 20 Mar 2018 12:41:52 +0000

Available diffs

• diff from 1.3.9-4build1 to 1.3.9-4ubuntu1 (840 bytes)

serf (1.3.9-4build1) bionic; urgency=high

  * No change rebuild against openssl1.1.

 -- Dimitri John Ledkov <email address hidden>  Mon, 05 Feb 2018 23:28:07 +0000

Available diffs

• diff from 1.3.9-4 (in Debian) to 1.3.9-4build1 (585 bytes)

serf (1.3.9-4) unstable; urgency=medium

  * Mark serf_debug_closed_conn as a public symbol, since svn has been using
    it for 10 years.
  * Declare compliance with Policy 4.1.1, no changes needed
  * Change source format to 3.0 (quilt)
  * Set R³ to no
  * Switch to dh-based rules

 -- James McCoy <email address hidden>  Sun, 12 Nov 2017 21:19:32 -0500

Available diffs

• diff from 1.3.9-3 to 1.3.9-4 (2.1 KiB)

serf (1.3.9-3) unstable; urgency=medium

  * Add libssl-dev to libserf-dev's Depends, otherwise pkg-config can't
    provide information about serf.  Thanks to Daniel Shahaf for noticing!

 -- James McCoy <email address hidden>  Wed, 07 Jun 2017 23:09:48 -0400

Available diffs

• diff from 1.3.9-2 to 1.3.9-3 (604 bytes)

serf (1.3.9-2) unstable; urgency=medium

  * Remove Peter Samuelson as maintainer, at request of MIA team.  Thanks for
    all the fish!  (Closes: #852220)
  * Backport r1792234 to fix test failures due to expired test certificates.
    (Closes: #862027)

 -- James McCoy <email address hidden>  Sun, 07 May 2017 22:02:00 -0400

Available diffs

• diff from 1.3.9-1 to 1.3.9-2 (13.3 KiB)

serf (1.3.9-1) unstable; urgency=medium

  * New upstream release
    - patches/comment-style_r2443, patches/openssl-1.1.x_r1750819,
      patches/test-memory-usage_r2445: Drop, merged upstream
  * d/rules: Remove more SCons cruft in clean target

 -- James McCoy <email address hidden>  Fri, 02 Sep 2016 00:20:04 -0400

Available diffs

• diff from 1.3.8-3 to 1.3.9-1 (618.9 KiB)

serf (1.3.8-3) unstable; urgency=medium

  * Backport r1750819 from upstream to add support for OpenSSL 1.1.x.
    (Closes: #828541)
  * Replace deprecated uses of debhelper's -s with -a.
  * Declare compliance with policy 3.9.8, no changes needed.
  * Use https URIs for Vcs-*.
  * Enable hardening build flags.

 -- James McCoy <email address hidden>  Sat, 23 Jul 2016 23:39:33 -0400

Available diffs

• diff from 1.3.8-2 to 1.3.8-3 (3.9 KiB)

serf (1.3.8-2) unstable; urgency=medium

  * Update URLs to refer to serf.apache.org rather than code.google.com.
  * Declare compliance with policy 3.9.7, no changes needed.
  * Migrate to automatic debug packages.

 -- James McCoy <email address hidden>  Sun, 28 Feb 2016 07:37:33 -0500

Available diffs

• diff from 1.3.8-1 to 1.3.8-2 (2.0 KiB)

serf (1.3.8-1) unstable; urgency=medium


  * New upstream release
    - Disable SSLv2 and SSLv3
  * Backport r2445 from upstream to fix potential memory allocation failures
    in the test suite.
  * Backport r2443 from upstream to fix a compile failure in the test suite.

 -- James McCoy <email address hidden>  Thu, 04 Dec 2014 19:06:24 -0500

Available diffs

• diff from 1.3.7-3 to 1.3.8-1 (5.9 KiB)

serf (1.3.7-3) unstable; urgency=medium


  * Specify the proper prefix/libdir when building libserf-1.pc.
    (Closes: LP: #1388271)

 -- James McCoy <email address hidden>  Mon, 17 Nov 2014 21:12:38 -0500

Available diffs

• diff from 1.3.7-2 to 1.3.7-3 (479 bytes)

serf (1.3.7-2) unstable; urgency=medium


  * debian/control:
    + Bump versioned Build-Depends on scons >= 2.3.1-2 to ensure we have an
      scons which can understand krb5-config's use of -isystem (c.f., #760804).
    + Add libssl-dev/zlib1g-dev to Build-Depends as they're needed to build
      and no longer transitively pulled in.  (Closes: #768664)

 -- James McCoy <email address hidden>  Sun, 09 Nov 2014 14:11:13 -0500

Available diffs

• diff from 1.3.7-1 to 1.3.7-2 (735 bytes)

serf (1.0.0-2ubuntu0.1) precise-security; urgency=medium

  * SECURITY UPDATE: cert spoofing via NUL characters in CommonName and
    SubjectAltNames
    - debian/patches/CVE-2014-3504.patch: escape null bytes in
      buckets/ssl_buckets.c.
    - CVE-2014-3504
 -- Marc Deslauriers <email address hidden>   Thu, 14 Aug 2014 10:51:37 -0400

Available diffs

• diff from 1.0.0-2 (in Ubuntu) to 1.0.0-2ubuntu0.1 (3.2 KiB)

serf (1.3.3-1ubuntu0.1) trusty-security; urgency=medium

  * SECURITY UPDATE: cert spoofing via NUL characters in CommonName and
    SubjectAltNames
    - debian/patches/CVE-2014-3504.patch: escape null bytes in
      buckets/ssl_buckets.c.
    - CVE-2014-3504
  * Fix FTBFS because of expired test certs:
    - debian/patches/expired_certs.patch: switch to test certs from serf
      1.3.6.
    - debian/source/format: switch to 3.0 (quilt) so we can handle the
      binary cert file
    - debian/source/include-binaries: include binary cert file from 1.3.6.
 -- Marc Deslauriers <email address hidden>   Thu, 14 Aug 2014 09:47:32 -0400

Available diffs

• diff from 1.3.3-1ubuntu0.1~test1 to 1.3.3-1ubuntu0.1 (11.2 KiB)

serf (1.3.7-1) unstable; urgency=medium


  * New upstream release
    + Includes security fix:
      - CVE-2014-3504: Improper validation of certificate with host mismatch
        (Closes: #757965)
  * control: Pre-Depend on ${misc:Pre-Depends} instead of hard-coding
    multiarch-support.
  * control: Add Vcs-* fields.

 -- James McCoy <email address hidden>  Tue, 12 Aug 2014 23:32:58 -0400

Available diffs

• diff from 1.3.6-1 to 1.3.7-1 (3.7 KiB)

serf (1.3.6-1) unstable; urgency=medium


  * New upstream release

 -- James McCoy <email address hidden>  Fri, 13 Jun 2014 23:46:01 -0400

Available diffs

• diff from 1.3.5-1 to 1.3.6-1 (1.3 KiB)

serf (1.3.5-1) unstable; urgency=medium


  * New upstream release
    + Update test certificates.  Fixes FTBFS.  (Closes: #746129)
  * debian/rules: Specify PREFIX/LIBDIR only when running “scons install”.
    They're unnecessary for the other scons calls, but mandatory for the
    install target, otherwise the install tries to use upstream defaults.
  * debian/watch: Scrape https://code.google.com/p/serf/ instead of the
    download page since the download page isn't being updated.

 -- James McCoy <email address hidden>  Mon, 28 Apr 2014 20:23:40 -0400

Available diffs

• diff from 1.3.3-1 to 1.3.5-1 (18.7 KiB)
• diff from 1.3.4-2 to 1.3.5-1 (13.0 KiB)

serf (1.3.4-2) unstable; urgency=medium


  * Enable Kerberos/GSSAPI support (Closes: #740717)
    + d/control: Add libkrb5-dev
    + d/rules: Tell scons where to find GSSAPI
  * Link with -Wl,--as-needed to avoid unnecessary dependencies

 -- James McCoy <email address hidden>  Tue, 04 Mar 2014 23:06:00 -0500

serf (1.3.3-1) unstable; urgency=low


  * Add myself to Uploaders.
  * Change the watch file to better handle code.google.com.
  * New upstream release.  (Closes: #716793)
    + Refresh patches/libtool
    + Update symbols
  * Adapt packaging for the upstream switch to SCons.
    + control: + scons, - autotools-dev, autoconf
    + rules: Change configure/make calls to scons
  * Rename libserf1 to libserf-1-1, following standard naming conventions.
  * Enable hardening flags.
  * Strip unnecessary RPATH from libserf.
  * Honor DEB_BUILD_OPTIONS=parallel=X

 -- James McCoy <email address hidden>  Tue, 31 Dec 2013 13:17:16 -0500

Available diffs

• diff from 1.1.0-2ubuntu1 (in Ubuntu) to 1.3.3-1 (198.0 KiB)

serf (1.1.0-2ubuntu1) saucy; urgency=low

  * Copy config.{guess,sub} into the correct directory.
 -- Matthias Klose <email address hidden>   Wed, 09 Oct 2013 11:39:24 +0200

Available diffs

• diff from 1.1.0-2 (in Debian) to 1.1.0-2ubuntu1 (526 bytes)

serf (1.1.0-2) unstable; urgency=low


  * Upload to unstable.
  * Add another lintian override.
  * Make libserf1-dbg M-A: same as well.

 -- Peter Samuelson <email address hidden>  Sat, 09 Jun 2012 14:26:56 -0500

Available diffs

• diff from 1.0.0-2 (in Ubuntu) to 1.1.0-2 (8.7 KiB)

serf (1.0.0-2) experimental; urgency=low

  * patches/bind_address_family: New patch from Anders Kaseorg to replace
    patches/ip6-localhost.  We'll see if it addresses #632573.
  * Policy 3.9.2 (no changes).
 -- Matthias Klose <email address hidden>   Thu,  18 Aug 2011 21:14:23 +0000

Available diffs

• diff from 1.0.0-1 to 1.0.0-2 (892 bytes)

serf (1.0.0-1) experimental; urgency=low

  * New upstream release.
    - patches/out-of-tree, patches/kqueue: Remove, accepted upstream.
    - Now ships pkgconfig file serf-1.pc.

Available diffs

• diff from 0.3.1-1build1 to 1.0.0-1 (149.6 KiB)

serf (0.3.1-1build1) oneiric; urgency=low

  * No change rebuild for libssl1.0.0 transition.
 -- Angel Abad <email address hidden>   Wed, 08 Jun 2011 15:26:08 +0200

Available diffs

• diff from 0.3.1-1 to 0.3.1-1build1 (282 bytes)

serf (0.3.1-1) unstable; urgency=low

  * New upstream release.
    - patches/libtool: update.
 -- Ubuntu Archive Auto-Sync <email address hidden>   Sun,  09 May 2010 14:02:26 +0100

Available diffs

• diff from 0.3.0-2 to 0.3.1-1 (42.8 KiB)

serf (0.3.0-2) unstable; urgency=low

  * Make libserf-0-0-dev Replace older libserf-0-0.  (Closes: #557889)

Available diffs

• diff from 0.3.0-0.3 to 0.3.0-2 (3.8 KiB)

serf (0.3.0-0.3) unstable; urgency=low

  * Non-maintainer upload.
  * patches/kqueue: New patch: fix FTBFS due to testsuite bug on BSD kernels.
    Thanks Aurelien Jarno.  (Closes: #542063)
 -- Ubuntu Archive Auto-Sync <email address hidden>   Fri,  06 Nov 2009 10:34:37 +0000

Available diffs

• diff from 0.3.0-0.2 to 0.3.0-0.3 (872 bytes)

serf (0.3.0-0.2) unstable; urgency=low

  * Non-maintainer upload.
  * Add symbols file.
  * patches/no-export-vars: New patch: do not export variables outside the
    serf_ namespace.

Available diffs

• diff from 0.2.0-1 to 0.3.0-0.2 (14.8 KiB)

serf (0.2.0-1) unstable; urgency=medium

  * New upstream version (Closes: #485025):
    - debian/copyright: Document that CuTest files are licensed under the
      zlib/libpng license.
    - debian/patches/*.diff: Refresh.
  * Update Standards-Version to 3.8.0.
    - debian/control: Make binNMU-safe by using ${binary:Version} instead of
      ${Source-Version}.
    - debian/control: Add new Homepage field.
    - debian/copyright: Delete copy of /usr/share/common-licenses/Apache-2.0.
    - debian/README.source: New file explaining quilt.
  * Update the debhelper compatibility level to 7.
    - debian/libserf-0-0-dev.install, debian/libserf-0-0.install:
      Do not begin with debian/tmp since it is assumed to be the source path.
  * debian/control: Add new Vcs-Git, and Vcs-Browser fields.
  * Install test programs as example ones for libserf-0-0-dev.

 -- Ubuntu Archive Auto-Sync <email address hidden>   Tue,  24 Jun 2008 13:49:40 +0100

Available diffs

• diff from 0.1.2-1 to 0.2.0-1 (44.1 KiB)

serf (0.1.2-1) unstable; urgency=low

  * New upstream version.

 -- Ubuntu Archive Auto-Sync <email address hidden>   Wed,  24 Oct 2007 07:43:46 +0100

serf (0.1.1-1) unstable; urgency=low

  * New upstream version.
    - Delete patches that are applied in the upstream:
      r1091-remove-trailing-garbage.diff, r1092-implement-distclean.diff, and
      r1094-add-readme.diff.

 -- Ubuntu Archive Auto-Sync <email address hidden>   Wed,  30 May 2007 07:35:37 +0100

serf (0.1.0-2) unstable; urgency=low

  * Add a new libserf-0-0-dbg package for debugging.