libseccomp (2.5.1-1ubuntu1~18.04.2) bionic-security; urgency=medium

  * No-change rebuild in the -security pocket.

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Fri, 19 Nov 2021 06:48:33 -0500

libseccomp (2.5.1-1ubuntu1~18.04.1) bionic; urgency=medium

  * Updated to new upstream 2.5.1 version for updated syscalls support
    (LP: #1891810)
   - Removed the following patches that are now included in the new version:
     + d/p/fix-aarch64-syscalls.patch
     + d/p/db-consolidate-some-of-the-code-which-adds-rules.patch
     + d/p/db-add-shadow-transactions.patch
   - Deleted the patch to add a local copy of architecture specific header
     files from linux-libc-dev/focal as this is not needed anymore
     + d/p/add-5.4-local-syscall-headers.patch
   - debian/control: Added gperf to Build-Depends as this is now required
     by upstream
   - debian/libseccomp2.symbols: Added new symbols
  * Add system call headers for powerpc required for backport to xenial
    - d/p/add-5.8-powerpc-syscall-headers.patch

 -- Alex Murray <alex.murray@canonical.com>  Mon, 01 Mar 2021 13:49:23 +1030

libseccomp (2.4.3-1ubuntu3.18.04.3) bionic; urgency=medium

  * d/p/db-consolidate-some-of-the-code-which-adds-rules.patch
  * d/p/db-add-shadow-transactions.patch (LP: #1861177)
    Backport upstream patches to address performance regression introduced
    in libseccomp 2.4.

 -- Ioanna Alifieraki <ioanna-maria.alifieraki@canonical.com>  Mon, 29 Jun 2020 13:52:22 +0100

libseccomp (2.4.3-1ubuntu3.18.04.2) bionic; urgency=medium

  * Updated to new upstream 2.4.3 version for updated syscalls support
    and test-suite robustness
    - d/p/add-5.4-local-syscall-headers.patch: Add local copy of the
      architecture specific header files which specify system call numbers
      from linux-libc-dev in focal to ensure unit tests pass on older
      releases where the linux-libc-dev package does not have the required
      system calls defined and use these during compilation of unit tests
    - d/p/db-properly-reset-attribute-state.patch: Drop this patch since
      is now upstream  
    - LP: #1876055
  * Add missing aarch64 system calls
    - d/p/fix-aarch64-syscalls.patch
    - LP: #1877633

 -- Alex Murray <alex.murray@canonical.com>  Tue, 02 Jun 2020 14:09:28 +0930

libseccomp (2.4.1-0ubuntu0.18.04.2) bionic-security; urgency=medium

  [ Marc Deslauriers ]
  * Updated to new upstream 2.4.1 version to fix security issue.
    - CVE-2019-9893
  * debian/patches/*: removed, all included in new version.
  * debian/control: add valgrind to Build-Depends to get more unit tests.
  * debian/libseccomp2.symbols: added new symbols.
  * debian/docs: removed, new version doesn't have README file.

  [ Jamie Strandboge ]
  * db-properly-reset-attribute-state.patch: db: properly reset the attribute
    state in db_col_reset()

 -- Jamie Strandboge <jamie@ubuntu.com>  Fri, 03 May 2019 20:09:03 +0000

libseccomp (2.3.1-2.1ubuntu4.1) bionic; urgency=medium

  * d/p/lp-1755250-add-the-statx-syscall.patch: add statx support (LP: #1755250)
  * d/p/lp-1815415-*: Add syscalls up to kernel 4.15 (LP: #1815415)

 -- Christian Ehrhardt <christian.ehrhardt@canonical.com>  Fri, 08 Feb 2019 09:17:23 +0100

libseccomp (2.3.1-2.1ubuntu4) bionic; urgency=medium

  * debian/tests/data/open.fail_filter: The libseccomp autopkgtests were
    failing with glibc 2.27 due to changes in glibc which resulted in
    openat() exclusively being used, without any calls to open(). This
    resulted in the test process exiting normally instead of being
    killed, as was expected. Fix the test failure by removing openat()
    from the list of whitelisted syscalls so that the process is killed.

 -- Tyler Hicks <tyhicks@canonical.com>  Thu, 01 Mar 2018 18:09:19 +0000

libseccomp (2.3.1-2.1ubuntu3) artful; urgency=medium

  * debian/rules: Make test failures cause the build to fail (LP: #1657425)

 -- Tyler Hicks <tyhicks@canonical.com>  Fri, 06 Oct 2017 18:08:21 +0000

libseccomp (2.3.1-2.1ubuntu2) artful; urgency=medium

  * add-log-action.patch: Minimal backport to support the SECCOMP_RET_LOG
    action that will be released in Linux kernel version 4.14. (LP: #1567597)

 -- Tyler Hicks <tyhicks@canonical.com>  Tue, 19 Sep 2017 21:37:38 +0000

libseccomp (2.3.1-2.1ubuntu1) zesty; urgency=low

  * Merge with Debian unstable. Remaining Ubuntu changes:
    - Add autopkgtests.

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Tue, 06 Dec 2016 15:20:21 +0100

libseccomp (2.3.1-2.1) unstable; urgency=medium

  [ Martin Pitt ]
  * Non-maintainer upload with Kees' consent.

  [ Laurent Bigonville ]
  * Ensure strict enough generated dependencies (Closes: #844496)

 -- Martin Pitt <mpitt@debian.org>  Thu, 17 Nov 2016 10:16:44 +0100

libseccomp (2.3.1-2ubuntu2) yakkety; urgency=medium

  * Fix autopkgtest, seccomp resolution now returns negative syscall
    numbers for multiplexed calls, thus direct access symbols roundtrip is
    via negative numbers. E.g. 373 -> shutdown -> -113 -> shutdown.

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Fri, 10 Jun 2016 18:14:04 +0100

libseccomp (2.3.1-2ubuntu1) yakkety; urgency=medium

  * Merge with Debian unstable LP: #1580558. Remaining Ubuntu changes:
    - Add autopkgtests. (Closes: #788577)

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Wed, 08 Jun 2016 10:36:11 +0100

libseccomp (2.3.1-2) unstable; urgency=medium

  * Add hppa (parisc) support (Closes: #820501)

 -- Luca Bruno <lucab@debian.org>  Sat, 28 May 2016 20:05:01 +0200

libseccomp (2.3.1-1) unstable; urgency=medium

  * New upstream release
  * control: add Vcs-* fields

 -- Luca Bruno <lucab@debian.org>  Tue, 05 Apr 2016 22:16:55 +0200

libseccomp (2.3.0-1) unstable; urgency=medium

  * New upstream release
    + drop all patches, applied upstream
  * libseccomp2: update symbols file
  * control: add myself to uploaders
  * control: bump policy version

 -- Luca Bruno <lucab@debian.org>  Sun, 03 Apr 2016 00:31:09 +0200

libseccomp (2.2.3-3ubuntu3) xenial; urgency=medium

  * Fix FTBFS.

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Wed, 16 Mar 2016 15:28:16 +0000

libseccomp (2.2.3-3ubuntu2) xenial; urgency=medium

  * Cherrypick git-d2ca11b7cdddbba3782b1e306ceacf19e898faee.diff. (LP:
    #1554098)

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Wed, 16 Mar 2016 14:58:46 +0000

libseccomp (2.2.3-3ubuntu1) xenial; urgency=medium

  * Merge with Debian unstable. Remaining Ubuntu changes:
    - Add autopkgtests. (Closes: #788577)

 -- Martin Pitt <martin.pitt@ubuntu.com>  Thu, 11 Feb 2016 16:16:01 +0100

libseccomp (2.2.3-3) unstable; urgency=medium

  [ Martin Pitt ]
  * debian/patches/add-x86-32bit-socket-calls.patch: add the newly
    connected direct socket calls. (Closes: #809556)
  * debian/add-membarrier.patch: add membarrier syscall.
  * Backport patches for ppc/ppc64 and s390x. (Closes: #800818)

 -- Kees Cook <kees@debian.org>  Tue, 01 Sep 2015 15:37:31 -0700

libseccomp (2.2.3-2ubuntu3) xenial; urgency=low

  * debian/patches/add-x86-32bit-socket-calls.patch: add the newly
    connected direct socket calls.  (LP: #1526358)

 -- Andy Whitcroft <apw@ubuntu.com>  Wed, 16 Dec 2015 14:30:17 +0000

libseccomp (2.2.3-2ubuntu2) xenial; urgency=medium

  * debian/add-membarrier.patch: add membarrier syscall. This can be dropped
    once libseccomp is synced with 4.3 or higher

 -- Jamie Strandboge <jamie@ubuntu.com>  Mon, 14 Dec 2015 10:19:37 -0600

libseccomp (2.2.3-2ubuntu1) wily; urgency=medium

  * Merge with Debian; remaining changes:
    - add autopkgtests
  * debian/control: Build on linux-any.
  * Backport patches for ppc/ppc64. LP: #1427076.
  * Backport patches for s390x.

 -- Matthias Klose <doko@ubuntu.com>  Fri, 02 Oct 2015 17:45:30 +0200

libseccomp (2.2.3-2) unstable; urgency=medium

  * debian/control: enable mips64, mips64el, and x32 architectures,
    thanks to Helmut Grohne (Closes: 797383).

 -- Kees Cook <kees@debian.org>  Tue, 01 Sep 2015 15:37:31 -0700

libseccomp (2.2.3-1) unstable; urgency=medium

  * New upstream release (Closes: 793032).
  * debian/control: update Homepage (Closes: 793033).

 -- Kees Cook <kees@debian.org>  Mon, 03 Aug 2015 15:06:08 -0700

libseccomp (2.2.1-2ubuntu1) wily; urgency=medium

  * Merge with Debian unstable. Remaining Ubuntu changes:
    - Add autopkgtest (Debian #788577)

 -- Martin Pitt <martin.pitt@ubuntu.com>  Wed, 17 Jun 2015 07:36:57 +0200

libseccomp (2.2.1-2) unstable; urgency=medium

  * debian/{rules,*.install}: move to /lib, thanks to Michael Biebl
    (Closes: 788923).

 -- Kees Cook <kees@debian.org>  Tue, 16 Jun 2015 12:45:08 -0700

libseccomp (2.2.1-1ubuntu1) wily; urgency=low

  * Merge from Debian unstable. Dropped following patches (included in
    upstream):
    - add-finit-module.patch
    - update-x86-syscall-table.patch
    - update-x86_64-syscall-table.patch
    - update-arm-syscall-table.patch
    - update-x32-syscall-table.patch
    - sync-syscall-table-entries.patch
    - sync-syscall-table-entries-fixtypo.patch
    - sync-syscall-table-entries-3.17.patch
    - sync-syscall-table-entries-3.19.patch
    - fix-segfault-with-unknown.patch
    - add-missing-arm-private-syscalls.patch
  * Remaining changes:
    - add autopkgtests

 -- Jamie Strandboge <jamie@ubuntu.com>  Fri, 12 Jun 2015 15:12:22 -0500

libseccomp (2.2.1-1) unstable; urgency=medium

  * New upstream release (Closes: 785428).
    - debian/patches dropped: incorporated upstream.
  * debian/libseccomp2.symbols: include only documented symbols.
  * debian/libseccomp-dev.install: include static library (Closes: 698508).
  * debian/control:
    - add newly supported arm64, mips, and mipsel.
    - bump standards version, no changes needed.

 -- Kees Cook <kees@debian.org>  Sat, 16 May 2015 08:15:26 -0700

libseccomp (2.1.1-1ubuntu1) wily; urgency=medium

  * add-finit-module.patch: add finit_module syscalls to x86 and x86-64
    syscall tables
  * update syscalls for modern kernels (skipping MIPS)
    - update syscalls for 3.16:
      + update-x86-syscall-table.patch
      + update-x86_64-syscall-table.patch
      + update-arm-syscall-table.patch
      + update-x32-syscall-table.patch
      + sync-syscall-table-entries.patch
      + sync-syscall-table-entries-fixtypo.patch
    - update syscalls for 3.17:
      + sync-syscall-table-entries-3.17.patch
    - update syscalls for 3.19:
      + sync-syscall-table-entries-3.19.patch
    - LP: #1450642
  * fix-segfault-with-unknown.patch: fix segfault when find unknown syscall
  * debian/patches/add-missing-arm-private-syscalls.path: add missing private
    ARM syscalls
  * add autopkgtests for scmp_sys_resolver and filter testing and
    SYS_getrandom() testing

 -- Jamie Strandboge <jamie@ubuntu.com>  Fri, 08 May 2015 17:08:43 -0400

libseccomp (2.1.1-1) unstable; urgency=low

  * New upstream release (Closes: 733293).
  * copyright: add a few missed people.
  * rules: adjusted for new test target.
  * libseccomp2.symbols: drop accidentally exported functions.
  * control:
    - bump standards, no changes needed.
    - add armel target

 -- Kees Cook <kees@debian.org>  Sat, 12 Apr 2014 10:44:22 -0700

libseccomp (2.1.0+dfsg-1) unstable; urgency=low

  * Rebuild source package without accidental binaries (Closes: 725617).
    - debian/watch: mangle upstream version check.
  * debian/rules: make tests non-fatal while upstream fixes them
    (Closes: 721292).

 -- Kees Cook <kees@debian.org>  Sun, 06 Oct 2013 15:05:51 -0700

libseccomp (2.1.0-1) unstable; urgency=low

  * New upstream release (Closes: 718398):
    - dropped debian/patches/manpage-dashes.patch: taken upstream.
    - dropped debian/patches/include-unistd.patch: not needed.
    - debian/patches/testsuite-x86-write.patch: taken upstream.
    - ABI bump: moved from libseccomp1 to libseccomp2.
  * debian/control:
    - added Arch: armhf, now supported upstream.
    - added seccomp binary package for helper tools.
  * Added debian/patches/manpage-typo.patch: spelling fix.
  * Added debian/patches/build-ldflags.patch: fix LDFLAGS handling.

 -- Kees Cook <kees@debian.org>  Tue, 13 Aug 2013 00:02:01 -0700

libseccomp (1.0.1-2) unstable; urgency=low

  * debian/rules: enable testsuite at build time, thanks to
    Stéphane Graber (Closes: 698803).
  * Added debian/patches/include-unistd.patch: detect location of
    asm/unistd.h correctly.
  * Added debian/patches/testsuite-x86-write.patch: skip the "write"
    syscall correctly on x86.
  * debian/control: bump standards to 3.9.4, no changes needed.

 -- Kees Cook <kees@debian.org>  Wed, 23 Jan 2013 13:11:53 -0800

libseccomp (1.0.1-1) unstable; urgency=low

  * New upstream release.
  * debian/control: only build on amd64 and i386 (Closes: 687368).

 -- Kees Cook <kees@debian.org>  Fri, 07 Dec 2012 11:38:03 -0800

libseccomp (1.0.0-1) unstable; urgency=low

  * New upstream release.
    - bump ABI.
    - drop build verbosity patch, use upstream V=1 instead.
  * libseccomp-dev.manpages: fix build location (Closes: 682152, 682471).
  * debian/patches/pkgconfig-macro.patch: use literals for macro.

 -- Kees Cook <kees@debian.org>  Fri, 03 Aug 2012 16:59:41 -0700

libseccomp (0.1.0-1) unstable; urgency=low

  * New upstream release.
    - drop patches taken upstream:
      - libexecdir.patch
      - pass-flags.patch

 -- Kees Cook <kees@debian.org>  Fri, 08 Jun 2012 12:32:22 -0700

libseccomp (0.0.0~20120605-1) unstable; urgency=low

  * Initial release (Closes: #676257).

 -- Kees Cook <kees@debian.org>  Tue, 05 Jun 2012 11:28:07 -0700

