libseccomp (2.4.3-1ubuntu3.16.04.3) xenial; urgency=medium

  * d/p/db-consolidate-some-of-the-code-which-adds-rules.patch
  * d/p/db-add-shadow-transactions.patch (LP: #1861177)
    Backport upstream patches to address performance regression introduced
    in libseccomp 2.4.

 -- Ioanna Alifieraki <ioanna-maria.alifieraki@canonical.com>  Mon, 29 Jun 2020 13:57:55 +0100

libseccomp (2.4.3-1ubuntu3.16.04.2) xenial; urgency=medium

  * Updated to new upstream 2.4.3 version for updated syscalls support
    and test-suite robustness
    - d/p/add-5.4-local-syscall-headers.patch: Add local copy of the
      architecture specific header files which specify system call numbers
      from linux-libc-dev in focal to ensure unit tests pass on older
      releases where the linux-libc-dev package does not have the required
      system calls defined and use these during compilation of unit tests
    - d/p/db-properly-reset-attribute-state.patch: Drop this patch since
      is now upstream  
    - LP: #1876055
  * Add missing aarch64 system calls
    - d/p/fix-aarch64-syscalls.patch
    - LP: #1877633
  * Re-enable build failure on unit test failure

 -- Alex Murray <alex.murray@canonical.com>  Tue, 02 Jun 2020 14:16:21 +0930

libseccomp (2.4.1-0ubuntu0.16.04.2) xenial-security; urgency=medium

  [ Marc Deslauriers ]
  * Updated to new upstream 2.4.1 version to fix security issue.
    - CVE-2019-9893
  * debian/patches/*: removed, all included in new version.
  * debian/control: add valgrind to Build-Depends to get more unit tests.
  * debian/libseccomp2.symbols: added new symbols.
  * debian/docs: removed, new version doesn't have README file.

  [ Jamie Strandboge ]
  * db-properly-reset-attribute-state.patch: db: properly reset the attribute
    state in db_col_reset()

 -- Jamie Strandboge <jamie@ubuntu.com>  Fri, 03 May 2019 20:10:57 +0000

libseccomp (2.3.1-2.1ubuntu2~16.04.1) xenial; urgency=medium

  * Backport libseccomp 2.3.1 to xenial LP: #1682102
    - Improved s390x support
    - Improved support for v4.5+ kernels

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Fri, 06 Oct 2017 14:47:39 +0100

libseccomp (2.3.1-2.1ubuntu2) artful; urgency=medium

  * add-log-action.patch: Minimal backport to support the SECCOMP_RET_LOG
    action that will be released in Linux kernel version 4.14. (LP: #1567597)

 -- Tyler Hicks <tyhicks@canonical.com>  Tue, 19 Sep 2017 21:37:38 +0000

libseccomp (2.3.1-2.1ubuntu1) zesty; urgency=low

  * Merge with Debian unstable. Remaining Ubuntu changes:
    - Add autopkgtests.

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Tue, 06 Dec 2016 15:20:21 +0100

libseccomp (2.3.1-2.1) unstable; urgency=medium

  [ Martin Pitt ]
  * Non-maintainer upload with Kees' consent.

  [ Laurent Bigonville ]
  * Ensure strict enough generated dependencies (Closes: #844496)

 -- Martin Pitt <mpitt@debian.org>  Thu, 17 Nov 2016 10:16:44 +0100

libseccomp (2.3.1-2ubuntu2) yakkety; urgency=medium

  * Fix autopkgtest, seccomp resolution now returns negative syscall
    numbers for multiplexed calls, thus direct access symbols roundtrip is
    via negative numbers. E.g. 373 -> shutdown -> -113 -> shutdown.

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Fri, 10 Jun 2016 18:14:04 +0100

libseccomp (2.3.1-2ubuntu1) yakkety; urgency=medium

  * Merge with Debian unstable LP: #1580558. Remaining Ubuntu changes:
    - Add autopkgtests. (Closes: #788577)

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Wed, 08 Jun 2016 10:36:11 +0100

libseccomp (2.3.1-2) unstable; urgency=medium

  * Add hppa (parisc) support (Closes: #820501)

 -- Luca Bruno <lucab@debian.org>  Sat, 28 May 2016 20:05:01 +0200

libseccomp (2.3.1-1) unstable; urgency=medium

  * New upstream release
  * control: add Vcs-* fields

 -- Luca Bruno <lucab@debian.org>  Tue, 05 Apr 2016 22:16:55 +0200

libseccomp (2.3.0-1) unstable; urgency=medium

  * New upstream release
    + drop all patches, applied upstream
  * libseccomp2: update symbols file
  * control: add myself to uploaders
  * control: bump policy version

 -- Luca Bruno <lucab@debian.org>  Sun, 03 Apr 2016 00:31:09 +0200

libseccomp (2.2.3-3ubuntu3) xenial; urgency=medium

  * Fix FTBFS.

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Wed, 16 Mar 2016 15:28:16 +0000

libseccomp (2.2.3-3ubuntu2) xenial; urgency=medium

  * Cherrypick git-d2ca11b7cdddbba3782b1e306ceacf19e898faee.diff. (LP:
    #1554098)

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Wed, 16 Mar 2016 14:58:46 +0000

libseccomp (2.2.3-3ubuntu1) xenial; urgency=medium

  * Merge with Debian unstable. Remaining Ubuntu changes:
    - Add autopkgtests. (Closes: #788577)

 -- Martin Pitt <martin.pitt@ubuntu.com>  Thu, 11 Feb 2016 16:16:01 +0100

libseccomp (2.2.3-3) unstable; urgency=medium

  [ Martin Pitt ]
  * debian/patches/add-x86-32bit-socket-calls.patch: add the newly
    connected direct socket calls. (Closes: #809556)
  * debian/add-membarrier.patch: add membarrier syscall.
  * Backport patches for ppc/ppc64 and s390x. (Closes: #800818)

 -- Kees Cook <kees@debian.org>  Tue, 01 Sep 2015 15:37:31 -0700

libseccomp (2.2.3-2ubuntu3) xenial; urgency=low

  * debian/patches/add-x86-32bit-socket-calls.patch: add the newly
    connected direct socket calls.  (LP: #1526358)

 -- Andy Whitcroft <apw@ubuntu.com>  Wed, 16 Dec 2015 14:30:17 +0000

libseccomp (2.2.3-2ubuntu2) xenial; urgency=medium

  * debian/add-membarrier.patch: add membarrier syscall. This can be dropped
    once libseccomp is synced with 4.3 or higher

 -- Jamie Strandboge <jamie@ubuntu.com>  Mon, 14 Dec 2015 10:19:37 -0600

libseccomp (2.2.3-2ubuntu1) wily; urgency=medium

  * Merge with Debian; remaining changes:
    - add autopkgtests
  * debian/control: Build on linux-any.
  * Backport patches for ppc/ppc64. LP: #1427076.
  * Backport patches for s390x.

 -- Matthias Klose <doko@ubuntu.com>  Fri, 02 Oct 2015 17:45:30 +0200

libseccomp (2.2.3-2) unstable; urgency=medium

  * debian/control: enable mips64, mips64el, and x32 architectures,
    thanks to Helmut Grohne (Closes: 797383).

 -- Kees Cook <kees@debian.org>  Tue, 01 Sep 2015 15:37:31 -0700

libseccomp (2.2.3-1) unstable; urgency=medium

  * New upstream release (Closes: 793032).
  * debian/control: update Homepage (Closes: 793033).

 -- Kees Cook <kees@debian.org>  Mon, 03 Aug 2015 15:06:08 -0700

libseccomp (2.2.1-2ubuntu1) wily; urgency=medium

  * Merge with Debian unstable. Remaining Ubuntu changes:
    - Add autopkgtest (Debian #788577)

 -- Martin Pitt <martin.pitt@ubuntu.com>  Wed, 17 Jun 2015 07:36:57 +0200

libseccomp (2.2.1-2) unstable; urgency=medium

  * debian/{rules,*.install}: move to /lib, thanks to Michael Biebl
    (Closes: 788923).

 -- Kees Cook <kees@debian.org>  Tue, 16 Jun 2015 12:45:08 -0700

libseccomp (2.2.1-1ubuntu1) wily; urgency=low

  * Merge from Debian unstable. Dropped following patches (included in
    upstream):
    - add-finit-module.patch
    - update-x86-syscall-table.patch
    - update-x86_64-syscall-table.patch
    - update-arm-syscall-table.patch
    - update-x32-syscall-table.patch
    - sync-syscall-table-entries.patch
    - sync-syscall-table-entries-fixtypo.patch
    - sync-syscall-table-entries-3.17.patch
    - sync-syscall-table-entries-3.19.patch
    - fix-segfault-with-unknown.patch
    - add-missing-arm-private-syscalls.patch
  * Remaining changes:
    - add autopkgtests

 -- Jamie Strandboge <jamie@ubuntu.com>  Fri, 12 Jun 2015 15:12:22 -0500

libseccomp (2.2.1-1) unstable; urgency=medium

  * New upstream release (Closes: 785428).
    - debian/patches dropped: incorporated upstream.
  * debian/libseccomp2.symbols: include only documented symbols.
  * debian/libseccomp-dev.install: include static library (Closes: 698508).
  * debian/control:
    - add newly supported arm64, mips, and mipsel.
    - bump standards version, no changes needed.

 -- Kees Cook <kees@debian.org>  Sat, 16 May 2015 08:15:26 -0700

libseccomp (2.1.1-1ubuntu1) wily; urgency=medium

  * add-finit-module.patch: add finit_module syscalls to x86 and x86-64
    syscall tables
  * update syscalls for modern kernels (skipping MIPS)
    - update syscalls for 3.16:
      + update-x86-syscall-table.patch
      + update-x86_64-syscall-table.patch
      + update-arm-syscall-table.patch
      + update-x32-syscall-table.patch
      + sync-syscall-table-entries.patch
      + sync-syscall-table-entries-fixtypo.patch
    - update syscalls for 3.17:
      + sync-syscall-table-entries-3.17.patch
    - update syscalls for 3.19:
      + sync-syscall-table-entries-3.19.patch
    - LP: #1450642
  * fix-segfault-with-unknown.patch: fix segfault when find unknown syscall
  * debian/patches/add-missing-arm-private-syscalls.path: add missing private
    ARM syscalls
  * add autopkgtests for scmp_sys_resolver and filter testing and
    SYS_getrandom() testing

 -- Jamie Strandboge <jamie@ubuntu.com>  Fri, 08 May 2015 17:08:43 -0400

libseccomp (2.1.1-1) unstable; urgency=low

  * New upstream release (Closes: 733293).
  * copyright: add a few missed people.
  * rules: adjusted for new test target.
  * libseccomp2.symbols: drop accidentally exported functions.
  * control:
    - bump standards, no changes needed.
    - add armel target

 -- Kees Cook <kees@debian.org>  Sat, 12 Apr 2014 10:44:22 -0700

libseccomp (2.1.0+dfsg-1) unstable; urgency=low

  * Rebuild source package without accidental binaries (Closes: 725617).
    - debian/watch: mangle upstream version check.
  * debian/rules: make tests non-fatal while upstream fixes them
    (Closes: 721292).

 -- Kees Cook <kees@debian.org>  Sun, 06 Oct 2013 15:05:51 -0700

libseccomp (2.1.0-1) unstable; urgency=low

  * New upstream release (Closes: 718398):
    - dropped debian/patches/manpage-dashes.patch: taken upstream.
    - dropped debian/patches/include-unistd.patch: not needed.
    - debian/patches/testsuite-x86-write.patch: taken upstream.
    - ABI bump: moved from libseccomp1 to libseccomp2.
  * debian/control:
    - added Arch: armhf, now supported upstream.
    - added seccomp binary package for helper tools.
  * Added debian/patches/manpage-typo.patch: spelling fix.
  * Added debian/patches/build-ldflags.patch: fix LDFLAGS handling.

 -- Kees Cook <kees@debian.org>  Tue, 13 Aug 2013 00:02:01 -0700

libseccomp (1.0.1-2) unstable; urgency=low

  * debian/rules: enable testsuite at build time, thanks to
    Stéphane Graber (Closes: 698803).
  * Added debian/patches/include-unistd.patch: detect location of
    asm/unistd.h correctly.
  * Added debian/patches/testsuite-x86-write.patch: skip the "write"
    syscall correctly on x86.
  * debian/control: bump standards to 3.9.4, no changes needed.

 -- Kees Cook <kees@debian.org>  Wed, 23 Jan 2013 13:11:53 -0800

libseccomp (1.0.1-1) unstable; urgency=low

  * New upstream release.
  * debian/control: only build on amd64 and i386 (Closes: 687368).

 -- Kees Cook <kees@debian.org>  Fri, 07 Dec 2012 11:38:03 -0800

libseccomp (1.0.0-1) unstable; urgency=low

  * New upstream release.
    - bump ABI.
    - drop build verbosity patch, use upstream V=1 instead.
  * libseccomp-dev.manpages: fix build location (Closes: 682152, 682471).
  * debian/patches/pkgconfig-macro.patch: use literals for macro.

 -- Kees Cook <kees@debian.org>  Fri, 03 Aug 2012 16:59:41 -0700

libseccomp (0.1.0-1) unstable; urgency=low

  * New upstream release.
    - drop patches taken upstream:
      - libexecdir.patch
      - pass-flags.patch

 -- Kees Cook <kees@debian.org>  Fri, 08 Jun 2012 12:32:22 -0700

libseccomp (0.0.0~20120605-1) unstable; urgency=low

  * Initial release (Closes: #676257).

 -- Kees Cook <kees@debian.org>  Tue, 05 Jun 2012 11:28:07 -0700

