glib-networking (2.74.0-4) unstable; urgency=medium

  * Team upload
  * d/p/proxy-Use-environment-libproxy-as-the-as-installed-test-f.patch:
    Add proposed patch to resolve autopkgtest regression now that the
    environment proxy module is disabled (Closes: #1031166)

 -- Simon McVittie <smcv@debian.org>  Sun, 12 Feb 2023 17:49:53 +0000

glib-networking (2.74.0-3) unstable; urgency=medium

  * Disable environment proxy: it's unused & upstream recommends disabling it
  * Update standards version to 4.6.2, no changes needed

 -- Jeremy Bicha <jbicha@ubuntu.com>  Fri, 10 Feb 2023 19:04:34 -0500

glib-networking (2.74.0-2) unstable; urgency=medium

  [ Adrian Bunk ]
  * Cherry-pick patch to fix build tests with gnutls28 3.78 (Closes: #1022376)

 -- Jeremy Bicha <jbicha@ubuntu.com>  Sun, 11 Dec 2022 12:35:23 -0500

glib-networking (2.74.0-1) unstable; urgency=medium

  * New upstream release

 -- Jeremy Bicha <jbicha@ubuntu.com>  Thu, 15 Sep 2022 14:02:46 -0400

glib-networking (2.74~rc-1) unstable; urgency=medium

  * New upstream release
  * debian/control.in: Bump minimum meson to 0.60.0
  * Drop all patches: applied in new release

 -- Jeremy Bicha <jbicha@ubuntu.com>  Thu, 01 Sep 2022 15:11:18 -0400

glib-networking (2.74~beta-2) unstable; urgency=medium

  * Cherry-pick 2 patches to fix failing autopkgtests (LP: #1988062)

 -- Jeremy Bicha <jbicha@ubuntu.com>  Mon, 29 Aug 2022 17:19:47 -0400

glib-networking (2.74~beta-1) unstable; urgency=medium

  * New upstream release
  * debian/control.in: Bump minimum glib2.0, gnutls, libproxy, meson

 -- Jeremy Bicha <jbicha@ubuntu.com>  Wed, 24 Aug 2022 12:15:54 -0400

glib-networking (2.72.2-1) unstable; urgency=medium

  * New upstream release

 -- Jeremy Bicha <jbicha@ubuntu.com>  Fri, 05 Aug 2022 18:25:24 -0400

glib-networking (2.72.1-1) unstable; urgency=medium

  * Team upload
  * New upstream release

 -- Shannon Brady <duckydreams@gmail.com>  Mon, 18 Jul 2022 18:32:41 +0100

glib-networking (2.72.0-1) unstable; urgency=medium

  * New upstream release
  * Release to unstable

 -- Jeremy Bicha <jbicha@ubuntu.com>  Tue, 22 Mar 2022 14:54:01 -0400

glib-networking (2.72~beta-1) experimental; urgency=medium

  * New upstream release

 -- Jeremy Bicha <jeremy.bicha@canonical.com>  Mon, 14 Feb 2022 08:32:27 -0500

glib-networking (2.72~alpha-1) experimental; urgency=medium

  * Team upload
  * d/watch: Accept development versions
  * New upstream development release

 -- Simon McVittie <smcv@debian.org>  Thu, 27 Jan 2022 16:41:41 +0000

glib-networking (2.70.1-1) unstable; urgency=medium

  * New upstream release
  * Drop patch: applied in new release
  * debian/rules: Drop unneeded -Wl,--as-needed

 -- Jeremy Bicha <jbicha@debian.org>  Mon, 06 Dec 2021 20:32:57 -0500

glib-networking (2.70.0-1) unstable; urgency=medium

  * New upstream release
  * Update GLib build-dependency version
  * d/copyright: Update
  * d/p/tests-Tolerate-zero-length-channel-binding-data-with-GNUT.patch:
    Drop workaround for GNUTLS 3.7.1.
    - d/control.in: Build-depend on 3.7.2 instead, now that it's available
      in unstable.
  * d/p/tests-Accept-GNUTLS-workaround-for-limited-size-of-time_t.patch:
    Add a patch to work around GNUTLS ABI limitations with 32-bit time_t
  * d/control.in: glib-networking-tests: Depend on python3

 -- Simon McVittie <smcv@debian.org>  Mon, 20 Sep 2021 20:49:44 +0100

glib-networking (2.68.2-2) unstable; urgency=medium

  * Team upload
  * Normalize permissions in installed-tests.
    debhelper 13.4 makes everything below /usr/libexec executable, but
    that's not what we want.
  * Standards-Version: 4.6.0 (no changes required)
  * Use debhelper compat level 13
    - Drop dh_missing override, it is now the default
  * Release to unstable

 -- Simon McVittie <smcv@debian.org>  Fri, 20 Aug 2021 13:36:08 +0100

glib-networking (2.68.2-1) experimental; urgency=medium

  * Team upload
  * New upstream release
    - Improve error handling for PKCS #11 PIN failures
    - Ensure that PKCS #11 pins are NUL-terminated
    - Allow tls-unique channel binding to be unsupported, as with GNUTLS
      when using TLS 1.3 or newer
  * d/p/gnutls-Ensure-that-PKCS-11-pins-are-NUL-terminated.patch:
    Drop patch, applied upstream
  * d/p/tests-Tolerate-zero-length-channel-binding-data-with-GNUT.patch:
    Add patch to tolerate a GNUTLS 3.7.1 bug until a suitable version
    becomes available in testing/unstable

 -- Simon McVittie <smcv@debian.org>  Mon, 16 Aug 2021 11:13:11 +0100

glib-networking (2.68.1-2) experimental; urgency=medium

  * gnutls-Ensure-that-PKCS-11-pins-are-NUL-terminated.patch: Cherry pick.
    Upstream patch to ensure NUL-termination of pkcs#11 PINs, which fixes an
    apparently s390x-specific failure. Thanks to Patrick Griffis for the
    patch.

 -- Iain Lane <laney@debian.org>  Sun, 11 Jul 2021 17:02:59 +0100

glib-networking (2.68.1-1) experimental; urgency=medium

  * New upstream release:
    - Download and validate missing intermediate certificates
    - Fix a couple code issues found by Coverity
    - Fix check for certain handshake failure conditions
    - Fix double free in GnuTLS client certificate request code
    - Fix NULL dereference in g_tls_connection_base_read_message
    - Fix threadsafety issue in certificate verification
    - Implement PKCS#11 API
    - Implement TLS channel bindings API
    - Improve heuristic for returning G_TLS_ERROR_CERTIFICATE_REQUIRED
    - OpenSSL backend now uses system crypto policy
    - Remove use of g_assert in testsuite
    - Restore support for old versions of OpenSSL
    - Temporarily remove support for downloading missing intermediate
      certificates with GnuTLS 3.7
    - Update testsuite for Fedora 33 crypto policy
  * control: Bump glib BD per upstream

 -- Iain Lane <laney@debian.org>  Tue, 29 Jun 2021 17:47:50 +0100

glib-networking (2.66.0-2) unstable; urgency=medium

  * Team upload
  * Add Breaks on libsoup2.4-tests that are broken by this version.
    Older libsoup tests constructed a GTlsFileDatabase for /dev/null, which
    only worked because older versions of glib-networking ignored the
    error reported by GNUTLS when doing this. (Closes: #970935)

 -- Simon McVittie <smcv@debian.org>  Sun, 27 Sep 2020 16:52:41 +0100

glib-networking (2.66.0-1) unstable; urgency=medium

  * Team upload
  * New upstream stable release
    - Translation updates
  * d/watch: Only watch for stable versions again
  * Release to unstable

 -- Simon McVittie <smcv@debian.org>  Mon, 14 Sep 2020 09:53:44 +0100

glib-networking (2.65.90-1) experimental; urgency=medium

  * Team upload
  * d/watch: Watch for development versions
  * New upstream release
    - Fix peer-certificate[-errors] properties being set too soon
    - Various fixes to OpenSSL backend
      (as recommended by upstream, this is not used in Debian)

 -- Simon McVittie <smcv@debian.org>  Sun, 30 Aug 2020 14:25:35 +0100

glib-networking (2.64.3-2) unstable; urgency=medium

  * Team upload
  * Add Breaks on balsa versions older than the one fixing CVE-2020-13645,
    to prevent regressions
    - Version 2.6.1-1 is required in Debian, but use 2.6.0-2ubuntu0.1
      to be nice to Ubuntu users. There were no versions between
      2.6.0-2 and 2.6.1-1 in Debian.
  * Release to unstable

 -- Simon McVittie <smcv@debian.org>  Sun, 05 Jul 2020 11:51:32 +0100

glib-networking (2.64.3-1) experimental; urgency=medium

  * Team upload
  * New upstream release
    - Don't behave as though server TLS certificate had been verified
      successfully if the application didn't specify the expected identity.
      (CVE-2020-13645, Closes: #961756; the only application known to be
      affected is balsa).
  * Upload to experimental to facilitate testing new balsa versions.
    This version should gain Breaks: balsa (<< fixed version) before
    being released to unstable.

 -- Simon McVittie <smcv@debian.org>  Fri, 03 Jul 2020 15:25:22 +0100

glib-networking (2.64.2-1) unstable; urgency=medium

  * New upstream release, reenable TLS 1.0/1.1 protocols due to COVID-19

 -- Sebastien Bacher <seb128@ubuntu.com>  Fri, 17 Apr 2020 10:27:16 +0200

glib-networking (2.64.1-1) unstable; urgency=medium

  * New upstream release

 -- Jeremy Bicha <jbicha@debian.org>  Sat, 28 Mar 2020 22:40:47 -0400

glib-networking (2.64.0-1) unstable; urgency=medium

  * Team upload
  * New upstream stable release
  * Upload to unstable
    - In particular, this removes a test that asserts we are able to
      work around servers' protocol intolerance by falling back to older
      TLS versions. That feature enables downgrade attacks, and was
      removed in GLib 2.63.2 and glib-networking 2.63.2, causing the
      test to fail in older glib-networking versions. (Closes: #953766)
  * Switch packaging branch back to debian/master for unstable
  * d/watch: Only look for stable releases again
  * Standards-Version: 4.5.0 (no changes required)
  * d/copyright: Remove PKCS11 stuff.
    Its addition was reverted in 2.63.90.

 -- Simon McVittie <smcv@debian.org>  Fri, 13 Mar 2020 09:51:06 +0000

glib-networking (2.63.92-1) experimental; urgency=medium

  * New upstream release
    - Revert "Fix peer-certificate properties changing too soon" from
      2.63.91-1. It broke libsoup2.4's tests.

 -- Iain Lane <iain.lane@canonical.com>  Fri, 28 Feb 2020 16:51:33 +0000

glib-networking (2.63.91-1) experimental; urgency=medium

  * New upstream release
    - Fix peer-certificate properties changing too soon
    - GnuTLS backend: reduce session resumption cache lifetime
    - GnuTLS backend: restore TLS 1.2 support for copy session state
  * control: Bump GLib BD to 2.63.0 per upstream

 -- Iain Lane <laney@debian.org>  Mon, 17 Feb 2020 18:31:34 +0000

glib-networking (2.63.90-1) experimental; urgency=medium

  * New upstream release

 -- Sebastien Bacher <seb128@ubuntu.com>  Wed, 05 Feb 2020 17:03:10 +0100

glib-networking (2.63.3-1) experimental; urgency=medium

  [ Simon McVittie ]
  * New upstream release
    - d/p/Disable-PKCS-11-client-authentication-test.patch,
      d/p/tls-tests-Fix-to-work-as-installed-tests.patch:
      Drop, applied upstream
  * Merge packaging changes from unstable
  * d/copyright: Further updates

 -- Sebastien Bacher <seb128@ubuntu.com>  Tue, 28 Jan 2020 11:10:27 +0100

glib-networking (2.62.3-1) unstable; urgency=medium

  * Team upload

  [ Iain Lane ]
  * debian/gbp.conf: Use upstream branch upstream/2.62.x to track stable

  [ Simon McVittie ]
  * d/watch: Only watch for stable versions
  * New upstream release
  * d/tests/installed-tests: Fail on reference to unset variables
  * d/tests/installed-tests: Remove support for old autopkgtest
    versions. AUTOPKGTEST_TMP is now required to be set, and we do not use
    the deprecated ADTTMP.
  * d/copyright: Update

  [ Automatic changes via lintian-brush ]
  * Set field Upstream-Name in debian/copyright.
  * Set upstream metadata fields: Bug-Database, Bug-Submit, Repository,
    Repository-Browse.
  * Update standards version to 4.4.1, no changes needed.

 -- Simon McVittie <smcv@debian.org>  Sat, 11 Jan 2020 15:56:45 +0000

glib-networking (2.63.2-1) experimental; urgency=medium

  * New upstream release
    - Add support for new PKCS#11 APIs to facilitate use with smartcards
    - Build mock PKCS #11 module only for GnuTLS backend
    - Disable TLS 1.0 and TLS 1.1 when using GnuTLS
    - Drop rehandshake mode and protocol version fallback support
    - Fix crash when handshake context is reset too late
    - Fix leak in GTlsCertificateGnutls finalizer
    - Fix PKCS #11 tests with TLS 1.2
    - Require GnuTLS 3.6.5
    - Rework session resumption support for TLS 1.3
    - Run GnuTLS tests under TLS 1.2 in addition to TLS 1.3
    - Support OpenSSL 1.0.1
  * control: Bump gnutls BD to 3.6.5 per meson.build
  * d/p/Disable-PKCS-11-client-authentication-test.patch: Cherry pick. Follow
    upstream in disabling a flaky test
  * d/p/tls-tests-Fix-to-work-as-installed-tests.patch: Fix installed tests. A
    required module wasn't being installed, and the tests weren't written to
    find the files in the correct locations when run installed..

 -- Iain Lane <laney@debian.org>  Fri, 20 Dec 2019 12:29:00 +0000

glib-networking (2.62.1-1) unstable; urgency=medium

  * New upstream release
  * Drop obsolete dh_strip dbgsym migration rule

 -- Jeremy Bicha <jbicha@debian.org>  Sat, 05 Oct 2019 20:35:56 -0400

glib-networking (2.62.0-2) unstable; urgency=medium

  * Team upload.
  * Upload to unstable.

 -- Andreas Henriksson <andreas@fatal.se>  Mon, 30 Sep 2019 17:20:08 +0200

glib-networking (2.62.0-1) experimental; urgency=medium

  * New upstream release
    - Verify socket timeouts are respected
    - Fix a couple broken error messages
  * Standards-Version → 4.4.0 (no changes required)

 -- Iain Lane <laney@debian.org>  Thu, 12 Sep 2019 13:34:40 +0100

glib-networking (2.61.90-1) experimental; urgency=medium

  * New upstream release
    - Fix translations of certain error messages
    - Improve certain handshake error messages
    - Fix regressions introduced in 2.61.1 (LP: #1839826)

 -- Iain Lane <laney@debian.org>  Mon, 12 Aug 2019 12:37:52 +0100

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog glib-networking-common`.
