c-ares (1.10.0-2+deb8u6) jessie-security; urgency=high

  * Non-maintainer upload by the ELTS team.
  * Regression update introduced in last upload.

 -- Anton Gladky <gladk@debian.org>  Tue, 04 Jul 2023 20:51:48 +0200

c-ares (1.10.0-2+deb8u5) jessie-security; urgency=high

  * Non-maintainer upload by the ELTS team.
  * Fix CVE-2023-32067:
    Improve UDP packet handling in ares_process.c to prevent
    a denial of service due to a malformed UDP packet.
  * Fix CVE-2023-31130:
    fix buffer underflow for certain IPv6 addresses in
    inet_net_pton_ipv6(). Use our own IP conversion functions,
    do not delegate to OS.

 -- Anton Gladky <gladk@debian.org>  Thu, 29 Jun 2023 21:57:01 +0200

c-ares (1.10.0-2+deb8u4) jessie-security; urgency=high

  * Non-maintainer upload by the ELTS team.
  * Fix CVE-2022-4904:
    It was discovered that in c-ares, an asynchronous name resolver library,
    the config_sortlist function is missing checks about the validity of the
    input string, which allows a possible arbitrary length stack overflow and
    thus may cause a denial of service.

 -- Markus Koschany <apo@debian.org>  Sat, 18 Feb 2023 23:48:23 +0100

c-ares (1.10.0-2+deb8u3) jessie-security; urgency=medium

  * Non-maintainer upload by the ELTS Team.
  * CVE-2021-3672
    Missing input validation of host names returned by Domain Name 
    Servers can lead to output of wrong hostnames.

 -- Thorsten Alteholz <debian@alteholz.de>  Mon, 09 Aug 2021 22:03:02 +0200

c-ares (1.10.0-2+deb8u2) jessie; urgency=medium

  * Add patch for CVE-2017-1000381 (Closes: #865360)

 -- Gregor Jasny <gjasny@googlemail.com>  Mon, 26 Jun 2017 22:03:42 +0200

c-ares (1.10.0-2+deb8u1) jessie-security; urgency=high

  * Apply patch for CVE-2016-5180 (Closes: #839151)

 -- Gregor Jasny <gjasny@googlemail.com>  Thu, 29 Sep 2016 20:30:48 +0200

c-ares (1.10.0-2) unstable; urgency=low

  * Bump standards to v3.9.4 (no changes needed)
  * Canonicalize Git VCS URL
  * Prevent autoconf from mangling passed cflags
  * Depend on debhelper 9

 -- Gregor Jasny <gjasny@googlemail.com>  Sun, 16 Jun 2013 13:38:58 +0200

c-ares (1.10.0-1) unstable; urgency=low

  * Imported Upstream version 1.10.0
  * Add Upstream Metadata
  * Fix package description (Closes: #680640)
  * Dropped deprecated DM-Upload-Allowed flag
  * Remove patches that were applied upstream
  * Add new 1.10.0 symbols

 -- Gregor Jasny <gjasny@googlemail.com>  Tue, 14 May 2013 22:19:12 +0200

c-ares (1.9.1-3) unstable; urgency=low

  * Moved ares_build.h to arch dependent include dir (Closes: #678996)

 -- Gregor Jasny <gjasny@googlemail.com>  Mon, 25 Jun 2012 19:37:00 +0200

c-ares (1.9.1-2) unstable; urgency=low

  * Remove ares_free_soa declaration from ares.h

 -- Gregor Jasny <gjasny@googlemail.com>  Tue, 19 Jun 2012 09:43:09 +0200

c-ares (1.9.1-1) unstable; urgency=low

  * Imported Upstream version 1.9.1
  * Update homepage field (Closes: #674406)
  * Mark dev package as Multi-Arch: same

 -- Gregor Jasny <gjasny@googlemail.com>  Mon, 18 Jun 2012 23:06:40 +0200

c-ares (1.8.0-1) unstable; urgency=low

  * Imported Upstream version 1.8.0
  * Fix typo in package description (Closes: #638923)
  * Bump standards to v3.9.3 (no changes needed)

 -- Gregor Jasny <gjasny@googlemail.com>  Thu, 10 May 2012 21:46:27 +0200

c-ares (1.7.5-1) unstable; urgency=low

  * Imported Upstream version 1.7.5
  * Update watch file location
  * Fix typo in Uploaders field
  * Update SCM Browser URL
  * Convert to Multiarch
  * Bump standards to v3.9.2 (no changes needed)

 -- Gregor Jasny <gjasny@googlemail.com>  Sun, 21 Aug 2011 15:19:21 +0200

c-ares (1.7.4-1) unstable; urgency=low

  [ Gregor Jasny ]
  * Imported Upstream version 1.7.4
  * Fix typo in package description (Closes: #600309)
  * Bump standards to v3.9.1 (no changes needed)
  * Unapply patches after build
  * Add new symbols

  [ Andreas Schuldei ]
  * added Gregor Jasny as uploader

 -- Andreas Schuldei <andreas@debian.org>  Thu, 03 Mar 2011 21:48:00 +0100

c-ares (1.7.3-1) unstable; urgency=low

  [ Gregor Jasny ]
  * Imported Upstream version 1.7.3
  * Add ares_parse_mx_reply symbol

 -- Andreas Schuldei <andreas@debian.org>  Fri, 11 Jun 2010 18:33:50 +0200

c-ares (1.7.1-0) unstable; urgency=low

  [ Gregor Jasny ]
  * Remove quilt dir
  * Imported Upstream version 1.7.0
  * Bump standards to v3.8.3 (no changes needed)
  * Hide private symbols and add Debian symbols file
  * Use separate build dir
  * Tightened debhelper dependency
  * Revert "Use separate build dir"
  * Imported Upstream version 1.7.1
  * Add new ares_{get,set}_servers symbols
  * Bump standards to v3.8.4 (no changes needed)
  * Switch to dpkg-source 3.0 (quilt) format

 -- Andreas Schuldei <andreas@debian.org>  Fri, 30 Apr 2010 21:27:20 +0200

c-ares (1.6.0-2) unstable; urgency=low

  [ Gregor Jasny ]
  * Add git-buildpackage config
  * Imported Upstream version 1.6.0
  * New Upstream Version 1.6.0
  * Removed no_maxhostnamelen patch
  * Add Vcs-* fields to control file
  * Make package binNMUable (lintian: not-binnmuable-any-depends-any)
  * Add watch file (lintian: debian-watch-file-is-missing)
  * Updated standards to 3.8.1 (no changes needed)
  * Remove duplicate section (lintian: binary-control-field-duplicates-
    source)
  * Use debhelper 7 and its tiny rules script
  * Use copyright sign instead of (c) to make lintian happy
  * Add some words to the -dev package (lintian: duplicate-short-
    description)

 -- Andreas Schuldei <andreas@debian.org>  Mon, 25 May 2009 13:23:43 +0200

c-ares (1.6.0-1) unstable; urgency=low

  * New Upstream Version

 -- Gregor Jasny <gjasny@googlemail.com>  Mon, 04 May 2009 22:01:20 +0200

c-ares (1.5.2-4) unstable; urgency=low

  * fixing linitan warnings: standards versions, clean target in rules
  * fix memory leak in MAXHOSTNAMELEN patch

 -- Andreas Schuldei <andreas@jesaja.schuldei.org>  Mon, 30 Jun 2008 16:33:20 +0200

c-ares (1.5.2-3) unstable; urgency=low

  * remove the need to have MAXHOSTNAMELEN, to make hurd build

 -- Andreas Schuldei <andreas@debian.org>  Sun, 29 Jun 2008 01:55:35 +0200

c-ares (1.5.2-2) unstable; urgency=low

  * file conflicts (Closes: #484574)

 -- Andreas Schuldei <andreas@debian.org>  Thu, 05 Jun 2008 10:00:56 +0200

c-ares (1.5.2-1) unstable; urgency=low

  * missing copyright information in debian/copyright (Closes: #484517)

 -- Andreas Schuldei <andreas@debian.org>  Wed, 04 Jun 2008 20:22:59 +0200

c-ares (1.5.2-0) unstable; urgency=low

  * new upstream release: 1.5.2
  * Conflict with libcares2 (Closes: #478588)
  * libc-ares1 contains libcares.2.so (Closes: #480589)

 -- Andreas Schuldei <andreas@debian.org>  Sat, 31 May 2008 01:08:35 +0200

c-ares (1.5.1-0) unstable; urgency=low

  * new upstream release: 1.5.1
  * file conflicts between packages (Closes: #451343)
  * switch to pkgconfig, disable .la

 -- Andreas Schuldei <andreas@debian.org>  Mon, 26 Nov 2007 14:09:46 +0100

c-ares (1.4.0-1) unstable; urgency=low

  * Initial release (Closes: #359794) packaging c-ares 

 -- Andreas Schuldei <andreas@debian.org>  Sat, 21 Jul 2007 17:44:06 +0200

