lwip (2.2.1+dfsg1-1+deb13u1) trixie; urgency=medium

  * Fix CVE-2026-8836: snmpv3: fix handling packets with invalid
      msgAuthenticationParameters length
    * A remote attacker can send a crafted msgAuthenticationParameters field
      to overflow a stack buffer in snmp_parse_inbound_frame().
    * Re-enables the bounds check on msgAuthenticationParameters length in
      snmp_parse_inbound_frame() and clamps the copy length to
      SNMP_V3_MAX_AUTH_PARAM_LENGTH instead of using the attacker-controlled
      TLV value length
    * https://savannah.nongnu.org/bugs/?68194

 -- Joan Lledó <jlledom@member.fsf.org>  Fri, 29 May 2026 15:18:47 +0200

lwip (2.2.1+dfsg1-1) unstable; urgency=medium

  * New upstream release
  * patches/max_sockets: Updated to apply correctly
  * patches/posixlib: Updated to apply correctly

 -- Joan Lledó <jlledom@member.fsf.org>  Sat, 01 Mar 2025 19:47:48 +0100

lwip (2.2.0+dfsg1-9) unstable; urgency=medium

  * Fix lintian warnings
    * Add metadata to patches
    * Fix warnings about encoding
    * Update to standards version 4.7.0

 -- Joan Lledó <jlledom@member.fsf.org>  Sat, 15 Feb 2025 10:47:06 +0100

lwip (2.2.0+dfsg1-8) unstable; urgency=medium

  * patches/doxygen: Fix build with doxygen 1.12.  Closes: #1080183

 -- Samuel Thibault <sthibault@debian.org>  Sun, 01 Sep 2024 18:27:28 +0200

lwip (2.2.0+dfsg1-7) unstable; urgency=medium

  [ Joan Lledó ]
  * Refactor max_sockets patch
    * Use a dynamic array instead of a linked list

  [ Samuel Thibault ]
  * control: Build-depend on libvdeplug-dev on all Linux ports.

 -- Joan Lledó <jlledom@member.fsf.org>  Sat, 11 May 2024 10:56:03 +0200

lwip (2.2.0+dfsg1-6.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Rename libraries for 64-bit time_t transition.  Closes: #1062676

 -- Graham Inggs <ginggs@debian.org>  Thu, 29 Feb 2024 10:35:21 +0000

lwip (2.2.0+dfsg1-6) unstable; urgency=medium

  * Minor fixes for the posixlib patch
    * Remove support for Debian kFreeBSD
    * Remove LWIP_POLL macro
    * Enable byte order functions from cc.h

 -- Joan Lledó <jlledom@member.fsf.org>  Sat, 20 Jan 2024 10:52:55 +0100

lwip (2.2.0+dfsg1-5) unstable; urgency=medium

  * Fix poll interruptibility logic
  * sem_wait returns SYS_ARCH_INT when timeout == UINT32_MAX.
    When timeout == 0, it ignores interruptions and only returns when
    it acquires the token.
  * lwip_select and lwip_poll check for SYS_ARCH_INTR and fail properly.
  * debian/patches/posixlib: Implement changes above.

 -- Joan Lledó <jlledom@member.fsf.org>  Wed, 03 Jan 2024 11:32:18 +0100

lwip (2.2.0+dfsg1-4) unstable; urgency=medium

  * Simplify patch posixlib
  * debian/patches/posixlib: Remove some useless code

 -- Joan Lledó <jlledom@member.fsf.org>  Tue, 26 Dec 2023 14:37:13 +0100

lwip (2.2.0+dfsg1-3) unstable; urgency=medium

  * Add VDE dependency for Linux
  * debian/control: Add libvdeplug-dev to Build-Depends

 -- Joan Lledó <jlledom@member.fsf.org>  Sat, 09 Dec 2023 15:02:00 +0100

lwip (2.2.0+dfsg1-2) unstable; urgency=medium

  * patches/empty_block_last: Restored, still needed in 2.2.0

 -- Joan Lledó <jlledom@member.fsf.org>  Sat, 18 Nov 2023 12:19:21 +0100

lwip (2.2.0+dfsg1-1) unstable; urgency=medium

  * New upstream release
  * patches/CVE-2020-8597: Removed, already upstream
  * patches/cmake: Removed, most of the code is already upstream
  * patches/port: Removed, most of the code is altready upstream
  * patches/posixlib: New patch containing code from old cmake and port
    patches which is not upstream yet
  * patches/empty_block_last: Removed, I'm not sure it's still required in 2.2.0
    I'll add it if the build fails
  * patches/max_sockets: Updated to apply correctly in the new version
  * patches/nodoc: Removed, it's part of patches/posixlib now.
  * patches/patch9350: Removed, already upstream
  * patches/patch9807: Removed, already upstream

 -- Joan Lledó <jlledom@member.fsf.org>  Sun, 12 Nov 2023 19:15:07 +0100

lwip (2.1.3+dfsg1-4) unstable; urgency=medium

  * Team upload.
  * patches/empty_block_last: Fix out-of-bound access when looking for empty
    blocks (Closes: Bug#1055173)

 -- Samuel Thibault <sthibault@debian.org>  Sun, 05 Nov 2023 19:08:47 +0100

lwip (2.1.3+dfsg1-3) unstable; urgency=medium

  * clean: Clean generated files (Closes: Bug#1047442)
  * patches/nodoc: Support building without doxygen.
  * control: Add nodoc profile that avoids doxygen dependency.

 -- Samuel Thibault <sthibault@debian.org>  Sun, 01 Oct 2023 19:59:52 +0200

lwip (2.1.3+dfsg1-2) unstable; urgency=medium

  [ Samuel Thibault ]
  * control: Bump Standards-Version to 4.6.0 (no change)
  * patches/max_sockets: Restore patch, it was not actually upstreamed.

  [ Joan Lledó ]
  * Refresh patches
  * Update standards version to 4.6.1

 -- Joan Lledó <jlledom@member.fsf.org>  Mon, 11 Jul 2022 10:10:37 +0200

lwip (2.1.3+dfsg1-1) unstable; urgency=medium

  * Team upload.
  * New upstream release.
    - patches/max_sockets: Upstreamed.
  * copyright: Drop superfluous file pattern.

 -- Samuel Thibault <sthibault@debian.org>  Sun, 14 Nov 2021 18:32:01 +0100

lwip (2.1.2+dfsg1-9) unstable; urgency=medium

  * Team upload.
  * rules: Fix reproducibility by adding reproducible=+fixfilepath.
  * control: Set Rules-Requires-Root to no.

 -- Samuel Thibault <sthibault@debian.org>  Tue, 26 Oct 2021 00:36:38 +0200

lwip (2.1.2+dfsg1-8) unstable; urgency=medium

  * No-change source-only upload to allow testing migration.

 -- Joan Lledó <jlledom@member.fsf.org>  Sun, 09 Aug 2020 09:55:09 +0200

lwip (2.1.2+dfsg1-7) unstable; urgency=low

  [ Debian Janitor ]
  * debian/copyright: use spaces rather than tabs to start continuation lines.
  * Set debhelper-compat version in Build-Depends.
  * Use canonical URL in Vcs-Browser.
  * Update standards version to 4.5.0, no changes needed.

 -- Joan Lledó <jlledom@member.fsf.org>  Sat, 08 Aug 2020 11:59:35 +0200

lwip (2.1.2+dfsg1-6) unstable; urgency=medium

  * No-change source-only upload to allow testing migration.

 -- Joan Lledó <jlledom@member.fsf.org>  Sun, 08 Mar 2020 10:56:53 +0100

lwip (2.1.2+dfsg1-5) unstable; urgency=medium

  * Fix CVE-2020-8597

 -- Joan Lledó <jlledom@member.fsf.org>  Sat, 07 Mar 2020 20:41:29 +0100

lwip (2.1.2+dfsg1-4) unstable; urgency=medium

  * No-change source-only upload to allow testing migration.
  * Use the uploaded orig tarball

 -- Joan Lledó <jlledom@member.fsf.org>  Sun, 26 Jan 2020 14:23:06 +0100

lwip (2.1.2+dfsg1-3) unstable; urgency=medium

  * No-change source-only upload to allow testing migration.
  * Include orig tarball

 -- Joan Lledó <jlledom@member.fsf.org>  Sun, 26 Jan 2020 12:36:10 +0100

lwip (2.1.2+dfsg1-2) unstable; urgency=medium

  * No-change source-only upload to allow testing migration.

 -- Joan Lledó <jlledom@member.fsf.org>  Sun, 26 Jan 2020 10:53:32 +0100

lwip (2.1.2+dfsg1-1) unstable; urgency=medium

  * Update Standards version to 4.4.1
  * Clean lintian error: source-is-missing
    * Repack: remove doxygen documentation from orig
    * Generate doxygen output on build
  * Clean lintian warnings about copyright
  * Clean minor lintian messages
  * Add upstream signing key for uscan verification

 -- Joan Lledó <jlledom@member.fsf.org>  Sat, 18 Jan 2020 12:38:25 +0100

lwip (2.1.2-5.1) unstable; urgency=medium

  * Non-maintainer upload.
  * No-change source-only upload to allow testing migration.

 -- Boyuan Yang <byang@debian.org>  Fri, 04 Oct 2019 13:31:52 -0400

lwip (2.1.2-5) unstable; urgency=medium

  [ Samuel Thibault ]
  * Set Joan Lledó as maintainer.
  * watch: Generalize pattern.

 -- Joan Lledó <jlledom@member.fsf.org>  Sat, 28 Sep 2019 07:33:21 +0200

lwip (2.1.2-4) unstable; urgency=medium

  [ Joan Lledó ]
  * Add support for kFreeBSD
    * debian/patches/cmake:
      * Remove the OS restriction to Linux and Hurd
    * debian/patches/port:
      * Detect kFreeBSD
      * Disable htons() and pals for kFreeBSD
      * Declare some socket options when missing:
        *TCP_KEEPIDLE, TCP_KEEPINTVL and TCP_KEEPCNT
      * Make kFreeBSD use standard error codes

 -- Samuel Thibault <sthibault@debian.org>  Wed, 28 Aug 2019 09:25:34 +0200

lwip (2.1.2-3) unstable; urgency=medium

  [ Joan Lledó ]
  * debian/patches/patch9350:
    * Remove _HAVE_SA_LEN macros
      * Some macros related to sa_len field were written to this
        file by mistake
  * debian/patches/port:
    * Fix bug on thrad handling
      * In the Hurd, pthread_cond_timedwait() returns EINTR when
        the thread has been cancelled
    * Move some #includes in cc.h from max_sockets to port:
      * <sys/ioctl.h>
      * <fcntl.h>
      * <net/if.h>
      * <sys/types.h>
    * Fix build error on some architectures
      * sio module: memset struct sigaction to 0
        * Use memset to set all struct sigaction fields to 0
          instead of doing it field by field, since fields depend
          on the architecture
  * debian/patches/max_sockets:
    * Remove #includes in cc.h moved to port patch

 -- Samuel Thibault <sthibault@debian.org>  Sun, 18 Aug 2019 19:25:35 +0200

lwip (2.1.2-2) unstable; urgency=medium

  [ Joan Lledó ]
  * debian/patches/max_sockets:
    * Update required after making changes in debian/patches/port
  * debian/patches/patch9807:
    * New patch: Add new function tcpip_callback_wait() in tcpip.c
      * To call a function inside the tcpip thread and wait
        for it to return
  * debian/patches/port:
    * Fix bug: Don't abort the whole stack on error
    * Fix some locking issues
    * Rename macro HURD_LWIP_LWIPOPTS_H to UNIX_LWIP_LWIPOPTS_H
    * Add Unix port interface files
      * To make compilation of userspace programs in Linux easier
    * Detect 64bit systems
      * Macros in lwipopts.h must have different values in
        64bit systems
  * debian/patches/series:
    * Add new patch debian/patches/patch9807

  [ Samuel Thibault ]
  * Upload to unstable.

 -- Samuel Thibault <sthibault@debian.org>  Sat, 10 Aug 2019 00:45:08 +0200

lwip (2.1.2-1) experimental; urgency=medium

  [ Joan Lledó ]
  * New upstream release.
  * debian/patches/autoconf: Removed, replaced by cmake.
  * debian/patches/bug-36167: Removed, already upstream.
  * debian/patches/errno: Likewise.
  * debian/patches/getpeername_dual: Likewise.
  * debian/patches/poll: Likewise.
  * debian/patches/posix: Removed, merged into port patch.
  * debian/patches/cmake: New patch, implements cmake build system.
  * debian/patches/max_sockets: Adapted to 2.1.2.
  * debian/patches/patch9350: Cherry-picked from upstream.
  	* It allows using external socket headers.
  * debian/patches/port: Adapted to 2.1.2.
  	* It now includes external socket headers.
  * debian/patches/series: List of patches updated.
  * debian/patches/rules: Adapted to use cmake.

  [ Samuel Thibault ]
  * control: Add cmake build-dep.

 -- Samuel Thibault <sthibault@debian.org>  Sun, 31 Mar 2019 20:36:34 +0200

lwip (2.0.3-3) unstable; urgency=medium

  [ Samuel Thibault ]
  * Mark liblwip-doc Multi-Arch: foreign.
  * copyright: Make some licence names more precise.

  [ Joan Lledó ]
  * Update patches: Fixing interruptibility and thread safety. Convert to DOS
    format to mach lwip sources.
  * getpeername_dual: Cherry-pick upstream fix for dual-stack sockets.

 -- Samuel Thibault <sthibault@debian.org>  Sun, 04 Nov 2018 00:25:58 +0100

lwip (2.0.3-2) unstable; urgency=medium

  * Fix shipping lwip/priv/{tcp,tcpip}_priv.h.

 -- Samuel Thibault <sthibault@debian.org>  Mon, 11 Jun 2018 00:47:22 +0200

lwip (2.0.3-1) unstable; urgency=medium

  * Initial release (Closes: Bug#884641)

 -- Samuel Thibault <sthibault@debian.org>  Tue, 01 May 2018 01:52:18 +0200
