ecryptfs-utils (83-4+squeeze1) stable-security; urgency=low

  * Non-maintainer upload by the security team.
  * Various security fixes:
    - debian/patches/CVE-2011-1831,1832,1834.patch: chdir into mountpoint
      before checking permissions in src/utils/mount.ecryptfs_private.c.
      (CVE-2011-1831, CVE-2011-1832)
    - debian/patches/CVE-2011-1831,1832,1834.patch: modify mtab via a temp
      file first and make sure it succeeds before replacing the real mtab
      in src/utils/mount.ecryptfs_private.c. (CVE-2011-1834)
    - debian/patches/CVE-2011-1835.patch: make sure we don't copy into a
      user controlled directory in src/utils/ecryptfs-setup-private.
      (CVE-2011-1835)
    - debian/patches/CVE-2011-1837.patch: verify permissions with a file
      descriptor, and don't follow symlinks in
      src/utils/mount.ecryptfs_private.c. (CVE-2011-1837)
    - debian/patches/CVE-2011-3145.patch: also set gid and umask before
      updating mtab in src/utils/mount.ecryptfs_private.c. (CVE-2011-3145)

 -- Jonathan Wiltshire <jmw@debian.org>  Wed, 04 Jan 2012 22:01:03 +0000

ecryptfs-utils (83-4) unstable; urgency=medium

  * Adding patch to update setup parameter of ecryptfs-setup-private
    (Closes: #584544).

 -- Daniel Baumann <daniel@debian.org>  Wed, 13 Oct 2010 16:18:45 +0200

ecryptfs-utils (83-3) experimental; urgency=low

  * Adding patch from Michael Howe <michael@michaelhowe.org> to use
    getent in ecryptfs-migrate-home instead of manually grepping passwd
    to allow e.g. LDAP auth (Closes: #597229).

 -- Daniel Baumann <daniel@debian.org>  Fri, 17 Sep 2010 23:59:28 +0200

ecryptfs-utils (83-2) unstable; urgency=low

  * Updating standards version to 3.9.0.
  * Calling pam-auth-update at package installation and removal time,
    thanks to Mike Miller <mtmiller@ieee.org> (Closes: #506172).
  * Updating standards version to 3.9.1.

 -- Daniel Baumann <daniel@debian.org>  Wed, 01 Sep 2010 10:06:01 +0200

ecryptfs-utils (83-1) unstable; urgency=low

  * Updating year in copyright file.
  * Updating to standards 3.8.4.
  * Merging upstream version 83.
  * Updating year in copyright file.
  * Simplyfing libecryptfs-dev debhelper install file.
  * Adding build-depends to intltool.
  * Adding new locales to ecryptfs-utils debhelper install file.

 -- Daniel Baumann <daniel@debian.org>  Sat, 20 Mar 2010 07:17:19 +0100

ecryptfs-utils (82-3) unstable; urgency=low

  * Adding explicit debian source version 1.0 until switch to 3.0.
  * Adding debug package.

 -- Daniel Baumann <daniel@debian.org>  Sun, 27 Dec 2009 12:29:02 +0100

ecryptfs-utils (82-2) unstable; urgency=low

  * Correcting rules, the desktop files need to be executable.
  * Updating README.source.
  * Dropping la files.

 -- Daniel Baumann <daniel@debian.org>  Sat, 28 Nov 2009 17:58:06 +0100

ecryptfs-utils (82-1) unstable; urgency=low

  * Merging upstream version 82.
  * Removing gettext.patch, part of new upstream release.
  * Removing ownership.patch, part of new upstream release.

 -- Daniel Baumann <daniel@debian.org>  Sat, 14 Nov 2009 18:13:21 +0100

ecryptfs-utils (81-3) unstable; urgency=low

  * Correcting wrong vcs-browser field.
  * Adding patch from upstream to ecryptfs-setup-private to fix typo
    with gettext.
  * Adding gettext-base to depends.
  * Adding README.source.
  * Adding maintainer fields in copyright.
  * Correcting filename of lintian overrides.
  * Correcting permissions on some shared files.

 -- Daniel Baumann <daniel@debian.org>  Thu, 05 Nov 2009 21:58:53 +0100

ecryptfs-utils (81-2) unstable; urgency=low

  * Adding patch from upstream to ecryptfs-setup-private, in order to
    not incorrectly assume that the home/private directory ownerships
    should be owned by USER:USER but USER:GROUP.
  * Minimizing rules file.
  * Sorting and wrapping depends.

 -- Daniel Baumann <daniel@debian.org>  Sat, 17 Oct 2009 09:21:46 +0200

ecryptfs-utils (81-1) unstable; urgency=low

  * Merging upstream version 81.

 -- Daniel Baumann <daniel@debian.org>  Wed, 14 Oct 2009 08:20:38 +0200

ecryptfs-utils (80-1) unstable; urgency=low

  * Merging upstream version 80.

 -- Daniel Baumann <daniel@debian.org>  Mon, 12 Oct 2009 13:12:06 +0200

ecryptfs-utils (79-1) unstable; urgency=low

  * Removing shlibs file.
  * Merging upstream version 79.

 -- Daniel Baumann <daniel@debian.org>  Sat, 10 Oct 2009 14:07:08 +0200

ecryptfs-utils (78-1) unstable; urgency=low

  * Merging upstream version 78.

 -- Daniel Baumann <daniel@debian.org>  Sun, 04 Oct 2009 12:48:17 +0200

ecryptfs-utils (77-1) unstable; urgency=low

  * Updating to standards version 3.8.3.
  * Merging upstream version 77.
  * Updating maintainer field.
  * Updating vcs fields.
  * Adding libnss3-dev to build-depends.

 -- Daniel Baumann <daniel@debian.org>  Sun, 04 Oct 2009 11:24:48 +0200

ecryptfs-utils (76+debian-1) unstable; urgency=low

  * Merging upstream version 76+debian.
  * Removing mount-password.patch, included in upstream.
  * Adding explicit lfs support to CFLAGS in rules, thanks to
    Nobuhiro Iwamatsu <iwamatsu@nigauri.org> (Closes: #546678).

 -- Daniel Baumann <daniel@debian.org>  Thu, 17 Sep 2009 16:33:29 +0200

ecryptfs-utils (75-2) unstable; urgency=low

  * Using correct rfc-2822 date formats in changelog.
  * Adding patch from upstream to not echo mount passphrase if running
    in bootstrap mode (Closes: #532372).
  * Updating package to standards version 3.8.2.

 -- Daniel Baumann <daniel@debian.org>  Thu, 16 Jul 2009 14:38:55 +0200

ecryptfs-utils (75-1) unstable; urgency=low

  * Dropping own desktop file, it's included upstream again.
  * Updating year in copyright file.
  * Releasing debian version 74-1.
  * Merging upstream version 75.
  * Adding support for pam-auth (Closes: #506172).
  * Dropping desktop file releated workaround in rules, got fixed upstream.
  * Adding manual depends to libnss.
  * Updating author and copyright holder information in copyright file.

 -- Daniel Baumann <daniel@debian.org>  Sun, 03 May 2009 12:16:00 +0200

ecryptfs-utils (74-1) unstable; urgency=low

  * Merging upstream version 74.
  * Updating rules file to current state of the art.
  * Dropping own desktop file, it's included upstream again.
  * Updating year in copyright file.

 -- Daniel Baumann <daniel@debian.org>  Sat, 25 Apr 2009 09:49:00 +0200

ecryptfs-utils (73-1) unstable; urgency=low

  * Updating standards to 3.8.1.
  * Merging upstream version 73.

 -- Daniel Baumann <daniel@debian.org>  Sat, 21 Mar 2009 08:55:00 +0100

ecryptfs-utils (72-1) unstable; urgency=low

  * Merging upstream version 72.

 -- Daniel Baumann <daniel@debian.org>  Thu, 19 Mar 2009 06:12:00 +0100

ecryptfs-utils (71-1) unstable; urgency=low

  * Merging upstream version 71.
  * Adding cryptsetup to suggests.

 -- Daniel Baumann <daniel@debian.org>  Fri, 20 Feb 2009 07:37:00 +0100

ecryptfs-utils (70-1) unstable; urgency=low

  * Merging upstream version 70.

 -- Daniel Baumann <daniel@debian.org>  Sun, 15 Feb 2009 19:14:00 +0100

ecryptfs-utils (69-1) unstable; urgency=low

  * Merging upstream version 69.
  * Moving keyutils from recommends to depends.

 -- Daniel Baumann <daniel@debian.org>  Sat, 31 Jan 2009 01:11:00 +0100

ecryptfs-utils (68-1) unstable; urgency=high

  * Merging upstream version 68:
    - Contains upstream changelog (Closes: #507942).
    - Fixes syntax error in ecryptfs-setup-private (Closes: #509339).
  * Updating rules to install changelog.

 -- Daniel Baumann <daniel@debian.org>  Tue, 23 Dec 2008 08:04:00 +0100

ecryptfs-utils (67-1) unstable; urgency=low

  * Merging upstream version 67.

 -- Daniel Baumann <daniel@debian.org>  Wed, 03 Dec 2008 09:54:00 +0100

ecryptfs-utils (66-2) unstable; urgency=low

  * Removing auth-client-config support, no longer used.
  * Adding ecryptfs-utils recommends to keyutils.
  * Building without ssl, ecryptfs_key_mod_openssl.c has incompatible
    license (GPL-2+).
  * Building without pkcs11 helper, ecryptfs_key_mod_pkcs11_helper.c
    links against openssl and has incompatible license (GPL-2+).
  * Building without pkcs11 helper, ecryptfs_key_mod_tspi.c links
    against openssl and has incompatible license (GPL-2+).

 -- Daniel Baumann <daniel@debian.org>  Tue, 18 Nov 2008 20:02:00 +0100

ecryptfs-utils (66-1) unstable; urgency=low

  * Manually adding second line of the commit message when merging
    upstream version 65 to changelog.
  * Merging upstream version 66.
  * Adding ecryptfs-utils.postinst to create /var/lib/ecryptfs on
    package installation time.

 -- Daniel Baumann <daniel@debian.org>  Tue, 18 Nov 2008 12:39:00 +0100

ecryptfs-utils (65-1) unstable; urgency=low

  * Merging upstream version 65:
    - Adds --wrapping option to ecryptfs-setup-private command to use an
      independent wrapping passphrase, different from the login passphrase
      (Closes: #505008).
  * Removing pam-doc.dpatch, went upstream.
  * Adding build-depends to swig.
  * Adding build-depends to python-dev.
  * Including python bindings in libecryptfs0.

 -- Daniel Baumann <daniel@debian.org>  Sat, 15 Nov 2008 07:49:00 +0100

ecryptfs-utils (64-3) unstable; urgency=low

  * Replacing obsolete dh_clean -k with dh_prep.
  * Adding patch from Osamu Aoki <osamu@debian.org> to update
    ecryptfs-pam-doc.txt contents with s/Confidential/Private/
    (Closes: #504934).
  * Updating homepage and download location in control and copyright
    (Closes: #504930).
  * Updating author information in copyright.
  * Installing desktop shortcut and readme to /usr/share/ecryptfs-utils.
    Together with the fixes of upstream version 64, this interactively prompts
    for passwords now (Closes: #504370).

 -- Daniel Baumann <daniel@debian.org>  Sat, 08 Nov 2008 07:01:00 +0100

ecryptfs-utils (64-2) unstable; urgency=low

  * Adding build-depends to python (Closes: #504719).

 -- Daniel Baumann <daniel@debian.org>  Thu, 06 Nov 2008 17:45:00 +0100

ecryptfs-utils (64-1) unstable; urgency=low

  * Removing sbin-path.dpatch, not needed anymore.
  * Building with --enable-static, was default previously.

 -- Daniel Baumann <daniel@debian.org>  Wed, 05 Nov 2008 20:45:00 +0100

ecryptfs-utils (63-1) unstable; urgency=low

  * Merging upstream version 63.

 -- Daniel Baumann <daniel@debian.org>  Fri, 24 Oct 2008 06:42:00 +0200

ecryptfs-utils (61-1) unstable; urgency=low

  * Using patch-stamp rather than patch in rules file.
  * Merging upstream version 61.
  * Rediffing sbin-path.dpatch.

 -- Daniel Baumann <daniel@debian.org>  Thu, 23 Oct 2008 19:42:00 +0200

ecryptfs-utils (58-2) unstable; urgency=low

  * Adding patch from situert <situert@yahoo.com> to call ecryptfs
    helper scripts in /sbin with full path to avoid problem if /sbin is
    not in PATH (Closes: #498543).

 -- Daniel Baumann <daniel@debian.org>  Thu, 11 Sep 2008 08:11:00 +0200

ecryptfs-utils (58-1) unstable; urgency=low

  * Merging upstream version 58.

 -- Daniel Baumann <daniel@debian.org>  Tue, 09 Sep 2008 07:08:00 +0200

ecryptfs-utils (57-1) unstable; urgency=low

  * Updating vcs fields in control file.
  * Merging upstream version 57.

 -- Daniel Baumann <daniel@debian.org>  Mon, 08 Sep 2008 13:44:00 +0200

ecryptfs-utils (56-1) unstable; urgency=low

  * Setting permissions for ecryptfs.acc when installing it in rules.
  * Merging upstream version 56.

 -- Daniel Baumann <daniel@debian.org>  Mon, 25 Aug 2008 01:25:00 +0200

ecryptfs-utils (55-1) unstable; urgency=low

  * Merging upstream version 55.

 -- Daniel Baumann <daniel@debian.org>  Mon, 25 Aug 2008 01:19:00 +0200

ecryptfs-utils (53-2) unstable; urgency=low

  * Adding auth-client-config support, thanks to Dustin Kirkland
    <kirkland@ubuntu.com>.

 -- Daniel Baumann <daniel@debian.org>  Tue, 05 Aug 2008 23:59:00 +0200

ecryptfs-utils (53-1) unstable; urgency=low

  * Updating to install newly added manpages.
  * Removing 01-manpage.dpatch, not required anymore.
  * Merging upstream version 53.

 -- Daniel Baumann <daniel@debian.org>  Sun, 03 Aug 2008 00:11:00 +0200

ecryptfs-utils (52-1) unstable; urgency=low

  * Merging upstream version 52.

 -- Daniel Baumann <daniel@debian.org>  Fri, 01 Aug 2008 03:50:00 +0200

ecryptfs-utils (51-1) unstable; urgency=low

  * Merging upstream version 51.

 -- Daniel Baumann <daniel@debian.org>  Fri, 01 Aug 2008 01:22:00 +0200

ecryptfs-utils (50-4) unstable; urgency=medium

  * Adding /usr/lib/libecryptfs.so.0.0 symlink.
  * Moving /lib/security/pam_ecryptfs.so and /usr/lib/ecryptfs/*.so from
    libecryptfs0 to ecryptfs-utils.

 -- Daniel Baumann <daniel@debian.org>  Wed, 16 Jul 2008 20:34:00 +0200

ecryptfs-utils (50-3) unstable; urgency=low

  * Adding missing build-depends to pkg-config (Closes: #490415).

 -- Daniel Baumann <daniel@debian.org>  Sat, 12 Jul 2008 11:12:00 +0200

ecryptfs-utils (50-2) unstable; urgency=low

  * Removing currently unused libgtk2.0-dev from build-depends (Closes:#490233).
  * Building ecryptfs-utils with TPM support on all supported Debian
    architectures, except s390.
  * Installing /sbin/mount.ecryptfs_private with suid root.

 -- Daniel Baumann <daniel@debian.org>  Thu, 10 Jul 2008 23:48:00 +0200

ecryptfs-utils (50-1) unstable; urgency=low

  * Merging upstream version 50.

 -- Daniel Baumann <daniel@debian.org>  Sun, 29 Jun 2008 22:19:00 +0200

ecryptfs-utils (49-1) unstable; urgency=low

  * Merging upstream version 49.

 -- Daniel Baumann <daniel@debian.org>  Sun, 29 Jun 2008 22:09:00 +0200

ecryptfs-utils (48-1) unstable; urgency=medium

  * Updating debhelper shlibs file.
  * Updating rules fileto reflect upstreams removal of documentation.
  * Merging upstream version 48.

 -- Daniel Baumann <daniel@debian.org>  Mon, 16 Jun 2008 21:35:00 +0200

ecryptfs-utils (47-1) unstable; urgency=low

  * Merging upstream version 47.

 -- Daniel Baumann <daniel@debian.org>  Mon, 16 Jun 2008 20:39:00 +0200

ecryptfs-utils (46-1) unstable; urgency=low

  * Removing superfluous empty line from rules file.
  * Removing trailing slash in install debhelper file.
  * Merging upstream version 46.
  * Updating to standards 3.8.0.

 -- Daniel Baumann <daniel@debian.org>  Tue, 10 Jun 2008 08:06:00 +0200

ecryptfs-utils (45-1) unstable; urgency=low

  * Merging upstream version 45.

 -- Daniel Baumann <daniel@debian.org>  Fri, 16 May 2008 08:22:00 +0200

ecryptfs-utils (44-1) unstable; urgency=low

  * Reordering rules file.
  * Updating debhelper shlibs file.
  * Rewriting copyright file in machine-interpretable format.
  * Adding vcs fields in control file.
  * Upgrading package to debhelper 7.
  * Merging upstream version 44.

 -- Daniel Baumann <daniel@debian.org>  Sat, 03 May 2008 12:17:00 +0200

ecryptfs-utils (43-1) unstable; urgency=low

  * New upstream release.
  * Removing watch file.

 -- Daniel Baumann <daniel@debian.org>  Wed, 09 Apr 2008 09:54:00 +0200

ecryptfs-utils (41-1) unstable; urgency=low

  * New upstream release.

 -- Daniel Baumann <daniel@debian.org>  Tue, 01 Apr 2008 11:25:00 +0200

ecryptfs-utils (40-1) unstable; urgency=low

  * New upstream release.

 -- Daniel Baumann <daniel@debian.org>  Sun, 24 Feb 2008 22:09:00 +0100

ecryptfs-utils (38-2) unstable; urgency=low

  * Temporarily only use tpm toolchain on i386 (Closes: #461233).
  * Current upstream should build without patches on amd64 (Closes: #445619).
  * Added --fail-missing to dh_install call in rules.
  * Updated .install files to cover additional files.

 -- Daniel Baumann <daniel@debian.org>  Thu, 17 Jan 2008 23:47:00 +0100

ecryptfs-utils (38-1) unstable; urgency=low

  * New upstream release.

 -- Daniel Baumann <daniel@debian.org>  Sat, 12 Jan 2008 17:14:00 +0100

ecryptfs-utils (37-1) unstable; urgency=low

  * New upstream release (Closes: #457316).
  * Compling with trousers support now.
  * Bumping to new policy.

 -- Daniel Baumann <daniel@debian.org>  Fri, 21 Dec 2007 14:54:00 +0100

ecryptfs-utils (30-1) unstable; urgency=low

  * New upstream release.

 -- Daniel Baumann <daniel@debian.org>  Fri, 16 Nov 2007 12:10:00 +0100

ecryptfs-utils (27-1) unstable; urgency=low

  * New upstream release.

 -- Daniel Baumann <daniel@debian.org>  Fri, 19 Oct 2007 21:50:00 +0200

ecryptfs-utils (26-1) unstable; urgency=low

  * New upstream release.
  * Dropped 02-ia64.dpatch; not required anymore.
  * Building with --disable-tspi for the time beeing until trousers is
    uploaded.
  * Downgrading recommends to opencryptoki to a suggests for the time beeing
    until opencryptoki is uploaded.

 -- Daniel Baumann <daniel@debian.org>  Sun, 14 Oct 2007 11:17:00 +0200

ecryptfs-utils (24-2) unstable; urgency=low

  * Enforcing libdir (Closes: #445619).

 -- Daniel Baumann <daniel@debian.org>  Wed, 10 Oct 2007 23:41:00 +0200

ecryptfs-utils (24-1) unstable; urgency=low

  * New upstream release.

 -- Daniel Baumann <daniel@debian.org>  Tue, 09 Oct 2007 12:03:00 +0200

ecryptfs-utils (23-1) unstable; urgency=low

  * New upstream release.
  * Added libgpgme11-dev to build-depends.
  * Rediffed 02-ia64.dpatch.

 -- Daniel Baumann <daniel@debian.org>  Mon, 27 Aug 2007 16:32:00 +0200

ecryptfs-utils (21-1) unstable; urgency=low

  * Initial release (Closes: #401800).
  * Added patch from William Lima <wlima.amadeus@gmail.com> to fix FTBFS on
    ia64.

 -- Daniel Baumann <daniel@debian.org>  Sun, 12 Aug 2007 15:20:00 +0200