Author: Guilhem Moulin
Revision Date: 2015-10-03 20:47:33 UTC

* New co-maintainer.

[ Matt Johnston ]
* New upstream release. (Closes: #631858, #775222.)

[ Guilhem Moulin ]
* debian/source/format: 3.0 (quilt)
* debian/compat: 9
* debian/control:
  + Bump Standards-Version to 3.9.6 (no changes necessary).
  + Add Homepage, Vcs-Git, and Vcs-Browser fields.
* debian/copyright: add machine-readable file.
* Split up package in dropbear-bin (binaries), dropbear-run (init scripts)
  and dropbear-initramfs (initramfs integration). 'dropbear' is now a
  transitional dummy package depending on on dropbear-run and
  dropbear-initramfs. (Closes: #692932.)
* Refactor the package using dh_* tools, including dh_autoreconf. (Closes:
  #689618, #777324, #793006, #793917.)
* Add 'Multi-Arch: foreign' tags.
* dropbear-run:
  + Add a status option to the /etc/init.d script.
  + Pass key files with -r not -d in /etc/init.d script. (Closes: #761143.)
  + Post-installation script: Generate missing ECDSA in addition to RSA and
    DSS host keys. (Closes: #776976.)
* dropbear-initramfs:
  + No longer mark /usr/share/initramfs-tools/conf-hooks.d/dropbear as a
    configuration file, since it violates the Debian Policy Manual section
    10.7.2. (Regression from 2014.64-1.) Instead, move the file to
    /etc/initramfs-tools/conf-hooks.d/dropbear and add a symlink in
    /usr/share/initramfs-tools/conf-hooks.d.
  + Delete debian/initramfs/premount-devpts, since /dev/pts in mounted by
    init since initramfs-tools 0.94. (Closes: #632656, #797939.)
  + Auto-generate host keys in the postinstall script, not when runing
    update-initramfs. Pass the '-R' option (via $PKGOPTION_dropbear_OPTION)
    for the old behavior. Also, print fingerprint and ASCII art for
    generated keys (if ssh-keygen is available).
  + Revert ad2fb1c and remove warning about changing host key. Users
    shouldn't be encouraged to use the same keys in the encrypted partition
    and in the initramfs. The proper fix is to use an alternative port or
    UserKnownHostFile.
  + Set ~root to `mktemp -d "$DESTDIR/root-XXXXXX"` to avoid collisions with
    $rootmnt. (Closes: #558115.)
  + Exit gracefully if $IP is 'none' or 'off'. (Closes: #692932.)
  + Start dropbear with flag -s to explicitly disable password logins.
  + Terminate all children before killing dropbear, to avoid stalled SSH
    connections. (Closes: #735203.)
  + Run configure_networking in the foreground. (Closes: #584780, #626181,
    #739519.)
  + Bring down interfaces and flush IP routes and addresses before exiting
    the ramdisk, to avoid dirty network configuration in the regular kernel.
    (Closes: #715048, #720987, #720988.) The interfaces considered are
    those matching the $DROPBEAR_IFDOWN shell pattern (default: '*'); the
    special value 'none' keeps all interfaces up and preserves routing
    tables and addresses.

Author: Guilhem Moulin
Revision Date: 2015-10-03 20:47:33 UTC

* New co-maintainer.

[ Matt Johnston ]
* New upstream release. (Closes: #631858, #775222.)

[ Guilhem Moulin ]
* debian/source/format: 3.0 (quilt)
* debian/compat: 9
* debian/control:
  + Bump Standards-Version to 3.9.6 (no changes necessary).
  + Add Homepage, Vcs-Git, and Vcs-Browser fields.
* debian/copyright: add machine-readable file.
* Split up package in dropbear-bin (binaries), dropbear-run (init scripts)
  and dropbear-initramfs (initramfs integration). 'dropbear' is now a
  transitional dummy package depending on on dropbear-run and
  dropbear-initramfs. (Closes: #692932.)
* Refactor the package using dh_* tools, including dh_autoreconf. (Closes:
  #689618, #777324, #793006, #793917.)
* Add 'Multi-Arch: foreign' tags.
* dropbear-run:
  + Add a status option to the /etc/init.d script.
  + Pass key files with -r not -d in /etc/init.d script. (Closes: #761143.)
  + Post-installation script: Generate missing ECDSA in addition to RSA and
    DSS host keys. (Closes: #776976.)
* dropbear-initramfs:
  + No longer mark /usr/share/initramfs-tools/conf-hooks.d/dropbear as a
    configuration file, since it violates the Debian Policy Manual section
    10.7.2. (Regression from 2014.64-1.) Instead, move the file to
    /etc/initramfs-tools/conf-hooks.d/dropbear and add a symlink in
    /usr/share/initramfs-tools/conf-hooks.d.
  + Delete debian/initramfs/premount-devpts, since /dev/pts in mounted by
    init since initramfs-tools 0.94. (Closes: #632656, #797939.)
  + Auto-generate host keys in the postinstall script, not when runing
    update-initramfs. Pass the '-R' option (via $PKGOPTION_dropbear_OPTION)
    for the old behavior. Also, print fingerprint and ASCII art for
    generated keys (if ssh-keygen is available).
  + Revert ad2fb1c and remove warning about changing host key. Users
    shouldn't be encouraged to use the same keys in the encrypted partition
    and in the initramfs. The proper fix is to use an alternative port or
    UserKnownHostFile.
  + Set ~root to `mktemp -d "$DESTDIR/root-XXXXXX"` to avoid collisions with
    $rootmnt. (Closes: #558115.)
  + Exit gracefully if $IP is 'none' or 'off'. (Closes: #692932.)
  + Start dropbear with flag -s to explicitly disable password logins.
  + Terminate all children before killing dropbear, to avoid stalled SSH
    connections. (Closes: #735203.)
  + Run configure_networking in the foreground. (Closes: #584780, #626181,
    #739519.)
  + Bring down interfaces and flush IP routes and addresses before exiting
    the ramdisk, to avoid dirty network configuration in the regular kernel.
    (Closes: #715048, #720987, #720988.) The interfaces considered are
    those matching the $DROPBEAR_IFDOWN shell pattern (default: '*'); the
    special value 'none' keeps all interfaces up and preserves routing
    tables and addresses.

Author: Gerrit Pape
Revision Date: 2014-08-11 20:50:11 UTC

[ Matt Johnston ]
* New upstream release (closes: #757780).

[ Gerrit Pape ]
* debian/diff/0003-options.h-use-usr-bin-xauth-instead-of...diff:
  remove; applied upstream.
* debian/control: Standards-Version: 3.9.5.0.

Author: Jeremy Bobbio
Revision Date: 2012-11-08 10:45:01 UTC

* Non-maintainer upload.
* Fix initramfs hook when multiple variant of libc are installed.
  All credits due to Helmut Grohne for the report and the solution.
  (Closes: #682964)

Author: Gerrit Pape
Revision Date: 2012-02-28 09:44:53 UTC

debian/diff/0003-Fix-use-after-free-bug-CVE-2012-0920.diff: new:
Fix use-after-free bug (CVE-2012-0920) (closes: #661150).

Author: Gerrit Pape
Revision Date: 2008-03-27 20:08:06 UTC

[ Matt Johnston ]
* New upstream release.
  - Wait until a process exits before the server closes a connection,
    so that an exit code can be sent. This fixes problems with exit
    codes not being returned, which could cause scp to fail (closes:
    #448397, #472483).

[ Gerrit Pape ]
* debian/dropbear.postinst: don't print an error message if the
  update-service program is not installed (thx Matt).