pesign (116-8.1build1) resolute; urgency=medium

  * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)

 -- Sebastien Bacher <seb128@debian.org>  Wed, 11 Feb 2026 23:36:12 +0100

pesign (116-8.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Add upstream patch to fix calloc parameter order, that was causing an
    FTBFS with GCC-14. Closes: #1075379.

 -- Margarita Manterola <marga@debian.org>  Sun, 06 Apr 2025 15:28:31 +0200

pesign (116-8) unstable; urgency=medium

  * Stop installing things outside of /usr. Closes: #1073639.
  * Tweak the arm warnings patch to not fail on arm64 chroots too.
    Closes: #1073845

 -- Steve McIntyre <93sam@debian.org>  Sun, 14 Jul 2024 18:47:52 +0100

pesign (116-7) unstable; urgency=medium

  * Fix t64 breakage on 32-bit architectures. Closes: #1068147

 -- Steve McIntyre <93sam@debian.org>  Thu, 18 Apr 2024 21:24:46 +0100

pesign (116-6) unstable; urgency=medium

  * Move passwd from Build-Depends to Depends, Closes: #1054449
    Doh!

 -- Steve McIntyre <93sam@debian.org>  Sun, 12 Nov 2023 21:32:02 +0000

pesign (116-5) unstable; urgency=medium

  * Add the new pesign-authorize script, replacement for the
    already-removed pesign-authorize-users and
    pesign-authorize-groups. Closes: #1055325
  * Tweak patch filename for clarity

 -- Steve McIntyre <93sam@debian.org>  Sat, 04 Nov 2023 16:20:04 +0000

pesign (116-4) unstable; urgency=medium

  * Switch build to be arch:any. Closes: #1055258

 -- Steve McIntyre <93sam@debian.org>  Fri, 03 Nov 2023 13:05:21 +0000

pesign (116-3) unstable; urgency=medium

  * Disable linker warnings about wchar_t on 32-bit arm.
  * Also build for riscv64 and loong64

 -- Steve McIntyre <93sam@debian.org>  Thu, 02 Nov 2023 15:05:21 +0000

pesign (116-2) unstable; urgency=medium

  * Add build-dep on mandoc.

 -- Steve McIntyre <93sam@debian.org>  Thu, 02 Nov 2023 12:01:18 +0000

pesign (116-1) unstable; urgency=medium

  * New upstream version 116
    * Remove old patches, all upstream now
    * Add new patches:
      * Remove bashisms in Makefiles
      * Update a patch to make build reproducible. Closes: #1003787
    * Various programs are now gone, fix up packaging to match:
      * efisiglist; replaced by efisecdb in the efivar package
      * pesign-authorize-users / pesign-authorize-groups
        (Fixes CVE-2022-3560, Closes: #1030168)
    * No longer uses /var/run. Closes: 964157
  * Add build-dep on new libefisec-dev
  * Move user/group setup from preinst to postinst, and add a
    dependency on passwd. Closes: #1054449
  * Now seems to work OK using LTO in the build. Closes: #1015578.

 -- Steve McIntyre <93sam@debian.org>  Wed, 01 Nov 2023 22:25:43 +0000

pesign (0.112-6) unstable; urgency=medium

  * Fix FTBFS with new versions of NSS, using patch from
    upstream. Thanks to Dan Nicholson. Closes: #948645
  * Update Standards-Version to 4.5.1
  * Update debhelper compat to 10

 -- Steve McIntyre <93sam@debian.org>  Fri, 01 Jan 2021 22:34:53 +0000

pesign (0.112-5) unstable; urgency=high

  * Move git repo from alioth to salsa.d.o
  * efisiglist: Copy the header correctly (Closes: #928491)
  * Update obsolete Build-Depends (remove dh-systemd, update debhelper)

 -- Steve McIntyre <93sam@debian.org>  Sun, 05 May 2019 21:22:21 +0100

pesign (0.112-4) unstable; urgency=medium

  * Team upload.
  * Fix race between printing prompt and disabling tty echo.

 -- Julien Cristau <jcristau@debian.org>  Sat, 13 May 2017 17:36:43 +0200

pesign (0.112-3) unstable; urgency=medium

  * Team upload.
  * Pass libexecdir correctly to sub-makes so the service file has the right
    path.

 -- Julien Cristau <jcristau@debian.org>  Mon, 27 Jun 2016 13:59:55 +0200

pesign (0.112-2) unstable; urgency=medium

  [ Julien Cristau ]
  * Fix pesign service file installation. Closes: #828192
  * Fix command line parsing. Closes: #828682

 -- Steve McIntyre <93sam@debian.org>  Mon, 27 Jun 2016 10:31:50 +0200

pesign (0.112-1) unstable; urgency=low

  [ Daniel Jared Dominguez ]
  * update VCS info
  * use debian-efi list as maintainer

  [ Peter Jones ]
  * Make "make install_systemd" and "make install_sysvinit" not error.
  * Install authvar and efisiglist
  * Make --clear without --export actually work.
  * Make x509 certs in siglists work.
  * Ignore some things that wind up in a working tree pretty often.
  * make efi_guid_t's const.

  [ Pat Riehecky ]
  * A more plugable way of setting ACLs for pesign

  [ Peter Jones ]
  * Propogate some "const" declarations better.
  * Make efivar compiler parameters come from pkg-config.
  * Add "install" targets for 3c2374b and make the filenames a little nicer.

  [ Daniel Jared Dominguez ]
  * add manpages for authvar/efisiglist and escape dashes in existing manpages

  [ Peter Jones ]
  * Make pesign-authorize-{users,groups} not be in sbin.

  [ Gary Ching-Pang Lin ]
  * Correct the signature size check

  [ Peter Jones ]
  * Revamp the makefile system entirely.
  * Don't let make autogenerate a rule for "%".
  * Fix some -Wsign-compare warnings
  * Bump version to 0.111
  * Fix one more -Wsign-compare problem I missed.
  * pesign: when nss fails to tell us -EPERM or -ENOENT, figure it out.
  * setfacl the nss DBs to our authorized users, not just the socket.
  * Don't setfacl when the socket or dir aren't there.
  * setfacl the db as well
  * Get rid of KeyIdTemplate; it is unused.

  [ Mirco Tischler ]
  * fix double $prefix when installing to $docdir

  [ Peter Jones ]
  * libdpe: Fix a plausible but unrealistic "may be used uninitialized"
  * Fix our makefile rule so the target binaries are getting linked -g
  * efikeygen: fix missing libefivar dep for efi_guid_zero
  * pesigcheck pesign: use LDLIBS+= to link in libdpe.a
  * efikeygen: don't hide --dbdir option
  * authvar: add --list-supported-sigs
  * Minor whitespace fix.
  * Make -Werror=unused-parameter work.
  * Make -Werror=type-limits work.
  * Make -Werror=missing-field-initializers work.
  * make pesigcheck be able to get cert dbs from a file
  * makefile crap
  * try even harder to restrict the time checking in pesigcheck
  * pesigcheck: check dbfile and dbxfile from popt
  * efisiglist: add --infile
  * libdpe: get rid of all the stupid locking
  * Make things that don't touch PE not need libdpe.
  * Improve our setfacl scripts for database and socket ownership.
  * Do a better job of isolating pesign-rh-test-crap
  * Bump version to 0.112

  [ Daniel Jared Dominguez ]
  * new upstream release (Closes: #819766)
  * remove old quilt patches

 -- Daniel Jared Dominguez <Jared_Dominguez@Dell.com>  Wed, 20 Apr 2016 13:27:37 -0500

pesign (0.110-3) UNRELEASED; urgency=low

  * update VCS info
  * use debian-efi list as maintainer

 -- Daniel Jared Dominguez <Jared_Dominguez@Dell.com>  Wed, 29 Jul 2015 20:12:43 -0500

pesign (0.110-2) unstable; urgency=medium

  * uncomment VCS information in debian/control
  * change package priority because of dependency on opensc

 -- Daniel Jared Dominguez <Jared_Dominguez@Dell.com>  Tue, 23 Jun 2015 17:51:13 -0500

pesign (0.110-1) unstable; urgency=low

  * Initial release (Closes: #786462)

 -- Daniel Jared Dominguez <Jared_Dominguez@Dell.com>  Thu, 21 May 2015 13:44:16 -0500
