openjk (0~20170718+dfsg1-2) experimental; urgency=medium

  * Add patch adapted from ioquake3 to avoid a read buffer overflow
    in MSG_ReadBits (CVE-2017-11721), and check a buffer boundary
    more accurately in MSG_WriteBits (believed to be merely a bug, not
    a vulnerability).

 -- Simon McVittie <smcv@debian.org>  Sat, 05 Aug 2017 12:25:55 +0100

openjk (0~20170718+dfsg1-1) experimental; urgency=medium

  * New upstream snapshot
  * debian/apparmor.d: Allow more device enumeration
  * Declare compliance with Debian Policy 4.0.0

 -- Simon McVittie <smcv@debian.org>  Mon, 24 Jul 2017 07:42:11 +0100

openjk (0~20170610+dfsg1-1) experimental; urgency=medium

  * Reference CVE-2017-6903 in previous changelog entry
  * New upstream snapshot

 -- Simon McVittie <smcv@debian.org>  Thu, 15 Jun 2017 09:55:29 +0100

openjk (0~20170314+dfsg1-1) experimental; urgency=high

  * New upstream snapshot with security fixes
    (Closes: #857715; CVE-2017-6903)
    - Drop patches that were applied upstream

 -- Simon McVittie <smcv@debian.org>  Tue, 14 Mar 2017 10:22:34 +0000

openjk (0~20170122+dfsg1-1) experimental; urgency=medium

  * New upstream snapshot
    - Drop patches that were applied upstream
  * Add a patch to fix compilation on big-endian CPUs

 -- Simon McVittie <smcv@debian.org>  Wed, 22 Feb 2017 11:27:39 +0000

openjk (0~20170112+dfsg1-1) experimental; urgency=medium

  * New upstream snapshot
    - Drop patches that were applied upstream
  * Add patches to fix bounds-checking in savegames, so valid saves
    are not rejected
  * debian/apparmor.d/usr.games.openjk: Allow more device enumeration

 -- Simon McVittie <smcv@debian.org>  Sat, 21 Jan 2017 20:26:05 +0000

openjk (0~20161025+dfsg1-1) experimental; urgency=medium

  * New upstream snapshot
    - 64-bit builds now have the same saved game format as 32-bit builds
      with the same endianness
    - compatibility break: 64-bit saved games made prior to this version
      are no longer supported
  * d/p/Suppress-compiler-warning-for-unused-BufferToHexString.patch,
    d/p/Use-same-mechanism-to-say-no-servers-found-as-to-say-how-.patch,
    d/p/botlib-print-long-int-correctly.patch,
    d/p/Declare-platform-independent-byteswapping-functions-QINLI.patch,
    d/p/Fix-a-typo-in-Siege-mode-attemtping-attempting.patch:
    drop, applied upstream
  * d/p/Pick-up-date-from-SOURCE_DATE_EPOCH-for-reproducible-buil.patch:
    alter to define SOURCE_DATE in q_platform.h as requested upstream
  * d/p/Consistently-use-static-QINLINE-for-inline-C-code.patch,
    d/p/g_svcmds-fix-typo-in-avoiding-non-C-11-compliant-string-s.patch,
    d/p/savegames-bounds-check-some-string-lengths-to-prevent-buf.patch:
    more bugfix patches
  * d/p/Avoid-compiler-warning-when-sscanf-writes-qboolean-throug.patch:
    fix one more instance of the same issue
  * openjk-academy-server: depend on lsb-base as recommended by Lintian

 -- Simon McVittie <smcv@debian.org>  Fri, 28 Oct 2016 12:10:23 +0100

openjk (0~20160911+dfsg1-2) experimental; urgency=medium

  * Correct `date` invocation for $SOURCE_DATE_EPOCH
  * d/p/Avoid-compiler-warning-when-sscanf-writes-qboolean-throug.patch,
    d/p/Suppress-compiler-warning-for-unused-BufferToHexString.patch,
    d/p/Use-same-mechanism-to-say-no-servers-found-as-to-say-how-.patch,
    d/p/botlib-print-long-int-correctly.patch:
    silence some compiler warnings

 -- Simon McVittie <smcv@debian.org>  Sun, 25 Sep 2016 15:30:10 +0100

openjk (0~20160911+dfsg1-1) experimental; urgency=medium

  * New upstream snapshot
    - build-depend on SDL2 2.0.4 to match version bundled upstream
    - refresh patches
  * debian/gbp.conf: use DEP-14 branch names
  * debian/rules: align with ioquake3
  * Move to debhelper compat level 10
    - do not explicitly use dh-systemd, it is now integrated
    - do not explicitly use a parallel build, it is the default
  * Install README.md as README
    - build-depend on dh-exec
  * Adjust symlinks to README to assume it will be compressed
  * Stop installing rv-readme.txt, it just duplicates debian/copyright
  * d/p/Declare-platform-independent-byteswapping-functions-QINLI.patch:
    suppress compiler warnings about unused static functions by marking
    them inline
  * Extend openjk-common Description a bit
  * Standards-version: 3.9.8 (no changes required)
  * AppArmor profile: allow enumerating direct rendering devices
  * AppArmor profile: allow use of Wayland shared memory buffers

 -- Simon McVittie <smcv@debian.org>  Wed, 21 Sep 2016 20:10:26 +0100

openjk (0~20160320+dfsg1-1) experimental; urgency=medium

  * New upstream snapshot
    - update debian/copyright
    - drop patch for upstream bug #507 (PR #695), merged upstream
    - refresh remaining patch
  * Switch Vcs-Git to https (see #810378)
  * Standards-Version: 3.9.7 (no changes needed)
  * Build-depend on libboost-test-dev, and run new build-time tests
  * Require strictly matching openjk-common version
  * Install CHANGELOG.md as the upstream changelog
  * Install README.md and rv-readme.txt in openjk-common
  * Remove openjk-dbg, rely on automatic dbgsym packages
  * Symlink all documentation into each game's directory
  * debian/watch: add (guessing at what releases will look like)
  * Build with full hardening options
  * Add patch fixing a typo in Siege mode
  * Remove traditional Debian menu entries (prohibited by CTTE decision
    #741573) and the XPM icon that they used
  * Add documentation to the systemd units
  * Add experimental AppArmor profiles, initially in non-enforcing mode
  * Override __DATE__ to the date from the changelog, for reproducible builds

 -- Simon McVittie <smcv@debian.org>  Sun, 20 Mar 2016 17:41:53 +0000

openjk (0~20150815+dfsg1-1) experimental; urgency=medium

  * New upstream snapshot
    - drop patch for PR #665, applied upstream
    - update patch for upstream bug #507 (PR #695)
  * Drop patch to avoid direct libX11 dependency, no longer needed
    with CMake 3.2
  * debian/rules: add convenience "maintainer-get-orig-source" target
  * debian/rules: use CMAKE_BUILD_TYPE=None now that that works
  * debian/copyright: license packaging GPL-2+ for ease of sharing
    with ioquake3

 -- Simon McVittie <smcv@debian.org>  Sun, 16 Aug 2015 11:25:39 +0100

openjk (0~20150524+dfsg1-1) experimental; urgency=low

  * New upstream snapshot
    - drop patches for PR #658, #659, #666: applied upstream
  * debian/copyright: use the copyright-format URL, not DEP-5
  * debian/copyright: add Disclaimer explaining that this contrib
    package is not part of Debian (Policy §12.5)
  * Correct ITP bug number in previous changelog entry

 -- Simon McVittie <smcv@debian.org>  Sat, 06 Jun 2015 19:03:36 +0100

openjk (0~20150430+dfsg1-1) experimental; urgency=low

  * Initial release. (Closes: #773909)
  * Initial Debian patch-set:
    - avoid using uninitialized variables to set vehicle view angles
      (upstream PR #665)
    - fix Linux compilation of the JK2 modules (upstream PR #658)
    - use C++11-compliant string concatenation (upstream PR #659)
    - silence a compiler warning in savegame handling by making a
      function parameter correctly unsigned (upstream PR #658)
    - be portable to architectures other than x86, x86-64 and 32-bit ARM
      (briefly tested on powerpc, upstream PR #666)
    - fix an endianness bug in the zinf-derived MP3 decoder (upstream PR #666)
    - disarm debug code that would try to write to c:/nofreeentities.txt
      under certain circumstances (not forwarded yet)
    - use select() or sleep() instead of busy-waiting between frames
      (upstream bug #507)
    - only link the executable to libGL, not to libGL's dependencies
      such as libX11 (OpenJK only uses GL and SDL directly;
      not forwarded yet, not necessarily portable beyond GNU/Linux)

 -- Simon McVittie <smcv@debian.org>  Mon, 11 May 2015 21:33:07 +0100
