thttpd (2.23beta1-7) unstable; urgency=low

  * Redone debian directory based on current debhelper templates, this includes:
    - ships updated config.{sub,guess} (Closes: #293237).
    - doesn't ship libthttpd.c.rej anymore (Closes: #394991).

 -- Daniel Baumann <daniel@debian.org>  Sun,  4 Mar 2007 15:26:00 +0100

thttpd (2.23beta1-6) unstable; urgency=low

  * Changed email address.

 -- Daniel Baumann <daniel@debian.org>  Tue, 12 Dec 2006 01:46:00 +0100

thttpd (2.23beta1-5) unstable; urgency=high

  * Applied patch from Steve Kemp <skx@debian.org> on thttpd.logrotate to fix
    the insecure use of temporary files when invoked by logrotate
    [CVE-2006-4248] (Closes: #396277).

 -- Daniel Baumann <daniel@debian.org>  Tue, 31 Oct 2006 20:13:00 +0200

thttpd (2.23beta1-4.2) unstable; urgency=low

  * Non-maintainer upload to fix a policy issue and other bugs.
  * Patched config, postinst, prerm and logrotate so that invoke-rc.d is used
    whenever needed.  Also fixed problems with redirecting stderr.
    Thanks to Rodrigo Campos for the patch.
    (Closes: #333305, #237617)
  * Patched libhttpd.c and thttpd.c so that MAXPATHLEN gets define in Hurd.
    Thanks to Michael Banck for the patch.  (Closes: #308681)
  * Added check to be sure that the PIDFILE is not a stale file. Thanks to
    Bastian Kleineidam for the patch.
    (Closes: #385055, #334610, #247930, #384738)
  * Added a "sleep 1" line in the restart option of the init script.
    (Closes: #236329, #379850, #301719)
  * Added quotes to debian/config test for the PORT variable, to prevent
    a shell problem. 
  * Modified debian/rules so that the config script does not get installed,
    since the templates are removed and it loops infinetely, otherwise.
    (Closes: #350960)

 -- Margarita Manterola <marga@debian.org>  Sat,  9 Sep 2006 12:56:05 -0300

thttpd (2.23beta1-4.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Make prerm script use invoke-rc.d instead of calling the init script
    directly. (Closes: #385055)

 -- Steinar H. Gunderson <sesse@debian.org>  Tue,  5 Sep 2006 03:03:39 +0200

thttpd (2.23beta1-4) unstable; urgency=high

  * extras/syslogtocern: applied patch to fix race condition in the
    tempfile-creation by using proper mktemp now. The tmp1 file could be
    recreated after it has been removed, and made it possible to conduct symlink
    attacks against the users running the script.
    Thanks to Javier Fernández-Sanguino Peña <jfs@computer.org>.

 -- Daniel Baumann <daniel.baumann@panthera-systems.net>  Wed, 26 Oct 2005 15:02:00 +0200

thttpd (2.23beta1-3) unstable; urgency=high

  * New maintainer (Closes: #279522).
  * Removed debconf related stuff, configuration modified: default mode is
    chroot now (Closes: #284344).

 -- Daniel Baumann <daniel.baumann@panthera-systems.net>  Tue, 15 Feb 2005 19:52:00 +0100

thttpd (2.23beta1-2.5) unstable; urgency=high

  * Non-Maintainer Upload.
  * Re-upload 2.23beta1-2.4 with urgency=high.

 -- Steinar H. Gunderson <sesse@debian.org>  Sat, 28 Aug 2004 16:16:01 +0200

thttpd (2.23beta1-2.4) unstable; urgency=low

  * Non-Maintainer Upload.
  * Fix buffer overrun in htpasswd. (Patch from pp@ieee.org, Closes: #253816)

 -- Steinar H. Gunderson <sesse@debian.org>  Sat, 28 Aug 2004 14:55:54 +0200

thttpd (2.23beta1-2.3) unstable; urgency=high

  * Non-maintainer upload by the Security Team
  * Applied patch by Jef Poskanzer <jef@acme.com> to fix a remote denial
    of service attack, and possible execution of arbitrary code
    (libhttpd.c, CAN-2003-0899,
    http://www.securityfocus.com/archive/1/342584,
    http://marc.theaimsgroup.com/?l=thttpd&m=106401027904049, Bug#216677)

 -- Martin Schulze <joey@infodrom.org>  Tue, 28 Oct 2003 20:20:08 +0100

thttpd (2.23beta1-2.2) unstable; urgency=low

  * NMU
  * French debconf templates translation update. Closes: #203684
  * Use numeric signal value for kill in init.d script. Closes: #211750
    Hope I don't break anything..:-).

 -- Christian Perrier <bubulle@debian.org>  Fri, 10 Oct 2003 10:47:22 +0200

thttpd (2.23beta1-2) unstable; urgency=low

  * It's the OLS release
  * 2.23beta1 orig tarballs have a problem: improper perms. The rules file
    works around this for now.
  * Rewrite the init script (closes: 148681, 151853, 152386, 160553, 168222, 182185, 195789, 197746)
  * Fix for proper handling os SIGUSR1 (closes: 168226)
  * Fix removal of binary in prerm (closes: 195718)
  * Fix logrotate script (closes: 151853)
  * Fix version string in config files (closes: 172833)
  * Fix description, remove useless data (closes: 199785)
  * Remove link to non-existent page from README (closes: 123968)
  * Change to use gettext for translations (closes: 200732)
  * Add French translation (closes: 201560)

 -- Chris G. Davis <cd@debian.org>  Wed, 23 Jul 2003 07:34:10 -0400

thttpd (2.23beta1-1) unstable; urgency=low

  * New maintainer (closes: 163004)
  * New upstream (closes: 158027)
  * Fixed port mangle on reconfigure (closes: 155337)

 -- Chris G. Davis <cd@debian.org>  Wed, 30 Oct 2002 13:25:13 -0500

thttpd (2.21b-12) unstable; urgency=low

  * Updated e-mail address.
  * Removed dependency on mime-support. 
  * Added cgipat=/cgi-bin/* to thttpd.conf
  * Added force-stop option to /etc/init.d/thttpd.
  * Document /etc/init.d/thttpd behavior in README.Debian

 -- Yotam Rubin <yotamr@bezeqint.net>  Wed, 22 May 2002 16:12:16 +0300

thttpd (2.21b-11) unstable; urgency=medium

  * Ick. thttpd should really close the listening port immediately upon
    receving SIGUSR1 now. Closes: Bug#139790
  * Added depends on net-tools. Closes: Bug#139791
  * Urgency set to medium because 139790 slightly breaks the init script.

 -- Yotam Rubin <yotam@makif.omer.k12.il>  Sun,  7 Apr 2002 02:59:59 +0300

thttpd (2.21b-10) unstable; urgency=low

  * Defined CGI_PATTERN to /cgi-bin/* 
  * Really not use poll. Closes: Bug#139105

 -- Yotam Rubin <yotam@makif.omer.k12.il>  Tue, 19 Mar 2002 15:41:22 +0200

thttpd (2.21b-9) unstable; urgency=low

  * Not using poll(). Closes: Bug#137941
  * Increased CGI_TIMELIMIT and MIN_REAP_TIME. Closes: Bug#137943
  * Removed references to non-existing man pages. Closes: Bug#101828
  * Explicitly define time() in mmc.c Closes: Bug#124476
  * Directory listings also specify a charset. Closes: Bug#138455

 -- Yotam Rubin <yotam@makif.omer.k12.il>  Tue, 12 Mar 2002 13:05:06 +0200

thttpd (2.21b-8) unstable; urgency=low

  * Made thttpd-util's description more verbose. Closes: Bug#121969
  * Changed thtpasswd's manpage to read thtpasswd in the description.
  * logrotate does not start thttpd if it wasn't running in the first place.

 -- Yotam Rubin <yotam@makif.omer.k12.il>  Mon, 10 Dec 2001 11:27:54 +0200

thttpd (2.21b-7) unstable; urgency=low

  * Moved utilities to thttpd-util package.
  * Silenced log rotation. Closes: Bug#120737
  * thttpd provides httpd-cgi.
  * Modified makeweb to support the configuration of the root user directory 
    during runtime.
  * Disabled static linking of support utilities.

 -- Yotam Rubin <yotam@makif.omer.k12.il>  Wed, 28 Nov 2001 00:55:07 +0200

thttpd (2.21b-6) unstable; urgency=low

  * Removed makeweb from binary package. Closes: Bug#120536
  * /etc/logrotate.d/thttpd is now a configuration file.

 -- Yotam Rubin <yotam@makif.omer.k12.il>  Wed, 21 Nov 2001 21:25:26 +0200

thttpd (2.21b-5) unstable; urgency=low

  * Made modifications to debian/config. Closes: Bug#118921

 -- Yotam Rubin <yotam@makif.omer.k12.il>  Sat, 10 Nov 2001 02:14:27 +0200

thttpd (2.21b-4) unstable; urgency=low

  * /etc/init.d/thttpd now properly starts and stops thttpd. Closes: Bug#112956

 -- Yotam Rubin <yotam@makif.omer.k12.il>  Sun, 28 Oct 2001 20:52:02 +0200

thttpd (2.21b-3) unstable; urgency=low

  * SIGUSR1 immediately closes thttpd's listening port. Closes: Bug#107379
  * logrotate entry now rotates correctly.

 -- Yotam Rubin <yotam@makif.omer.k12.il>  Thu,  2 Aug 2001 01:26:03 +0300

thttpd (2.21b-2) unstable; urgency=low

  * Fixed templates. Closes: Bug#100738 

 -- Yotam Rubin <yotam@makif.omer.k12.il>  Wed, 13 Jun 2001 22:31:11 +0300

thttpd (2.21b-1) unstable; urgency=low

  * Added german templates. Closes: Bug#99358
  * Various fixes to debian/templates.
  
 -- Yotam Rubin <yotam@makif.omer.k12.il>  Thu, 31 May 2001 21:55:56 +0300

thttpd (2.20b-5) unstable; urgency=low

  * Fixed zero length configuration files. Closes: Bug#98330

 -- Yotam Rubin <yotam@makif.omer.k12.il>  Tue, 22 May 2001 19:56:05 +0300

thttpd (2.20b-4) unstable; urgency=low

  * Fixed debian/config. Closes: Bug#97194.
  * Commented out everything in debian/throttle.conf

 -- Yotam Rubin <yotam@makif.omer.k12.il>  Sat, 12 May 2001 19:37:15 +0300

thttpd (2.20b-3) unstable; urgency=low

  * Wrapped lines in debian/templates
  * Fixed netcraft description in debian/control. Closes: #94904
  * Fixed default configuration. Closes: #95195

 -- Yotam Rubin <yotam@makif.omer.k12.il>  Wed, 25 Apr 2001 13:20:34 +0300

thttpd (2.20b-2) unstable; urgency=low

  * Added debconf support
  * Minor changes to /etc/init.d/thttpd

 -- Yotam Rubin <yotam@makif.omer.k12.il>  Sat, 21 Apr 2001 15:40:59 +0300

thttpd (2.20b-1) unstable; urgency=low

  * The thttpd process is now owned by www-data
  * thttpd now handles empty lines in the configuration file properly
  * If initialization fails, thttpd logs it via syslog.

 -- Yotam Rubin <yotam@makif.omer.k12.il>  Sun, 15 Apr 2001 19:21:34 +0300

thttpd (2.16-2) unstable; urgency=low

  * Fixed typo in debian/control
  * postrm now properly purges logfiles
  * Rewrote README.Debian
  * thttpd compiles successfully
  * /etc/init.d/thttpd conforms to policy

 -- Yotam Rubin <yotam@makif.omer.k12.il>  Fri,  6 Apr 2001 03:08:58 +0200

thttpd (2.16-1) unstable; urgency=low

  * First Debian release

 -- Yotam Rubin <yotam@makif.omer.k12.il>  Wed, 21 Feb 2001 16:32:05 +0200
 
