1 privoxy (3.0.29~gitdbcfeb-1) UNRELEASED; urgency=medium
3 * New upstream development version.
4 * Update all patches to new version.
5 * 36_trusted-cgi-referer-example and 37_ppedit-tests403 are now
7 * d/copyright: use ./ prefix to upstream filenames, because orig.tar.gz
8 is build with a ./ prefix.
9 * Compile --with-mbedtls to allow https-inspection.
10 * Adapt TLS/SSL settings to Debian FHS.
11 * Generate dirs with correct permissions for https-inspection.
13 -- Roland Rosenfeld <roland@debian.org> Fri, 05 Jun 2020 18:13:53 +0200
15 privoxy (3.0.28-3) unstable; urgency=medium
17 * Add buildlog to salsa-ci test pipeline.
18 * d/salsa-ci.yml stripped down using pipline-jobs.yml
19 * Build-depend on debhelper-compat (= 12) instead of using d/compat.
20 * Upgrade to Standards-Version 4.5.0 (no changes).
21 * Add upstream metadata.
22 * privoxy.service: run After=network-online.target, this fixes
25 -- Roland Rosenfeld <roland@debian.org> Thu, 02 Apr 2020 18:04:44 +0200
27 privoxy (3.0.28-2) unstable; urgency=medium
29 * d/tests/privoxy-regression-test: Remove tmpdir on exit.
30 * 36_trusted-cgi-referer-example: Comment trusted-cgi-referer pointing
32 * d/maintscript: Remove orphaned /etc/privoxy/templates/show-version
34 * 37_ppedit-tests403: Update a bunch of regression tests that have to
35 expect status code 403 now.
36 * Enable enable-edit-actions in privoxy-regression-test again.
37 * Upgrade to debhelper v12.
38 * Update (minimal) upstream signing key.
39 * Add Pre-Depends: ${misc:Pre-Depends} for --skip-systemd-native.
41 -- Roland Rosenfeld <roland@debian.org> Sun, 06 Jan 2019 13:07:14 +0100
43 privoxy (3.0.28-1) unstable; urgency=medium
46 * Add es debconf translation. Thanks to Jonathan Bustillos (Closes: #903863).
47 * 38_connection_close: Don't add a "Connection" header for CONNECT requests.
50 * d/tests: Use AUTOPKGTEST_TMP instead of ADTTMP
51 * d/watch: Use https protocol
54 * d/tests: Fix leftover ADTTMP.
55 * Add salsa CI pipeline in debian/gitlab-ci.yml.
56 * New upstream version 3.0.28.
57 * Adapt all patches to new version (06_8bit_manual is implemented in a
58 better way upstream now, 36_openspopenjade is replaced by some
59 autoconf code, 37_adventofcode and 38_connection_close are included
61 * Update debian/copyright.
62 * Upgrade to Standards-Version 4.3.0 (Declare Rules-Requires-Root: no).
63 * Move PID file from /var/run to /run.
64 * Undo voodoo to remove CVS tags from configs since upstream uses git
66 * Disable enable-edit-actions in privoxy-regression-test, since the test
67 seems to be broken (does not use referrer, which is required here).
69 -- Roland Rosenfeld <roland@debian.org> Mon, 31 Dec 2018 16:52:27 +0100
71 privoxy (3.0.26-6) unstable; urgency=medium
73 * Fix typo in patch description.
74 * postinst: avoid using chown -R.
75 * Move source.lintian-overrides to soure/lintian-overrides.
76 * Add Vcs-headers pointing to salsa.
77 * Upgrade to Standards-Version 4.1.4 (no changes).
79 -- Roland Rosenfeld <roland@debian.org> Sun, 29 Apr 2018 11:57:47 +0200
81 privoxy (3.0.26-5) unstable; urgency=medium
83 * Add ru debconf translation. Thanks to Lev Lamberov (Closes: #883110).
84 * Optimize patches for gbp pq.
85 * Upgrade to Standards-Version 4.1.3 (no changes).
86 * Upgrade to debhelper v11 (remove systemd from dh call).
88 -- Roland Rosenfeld <roland@debian.org> Sat, 20 Jan 2018 12:49:42 +0100
90 privoxy (3.0.26-4) unstable; urgency=medium
92 * Add pt debconf translation. Thanks to Rui Branco (Closes: #858743).
93 * Add description to 36_openspopenjade.patch.
94 * Upgrade to debhelper v10 and remove dh-systemd build dependency.
95 * debhelper v10 replaces autotools-dev.
96 * Remove Testsuite header, since this is automatically added.
97 * Upgrade to Standards-Version 4.1.1
98 - change copyrights-format to https.
100 -- Roland Rosenfeld <roland@debian.org> Wed, 01 Nov 2017 10:45:49 +0100
102 privoxy (3.0.26-3) unstable; urgency=medium
104 * Add da debconf translation. Thanks to Joe Dalton (Closes: #850876).
105 * 37_adventofcode: unlock adventofcode.com (Closes: #848211).
107 -- Roland Rosenfeld <roland@debian.org> Wed, 11 Jan 2017 22:24:55 +0100
109 privoxy (3.0.26-2) unstable; urgency=medium
111 * Add db_stop to postinst, since upgrade fails otherwise in some
112 situations (Closes: #835409).
113 * Replace sp and jade with opensp and openjade. Thanks to Neil Roeth
114 for providing a patch (Closes: #837207).
116 -- Roland Rosenfeld <roland@debian.org> Sat, 10 Sep 2016 08:48:35 +0200
118 privoxy (3.0.26-1) unstable; urgency=medium
120 * New upstream version 3.0.26.
121 * This includes 36_listen-nohost.patch.
122 * Updated all patches to new version.
124 -- Roland Rosenfeld <roland@debian.org> Sat, 27 Aug 2016 22:28:32 +0200
126 privoxy (3.0.25-2) unstable; urgency=medium
128 * Add pt_BR debconf translation. Thanks to Adriano Rafael Gomes
130 * Symlink p_doc.css to user-manual.
131 * Install regression-tests.action.
132 * Enable autopkgtest and run privoxy-regression-test.pl.
133 * Install privoxy-regression-test and man page to binary package.
134 * Updated debian/copyright to catch all copyright variants.
135 * Remove outdated stuff from README.Debian.
136 * 36_listen-nohost: Fix crashes with "listen-addr :8118" (Closes: #834941).
138 -- Roland Rosenfeld <roland@debian.org> Tue, 23 Aug 2016 09:27:34 +0200
140 privoxy (3.0.25-1) unstable; urgency=medium
142 * New upstream version 3.0.25 (beta).
143 * Adapt all patches to new upstream version.
144 * Update debian/copyright to new privoxy home.
145 * Add sv debconf translation. Thanks to Jonatan Nyberg (Closes: #824913).
146 * Add fr debconf translation. Thanks to Steve Petruzzello (Closes: #825478).
147 * Add nl debconf translation. Thanks to Frans Spiesschaert (Closes: #825691).
148 * privoxy.service: Run after network.target (Closes: #825358).
150 -- Roland Rosenfeld <roland@debian.org> Sat, 28 May 2016 23:13:56 +0200
152 privoxy (3.0.24-2) unstable; urgency=medium
154 * Upgrade Standards-Version to 3.9.8 (no changes).
155 * Add -p to QUILT_DIFF_OPTS.
156 * Add Documentation key to privoxy.service.
157 * 35_man-spelling: Fix spelling error in privoxy-log-parser(1).
158 * Add debconf and ucf support to make listen-address configurable.
159 Thanks to James Valleroy for providing the code (Closes: #798219).
160 * Remove 28_listen_localhost, but listen on 127.0.0.1:8118 and
161 [::1]:8118 by default, since otherwise privoxy listens only on IPv6
162 (Closes: #518010, #557443).
163 * Change several URLs from http to https.
165 -- Roland Rosenfeld <roland@debian.org> Sun, 01 May 2016 14:21:22 +0200
167 privoxy (3.0.24-1) unstable; urgency=medium
169 * New upstream version 3.0.24.
170 * This fixes CVE-2016-1982 and CVE-2016-1983.
171 * Adapt all patches to new upstream version.
173 -- Roland Rosenfeld <roland@debian.org> Fri, 22 Jan 2016 16:08:05 +0100
175 privoxy (3.0.23-5) unstable; urgency=medium
177 * Remove /lib/init/vars.sh from init script since it is no longer used.
178 As a consequence remove initscripts dependency (Closes: #804961).
179 * --enable-external-filters (Closes: #805296).
181 -- Roland Rosenfeld <roland@debian.org> Mon, 16 Nov 2015 21:05:41 +0100
183 privoxy (3.0.23-4) unstable; urgency=medium
185 * Add rotate option to init.d script.
186 * Change logrotate to use rotate option (Closes: #783399).
187 * privoxy.service: define SuccessExitStatus=15.
188 * Set locales to C.UTF-8 for doc generation to make build reproducible.
190 * 34_system-docbook2man: Use Debian docbook2man-spec.pl (from
191 docbook-utils) instead of local copy, to make package reproducible.
192 * Stop runing "make man2html", since this overrides "make man", which
193 should work reproducible.
195 -- Roland Rosenfeld <roland@debian.org> Sat, 19 Sep 2015 15:05:41 +0200
197 privoxy (3.0.23-3) unstable; urgency=medium
199 * Since there are no new bugs found, this goes to unstable now.
200 * Depend on perl-base instead of full perl.
202 -- Roland Rosenfeld <roland@debian.org> Sun, 26 Apr 2015 11:01:08 +0200
204 privoxy (3.0.23-2) experimental; urgency=low
206 * Fix cleanup to allow build twice in a row.
207 * Preserve auto build configuration from source package.
208 * This version checks and fails if the config file has erros
210 * init script is no longer silent (Closes: #543811).
212 -- Roland Rosenfeld <roland@debian.org> Sat, 31 Jan 2015 12:31:26 +0100
214 privoxy (3.0.23-1) experimental; urgency=low
216 * New upstream version 3.0.23-stable.
217 * Update all patches.
219 -- Roland Rosenfeld <roland@debian.org> Mon, 26 Jan 2015 14:15:47 +0100
221 privoxy (3.0.22-1) unstable; urgency=low
223 * New upstream version 3.0.22-stable.
224 * Update all patches.
225 * Upgrade to Standards-Version 3.9.5 (no changes).
226 * Add upstream GPG signature check.
227 * Convert debian/copyright to DEP5.
229 -- Roland Rosenfeld <roland@debian.org> Sun, 16 Nov 2014 18:38:40 +0100
231 privoxy (3.0.21-7+deb8u1) jessie-security; urgency=high
233 * 40_CVE-2016-1982: Prevent invalid reads in case of corrupt
234 chunk-encoded content.
235 * 41_CVE-2016-1983: Remove empty Host headers in client requests.
236 Previously they would result in invalid reads.
238 -- Roland Rosenfeld <roland@debian.org> Fri, 22 Jan 2016 17:09:48 +0100
240 privoxy (3.0.21-7) unstable; urgency=medium
242 * 37_CVE-2015-1380: denial of service.
243 * 38_CVE-2015-1381: multiple segmentation faults and memory leaks in the
245 * 39_CVE-2015-1382: invalid read.
246 * These 3 patches Closes: #776490.
248 -- Roland Rosenfeld <roland@debian.org> Wed, 28 Jan 2015 19:46:42 +0100
250 privoxy (3.0.21-5) unstable; urgency=low
252 * 34_CVE-2015-1030: Fix memory leak in rfc2553_connect_to(). CID 66382
253 * 35_CVE-2015-1031-CID66394: unmap(): Prevent use-after-free if the map
254 only consists of one item. CID 66394.
255 * 36_CVE-2015-1031-CID66376: pcrs_execute(): Consistently set *result to
256 NULL in case of errors. Should make use-after-free in the caller less
257 likely. CID 66391, CID 66376.
258 * These 3 patches Closes: #775167.
260 -- Roland Rosenfeld <roland@debian.org> Mon, 12 Jan 2015 08:44:23 +0100
262 privoxy (3.0.21-4) unstable; urgency=low
264 * Enable hardening=+all
265 * Hardcode PIDFile in privoxy.service, since this isn't allowed as
266 variable (Closes: #746262).
268 -- Roland Rosenfeld <roland@debian.org> Sat, 10 May 2014 14:19:03 +0200
270 privoxy (3.0.21-3) unstable; urgency=low
272 * When starting via systemd, do not run daemon as root, and honour log
273 file configuration. Thanks to Carlos Maddela for providing a patch
276 -- Roland Rosenfeld <roland@debian.org> Mon, 21 Apr 2014 17:24:01 +0200
278 privoxy (3.0.21-2) unstable; urgency=low
280 * Use autotools-dev for arm64 compatibility (Closes: #727948).
281 * Depend on initscripts >= 2.87dsf-8, (Closes: #564563).
282 * Add systemd support (Thanks to Michael Stapelberg) (Closes: #639635).
283 * Upgrade to Standards-Version 3.9.5 (no changes).
285 -- Roland Rosenfeld <roland@debian.org> Sat, 12 Apr 2014 12:54:58 +0200
287 privoxy (3.0.21-1) unstable; urgency=low
289 * New upstream version 3.0.21-stable.
290 * This fixes CVE-2013-2503 (Closes: #702896).
291 * Update all patches.
292 * Upgrade to Standards-Version 3.9.4 (no changes).
294 -- Roland Rosenfeld <roland@debian.org> Fri, 05 Jul 2013 14:46:54 +0200
296 privoxy (3.0.20-1) unstable; urgency=low
298 * New upstream version 3.0.20-beta.
299 * Update all patches.
300 * Remove 29_typos, which is incorporated upstream now.
301 * 33_manpage_hyphen: Replace all -- in man page by \-\- to make lintian
304 -- Roland Rosenfeld <roland@debian.org> Thu, 24 Jan 2013 17:40:51 +0100
306 privoxy (3.0.19-2+deb7u4) oldstable; urgency=high
308 * 42_CVE-2013-2503: Proxy authentication headers are removed unless the
309 new directive enable-proxy-authentication-forwarding is used.
310 Forwarding the headers potentionally allows malicious sites to trick
311 the user into providing it with login information (Closes: #702896).
313 -- Roland Rosenfeld <roland@debian.org> Tue, 08 Mar 2016 08:52:26 +0100
315 privoxy (3.0.19-2+deb7u3) wheezy-security; urgency=high
317 * 40_CVE-2016-1982: Prevent invalid reads in case of corrupt
318 chunk-encoded content.
319 * 41_CVE-2016-1983: Remove empty Host headers in client requests.
320 Previously they would result in invalid reads.
322 -- Roland Rosenfeld <roland@debian.org> Fri, 22 Jan 2016 17:51:41 +0100
324 privoxy (3.0.19-2+deb7u2) wheezy-security; urgency=medium
326 * 38_CVE-2015-1381: multiple segmentation faults and memory leaks in the
328 * 39_CVE-2015-1382: invalid read.
329 * These 2 patches Closes: #776490 in wheezy.
331 -- Roland Rosenfeld <roland@debian.org> Wed, 28 Jan 2015 20:33:47 +0100
333 privoxy (3.0.19-2+deb7u1) stable-security; urgency=medium
335 * 35_CVE-2015-1031-CID66394: unmap(): Prevent use-after-free if the map
336 only consists of one item. CID 66394.
337 * 36_CVE-2015-1031-CID66376: pcrs_execute(): Consistently set *result to
338 NULL in case of errors. Should make use-after-free in the caller less
339 likely. CID 66391, CID 66376.
340 * These 2 patches Closes: #775167.
342 -- Roland Rosenfeld <roland@debian.org> Sat, 17 Jan 2015 17:20:15 +0100
344 privoxy (3.0.19-2) unstable; urgency=low
346 * Migrate from dpatch to 3.0 (quilt) format.
347 * Reformat all patches.
348 * Change build depenency from dpatch to debhelper (>= 9).
349 * Change debian/compat to "9".
350 * Complete rewrite of debian/rules.
351 * Now uses hardening via debhelper.
352 * Remove README.source.
353 * Update to Standards-Version 3.9.3 (no changes).
355 -- Roland Rosenfeld <roland@debian.org> Fri, 18 May 2012 21:24:55 +0200
357 privoxy (3.0.19-1) unstable; urgency=low
359 * New upstream version 3.0.19-stable.
360 * Adapt all patches to new version.
362 -- Roland Rosenfeld <roland@debian.org> Tue, 27 Dec 2011 11:19:53 +0100
364 privoxy (3.0.18-1) unstable; urgency=low
366 * New upstream version 3.0.18-stable.
367 * Adapt all patches to new version.
368 * Add build-targets build-arch and build-indep.
369 * Upgrade to Standards-Version 3.9.2 (no changes).
370 * 29_typo: most old typos are fixed now, but lintian found new ones.
372 -- Roland Rosenfeld <roland@debian.org> Mon, 21 Nov 2011 19:29:06 +0100
374 privoxy (3.0.17-1) unstable; urgency=low
376 * New upstream version 3.0.17-stable (Closes: #611016).
377 * Adapt all patches to the new version.
378 * Add debian/source/format (1.0).
379 * 29_typos: fix spelling of resource in privoxy-log-parser(1) man page.
380 * Upgrade to Standards-Version 3.9.1 (no changes).
381 * Add $named to Required-Start/Stop in init script. Thanks to Nikolaus
382 Schulz <microschulz@web.de> (Closes: #539405, #582710)
383 * Install /etc/privoxy/user.filter
385 -- Roland Rosenfeld <roland@debian.org> Tue, 01 Mar 2011 21:10:26 +0100
387 privoxy (3.0.16-1+deb6u2) squeeze-lts; urgency=high
389 * Non-maintainer upload by the Squeeze LTS Team.
391 Prevent invalid reads in case of corrupt chunk-encoded content
393 Remove empty Host headers in client requests; resulting in
396 -- Thorsten Alteholz <debian@alteholz.de> Fri, 22 Jan 2016 18:03:02 +0100
398 privoxy (3.0.16-1+deb6u1) squeeze-lts; urgency=medium
400 * Non-maintainer upload by the Squeeze LTS team.
401 * Thanks to Roland Rosenfeld for maintaining privoxy and preparing these
403 - 35_CVE-2015-1031-CID66394: unmap(): Prevent use-after-free if the map
404 only consists of one item. CID 66394.
405 - 36_CVE-2015-1031-CID66376: pcrs_execute(): Consistently set *result to
406 NULL in case of errors. Should make use-after-free in the caller less
407 likely. CID 66391, CID 66376.
408 - 38_CVE-2015-1381: multiple segmentation faults and memory leaks in the
410 - 39_CVE-2015-1382: invalid read.
412 -- Holger Levsen <holger@debian.org> Wed, 28 Jan 2015 19:44:30 +0100
414 privoxy (3.0.16-1) unstable; urgency=low
416 * New upstream version 3.0.16-stable.
417 * Adapt all patches to the new version.
418 * 30_localhost_fixup: removed, since this should no longer be necessary.
419 * 31_handle-as-empty-doc-returns-ok: now included upstream.
420 * 32_bind_fixup: Work around bind problems on startup (Closes: #534735).
422 -- Roland Rosenfeld <roland@debian.org> Tue, 18 May 2010 10:14:18 +0200
424 privoxy (3.0.15-3) unstable; urgency=low
426 * Add Build-Dependency on docbook because docbook-xml which may be
427 chained via docbook-dsssl as an alternative to docbook may not be
428 enough on a unclean build environment. This should now also build on
430 * 31_handle-as-empty-doc-returns-ok: Patch from SourceForge that work2
431 around Firefox bug to wait forever if proxy returns a failure status
432 code in response to the CONNECT (Closes: #561126).
434 -- Roland Rosenfeld <roland@debian.org> Fri, 25 Dec 2009 11:30:29 +0100
436 privoxy (3.0.15-2) unstable; urgency=low
438 * 30_localhost_fixup: Remove workaround for "localhost" listen-address,
439 which should solve all problems with privoxy not starting.
442 -- Roland Rosenfeld <roland@debian.org> Sun, 13 Dec 2009 10:09:11 +0100
444 privoxy (3.0.15-1) unstable; urgency=low
446 * New upstream version 3.0.15-beta.
447 * Adapted all patches to the new upstream version.
448 * Added debian/README.source (from dpatch package) to explain how dpatch
450 * Upgrade to Standards-Version 3.8.3 (no changes).
451 * 29_typos: fix some common typos.
453 -- Roland Rosenfeld <roland@debian.org> Sat, 14 Nov 2009 14:22:31 +0100
455 privoxy (3.0.14-1) unstable; urgency=low
457 * New upstream version 3.0.14-beta.
458 * Adapted all patches to the new upstream version.
459 * --enable-no-gifs (uses PNG instead of GIF in replacement files).
461 -- Roland Rosenfeld <roland@debian.org> Sun, 26 Jul 2009 12:06:00 +0200
463 privoxy (3.0.13-1) unstable; urgency=low
465 * New upstream version 3.0.13-beta.
466 * Adapted all patches to the new upstream version.
467 * Removed 03_ipv6, because IPv6 is now supported upstream.
468 * Upgrade to Standards-Version 3.8.1 (no changes)
469 * Fix matcha-all.action typo in debian/postinst (Closes: #534270).
471 -- Roland Rosenfeld <roland@debian.org> Tue, 23 Jun 2009 15:09:08 +0200
473 privoxy (3.0.12-2) unstable; urgency=low
475 * 03_ipv6: Use s6_addr instead of in6_u, which is not portable.
477 -- Roland Rosenfeld <roland@debian.org> Wed, 25 Mar 2009 21:41:20 +0100
479 privoxy (3.0.12-1) unstable; urgency=low
481 * New upstream version 3.0.12-stable.
482 * Adapt all patches to new upstream version.
483 * Remove 30_quiet_start, because this is provided upstream now.
485 -- Roland Rosenfeld <roland@debian.org> Wed, 25 Mar 2009 13:27:30 +0100
487 privoxy (3.0.11-1) unstable; urgency=low
489 * New upstream version 3.0.11-stable.
490 * 19_manpage_fixup incorporated upstream now.
491 * 24_global_action is incorporated upstream in a similar way.
492 * postinst: try to make removal of standards.action and global.action
493 and new file match-all.action smooth to a user who does not want to
494 modify his config file.
495 * 30_quiet_start: Suppress INFO log messages on stderr at program startup.
496 * Stop redirecting stderr to errorlog file but print all config file
497 errors to stderr at startup. This closes the stderr filehandle since
498 upstream fixed the behavior in jcc.c 1.153.
499 This also solves the problem, that syntax errors in config file
500 weren't noticed, cause they are written to the console on start now
502 * Modify init.d script to be more lsb compliant.
503 Depends on lsb-base (>= 3.2-13)
504 * Allow disabling privoxy via RUN_DAEMON=no in /etc/default/privoxy.
506 * Update README.Debian to fit all changes.
508 -- Roland Rosenfeld <roland@debian.org> Sun, 22 Feb 2009 22:07:08 +0100
510 privoxy (3.0.10-2) unstable; urgency=low
512 * IPv6 patch added again: 03_ipv6: privoxy-3.0.10-ipv6-all-6.diff by
513 Petr Písař (Closes: #179461).
514 It seems that the old bugs #391600 and #393605, which appeared with
515 the previous version, are fixed now.
516 * 28_listen_localhost: Listen on localhost:8118 instead of 127.0.0.1:8118,
517 because this is independent from localhost IP (127.0.0.1 vs. 127.0.1.1)
518 and also supports IPv6 (Closes: #512888).
519 * 05_default_action: unblock qa.debian.org/popcon-graph.php (Closes: #479525)
520 * Create log dir in init script, if it does not exist (Closes: #491423).
522 -- Roland Rosenfeld <roland@debian.org> Sun, 15 Feb 2009 13:39:10 +0100
524 privoxy (3.0.10-1) UNRELEASED; urgency=low
526 * Not released to Debian but only on sourceforge.net.
527 * New upstream version 3.0.10-stable (Closes: #499324).
528 * Install privoxy-log-parser into /usr/bin.
529 * Add lintian-override for libtool warnings according pcre, because we
530 do not use this version of pcre but the one from libpcre3-dev.
532 -- Roland Rosenfeld <roland@debian.org> Sat, 20 Sep 2008 17:33:30 +0200
534 privoxy (3.0.9-1) unstable; urgency=low
536 * New upstream version 3.0.9-beta.
537 * Upgrade all patches to new version:
538 - 20_makefile_fixup included upstream.
539 * The new version doesn't support PDF documentation any more, so remove
540 it from the Debian package.
541 -> Stop Build-Depending on htmldoc.
542 * The new version doesn't support text/plain documentation any more, so
543 remove it from the Debian package.
544 * Upgrade to Standards-Version 3.8.0 (no changes)
545 * Move documentation from doc-base section Apps/Net to Network/Web Browsing.
546 * chown user:group instead of user.group in postinst to be more compatible.
547 * 05_defaut_action: unblock qa.debian.org/popcon.php (Closes: #479525).
549 -- Roland Rosenfeld <roland@debian.org> Mon, 07 Jul 2008 22:35:17 +0200
551 privoxy (3.0.8-1) unstable; urgency=low
553 * New upstream release 3.0.8-stable.
554 * Upgrade all patches to new version.
556 -- Roland Rosenfeld <roland@debian.org> Sun, 20 Jan 2008 22:19:02 +0100
558 privoxy (3.0.7-2) unstable; urgency=low
560 * Remove trailing space from debian/patches/00list to make lintian happy.
561 * postinst: On upgrade from 3.0.6 and below the config file format
562 changed: actionsfile now needs filename.action as parameter instead of
563 filename. Fix this config file change in postinst if necessary.
565 * Upgrade to Standards-Version 3.7.3 (no changes).
566 * 19_manpage_fixup: Replace "ö" by "\[:o]" in privoxy.8.
568 -- Roland Rosenfeld <roland@debian.org> Sat, 12 Jan 2008 16:02:14 +0100
570 privoxy (3.0.7-1) unstable; urgency=low
572 * New upstream version 3.0.7-beta.
573 * Adapt all patches to new version.
574 * Enable new zlib feature (Closes: #368448):
575 - build-depend on zlib1g-dev
576 - disable prevent-compression in 25_standard_medium.dpatch
577 * Remove 28_pcre_returncode.dpatch, which is now applied upstream.
578 * Remove 23_fix_faq_id.dpatch, which is now applied upstream.
579 * Fix Homepage header in control file.
580 * 05_defaut_action: disable filter{js-annoyances} for
581 http://www.memo.de/ (Closes: #441256).
582 * Update debian/watch file based on an idea of Raphael Geissert.
585 -- Roland Rosenfeld <roland@debian.org> Tue, 11 Dec 2007 19:34:35 +0100
587 privoxy (3.0.6-4) unstable; urgency=low
589 * Set "enable-remote-http-toggle 0" by default because otherwise
590 requests may be able to bypass filtering by setting "X-Filter: No"
591 headers using some strange javascript code.
592 * Disable default logging of every GET/POST/CONNECT request to protect
593 your privacy a bit more.
594 * 05_defaut_action: Stop blocking Andorra ccTLD (.ad) (Closes: #445461).
595 * Run make clean/distclean only if GNUmakefile exists in debian/rules.
597 -- Roland Rosenfeld <roland@debian.org> Sun, 21 Oct 2007 12:47:51 +0200
599 privoxy (3.0.6-3) unstable; urgency=low
601 * According to http://wiki.debian.org/AccountHandlingInMaintainerScripts
602 removing system users in postrm isn't a good idea. So the removal of
603 user privoxy in postrm was disabled and deluser/adduser of existing
604 user in postinst was also removed. This should avoid problems with
605 purging privoxy if passwd package isn't installed (Closes: #417015).
607 -- Roland Rosenfeld <roland@debian.org> Sat, 19 May 2007 21:22:42 +0200
609 privoxy (3.0.6-2) unstable; urgency=medium
611 * 28_pcre_returncode: Don't crash if pcre returns an error code that
612 pcrs didn't expect (Closes: #404284).
614 -- Roland Rosenfeld <roland@debian.org> Sat, 23 Dec 2006 21:47:12 +0100
616 privoxy (3.0.6-1) unstable; urgency=low
618 * New upstream release 3.0.6.
619 - remove 28_usermanual_slash.dpatch, which is already included
621 * README.Debian: mention that privoxy has to be used as HTTP proxy to
622 access http://p.p/ URLs (Closes: #398162).
624 -- Roland Rosenfeld <roland@debian.org> Mon, 20 Nov 2006 19:29:27 +0100
626 privoxy (3.0.5-beta-3) unstable; urgency=medium
628 * Disable the IPv6 patch, because this is seems to have too many bugs
629 for a release right now.
630 - This reopens #179461.
631 - This solves the problem, that "listen-address :8118" listens on
632 localhost only (Closes: #391600).
633 - This solves the problem, that regex pattern at front of hostname
634 is ignored (Closes: #393605).
635 * Use /usr/share/dpatch/dpatch.make in debian/rules instead of adding
637 * Extended version of 26_edit_only_writable.dpatch by Fabian Keil. Now
638 shows a message, that the file is write protected. See SF#1564026.
640 -- Roland Rosenfeld <roland@debian.org> Sun, 22 Oct 2006 11:53:02 +0200
642 privoxy (3.0.5-beta-2) unstable; urgency=low
644 * 27_remove_nsl.dpatch: Remove unnecessary linking against libnsl.
645 * 28_usermanual_slash.dpatch: Redirect http://p.p/user-manual (without
646 trailing slash) to http://p.p/user-manual/ (with trailing slash),
647 otherwise the links will be broken (Closes: #244931).
649 -- Roland Rosenfeld <roland@debian.org> Sat, 7 Oct 2006 13:12:13 +0200
651 privoxy (3.0.5-beta-1) unstable; urgency=low
653 * New upstream version 3.0.5-beta.
654 * hide-referrer{foo} now allows everything as a forged referrer not
655 only http/https URLs and ignoring invalid URLs (Closes: #258193).
656 * Fixes the name of the filter from "popups" to "all-popups" in
657 user.action. (Closes: #385886).
658 * Block http://www.google-analytics.com/urchin.js because this is used
659 for cross site user tracking according to
660 http://www.google.com/analytics/ (Closes: #340913).
661 * Adapted all patches to this version.
662 * The following patches are incorporated upstream now, so they are no
663 longer needed: 01_local_usermanual.dpatch, 04_nomultiproxy.dpatch,
664 07_typos.dpatch, 08_log_pthread.dpatch, 09_no_identity.dpatch,
665 12_multiple-filters.dpatch, 13_memory.dpatch, 18_dns_retry.dpatch.
666 * 20_makefile_fixup.dpatch: Fix a syntax error in the GNUmakefile.in.
667 * 05_default_action.dpatch: main parts are incorporated upstream now.
668 * 05_default_action.dpatch: disable filter ie-eploits for amazon.de,
669 cause they use %01 and %02 as delimiters for multipage results
671 * 03_ipv6.dpatch: Add IPv6 support (Closes: #179461).
672 * 23_fix_faq_id.dpatch: Fix value of id attribute in <sect2> tag (no
673 underscore allowed) of faq.sgml.
674 * 24_global_action.dpatch: Move the global default for all pages (/)
675 from default.action to global.action to make updates with local
676 configurations easier.
677 * 25_standard_medium.dpatch: Change the global default from
678 standard.Cautious to standard.Medium, which is similar to the old
679 3.0.3 behavior and doesn't change too much (only
680 filter{js-annoyances}, filter{html-annoyances} and
681 filter{unsolicited-popups} are switched off now additionally because
682 they often cause trouble by using very much CPU time).
683 * 26_edit_only_writable.dpatch: Hide the edit button on
684 http://p.p/show-status if action file can not be written by the
686 * default.action and standard.action are no longer owned by privoxy but
687 by root to show that these files are maintained upstream while users
688 should maintain their local changes in global.action and user.action.
689 * Add LSB compliance to init.d script (INIT INFO and status).
691 -- Roland Rosenfeld <roland@debian.org> Sat, 23 Sep 2006 23:37:03 +0200
693 privoxy (3.0.3-2-2) unstable; urgency=low
695 * Upgrade to Standards-Version 3.7.2 (no changes).
696 * 17_502_no_such_domain.dpatch: Changes the 404 HTTP status code of the
697 "No such Domain" template to 502 Bad Gateway, which seems to be more
698 correct according to http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html
700 * Disable filter{js-annoyances} and filter{unsolicited-popups} for
701 .cnrs.fr and blogs.msdn.com, because these sites consume very much CPU
702 time otherwise (Closes: #377843).
703 * 18_dns_retry.dpatch by Fabian Keil <fk@fabiankeil.de>: 10 retries
704 before giving up DNS lookup. This hopefully Closes: #335660.
705 * 19_manpage_fixup.dpatch:
706 - Convert Latin-1 char á to groff equivalent in man page.
707 - Quote minus signs to differentiate them from hyphens.
708 * Do not filter{banners-by-size} on .w3.org pages, because these often
709 contain validator icons (Closes: #319025).
711 -- Roland Rosenfeld <roland@debian.org> Sat, 5 Aug 2006 15:15:17 +0200
713 privoxy (3.0.3-2-1) unstable; urgency=low
715 * New upstream version 3.0.3-2.
716 * Add debian/watch file.
717 * Remove parts of 13_memory.dpatch, which seems to free too much
718 memory (Closes: #353110, #354611).
720 -- Roland Rosenfeld <roland@debian.org> Mon, 27 Feb 2006 23:28:52 +0100
722 privoxy (3.0.3-6) unstable; urgency=low
724 * Now hopefully really redirect all output of logrotate to /dev/null
726 * Migrate all patches to dpatch mechanism.
727 * Upgrade to debhelper 5.
728 * Call htmldoc with parameter --no-embedfonts to keep PDF files small.
729 * Build-Depends on htmldoc (>= 1.8.25-1), because older versions caused
730 broken PDF documentation on 64bit systems.
731 * Fix some typos in user-manual.
732 * Add multiple filter file support (from CVS) (Closes: #201177).
733 * Fix some memory leaks, mallocs, double frees (from CVS).
734 * Remove CVS $-tags from config files to make it easier for users to
735 keep the configuration in a VCS (Closes: #350799).
736 * Remove trailing spaces from all config files now.
737 * Build man page (and HTML version of it) at build time.
739 -- Roland Rosenfeld <roland@debian.org> Sat, 11 Feb 2006 21:27:14 +0100
741 privoxy (3.0.3-5) unstable; urgency=low
743 * Redirect output of restart script in logrotate to /dev/null
745 * Upgrade to Standards-Version 3.6.2:
746 - Recommends: doc-base
747 * Build-Depends on autotools-dev and copy config.guess and config.sub
748 from there on every build (Closes: #332767).
749 * After dechunking remove the "chunked"-header instead of replacing it
750 by an d"identity" header. Thanks to Michael Shields for reporting this
752 * Update address of FSF in copyright file.
754 -- Roland Rosenfeld <roland@debian.org> Sun, 9 Oct 2005 13:44:55 +0200
756 privoxy (3.0.3-4) unstable; urgency=low
758 * Stop converting entities to 8bit chars in the documentation
760 * Fix typos ('persistant' and 'Januar') in man page and man page sources
762 * Restart privoxy in logrotate script instead of sendig a kill -HUP, to
763 triggering reopen of log files (Closes: #285059).
764 * Apply patch by Jindrich Makovicka to fix race conditions in log
765 writing functions (Closes: #299662).
766 * Stop hiding referrer for www.petitiononline.com/mod_perl/signed.cgi,
767 because this site does not work otherwise (Closes: #250407).
769 -- Roland Rosenfeld <roland@debian.org> Sun, 15 May 2005 15:28:56 +0200
771 privoxy (3.0.3-3) unstable; urgency=low
773 * Now really remove multiproxy.org from all documentation, not only from
774 the config file (Closes: #198953).
776 -- Roland Rosenfeld <roland@debian.org> Sun, 15 Feb 2004 23:11:29 +0100
778 privoxy (3.0.3-2) unstable; urgency=low
780 * no banners-by-side on "/valid-" images, because that's usually from
781 validator.w3.org (Closes: #221009).
782 * Upgrade to Standards-Version 3.6.1 (no changes).
783 * Add Homepage URL to the package description.
784 * If the privoxy user is already existing as a non-system user in
785 postinst, this no longer fails, but deletes the non-system user before
786 adding it again as a system user (Closes: #232724).
787 * Use deluser instead of userdel in postrm.
788 * Redirect stderr of privoxy to /var/log/privoxy/errfile to avoid
789 problems with kept open file descriptors (Closes: #200712).
790 * Remove comment from config file, which points to list of open proxies
791 at multiproxy.org (Closes: #198953).
793 -- Roland Rosenfeld <roland@debian.org> Sun, 15 Feb 2004 15:13:27 +0100
795 privoxy (3.0.3-1) unstable; urgency=low
797 * New upstream version 3.0.3.
798 - This introduces workarounds for server (PHP <4.2.3) bugs including
799 the "blank page" problem (Closes: #215231).
800 - Avoid the conversion of "open" in scripts to "PrivoxyWindowOpen"
802 - "advocancy" is no longer blocked (Closes: #202042).
803 - Fixed yet another two memory leaks (Closes: #215911).
804 * Stop backup of pdf directory, because it is no longer contained in the
806 * Create doc/pdf, which is missing upstream.
807 * disable filter{unsolicited-popups} for www.perl.com/language/newdocs/pod/
808 to avoid problems with "PrivoxyWindowOpen" in Perl manuals
810 * Apply patch make privoxy compilable on woody where htmldoc --version
811 doesn't exist (Closes: #216524).
813 -- Roland Rosenfeld <roland@debian.org> Sat, 31 Jan 2004 11:25:53 +0100
815 privoxy (3.0.2-5) unstable; urgency=low
817 * Merge corrections from upstream default.action 1.7.
818 - demoronizer filter (which caused trouble on non latin1 charsets) is
819 now switched off by default (Closes: #202234).
821 -- Roland Rosenfeld <roland@debian.org> Tue, 9 Sep 2003 21:31:51 +0200
823 privoxy (3.0.2-4) unstable; urgency=low
825 * Add a versioned build dependency on htmldoc (>= 1.8.20), because there
826 seem to be some options mission in the old 1.8.17 (Closes: #192457).
827 * Merge rotation of logfile and jarfile in logrotate script.
828 * Test whether /var/run/privoxy.pid is existing and don't bother when no
829 privoxy is running in logrotate script (Closes: #191838).
830 * Remove /var/run/privoxy.pid on privoxy stop in init.d script.
831 * Mention apt-get instead of dpkg in user-manual (Closes: #189239).
832 * Remove trailing whitespace from text versions of user-manual,
833 developer-manual and faq (Closes: #192566).
835 -- Roland Rosenfeld <roland@debian.org> Fri, 9 May 2003 08:21:30 +0200
837 privoxy (3.0.2-3) unstable; urgency=low
839 * Stop filtering favicon.ico, which may cause trouble (Closes: #188947).
840 * Send SIGHUP to privoxy instead of touching /etc/provoxy/config in
841 logrotate script to tell privoxy that the logfiles were rotated
843 * Remove trailing spaces from config file (Closes: #189240).
844 * Install man page as privoxy(8) instead of privoxy(1), because this is
846 * Build HTML, text, and PDF versions of the documentation from source.
847 * Fix setting of dodk in configure.in.
848 * Add option "--linkcolor #0000ff" to htmldoc call in ldp_print to be
849 independent of ~/.htmldocrc color setting.
850 * Mention PDF and text version of the documentation in doc-base files.
851 * Install PDF version of the documentation, too.
852 * Install HTML version of the man page, too.
854 -- Roland Rosenfeld <roland@debian.org> Mon, 21 Apr 2003 11:11:31 +0200
856 privoxy (3.0.2-2) unstable; urgency=low
858 * Don't apply any filters to {bugs|lists}.debian.org (Closes: #186537).
859 * Prepend "http://config.privoxy.org" before "/user-manual/" to always
860 get a correct URL for the local user-manual (also on 404 error pages).
863 -- Roland Rosenfeld <roland@debian.org> Sun, 13 Apr 2003 12:49:15 +0200
865 privoxy (3.0.2-1) unstable; urgency=low
867 * New upstream version 3.0.2.
868 * Update Standards-Version to 3.5.9 (no changes).
870 -- Roland Rosenfeld <roland@debian.org> Wed, 26 Mar 2003 19:45:07 +0100
872 privoxy (3.0.0-6) unstable; urgency=low
874 * Fixed a bug in local user-manual patch, which failed when accessing
875 http://config.privoxy.org/user-manual/ (without a file name).
877 -- Roland Rosenfeld <roland@debian.org> Sun, 2 Mar 2003 13:40:48 +0100
879 privoxy (3.0.0-5) unstable; urgency=low
881 * Stop build-depending on special versions of libc6-dev and gcc.
882 Hopefully all auto-builders run new versions which shouldn't cause
883 trouble (Closes: #182267)
885 -- Roland Rosenfeld <roland@debian.org> Mon, 24 Feb 2003 19:07:11 +0100
887 privoxy (3.0.0-4) unstable; urgency=low
889 * Set "enable-edit-actions 0" and "enable-remote-toggle 0" in config
890 file, instead of simply commenting out these two lines. Mention this
891 configuration change in README.Debian (Closes: #172965, #172966).
892 * Add new "cgi" user-manual, which sends the user manual to the client
893 and activate it in config file (Closes: #148128).
894 * Build-Depend on libc6-dev (>> 2.2.5) to avoid problems with pthread
895 (Closes: #158306, #162693).
896 * Don't search for user bsmtp in /etc/passwd before using adduser.
897 adduser handles already existing users correct.
898 * Remove /etc/provoxy on purge (Closes: #164039).
899 * Upgrade to Standards-Version 3.5.8:
900 - remove support for DEB_BUILD_OPTION "debug"
901 - add support for DEB_BUILD_OPTION "noopt"
902 * Upgrade to debhelper >=4 and use debian/compat instead of DH_COMPAT.
903 * Upgrade config.guess and config.sub (from autotools-dev 20030110.1).
904 * Remove no-pthread workaround for hppa and build-depend on gcc >=3.2.2,
905 which supports -pthread on hppa, too.
907 -- Roland Rosenfeld <roland@debian.org> Sun, 23 Feb 2003 13:34:11 +0100
909 privoxy (3.0.0-3) unstable; urgency=low
911 * Add aliases "wafer" and "vanilla-wafer" for "send-wafer" and
912 "send-vanilla-wafer" to actionlist to provide backward compatibility
913 to 2.9.14 (Closes: #154647).
915 -- Roland Rosenfeld <roland@debian.org> Sun, 8 Sep 2002 11:43:38 +0200
917 privoxy (3.0.0-2) unstable; urgency=low
919 * Recompile with libc6 from testing (instead of unstable).
921 -- Roland Rosenfeld <roland@debian.org> Fri, 6 Sep 2002 17:32:35 +0200
923 privoxy (3.0.0-1) unstable; urgency=low
925 * New upstream version (Closes: #158613).
926 * Remove version number from config file, to avoid changing it on every
927 new upstream version. Sorry, this time you will still be bothered...
929 -- Roland Rosenfeld <roland@debian.org> Sun, 1 Sep 2002 18:58:07 +0200
931 privoxy (2.9.20-1) unstable; urgency=low
933 * New upstream version.
935 -- Roland Rosenfeld <roland@debian.org> Sun, 11 Aug 2002 11:05:01 +0200
937 privoxy (2.9.18-2) unstable; urgency=low
939 * Disable docbook, we use the precompiled docs (Closes: #155989).
941 -- Roland Rosenfeld <roland@debian.org> Sat, 10 Aug 2002 09:36:58 +0200
943 privoxy (2.9.18-1) unstable; urgency=low
945 * New upstream version.
946 * Use start-stop-daemon for starting privoxy to avoid problems on start,
947 when privoxy is already running (Closes: #154882).
948 * Undo broken -Ipcre inclusion in GNUmakefile.in, which causes trouble
949 with using wrong pcreposix.h.
951 -- Roland Rosenfeld <roland@debian.org> Thu, 8 Aug 2002 21:01:48 +0200
953 privoxy (2.9.16-1) unstable; urgency=low
955 * New upstream version.
956 * Exclude CVS files from dh_installdocs (when compiling from CVS).
957 * Add user.action and standard.action to /etc/privoxy.
958 * Install images for html version of documentation.
959 * Do no longer build html and txt versions of documentation using
960 docbook, but use the converted versions which come with the upstream
962 * default.action fixed upstream: "downloads" no longer blocked
964 * default.filter fixed upstream: Made WeBugs job ungreedy (Closes: #149450).
965 * Remove the "beta" from the version number (the final release will be
966 named 3.0, so it's superfluous).
968 -- Roland Rosenfeld <roland@debian.org> Sat, 27 Jul 2002 18:55:11 +0200
970 privoxy (2.9.14-beta-4) unstable; urgency=low
972 * Damn, why did I write "i386-linux" into the rules file, when I try to
973 write a work around for hppa? Fixed now (Closes: #148227).
975 -- Roland Rosenfeld <roland@debian.org> Sun, 26 May 2002 22:33:26 +0200
977 privoxy (2.9.14-beta-3) unstable; urgency=low
979 * Fix typo ('[' instead of '{') in default.action (Closes: #148122).
980 * Disable edit-actions and remote-toggle in config file by default
982 * Use --disable-pthread on hppa, to avoid problem with hppa gcc not
983 supporting -pthread option (Closes: #148117).
984 * Install p_doc.css in documentation directory.
986 -- Roland Rosenfeld <roland@debian.org> Sun, 26 May 2002 01:40:18 +0200
988 privoxy (2.9.14-beta-2) unstable; urgency=low
990 * Fix debian/rules clean to really clean.
991 * Change owner of /etc/privoxy/{*.action|trust} to privoxy in postinst,
992 to allow modification of these files web interface (Closes: SF-552144).
994 -- Roland Rosenfeld <roland@debian.org> Thu, 23 May 2002 18:38:27 +0200
996 privoxy (2.9.14-beta-1) unstable; urgency=low
998 * New upstream version.
1000 -- Roland Rosenfeld <roland@debian.org> Sat, 13 Apr 2002 18:05:26 +0200
1002 privoxy (2.9.13-beta-2) unstable; urgency=low
1004 * Create HTML and ASCII versions of the documentation using docbook now.
1006 -- Roland Rosenfeld <roland@debian.org> Sun, 31 Mar 2002 23:53:28 +0200
1008 privoxy (2.9.13-beta-1) unstable; urgency=low
1012 -- Roland Rosenfeld <roland@debian.org> Fri, 29 Mar 2002 11:52:03 +0100