ntpsec (1.1.2+dfsg1-1) unstable; urgency=medium

  * Revert to old upstream GPG key
  * New upstream version
    - Use data minimization on client requests
      https://datatracker.ietf.org/doc/draft-ietf-ntp-data-minimization/
    - Support AES-128-CMAC for authentication
      https://datatracker.ietf.org/doc/draft-ietf-ntp-mac/
  * Refresh patches
  * Drop get-orig-source rules target
  * Add --enable-warnings
  * Raise Standards-Version to 4.2.1
  * Fix ntpviz to use /var/log/ntpsec

 -- Richard Laager <rlaager@wiktel.com>  Sun, 02 Sep 2018 00:37:48 -0500

ntpsec (1.1.1+dfsg1-2) unstable; urgency=medium

  * Fix syntax error in ntpsec-ntpdate DHCP hook (Closes: 905678)

 -- Richard Laager <rlaager@wiktel.com>  Tue, 07 Aug 2018 09:11:08 -0500

ntpsec (1.1.1+dfsg1-1) unstable; urgency=medium

  * Changes as of ntp_4.2.8p11+dfsg-1 have been merged as appropriate:
    - Drop old versioned build-deps.
      Thanks to Bernhard Schmidt <berni@debian.org>
    - Sync AppArmor profile changes from Ubuntu.
      Thanks to Bernhard Schmidt <berni@debian.org>
  * Update apparmor for new drift temp file
  * Drop preempt from Ubuntu ntp.conf
  * Use ntp.conf.dhcp if it exists, rather than only if it is newer than
    ntp.conf
  * Add an option to ignore DHCP-provided servers (Closes: 898402)
  * Update upstream GPG key
  * New upstream version
    - Log timestamps now include the year.  This is useful when
      investigating bugs involving time-setting and -g.
    - Many internal cleanups to clear the way for upcoming major features.
      They should generally not be user visible.  Refer to the git-log if
      you are interested.
    - Restore support for peer (MODE_ACTIVE) packets
  * Drop autorevision-related code
  * Refresh Debian patches
  * README.Debian: Update bit about dhclient.conf
  * README.Debian: Fix broken link to NTP servers
  * debian/copyright: Use HTTPS for Format URL
  * Update URLs in debian/ to HTTPS
  * debian/copyright: Merge in full CC0 text
  * Rename ntp service to ntpsec
  * Rename ntp-wait.service to ntpsec-wait.service
  * Rename ntp-rotate-stats.service to ntpsec-rotate-stats.service
  * Rename ntp-rotate-stats.timer to ntpsec-rotate-stats.timer
  * Refactor DHCP hooks.
    Thanks to Dimitri John Ledkov <xnox@ubuntu.com> for the networkd example.
  * Rename the ntpsec DHCP hooks
  * Rename the files used by the DHCP hooks
  * Rename the ntpdate hooks
  * Add NetworkManager support for ntpdate DHCP hook
  * Remove ntpdate logcheck rule
  * Rename /etc/ntp.conf to /etc/ntpsec/ntp.conf
  * Rename /etc/ntp.d to /etc/ntpsec/ntp.d
  * Rename /var/lib/ntp to /var/lib/ntpsec
  * Rename /var/log/ntpstats to /var/log/ntpsec (Closes: 893542)
  * Add net_admin to the apparmor profile

 -- Richard Laager <rlaager@wiktel.com>  Thu, 02 Aug 2018 22:04:20 -0500

ntpsec (1.1.0+dfsg1-1) unstable; urgency=medium

  * Make ntpsec Conflict with ntpdate
    - Use ntpsec-ntpdate instead of ntpdate.
  * Stop deleting /var/lib/ntpdate/ (Closes: 892966)
    Thanks to Bernhard Schmidt <berni@debian.org> for the suggestion.
  * New upstream version
    - Digests longer then 20 bytes will be truncated.
    - We have dropped support for Broadcast servers.
    - A bug that caused the rejection of 33% of packets from Amazon time
      service has been fixed.
  * Drop patches merged upstream
    - fix-ntpdig.patch
    - systemd-remove-extra-dependencies.patch
    - fix-name-of-psutil.patch
    - fix-spectracom-log-prefixes.patch
    - fix-ntpviz-file-encodings.patch
    - systemd-remove-remainafterexit.patch
    - systemd-use-high-priority.patch
    - systemd-ionice-ntpviz.patch
    - systemd-cleanup-ntp-wait-service.patch
    - fix-ntploggps.patch
    - systemd-use-usr-sbin.patch
    - systemd-do-not-restart.patch
    - systemd-allow-running-in-containers.patch
    - Merge-Classic-fix-for-CVE-2018-7182.patch
  * Update copyright

 -- Richard Laager <rlaager@wiktel.com>  Fri, 16 Mar 2018 00:42:24 -0500

ntpsec (1.0.0+dfsg1-5) unstable; urgency=high

  * Fix CVE-2018-7182

 -- Richard Laager <rlaager@wiktel.com>  Wed, 07 Mar 2018 19:47:34 -0600

ntpsec (1.0.0+dfsg1-4) unstable; urgency=medium

  * Remove empty /var/log/ntpstats on ntpviz removal
  * Fix installing ntpsec-ntpviz without ntpsec (Closes: 891278)
  * systemd: Allow running in containers (Closes: 890771)

 -- Richard Laager <rlaager@wiktel.com>  Sun, 04 Mar 2018 15:06:58 -0600

ntpsec (1.0.0+dfsg1-3) unstable; urgency=medium

  * Add Vcs-* headers
  * Update Standards-Version to 4.1.3
  * Improve debian/copyright (Closes: 890758)
  * Bump the autorevision version requirement (Closes: 890761)
  * Fix FTBFS when building arch-indep only.
    Thanks to Daniel Baumann <daniel.baumann@progress-linux.org>
    (Closes: 890762)
  * Make ntpsec-ntpdate depend on python3-ntp (Closes: 890770)
  * Inline the SHM message in README.Debian
  * Add note about AppArmor tunable in README.Debian.
    Thanks to Bernhard Schmidt <berni@debian.org>
  * Drop historic Breaks/Pre-Depends.
    Thanks to Bernhard Schmidt <berni@debian.org>
  * ntpsec: Stop creating /var/log/ntpstats
  * ntpsec-ntpviz: Add Suggests: python
  * Create /var/lib/ntp in the postinst
  * Do not recursively chown /var/log/ntpstats
  * Suppress a lintian warning
  * Drop historic apparmor Suggests/Breaks/Replaces
  * Changes as of ntp_4.2.8p10+dfsg-6 have been merged as appropriate.

 -- Richard Laager <rlaager@wiktel.com>  Wed, 21 Feb 2018 00:29:24 -0600

ntpsec (1.0.0+dfsg1-2) unstable; urgency=medium

  * debian/apparmor-profile: add attach_disconnected.
    Thanks to Christian Ehrhardt <christian.ehrhardt@canonical.com>
  * Fix reading the drift file on startup
  * Drop the ntpwait "quick mode" patch

 -- Richard Laager <rlaager@wiktel.com>  Wed, 13 Dec 2017 17:18:10 -0600

ntpsec (1.0.0+dfsg1-1) unstable; urgency=medium

  * Initial release. (Closes: #819806)
    The packaging was originally forked from ntp_4.2.8p8+dfsg.
    Changes as of ntp_4.2.8p10+dfsg-5 have been merged.

 -- Richard Laager <rlaager@wiktel.com>  Thu, 30 Nov 2017 21:29:52 -0600
