modsecurity (3.0.9-1+deb12u2) bookworm; urgency=medium

  [ Ervin Hegedus ]
  * Add fixes for CVE-2026-30923 and CVE-2026-42268

 -- Hegedüs Ervin <airween@gmail.com>  Thu, 30 Apr 2026 17:13:44 +0200

modsecurity (3.0.9-1+deb12u1) bookworm; urgency=medium

  * Applied upstream patch to fix DoS.
    CVE-2023-38285 (Closes: #1042475)

 -- Ervin Hegedüs <airween@gmail.com>  Mon, 25 Sep 2023 14:43:11 +0200

modsecurity (3.0.9-1) unstable; urgency=medium

  * New upstream version.
    Fixes DoS CVE-2023-28882. (Closes: #1035083)
  * Removed patches/pcrem4.patch, applied upstream.

 -- Alberto Gonzalez Iniesta <agi@inittab.org>  Tue, 25 Apr 2023 11:49:24 +0200

modsecurity (3.0.8-3) unstable; urgency=medium

  * New patch from Tobias Frost to fix FTBFS. (Closes: #1034760)

 -- Alberto Gonzalez Iniesta <agi@inittab.org>  Mon, 24 Apr 2023 16:52:16 +0200

modsecurity (3.0.8-2) unstable; urgency=medium

  * Team upload
  * Switched from old PCRE to PCRE2
    https://lists.debian.org/debian-devel/2021/11/msg00176.html
  * Add lintian override for source missing of test HTML file
    [others/libinjection/misc/base.html]

 -- Ervin Hegedüs <airween@gmail.com>  Sun, 12 Mar 2023 17:35:53 +0100

modsecurity (3.0.8-1) unstable; urgency=medium

  * New upstream version
  * Bump Standards-Version to 4.6.1

 -- Ervin Hegedus <airween@gmail.com>  Fri, 09 Sep 2022 14:05:02 +0200

modsecurity (3.0.6-1) unstable; urgency=medium

  * Team upload
  * New upstream version
  * Fixes CVE-2021-42717
  * Removed rx_op_remove_g_modif.patch; upstream contains it
  * Bump compat version to 13
  * Bump Standards-Version to 4.6.0
  * Added modsecurity.pc to d/libmodsecurity-dev.install

 -- Ervin Hegedus <airween@gmail.com>  Wed, 24 Nov 2021 14:25:11 +0100

modsecurity (3.0.4-2) unstable; urgency=high

  * Added patch: rx_op_remove_g_modif.patch. Fixes CVE-2020-15598

 -- Ervin Hegedüs <airween@gmail.com>  Mon, 14 Sep 2020 12:43:20 +0200

modsecurity (3.0.4-1) unstable; urgency=medium

  [ Ervin Hegedüs ]
  * New upstream version 3.0.4. Fixes CVE-2019-19886
  * Remove setenv_term_avoid.patch, upstream contains the fix
  * Remove bigendian_fix.patch, upstream contains the fix
  * Bump Standards-Version to 4.4.1
    - removed Vcs-Browser field from d/control

 -- Ervin Hegedus <airween@gmail.com>  Thu, 16 Jan 2020 09:52:23 +0100

modsecurity (3.0.3-1) unstable; urgency=medium

  [ Ervin Hegedüs ]
  * New upstream version 3.0.3
  * Remove from debian/rules: Export TERM var required for test case.
  * Fix FTBFS (Closes: #911209):
    - Add upstream patch to avoid to use ENV:TERM in the regression tests
    - Add upstream patch to fix inet addr handling on 64 bit big endian
      systems
  * Add pkg-config to dependency list in d/control for make check in sbuild
  * Add <airween@gmail.com> to Uploaders

 -- Alberto Gonzalez Iniesta <agi@inittab.org>  Wed, 12 Dec 2018 08:17:40 +0100

modsecurity (3.0.2-2) UNRELEASED; urgency=medium

  * debian/copyright: Updated with all copyrights/licenses (Closes: #911153)
  * debian/patches: Add disable-network-dependent-tests.patch

  [ Ervin Hegedüs ]
  * debian/rules: Export TERM var required for test case.

 -- Alberto Gonzalez Iniesta <agi@inittab.org>  Mon, 26 Nov 2018 22:30:05 +0100

modsecurity (3.0.2-1) unstable; urgency=medium

  * Initial release (Closes: #909025)

 -- Alberto Gonzalez Iniesta <agi@inittab.org>  Mon, 17 Sep 2018 13:16:27 +0200
