logcheck (1.3.20) unstable; urgency=medium

  * Add MIMEENCODING option, default changed to let mime-construct choose an
    appropriate encoding, thanks to Anthony DeRobertis for the patch
    (closes: #860052)
  * src/logcheck:
    - fix -D option, thanks to Daniel Reichelt for the patch (closes: #877182)
  * docs/logcheck.sgml:
    - add missing dot, thanks to Vincas Dargis for the patch (closes: #859746)
  * Switch to debhelper 12
  * Bump to Standards-Version 4.3.0 (no changes necessary)
  * Update debian/copyright
  * Remove inactive Uploaders (closes: #920183):
    - Eric Evans
    - Hanspeter Kunz
    - Marc Haber
    - martin f. krafft
    - maximilian attems
    - Todd Troxell
    Thanks for helping with the package.
  * ignore.d.server/postfix: match TLS 1.1 or later (closes: #913621)
  * ignore.d.server/dhclient: match short dhclient xids (closes: #872463)
  * ignore.d.server/openvpn: match TLS 1.1 or later (closes: #861950)
  * ignore.d.server/systemd: support milliseconds for timer messages
    (closes: #869415)
  * ignore.d.workstation/wpasupplicant: match interface in CTRL-EVENT-EAP
    messages (closes: #889116)

 -- Hannes von Haugwitz <hannes@vonhaugwitz.com>  Fri, 01 Mar 2019 23:27:31 +0100

logcheck (1.3.19) unstable; urgency=medium

  * debian/control:
    - update Vcs-* fields to salsa.d.o
    - build-depend on debhelper (>= 11)
    - bump to Standards-Version 4.1.4 (no changes necessary)
    - update Maintainer field (closes: #899934)
  * debian/compat:
    - bump to dh compatibility level 11
  * Remove references to alioth.debian.org
  * Update debian/README.Debian

 -- Hannes von Haugwitz <hannes@vonhaugwitz.com>  Wed, 30 May 2018 23:59:13 +0200

logcheck (1.3.18) unstable; urgency=medium

  * src/logcheck:
    - fix check if rule files are unreadable, thanks to Simon Ruderich
      for the patch (closes: #418147)
  * src/logcheck-test:
    - make mktemp usage more portable
  * Makefile:
    - remove duplicate xargs option (thanks to Sander Bos)
  * ignore.d.server/dhcp:
    - match dhcpd PID (closes: #799041)
  * ignore.d.server/dhclient:
    - rewrite rules (LP: #1357880, closes: #809605)
  * ignore.d.server/ssh:
    - add generic preauth disconnect rule (closes: #775090)
    - adjust 'Bad protocol version identification' rule, thanks to
      Paul Brossier for the patch (closes: #703936)
    - allow new FingerprintHash format (closes: #799304)
    - match 'ED25519' key type, thanks to Ayke van Laethem for the patch
    - match more disconnect messages
  * ignore.d.server/su:
    - allow '.' and '_' in username (closes: #780441)
  * ignore.d.server/rsync:
    - allow comma as thousands separator (LP: #1476199)
  * ignore.d.workstation/wpasupplicant:
    - adjust CTRL-EVENT-CONNECTED rule
    - add another CTRL-EVENT-DISCONNECTED rule
    - adjust multiple rules to match added interface name
    - allow '.' in SSID
    - match 'SME: ' prefix in 'Trying to associate' message
    - match 'freq=', 'address=' and 'uuid=' wpa_action messages
    - match CTRL-EVENT-SUBNET-STATUS-UPDATE message
    - match predictable network interface names
  * violations.ignore.d/logcheck-sudo:
    - match 'GROUP=' field (closes: #815114)
  * ignore.d.server/bind:
    - match domain name in query message, thanks to Wojciech Nizinski
      for the patch
    - ignore DNSSEC rekeying (closes: #825170)
  * ignore.d.server/openvpn:
    - match arbitrary mtu sizes (closes: #815755)
  * ignore.d.server/snmpd:
    - match optional port (closes: #644886)
  * ignore.d.server/postfix:
    - remove obsolete rule (closes: #822165)
  * ignore.d.server/systemd-timesyncd: new
    - match 'interval/delta/delay/jitter/drift' message
  * ignore.d.server/kernel:
    - 'TCP: ' prefix is optional, thanks to Xavier Mehrenberger
       for the patch (closes: #797512)
  * ignore.d.server/systemd: new
    - add some generic rules (closes: #783633)
  * debian/control:
    - add alternate dependency on cron-daemon, thanks to Felix Zielcke for the
      patch (closes: #786815)
    - use secure Vcs-* fields
    - bump to Standards-Version 3.9.8 (no changes necessary)
  * debian/copyright: update copyright year to 2017
  * Remove obsolete debian/logcheck-database.postinst
  * Add support for logcheck.logfiles.d, thanks to Vincas Dargis for
    the initial patch (closes: #481353)
  * Replace all occurrences of 'deinstall' with 'uninstall', thanks to duelle
    for the patch
  * Remove references to 'logcheck.org'

 -- Hannes von Haugwitz <hannes@vonhaugwitz.com>  Wed, 25 Jan 2017 22:08:04 +0100

logcheck (1.3.17) unstable; urgency=low

  [ Hannes von Haugwitz ]
  * debian/control:
    - dropped obsolete Replaces fields
    - removed 'deprecated' notice from logtail's short description
    - bumped to Standards-Version 3.9.6 (no changes necessary)
  * Migrated to dh7 style debian/rules file
  * debian/compat:
    - bumped to dh compatibility level 9
    - updated copyright year to 2014
  * debian/README.backports: removed (obsolete)
  * src/logcheck:
    - changed '#!/bin/bash' to '#!/usr/bin/env bash'
    - use '/run/lock/logcheck' instead of '/var/lock/logcheck'
    - set VERSION to the current version, thanks to Pascal Wittmann
  * ignore.d.workstation/wpasupplicant:
    - adjusted 'Group rekeying' rule and ignore 'CTRL-EVENT-SCAN-STARTED'
      message (LP: #1325349)
  * ignore.d.server/dhcp:
    - adjust rule to match new URL (closes: #744205)
  * debian/copyright:
    - removed obsolete 'fork' notice
  * docs/README.Maintainer:
    - fixed typo (closes: #764336)
  * ignore.d.server/ssh:
    - match key fingerprint when using key exchange auth (closes: #743000)
  * ignore.d.server/dkim-filter: removed
    - package has been removed from debian

  [ Alberto Gonzalez Iniesta ]
  * ignore.d.workstation/kernel:
    - fixed reworded "Caching mode page" message, thanks to Hagen Fuchs for
      the patch (closes: #743378)

 -- Hannes von Haugwitz <hannes@vonhaugwitz.com>  Fri, 24 Oct 2014 23:54:14 +0200

logcheck (1.3.16) unstable; urgency=low

  * ignore.d.server/ssh:
    - updated "subsystem request for sftp" rule (closes: #706085)
  * debian/control:
    - removed obsolete DM-Upload-Allowed field
    - build-depend on debhelper (>= 9)
    - bumped to Standards-Version 3.9.5 (no changes necessary)
  * ignore.d.server/smartd:
    - allow additional '[SAT]' field after controller pattern
      (closes: #653444)
  * ignore.d.server/exim4:
    - removed 'gluck.debian.org' specific rule (closes: #722312)
  * debian/logcheck-database.postinst, debian/logcheck.postinst:
    - applied patches by Loïc Minier (closes: #645588):
      - add logcheck alias on install not on upgrade
      - use [ -z ... ] rather than [ ! -n ... ]
      - fix indentation and whitespaces in postinsts
      - merge two tests into a single lt-nl comparison
  * ignore.d.server/cron-apt:
    - allow '-o quiet=1' in dist-upgrade rule (closes: #717247)
  * debian/logcheck-database.maintscript: added
    debian/logcheck-database.preinst: removed
    - use dpkg-maintscript-helper to remove obsolete config files
    - dropped handling of config files removed before squeeze release
  * ignore.d.server/puppetd: removed
    - rules are part of puppet-common package

 -- Hannes von Haugwitz <hannes@vonhaugwitz.com>  Sun, 26 Jan 2014 17:43:32 +0100

logcheck (1.3.15) unstable; urgency=low

  [ Hannes von Haugwitz ]
  * ignore.d.server/dropbear: new
    - ignore successful logins (closes: #652148)
  * src/logcheck:
    - fixed broken '-t' option, thanks to Jon Daley (closes: #647622,
      LP: #1010431)
  * debian/control:
    - bumped to Standards-Version 3.9.3 (no changes necessary)
    - adjusted URLs of Vcs-* fields
  * debian/copyright:
    - updated copyright year to 2012

  [ Frédéric Brière ]
  * ignore.d.server/postfix:
    - ignore "offered null AUTH mechanism list"
    - ignore "lost connection while receiving the initial server greeting"
    - fixed "lost connection while sending end of data" rule
  * ignore.d.server/proftpd:
    - ignore "authentication failure" even if ruser is provided
  * ignore.d.server/ssh:
    - ignore "PAM $n more authentication failures"
    - ignore "Too many authentication failures"
    - ignore "Closed due to user request." (closes: #647943)
    - ignore "Bye Bye"
    - ignore "Connection closed"
    - ignore yet one more variation of "invalid user"
    - updated "Postponed ..." rule with "[preauth]" suffix
    - updated "Postponed ..." rule with "invalid user"
  * ignore.d.workstation/libmtp-runtime:
    - ignore mtp-probe messages when plugging a non-MTP device
  * ignore.d.workstation/kernel:
    - ignore "No Caching mode page present"
    - ignore "usb-storage: Quirks match"
    - ignore "sensor detected" for various GSPCA webcams
    - updated FAT messages to new fat_msg() format
    - updated "new USB device" message to new usb_speed_string() format
    - updated bttv messages to new prefix

 -- Hannes von Haugwitz <hannes@vonhaugwitz.com>  Sat, 30 Jun 2012 16:24:49 +0200

logcheck (1.3.14) unstable; urgency=low

  [ martin f. krafft ]
  * ignore.d.server/postfix:
    - ignore notice about verified TLS connections.
  * ignore.d.server/openvpn:
    - broaden filters to catch more messages.

  [ Hanspeter Kunz ]
  * ignore.d.server/dovecot:
    - allow for arbitrary msgids
    - ignore discarded vacation replies with precedence Bulk and list
    - ignore notice about managesieve logouts (closes: #637918)
  * ignore.d.server/postfix:
    - ignore (temporary) rejects messages when the sender domain is not found
    - ignore verify cache db cleanups

  [ Hannes von Haugwitz ]
  * src/logcheck:
    - added numeric timezone information to subject line
    - re-enabled globbing of logfile names (closes: #616103)
  * docs/README.logcheck-database:
    - mention logcheck-test in 'TESTING RULES' section
  * ignore.d.workstation/wpasupplicant:
    - match 5200, 5300, 5260 and 5680 MHz in 'Trying to associate' message
    - allow WPA protocol in 'wpa_action: key_mgmt' message
    - ignore "mode=station" message
    - ignore "Trying to authenticate" message
    - allow '/run/sendsigs.omit.d' as location for pidfile (closes: #633030)
  * ignore.d.server/login:
    - adjusted rule to match serial terminals
  * ignore.d.workstation/kernel:
    - ignore "Spinning up disk" message
    - ignore 'cfg80211: Calling CRDA for country' message
    - ignore 'Monitor-Mwait' messages
    - ignore WLAN 'waiting for beacon' and 'beacon received' messages
    - allow 'device number' in '(new|reset) (low|full|high) speed USB' and
      'USB disconnect' messages
  * ignore.d.server/cron-apt:
    - allow optional whitespace between value and unit, thanks to
      Gabor Kiss (closes: #609649)
    - allow optional architecture in "Get" message
  * ignore.d.server/dnsmasq:
    - allow '-' in interface name, thanks to Jan Evert van Grootheest
      (closes: #608256)
  * src/logcheck, etc/logcheck.conf:
    - added option to compress attachment with gzip
  * ignore.d.server/snmpd:
    - adjusted UDP rule to match new SNMP output format, thanks to
      Robert Naylor (closes: #613124)
  * docs/logcheck-test.1:
    - use 'logcheck-test' instead of 'logcheck' in the EXAMPLES
  * ignore.d.workstation/libpam-gnome-keyring:
    - adjusted rule to match messages without quotes (closes: #618411)
  * ignore.d.server/dhclient:
    - allow '-' in interface name (closes: #622942)
  * ignore.d.server/spamd:
    - adjusted 'child cleanup' rule to match new format, thanks to Enno Gröper
      (closes: #632471)
  * src/logcheck-test:
    - allow symbolic link as rule file
  * ignore.d.workstation/xlockmore:
    - applied patch by Libor Polčák: ignore local display
  * logcheck-database.preinst:
    - deleting ignore.d.server/webmin, package has been removed from debian
  * ignore.d.server/kernel:
    - ignore "kvm: emulating exchange as write" message
    - allow optional ". Opts: (null)" at the end of "mounted filesystem with
      (writeback|ordered) data mode" message
  * ignore.d.server/amavisd-new:
    - allow quarantine in "Passed SPAM" log line
    - allow subdirectories for quarantine messages and made Message-ID in
      "Passed BAD-HEADER" log lines optional, thanks to John Clements
    - allow compressed quarantine messages (closes: #639839)
  * debian/rules:
    - added build-indep and build-arch targets
  * debian/control:
    - bumped to Standards-Version 3.9.2 (no changes necessary)

  [ Gerfried Fuchs ]
  * Remove myself from uploaders.

  [ Jeremy L. Gaddis ]
  * ignore.d.server/postfix:
    - adjust postfix certificate fingerprint rule to match new output
      format, thanks to Loïc Minier (closes: #616616)
  * ignore.d.server/amavisd-new:
    - adjusted rule to match new output format, thanks to Adrian Lang
      (closes: #624197)
  * ignore.d.server/ssh:
    - add rule to ignore AllowGroups denial, thanks to Gerald Turner
      (closes: #637923)
  * ignore.d.server/dovecot:
    - adjusted rule to match IPv6 addresses, thanks to Gerald Turner
      (closes: #637916)
  * debian/copyright:
    - updated copyright year to 2011
    - added myself as team member

  [ Frédéric Brière ]
  * violations.d/kernel:
    - ignore whitespace before timestamp
  * ignore.d.workstation/kernel:
    - allow '.' in input device name

 -- Hannes von Haugwitz <hannes@vonhaugwitz.com>  Thu, 08 Sep 2011 15:32:22 +0200

logcheck (1.3.13) unstable; urgency=low

  * ignore.d.server/pure-ftpd:
    - fixed user name pattern in logout message, thanks to Simon Breuss
      (LP: #619119)
  * violations.ignore.d/logcheck-sudo:
    - match COMMAND=list and TTY=console, thanks to Michel Messerschmidt for
      the patch (closes: #593482)
  * ignore.d.server/amavisd-new:
    - applied changes by Christian Dröge (closes: #594605):
      - IPv6 support for IP addresses
      - allow PASSED SPAM in log
      - optional minus sign after "Hits:"
      - optional quarantine in log line
      - optional Message-ID

 -- Hannes von Haugwitz <hannes@vonhaugwitz.com>  Fri, 03 Sep 2010 09:59:52 +0200

logcheck (1.3.12) unstable; urgency=low

  [ Hanspeter Kunz ]
  * ignore.d.server/dhcp:
    - generalized rule for "sending options to hosts"
    - ignore reading global configuration from an LDAP directory
    - allow dots in the DN (parsing of the DHCP configuration from LDAP dir)
    - ignore reading subnet configuration from an LDAP directory
    - ignore reading pool configuration from an LDAP directory

  [ Hannes von Haugwitz ]
  * ignore.d.workstation/kernel:
    - ignore 'cfg80211: Calling CRDA to update world regulatory domain' message
    - added rule to ignore 'No probe response from AP' message
  * ignore.d.workstation/wpasupplicant:
    - added some rules to ignore WLAN disconnections
  * ignore.d.server/amavisd-new:
    - match local mails in 'Passed CLEAN' message, thanks to Patrice Le Gurun
      (closes: #563348)

  [ Gerfried Fuchs ]
  * Re-integrating ignore.d.server/amavisd-new after a long time
    (closes: #583155)
  * Add Replaces: amavisd-new (<= 2:2.6.4-1) to logcheck-database for that.
  * Remove this file from the debian/logcheck-database.preinst OLD_CONFFILES
    list.

 -- Hannes von Haugwitz <hannes@vonhaugwitz.com>  Tue, 10 Aug 2010 21:46:08 +0200

logcheck (1.3.11) unstable; urgency=low

  [ Hannes von Haugwitz ]
  * ignore.d.server/smartd:
    - ignore "scheduled Offline Immediate Test" (closes: #585802)
  * ignore.d.workstation/slim: new
    - ignore session opened/closed messages
  * debian/control:
    - bumped to Standards-Version 3.9.1 (no changes necessary)
    - depend on default-mta instead of exim4
  * ignore.d.workstation/wpasupplicant:
    - match 5660 MHz in 'Trying to associate' message
  * ignore.d.server/libpam-krb5: new
    - ignore successful kerberos authentication, thanks to
      Russ Allbery (closes: #588285)
  * violations.ignore.d/logcheck-sudo:
    - ignore successful kerberos authentication, thanks to
      Michel Messerschmidt (see: #588285)
  * logcheck-database.preinst:
    - deleting ignore.d.workstation/xscreensaver, rule is covered
      by i.d.s/libpam-krb5
    - deleting ignore.d.server/cracklib, rules maintained in cracklib-runtime
  * ignore.d.workstation/login:
    - removed successful krb auth rule, rule is covered by i.d.s/libpam-krb5
  * violations.ignore.d/logcheck-su:
    - ignore successful kerberos authentication
  * ignore.d.server/smartd
    - ignore 'state read' and 'state written' messages
  * debian/copyright:
    - updated copyright year to 2010
    - added Marc, Hanspeter and myself as team members
  * ignore.d.server/dhclient:
    - allow '-' in version string

  [ martin f. krafft ]
  * ignore.d.server/postfix:
    - patch from Mathias Krause to address changes in policy-weightd log
      message format.
  * ignore.d.server/ssh:
    - messages about invalid users can contain zero-length usernames.
  * ignore.d.server/postfix:
    - ignore delay notification log entries (closes: #589981).

  [ Hanspeter Kunz ]
  * ignore.d.server/dhcp:
    - ignore messages about LDAP lookups of host entries
    - ignore messages on sending options to hosts (as a result of LDAP lookups)
    - ignore more balancing/balanced pool messages
    - Found dhcpHWAddress: LDAP entries may contain underscores and dashes
    - removed rule to "ignore messages about leased addresses which respond to
      to ping requests" because this is probably caused by a misconfiguration
    - ignore messages on xid-mismatches
    - ignore messages on establishing a (TLS) connection to the LDAP server
    - ignore successful logins to the LDAP server
    - ignore successful parsing of the DHCP configuration from an LDAP directory
  * ignore.d.server/postfix:
    - ignore another TLS library problem
      (SSL23_GET_CLIENT_HELLO:http request:s23_srvr.c:379)
  * ignore.d.server/dovecot:
    - sieve: allow empty recipient address
    - sieve: make "added by" optional

 -- Hannes von Haugwitz <hannes@vonhaugwitz.com>  Thu, 29 Jul 2010 08:37:19 +0200

# For older changelog entries, run 'apt-get changelog logtail'
