+ * Fix problem with some uuencoded attachments. Patch from Michał
+ Mirosław. Closes: #686857.
+
+ -- Vincent Bernat <bernat@debian.org> Sat, 29 Sep 2012 11:30:04 +0200
+
+roundcube (0.7.2-4) unstable; urgency=high
+
+ * Fix self XSS with plain signatures. CVE-2012-3508. Closes: #685475.
+
+ -- Vincent Bernat <bernat@debian.org> Sun, 26 Aug 2012 14:20:24 +0200
+
+roundcube (0.7.2-3) unstable; urgency=low
+
+ * Remove old Replaces/Breaks for roundcube-core since it is not needed
+ since Squeeze.
+ * Add back roundcube-sqlite package as a transitional package, thanks to
+ a suggestion by Andreas Beckmann. This enables one to upgrade from
+ Squeeze. Closes: #677803.
+ * Move the actual NEWS entry about dropping SQLite to the transitional
+ package. And be more verbose about it.
+
+ -- Vincent Bernat <bernat@debian.org> Sat, 23 Jun 2012 19:52:33 +0200
+
+roundcube (0.7.2-2) unstable; urgency=low
+
+ * Rotate /var/log/roundcube/session. Closes: #671472.
+ * Fix rights of files generated by UCF. Closes: #671474.
+ * Update Slovak debconf translation, thanks to Ivan Masár (Closes: #677907).
+
+ -- Vincent Bernat <bernat@debian.org> Tue, 19 Jun 2012 08:30:20 +0200
+
+roundcube (0.7.2-1) unstable; urgency=low
+
+ * New upstream version.
+ * Bump Standards-Version. No changes required.
+ * Depends on php-mail-mime (>= 1.8.2). Closes: #656243.
+
+ -- Vincent Bernat <bernat@debian.org> Sat, 28 Apr 2012 10:29:15 +0200
+
+roundcube (0.7.1-2) unstable; urgency=high
+
+ * Remove roundcube-sqlite package since php5 package does not ship
+ SQLite 2.x support anymore. Roundcube is incompatible with SQLite 3.x.
+ Closes: #657092.
+ * Urgency set to high for php5 migration into testing.
+
+ -- Vincent Bernat <bernat@debian.org> Tue, 07 Feb 2012 17:37:52 +0100
+
+roundcube (0.7.1-1) unstable; urgency=low
+
+ * New upstream version. Closes: #656093.
+ * Add Dutch debconf translation, thanks to Jeroen Schot.
+ Closes: #656082.
+
+ -- Vincent Bernat <bernat@debian.org> Tue, 17 Jan 2012 08:57:11 +0100
+
+roundcube (0.7-3) unstable; urgency=low
+
+ * Ship jqueryui plugin. Closes: #653274.
+ + Depend on libjs-jquery-ui package (instead of builtin copy).
+ + Conflict with versions of roundcube-plugins-extra providing this
+ plugin.
+ * More SQL fixes on update. Closes: #654297.
+
+ -- Vincent Bernat <bernat@debian.org> Mon, 02 Jan 2012 21:45:42 +0100
+
+roundcube (0.7-2) unstable; urgency=low
+
+ * Fix SQLite upgrade file. Closes: #653217.
+ * Also fixes MySQL upgrade file and SQLite regular file.
+
+ -- Vincent Bernat <bernat@debian.org> Sun, 25 Dec 2011 16:14:04 +0100
+
+roundcube (0.7-1) unstable; urgency=low
+
+ * New upstream version. Closes: #652564.
+ + Does not ship SWF with TinyMCE anymore.
+
+ -- Vincent Bernat <bernat@debian.org> Fri, 23 Dec 2011 22:04:39 +0100
+
+roundcube (0.6+dfsg-1) unstable; urgency=low
+
+ * New upstream version. Closes: #643707.
+ + Repack to remove SWF file without source from TinyMCE.
+ + Add SQL upgrade procedures.
+ + Add new plugins: acl, enigma and newmail_notifier.
+ + Update jQuery dependency to jQuery 1.6.4.
+
+ -- Vincent Bernat <bernat@debian.org> Sun, 02 Oct 2011 15:20:57 +0200
+
+roundcube (0.5.4+dfsg-1) unstable; urgency=high
+
+ [ Vincent Bernat ]
+ * New upstream version.
+ + Fix XSS vulnerability in UI messages (Closes: #641996).
+ * Switch to Git for version control thanks to Jérémy
+ Bobbio. debian/control updated.
+ * Ship INSTALL. Closes: #633698.
+
+ [ Jérémy Bobbio ]
+ * Re-add 'password' plugin to roundcube-plugins.
+
+ -- Vincent Bernat <bernat@debian.org> Wed, 13 Jul 2011 08:33:01 +0200
+
+roundcube (0.5.3+dfsg-1) unstable; urgency=low
+
+ * New upstream release.
+ + Fix identities "reply-to" and "bcc" fields have a bogus value when
+ left empty (Closes: #628553).
+
+ -- Vincent Bernat <bernat@debian.org> Fri, 10 Jun 2011 22:48:57 +0200
+
+roundcube (0.5.2+dfsg-1) unstable; urgency=low
+
+ * New upstream release
+ * Update logrotate configuration. Closes: #619410.
+ * Make debian-db.php owned by root. This really closes: #608976.
+ * Bump Standards-Version. No changes required.
+
+ -- Vincent Bernat <bernat@debian.org> Sun, 24 Apr 2011 00:35:34 +0200
+
+roundcube (0.5.1+dfsg-7) unstable; urgency=low
+
+ * Make dbconfig-common use sqlite by default to ensure that the package
+ can be configured non-interactively in most cases. Closes: #617754.
+
+ -- Vincent Bernat <bernat@debian.org> Fri, 11 Mar 2011 09:08:32 +0100
+
+roundcube (0.5.1+dfsg-6) unstable; urgency=low
+
+ * Handle incorrect upgrade from 0.3.1-6 when "changed" column already
+ exists for table "identities". Closes: #617312.
+
+ -- Vincent Bernat <bernat@debian.org> Tue, 08 Mar 2011 07:37:56 +0100
+
+roundcube (0.5.1+dfsg-5) unstable; urgency=low
+
+ * Don't use awk. Use plain shell to modify main.inc.php.
+ Closes: #616074.
+
+ -- Vincent Bernat <bernat@debian.org> Fri, 04 Mar 2011 20:46:57 +0100
+
+roundcube (0.5.1+dfsg-4) unstable; urgency=low
+
+ * Fix debian/watch to remove "+dfsg" suffix.
+ * Use awk instead of sed to modify main.inc.php. Closes: #615277.
+
+ -- Vincent Bernat <bernat@debian.org> Tue, 01 Mar 2011 19:59:00 +0100
+
+roundcube (0.5.1+dfsg-3) unstable; urgency=low
+
+ * Install show_additional_headers plugin in roundcube-plugins package.
+ * Use dbconfig-common to force some upgrade commands using some ugly
+ hacks. This should fix any remaining problems with MySQL
+ upgrade. Closes: #613586.
+
+ -- Vincent Bernat <bernat@debian.org> Fri, 18 Feb 2011 22:04:12 +0100
+
+roundcube (0.5.1+dfsg-2) unstable; urgency=low
+
+ * Remove all "ADD INDEX" from MySQL 0.5-1 upgrade file and put them in
+ postinst script. If you have a problem during the upgrade, please, let
+ me know. This upload is only done to prevent users who did not upgrade
+ to 0.5 yet to have a problem during their upgrade. If you already
+ upgraded to 0.5 and if the upgrade failed (or if some feature are
+ missing like identities management), please look at bug #613586.
+
+ -- Vincent Bernat <bernat@debian.org> Wed, 16 Feb 2011 20:54:48 +0100
+
+roundcube (0.5.1+dfsg-1) unstable; urgency=low
+
+ * Add plugins. Closes: #550454.
+ * Rewrite (and update) of debian/copyright.
+ * Use of yui-compressor to re-minify Javascript files.
+ * Drop correct-magic-path.patch: libmagic1 now provides a symlink to the
+ correct location since 4.24-4.
+ * Repack orig.tar.gz to remove swf file shipped with TinyMCE with no
+ sources available.
+
+ -- Vincent Bernat <bernat@debian.org> Mon, 14 Feb 2011 22:33:51 +0100
+
+roundcube (0.5.1-1) unstable; urgency=low
+
+ * New upstream version. Some bugs are corrected in this release or in a
+ previous release:
+ + when switching to HTML mode, content type is now correctly set.
+ Closes: #611321.
+ + header delimiters handling has been fixed in 0.5.
+ Closes: #603489.