-roundcube (0.7.2-2) UNRELEASED; urgency=low
+roundcube (0.7.2-4) unstable; urgency=high
+
+ * Fix self XSS with plain signatures. CVE-2012-3508. Closes: #685475.
+
+ -- Vincent Bernat <bernat@debian.org> Sun, 26 Aug 2012 14:20:24 +0200
+
+roundcube (0.7.2-3) unstable; urgency=low
+
+ * Remove old Replaces/Breaks for roundcube-core since it is not needed
+ since Squeeze.
+ * Add back roundcube-sqlite package as a transitional package, thanks to
+ a suggestion by Andreas Beckmann. This enables one to upgrade from
+ Squeeze. Closes: #677803.
+ * Move the actual NEWS entry about dropping SQLite to the transitional
+ package. And be more verbose about it.
+
+ -- Vincent Bernat <bernat@debian.org> Sat, 23 Jun 2012 19:52:33 +0200
+
+roundcube (0.7.2-2) unstable; urgency=low
* Rotate /var/log/roundcube/session. Closes: #671472.
* Fix rights of files generated by UCF. Closes: #671474.
+ * Update Slovak debconf translation, thanks to Ivan Masár (Closes: #677907).
- -- Vincent Bernat <bernat@debian.org> Fri, 04 May 2012 18:58:34 +0200
+ -- Vincent Bernat <bernat@debian.org> Tue, 19 Jun 2012 08:30:20 +0200
roundcube (0.7.2-1) unstable; urgency=low