Fix a vulnerability in quota image generation. This fixes

[roundcube.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index 5a69d33c96de0c64f6aaf876aa8f6d365f7073af..8a5878a866d28314fed6a6a20fa0aef8474b86d4 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -3,8 +3,15 @@ roundcube (0.2~alpha-4) UNRELEASED; urgency=low
   * Add missing ${misc:Depends} to make Lintian happy.
   * Add description to each patch.
   * Execute cron job only if the directory to clean exists.
-
- -- Vincent Bernat <bernat@debian.org>  Sun, 14 Dec 2008 10:37:47 +0100
+  * Reload web server configuration instead of restart, thanks to a patch
+    from Tiago Bortoletto Vaz. Closes: #508633.
+  * Fix a vulnerability in quota image generation. This fixes
+    CVE-2008-5620. Thanks to Nico Golde for reporting it. Closes: #509596.
+  * Add missing dependency on php5-gd, used for quota bar.
+  * For roundcube-pgsql, depends on postgresql-client only. This package
+    is provided by the currently supported real package.
+
+ -- Vincent Bernat <bernat@debian.org>  Thu, 25 Dec 2008 11:38:13 +0100
 
 roundcube (0.2~alpha-3) experimental; urgency=high