Merge commit 'upstream/0.1'

[roundcube.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index 2dc4fc54555d8064b9433bd7741bdca7636de91b..bd108727bb0b59305c46555457104099943da6a1 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,36 @@
+roundcube (0.1~rc2-6) unstable; urgency=high
+
+  [ Vincent Bernat ]
+  * Bug fix: "CVE-2007-6321: Cross-site scripting (XSS) vulnerability",
+    thanks to Micah Anderson (Closes: #455840). The patch is from
+    http://lists.roundcube.net/mail-archive/dev/2007-12/0000038.html and
+    provided by Robin Elfrink. It has been modified with some functions
+    stolen from Squirrelmail.
+  * Finnish debconf template, thanks to Esko Arajärvi (Closes: #458244).
+
+  [ Romain Beauxis ]
+  * Added DM-Upload-Allowed: yes to control file.
+  * Moved po-debconf to Build-Dep since it is needed for clean
+    target. Thanks to lintian.
+
+ -- Romain Beauxis <toots@rastageeks.org>  Sat, 26 Jan 2008 03:26:42 +0100
+
+roundcube (0.1~rc2-5) unstable; urgency=low
+
+  * Deal with old /etc/logrotate.d/roundcube by removing it if left
+    untouched (Closes: #456546). Also deal with /etc/default/roundcube and
+    /etc/cron.daily/roundcube.
+
+ -- Vincent Bernat <bernat@luffy.cx>  Tue, 18 Dec 2007 23:02:46 +0100
+
+roundcube (0.1~rc2-4) unstable; urgency=low
+
+  * Thightened dependencies for a safe upgrade
+  * Finally removed any circular dependency, -db packages no longer pull
+    a full roundcube install
+
+ -- Romain Beauxis <toots@rastageeks.org>  Sun, 09 Dec 2007 14:24:24 +0100
+
 roundcube (0.1~rc2-3) unstable; urgency=low
 
   * Upload to unstable