Merge commit 'upstream/0.1'

[roundcube.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index d02232662142daa81784bbfacf1084c456b51d44..bd108727bb0b59305c46555457104099943da6a1 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,20 @@
+roundcube (0.1~rc2-6) unstable; urgency=high
+
+  [ Vincent Bernat ]
+  * Bug fix: "CVE-2007-6321: Cross-site scripting (XSS) vulnerability",
+    thanks to Micah Anderson (Closes: #455840). The patch is from
+    http://lists.roundcube.net/mail-archive/dev/2007-12/0000038.html and
+    provided by Robin Elfrink. It has been modified with some functions
+    stolen from Squirrelmail.
+  * Finnish debconf template, thanks to Esko Arajärvi (Closes: #458244).
+
+  [ Romain Beauxis ]
+  * Added DM-Upload-Allowed: yes to control file.
+  * Moved po-debconf to Build-Dep since it is needed for clean
+    target. Thanks to lintian.
+
+ -- Romain Beauxis <toots@rastageeks.org>  Sat, 26 Jan 2008 03:26:42 +0100
+
 roundcube (0.1~rc2-5) unstable; urgency=low
 
   * Deal with old /etc/logrotate.d/roundcube by removing it if left