-roundcube (0.2~alpha-2) UNRELEASED; urgency=low
+roundcube (0.2.2-1) unstable; urgency=low
+
+ * New upstream release
+ * Bump Standards-Version. No changes required.
+ * Don't send email contents to Google by default by using php5-pspell
+ instead. Thanks to Anand Kumria. Closes: #529563.
+ * Update debconf translations:
+ + Basque, thanks to Piarres Beobide. Closes: #534282.
+
+ -- Vincent Bernat <bernat@debian.org> Sun, 05 Jul 2009 09:53:17 +0200
+
+roundcube (0.2.1-2) unstable; urgency=low
+
+ * Update debconf translations:
+ + German, thanks to Helge Kreutzmann. Closes: #520004.
+ + Japanese, thanks to Hideki Yamane. Closes: #520024.
+ + Spanish, thanks to Francisco Javier. Closes: #526696.
+ + Russian, thanks to Yuri Kozlov. Closes: #528796.
+ * Depend on php-mdb2-* (>= 1.5.0b2) since it is needed to fix some
+ bugs. Closes: #519104, #519293. Remove not needed any more patch from
+ debian/patches/series. Keep it in debian/patches to help backports.
+
+ -- Vincent Bernat <bernat@debian.org> Sat, 16 May 2009 15:30:17 +0200
+
+roundcube (0.2.1-1) unstable; urgency=low
+
+ * New upstream release:
+ + Fix use_packaged_tinymce.patch to apply to this new version
+ + Remove cve-2009-0413.patch which has been applied upstream
+
+ -- Vincent Bernat <bernat@debian.org> Sat, 14 Mar 2009 17:42:07 +0100
+
+roundcube (0.2~stable-2) unstable; urgency=low
+
+ * Update debconf translations:
+ + French, thanks to Christian Perrier. Closes: #515806.
+ + Swedish, thanks to Martin Bagge. Closes: #516683.
+ * Drop virtual package roundcube-db and add dependencies on real package
+ instead: this way, we can have versioned dependencies on those to avoid
+ version mismatch between packages.
+ * Add a patch to not use a MDB2 feature not present in the Debian
+ package. Thanks to Grzegorz SobaĆski for the patch. Closes: #519104.
+
+ -- Vincent Bernat <bernat@debian.org> Wed, 11 Mar 2009 18:49:32 +0100
+
+roundcube (0.2~stable-1) unstable; urgency=low
+
+ * New upstream version. Closes: #503573, #504570.
+ + Add SQL update scripts for this new release and for
+ 0.2~alpha. Remove copy of SQL upgrade script from debian/rules.
+ + Remove patch for CVE-2008-5620 which is now fixed upstream.
+ + Remove patch correcting a vulnerability in html2text.php.
+ + Remove patch fixing login issue. This is fixed upstream.
+ + Remove patch setting the default backend to db instead of mdb2:
+ this is not possible any more. We depend on php-mdb2 now.
+ + Update patch to use packaged tinymce.
+ * Upload to unstable since Lenny is out.
+ * Apply fix for XSS issue (CVE-2009-0413). Closes: #514179.
+ * Remove hack to update a SQLite table for an upgrade from a quite old
+ version of roundcube.
+ * Fix pending l10n issues:
+ + Update English debconf template. Closes: #473794.
+ + Add Swedish translation thanks to Martin Bagge. Closes: #508752.
+ * Fix debian/copyright to make lintian happy.
+
+ -- Vincent Bernat <bernat@debian.org> Sun, 15 Feb 2009 16:18:58 +0100
+
+roundcube (0.2~alpha-4) experimental; urgency=low
+
+ * Add missing ${misc:Depends} to make Lintian happy.
+ * Add description to each patch.
+ * Execute cron job only if the directory to clean exists.
+ * Reload web server configuration instead of restart, thanks to a patch
+ from Tiago Bortoletto Vaz. Closes: #508633.
+ * Fix a vulnerability in quota image generation. This fixes
+ CVE-2008-5620. Thanks to Nico Golde for reporting it. Closes: #509596.
+ * Add missing dependency on php5-gd, used for quota bar.
+ * For roundcube-pgsql, depends on postgresql-client only. This package
+ is provided by the currently supported real package.
+
+ -- Vincent Bernat <bernat@debian.org> Thu, 25 Dec 2008 11:38:13 +0100
+
+roundcube (0.2~alpha-3) experimental; urgency=high
+
+ [ Vincent Bernat ]
+ * Fix a vulnerability in the use of preg_replace (Closes: #508628).
+ * Adapt descriptions of roundcube-database packages to refer them as
+ metapackages instead of virtual package (Closes: #495434).
+ * Add robots.txt from upstream, even if in some configuration, it will
+ not be considered (Closes: #499108).
+ * Do not ship .htaccess files. Restrictions are set in Apache or
+ Lighttpd configuration files (Closes: #500202).
+
+ [ Romain Beauxis ]
+ * Changed versioned dependency of rouncube from binary:Version to
+ source:Version since these are all architecture independent packages.
+
+ -- Vincent Bernat <bernat@debian.org> Sat, 13 Dec 2008 14:36:02 +0100
+
+roundcube (0.2~alpha-2) experimental; urgency=low
[ Vincent Bernat ]
* Fix lintian warnings introduced by previous upload
* Fix lighttpd.conf to make it work with latest versions (Closes: #494044)
+ * Do not prepend path to lighty util in postinst and postrm, as per
+ Policy Manual section 6.1
* Ship a bug/control file to have all bugs submitted against roundcube
metapackage
* Fix debian/roundcube-core.cron.daily to use