Fix problem with some uuencoded attachments.

[roundcube.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index b3063d24056cff8d7aaccdd7e72c23b7046b51e0..e3c6c4bd3632bbdd760a9f94cd0a270ec1ededba 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,4 +1,29 @@
-roundcube (0.7.2-2) UNRELEASED; urgency=low
+roundcube (0.7.2-5) unstable; urgency=low
+
+  * Fix problem with some uuencoded attachments. Patch from Michał
+    Mirosław. Closes: #686857.
+
+ -- Vincent Bernat <bernat@debian.org>  Sat, 29 Sep 2012 11:30:04 +0200
+
+roundcube (0.7.2-4) unstable; urgency=high
+
+  * Fix self XSS with plain signatures. CVE-2012-3508. Closes: #685475.
+
+ -- Vincent Bernat <bernat@debian.org>  Sun, 26 Aug 2012 14:20:24 +0200
+
+roundcube (0.7.2-3) unstable; urgency=low
+
+  * Remove old Replaces/Breaks for roundcube-core since it is not needed
+    since Squeeze.
+  * Add back roundcube-sqlite package as a transitional package, thanks to
+    a suggestion by Andreas Beckmann. This enables one to upgrade from
+    Squeeze. Closes: #677803.
+  * Move the actual NEWS entry about dropping SQLite to the transitional
+    package. And be more verbose about it.
+
+ -- Vincent Bernat <bernat@debian.org>  Sat, 23 Jun 2012 19:52:33 +0200
+
+roundcube (0.7.2-2) unstable; urgency=low
 
   * Rotate /var/log/roundcube/session. Closes: #671472.
   * Fix rights of files generated by UCF. Closes: #671474.