Comment 4 for bug 31728

moin (1.5.8-5ubuntu1) hardy; urgency=low

  * Merge with Debian; remaining changes:
    - Suggest python-xml (needed for DocBook rendering). LP: #31728.

moin (1.5.8-5) unstable; urgency=high

  * Acknowledge NMU.
    + Rename patch to 10011 (to match documented naming scheme).
    + Unfuzz patch.
  * Use Vcs-* fields (not XS-Vcs-* fields) in debian/control.

moin (1.5.8-4.1) unstable; urgency=high

  * Non-maintainer upload by the testing-security team
  * Include upstream patch to enable whitelisting, instead of
    insufficient blacklisting for file uploads (Closes: #429205)
    Fixes: CVE-2007-5156, CVE-2007-3163, CVE-2007-2630, CVE-2006-0658

moin (1.5.8-4) unstable; urgency=low

  * Sync with upstream HG development source as of today (patchset 851):
    + Avoid out-of-space file corruption of "current" page.
    + Fix translation of "Toggle line numbers" link.
  * Move Homepage to own field (from pseudo-field in long description).

moin (1.5.8-3) unstable; urgency=high

  * Acutally apply the added patch in 1.5.8-2.
  * Raise to urgency=high as these are only security-related bugfixes.

moin (1.5.8-2) unstable; urgency=low

  * Sync with upstream HG development source as of today (patchset 849):
    + XSS fix with RenamePage and and DeletePage
    + ACL fix: only send <link rel=Appendix... when there's read access

moin (1.5.8-1) unstable; urgency=low

  * New upstream release.
  * Drop all earlier patches from upstream Mercurial: applied upstream.
  * Sync with upstream HG development source as of today (patchset 845).
  * Add XS-Vcs-Svn and XS-Vcs-Browser fields to debian/control.
  * Update cdbs tweaks:
    + Various improvements to update-tarball.
  * Better duplicate build-dependency cleanup in debian/rules, and semi-
    auto-update debian/control:
      DEB_BUILD_OPTIONS=cdbs-autoupdate fakeroot debian/rules pre-build
  * Replace deprecated ${Source-Version} with Use binNMU-safe
    ${source:Version} in debian/control. Thanks to Lintian.
  * Remove MoinMoin/i18n/meta.py in clean target.

 -- Matthias Klose <email address hidden> Thu, 06 Dec 2007 17:44:41 +0000