~jgrimm/ubuntu/+source/moin:merge2-zesty-1.9.9-1ubuntu1

Branch merges

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related charm recipes

164a75d... by Jon Grimm on 2017-02-07

update-maintainer

0bb6f71... by Jon Grimm on 2017-02-07

reconstruct-changelog

c324174... by Jon Grimm on 2017-02-07

merge-changelogs

10ddafc... by Jon Grimm on 2017-02-07

Drop * SECURITY UPDATE: XSS in link dialogue
    - debian/patches/CVE-2016-9119.patch: properly escape strings in
      MoinMoin/action/fckdialog.py.
    - CVE-2016-9119

0f72823... by Jon Grimm on 2017-02-07

Drop * SECURITY UPDATE: XSS in AttachFile view
    - debian/patches/CVE-2016-7148.patch: properly escape pagename in
      MoinMoin/action/AttachFile.py.
    - CVE-2016-7148

4292e2e... by Jon Grimm on 2017-02-07

Drop * SECURITY UPDATE: XSS in attachment dialogue
    - debian/patches/CVE-2016-7146.patch: properly escape page_name in
      MoinMoin/action/fckdialog.py.
    - CVE-2016-7146

6792367... by Jon Grimm on 2017-02-07

      - Drop python-mysqldb in favor of python-pymysql.
    + debian/patches/pymysql-replacement.patch: Use pymysql as drop in
      replacement for MySQLdb.

c91e553... by Jon Grimm on 2017-02-07

 - demote fckeditor from Recommends to Suggests; the code was previously
        embedded in moin, but it was also disabled, so there's no reason for us
        to pull this in by default currently. Note: fckeditor has a number of
        security problems

6df28fe... by Jon Grimm on 2017-02-07

     - remove python-xml from Suggests field, the package isn't in
        sys.path any more.

ada9973... by Steve McIntyre on 2016-12-08

Import patches-unapplied version 1.9.9-1 to debian/sid

Imported using usd-importer.

Publish parent: 315918e366e1de19a2213925c3c6eb958f475eb3

New changelog entries:
  * New upstream release, lots of bug fixes
  * Includes a few security updates:
    + CVE-2016-9119: XSS in GUI editor's link dialogue
      (Closes: #844338)
    + CVE-2016-7146: XSS in GUI editor's attachment dialogue
      (Closes:#844340)
    + CVE-2016-7148: XSS in AttachFile view (multifile related)
      (Closes: #844341)
  * Apply recommended patch from upstream: fix wrong digestmod of hmac.new
    calls
  * Update patches to fit upstream changes:
    + use_systemwide_libs.patch
    + mail-verification.patch
  * Add patch from Paul Wise to implement an incremental dump process in
    moin dump
  * Fix timestamps to make package build reproducibly. Thanks to Eduard
    Sanou for the patch. Closes: #794014