X-Git-Url: http://git.vanrenterghem.biz/git.ikiwiki.info.git/blobdiff_plain/9a05d81d39638b5cfa9b94a5687e5d8572466a35..854dd3d1bdb1db8341092f2ebc830bc8aca450e4:/debian/changelog

diff --git a/debian/changelog b/debian/changelog
index 8205b953a..36dac6ee3 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,4 +1,27 @@
-ikiwiki (3.20170109) UNRELEASED; urgency=medium
+ikiwiki (3.20170111~bpo8+1) jessie-backports; urgency=high
+
+  * Rebuild for jessie-backports
+    - debian/tests/control: set INSTALLED_TESTS=1 here,
+      pkg-perl-autopkgtest in jessie didn't support
+      debian/tests/pkg-perl/smoke-env
+  * Not waiting for testing migration due to CVE-2017-0356
+
+ -- Simon McVittie <smcv@debian.org>  Wed, 11 Jan 2017 18:37:57 +0000
+
+ikiwiki (3.20170111) unstable; urgency=high
+
+  * passwordauth: prevent authentication bypass via multiple name
+    parameters (CVE-2017-0356, OVE-20170111-0001)
+  * passwordauth: avoid userinfo forgery via repeated email parameter
+    (also in the scope of CVE-2017-0356)
+  * CGI, attachment, passwordauth: harden against repeated parameters
+    (not believed to have been a vulnerability)
+  * remove: make it clearer that repeated page parameter is OK here
+  * t/passwordauth.t: new automated test for passwordauth
+
+ -- Simon McVittie <smcv@debian.org>  Wed, 11 Jan 2017 18:16:53 +0000
+
+ikiwiki (3.20170110) unstable; urgency=medium
 
   [ Amitai Schleier ]
   * wrappers: Correctly escape quotes in git_wrapper_background_command
@@ -41,7 +64,7 @@ ikiwiki (3.20170109) UNRELEASED; urgency=medium
     build-dependency, with virtual package libmagickcore-extra as an
     alternative, to help autopkgtest to do the right thing
 
- -- Simon McVittie <smcv@debian.org>  Mon, 09 Jan 2017 14:33:19 +0000
+ -- Simon McVittie <smcv@debian.org>  Tue, 10 Jan 2017 13:22:01 +0000
 
 ikiwiki (3.20161229.1) unstable; urgency=medium
 
@@ -95,6 +118,15 @@ ikiwiki (3.20161219) unstable; urgency=medium
 
  -- Simon McVittie <smcv@debian.org>  Mon, 19 Dec 2016 20:34:23 +0000
 
+ikiwiki (3.20160905~bpo8+1) jessie-backports; urgency=medium
+
+  * Rebuild for jessie-backports
+    - debian/tests/control: set INSTALLED_TESTS=1 here,
+      pkg-perl-autopkgtest in jessie didn't support
+      debian/tests/pkg-perl/smoke-env
+
+ -- Simon McVittie <smcv@debian.org>  Mon, 05 Sep 2016 21:49:22 +0100
+
 ikiwiki (3.20160905) unstable; urgency=medium
 
   [ Joey Hess ]
@@ -117,6 +149,15 @@ ikiwiki (3.20160728) unstable; urgency=medium
 
  -- Simon McVittie <smcv@debian.org>  Thu, 28 Jul 2016 10:41:56 +0100
 
+ikiwiki (3.20160509~bpo8+1) jessie-backports; urgency=medium
+
+  * Rebuild for jessie-backports
+    - debian/tests/control: set INSTALLED_TESTS=1 here,
+      pkg-perl-autopkgtest in jessie didn't support
+      debian/tests/pkg-perl/smoke-env
+
+ -- Simon McVittie <smcv@debian.org>  Mon, 09 May 2016 22:19:05 +0100
+
 ikiwiki (3.20160509) unstable; urgency=high
 
   [ Amitai Schlair ]
@@ -137,6 +178,14 @@ ikiwiki (3.20160509) unstable; urgency=high
 
  -- Simon McVittie <smcv@debian.org>  Mon, 09 May 2016 21:57:09 +0100
 
+ikiwiki (3.20160506~bpo8+1) jessie-backports; urgency=medium
+
+  * Rebuild for jessie-backports
+  * debian/tests/control: set INSTALLED_TESTS=1 here, pkg-perl-autopkgtest
+    in jessie didn't support debian/tests/pkg-perl/smoke-env
+
+ -- Simon McVittie <smcv@debian.org>  Fri, 06 May 2016 08:58:18 +0100
+
 ikiwiki (3.20160506) unstable; urgency=medium
 
   [ Simon McVittie ]
@@ -172,6 +221,12 @@ ikiwiki (3.20160506) unstable; urgency=medium
 
  -- Simon McVittie <smcv@debian.org>  Fri, 06 May 2016 07:54:26 +0100
 
+ikiwiki (3.20160121~bpo8+1) jessie-backports; urgency=medium
+
+  * Rebuild for jessie-backports.
+
+ -- Simon McVittie <smcv@debian.org>  Thu, 21 Jan 2016 10:18:07 +0000
+
 ikiwiki (3.20160121) unstable; urgency=medium
 
   [ Amitai Schlair ]
@@ -223,6 +278,12 @@ ikiwiki (3.20160121) unstable; urgency=medium
 
  -- Simon McVittie <smcv@debian.org>  Thu, 21 Jan 2016 09:53:07 +0000
 
+ikiwiki (3.20150614~bpo8+1) jessie-backports; urgency=medium
+
+  * Rebuild for jessie-backports, no source changes (Closes: #807452)
+
+ -- Simon McVittie <smcv@debian.org>  Mon, 18 Jan 2016 07:03:11 +0000
+
 ikiwiki (3.20150614) unstable; urgency=medium
 
   * inline: change default sort order from age to "age title" for