cgit (1.1+git2.10.2-3ubuntu0.1) bionic-security; urgency=high

  * SECURITY UPDATE: Directory traversal vulnerability.
    - d/p/clone-fix-directory-traversal.patch:
      This fixes a directory traversal vulnerability in CGit
      before 1.2.1 when `enable-http-clone=1` is not turned off,
      as demonstrated by a cgit/cgit.cgi/git/objects/?path=../ request.
    - CVE-2018-14912 (LP: #1787021)

 -- Unit 193 <unit193@ubuntu.com>  Tue, 14 Aug 2018 15:57:15 -0400

cgit (1.1+git2.10.2-3build1) bionic; urgency=high

  * No change rebuild against openssl1.1.

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Mon, 05 Feb 2018 16:48:53 +0000

cgit (1.1+git2.10.2-3) unstable; urgency=medium

  * Build-depend on asciidoc-base | asciidoc.
    Thanks to Joseph Herlant (Closes: #850306)
  * Capitalise Lua in package description
  * Remove /var/cache/cgit on purge

 -- Peter Colberg <peter@colberg.org>  Fri, 06 Jan 2017 00:08:21 -0500

cgit (1.1+git2.10.2-2) unstable; urgency=medium

  * Link with -ldl on GNU Hurd

 -- Peter Colberg <peter@colberg.org>  Fri, 25 Nov 2016 16:02:33 -0500

cgit (1.1+git2.10.2-1) unstable; urgency=medium

  * New upstream release
  * Drop patches applied upstream
  * Add myself to debian/copyright
  * Fix crash when using path limit
  * Explicitly build-depend on zlib1g-dev
  * Bump debhelper compat level to 10
  * Drop redundant dh --parallel
  * Always fall back to text lexer for syntax highlighting.
    Thanks to Daniel Reichelt for the patch (Closes: #784621)

 -- Peter Colberg <peter@colberg.org>  Thu, 24 Nov 2016 23:37:45 -0500

cgit (1.0+git2.8.3-3) unstable; urgency=medium

  * Build depend on strace on Linux only
  * Remove unneeded build dependency on git
  * Remove unused lintian override for dh-apache2
  * Add debian/clean for generated files

 -- Peter Colberg <peter@colberg.org>  Sun, 26 Jun 2016 14:03:46 -0400

cgit (1.0+git2.8.3-2) unstable; urgency=medium

  * Build depend on strace for access validation tests
  * Enable parallel build
  * Remove unused dependency on ${python:Depends}
  * Suggest python3 instead of recommending python
  * Suggest python3-pygments | highlight for syntax highlighting
  * Suggest python3-docutils for rst2html
  * Suggest python3-markdown for md2html
  * Use python3 in md2html
  * Fix FTBFS on GNU/kFreeBSD by linking with -ldl

 -- Peter Colberg <peter@colberg.org>  Sun, 19 Jun 2016 18:59:57 -0400

cgit (1.0+git2.8.3-1) unstable; urgency=medium

  * New upstream release
    - Uses internally Git 2.8.3, which fixes CVE-2016-2315 (Closes: #827405)
  * Update patch headers to conform to DEP-3
  * Set Maintainer to Debian Cgit Packaging Team (Closes: #826764)
  * Add myself to Uploaders
  * Update Homepage to https
  * Add Vcs-Git and Vcs-Browser
  * Bump Standards-Version to 3.9.8
  * Update debian/copyright
  * Enable verbose compilation
  * Re-enable hardening flags
  * Revise debian/rules
  * Fix spelling
  * Add debian/watch
  * Add debian/gbp.conf
  * Add get-orig-source target to pack orig tarball

 -- Peter Colberg <peter@colberg.org>  Wed, 15 Jun 2016 15:18:24 -0400

cgit (0.12.0.git2.7.0-1) unstable; urgency=medium

  * [df708b9] Bump standards version
  * [657c544] don't use pedantic
  * New upstream version 0.12.0 with git 2.7.0
  * [61fed05] Remove unused patch

 -- Alexander Wirt <formorer@debian.org>  Tue, 01 Mar 2016 14:10:45 +0100

cgit (0.11.2.git2.3.2-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * CVE-2016-1899: Reflected XSS and header injection in mimetype query
    string (Closes: #812411)
  * CVE-2016-1900: Stored cross site scripting and header injection in
    filename parameter (Closes: #812411)
  * CVE-2016-1901: Integer overflow resulting in buffer overflow
    (Closes: #812411)

 -- Salvatore Bonaccorso <carnil@debian.org>  Wed, 27 Jan 2016 20:54:12 +0100

cgit (0.11.2.git2.3.2-1) unstable; urgency=medium

  * [dc391b5] Imported Upstream version 0.11.2.git2.3.2 (Closes: #781299)
  * [8a696dd] Refresh patches
  * [3da8866] Bump standards version
  * [5352316] Use debians rst2html and hilight 3.x (Closes: #765806)
  * [c885b1a] ship cache directory (Closes: #784608)

 -- Alexander Wirt <formorer@debian.org>  Tue, 11 Aug 2015 10:24:03 +0200

cgit (0.10.2.git2.0.1-3) unstable; urgency=medium

  * Initial upload

 -- Alexander Wirt <formorer@debian.org>  Thu, 28 Aug 2014 16:26:24 -0700

cgit (0.10.2.git2.0.1-2) unstable; urgency=medium

  [ Nicolas Dandrimont ]
  * [4b59a82] Return a 404 status code when a repo doesn't exist
  * [4ea393e] Add missing b-d for tests

 -- Alexander Wirt <formorer@debian.org>  Fri, 01 Aug 2014 06:58:39 +0200

cgit (0.10.2.git2.0.1-1) unstable; urgency=low

  * Initial packaging.

 -- Alexander Wirt <formorer@debian.org>  Fri, 01 Aug 2014 06:58:19 +0200
