node-url-parse (1.2.0-1ubuntu0.1) bionic-security; urgency=medium

  * SECURITY UPDATE: Authorization Bypass
    - debian/patches/CVE-2022-0512[1-7].patch: fixed improper input handeling 
      in node-url-parse for input containing the at sign.
    - debian/patches/CVE-2022-0639[1-2].patch: fixed improper input handeling 
      in node-url-parse in toString function.
    - debian/patches/CVE-2022-0686[1-7].patch: fixed improper input handeling 
      in node-url-parse when input contains specified but empty port.
    - debian/patches/CVE-2022-0691[1-4].patch: fixed improper input handeling 
      in node-url-parse for input containing URL beginning with control
      characters.
    - CVE-2022-0512
    - CVE-2022-0639
    - CVE-2022-0686
    - CVE-2022-0691
  * SECURITY UPDATE: Open Redirect, SSRF, and DoS
    - debian/patches/CVE-2018-3774[1-4].patch: fixed improper input handeling
      in node-url-parse when cerain carafted hostnames.
    - debian/patches/CVE-2021-27515[1-2].patch: fixed improper input handeling 
      in node-url-parse for input containing backslash.
    - debian/patches/CVE-2021-3664[1-5].patch: fixed improper input handeling 
      in node-url-parse for input containing backslash.
    - CVE-2018-3774
    - CVE-2021-27515
    - CVE-2021-3664
  * SECURITY UPDATE: Bypass Input Validation
    - debian/patches/CVE-2020-8124.patch: fixed improper input handeling
      in node-url-parse when using in the browser.
    - CVE-2020-8124

 -- Amir Naseredini <amir.naseredini@canonical.com>  Thu, 23 Mar 2023 14:28:19 +0000

node-url-parse (1.2.0-1) unstable; urgency=medium

  * Team upload
  * New upstream release
  * Bump standards, update section and priority
  * Use github tarballs
  * Use webpack instead of browserify

 -- Pirate Praveen <praveen@debian.org>  Tue, 02 Jan 2018 21:25:10 +0530

node-url-parse (1.0.5-2) unstable; urgency=medium

  * debian/install: install more files into package

 -- Thorsten Alteholz <debian@alteholz.de>  Sun, 14 Feb 2016 16:07:46 +0100

node-url-parse (1.0.5-1) unstable; urgency=medium

  * new upstream version
  * debian/control: use correct version numbers for dependencies
                    (Closes: #801143)

 -- Thorsten Alteholz <debian@alteholz.de>  Sat, 06 Feb 2016 18:07:46 +0100

node-url-parse (1.0.2-1) unstable; urgency=low

  * Initial release

 -- Thorsten Alteholz <debian@alteholz.de>  Wed, 02 Sep 2015 18:07:46 +0200

