mumble (1.2.2-6+squeeze2) squeeze-lts; urgency=medium * Add patch 0006-fix-CVE-2014-3755.patch (ported for mumble in squeeze) http://mumble.info/security/Mumble-SA-2014-005.txt SVG images with local file references could trigger client DoS Closes: #748189, CVE-2014-3755 * Add patch 0007-fix-CVE-2014-3756.patch (ported for mumble in squeeze) http://mumble.info/security/Mumble-SA-2014-006.txt The Mumble client did not properly HTML-escape some external strings before using them in a rich-text (HTML) context. Closes: #748189, CVE-2014-3756 -- Christopher Knadle Fri, 25 Dec 2015 03:06:55 -0500 mumble (1.2.2-6+squeeze1) stable-security; urgency=high * Add patch 0005-set-file-permissions from Marc Deslauriers, which fixes the word readable file permissions of the Mumble SQLite database, as described in CVE-2012-0863. Closes: #659039 -- Patrick Matthäi Fri, 17 Feb 2012 14:13:34 +0100 mumble (1.2.2-6) unstable; urgency=high * Delete /var/lib/mumble-server on purge. * Do not make /etc/mumble-server.ini world readable. Closes: #609919 -- Patrick Matthäi Thu, 13 Jan 2011 21:29:40 +0100 mumble (1.2.2-5) unstable; urgency=low * Update fuzzy spanish debconf translation. Thanks to Omar Campagne Polaino. Closes: #590442 * Downgrade mumble-11x from recommends to suggests. Closes: #599661 * Update Basque translation from Dooteo. Closes: #600203 * Add Norwegian translation from Bjørn Steensrud. Closes: #600277 * Add Italian translation from Vincenzo Campanella. Closes: #600440 * Bump Standards-Version to 3.9.1 (no changes needed). -- Patrick Matthäi Sun, 17 Oct 2010 14:41:34 +0200 mumble (1.2.2-4) unstable; urgency=high * Fix failure with SQLite with very long 'like' matches. Closes: #587713 -- Thorvald Natvig Mon, 12 Jul 2010 15:11:24 +0200 mumble (1.2.2-3) unstable; urgency=high * Remove trailing slash from the mumble-server-web alias. * Fix README.Debian from mumble-server-web. * Add ExecCGI and a cgi-script handler to the mumble-server-web config. Without it, the weblist.cgi code is not executed and directly shown to the client. Raising urgency to medium. * Include every mumble plugin from release/plugins. * Add danish translation from Joe Dalton. Closes: #587798 * Bump Standards-Version to 3.9.0 (no changes needed). -- Patrick Matthäi Thu, 08 Jul 2010 18:06:23 +0200 mumble (1.2.2-2) unstable; urgency=low [ Thorvald Natvig ] * Add patch to compile on kfreebsd * Remove path to Router.ice as the path is not stable. Closes: #573699 * Remove README.source ("we use quilt"), as patches are included in format 3.0 (quilt). [ Patrick Matthäi ] * Update vietnamese translation from Clytie Siddall. Closes: #569281 * Do not build depend on quilt. * Add 0002-spelling-error.patch, which fixes a spelling error. * Add missing blank line to debian/NEWS. -- Patrick Matthäi Sat, 13 Mar 2010 11:47:09 +0100 mumble (1.2.2-1) unstable; urgency=low * New upstream release. * Remove DM-Upload-Allowed, all uploaders are now DD. (Yay!) * Fix my email address in Uploaders: * Move mumble-server's Recommends: of mumble-server-web to Suggests: and remove the Suggests: of mumble. * Remove cgi config in mumble-server-web.conf as we no longer ship cgi files. -- Thorvald Natvig Tue, 09 Feb 2010 17:55:13 +0100 mumble (1.2.2~201002071401-4ab478-1) experimental; urgency=low [ Patrick Matthäi ] * Bump Standards-Version to 3.8.4 (no changes needed). [ Debian l10n ] * Updated french translation from Steve Petruzzello. Closes: #567913 [ Launchpad Translation ] * Hungarian translation from SPeck. [ Thorvald Natvig ] * Updated po files. * New upstream release. -- Thorvald Natvig Sun, 07 Feb 2010 15:02:19 +0100 mumble (1.2.1-3) unstable; urgency=low [ Thorvald Natvig ] * Remove 'ulimit -r' support from defaults and initscript; it's bash-only. * Remove debconf for emailfrom, it's been deprecated in the 1.2.x series. * Add debconf for use_capabilities; it is needed on servers with load. * Add support for upcoming libcelt0-0. [ Patrick Matthäi ] * Change my odd email address in po/de.po. * Build depend on libcap-dev instead of libcap2-dev. [ Debian l10n ] * Updated swedish translation from Martin Bagge. Closes: #564780 * Updated finnish translation from Esko Arajärvi. Closes: #564744 * Updated russian translation from Yuri Kozlov. Closes: #564737 * Updated german translation from Thomas Mueller. Closes: #564932 * Updated Japanese translation from Masayuki Hamasaki. * Updated portuguese translation from Américo Monteiro. Closes: #565612 * Updated czech translation from Miroslav Kure. Closes: #565880 -- Thorvald Natvig Tue, 19 Jan 2010 19:10:04 +0100 mumble (1.2.1-2) unstable; urgency=low * Fix upgrade failure when upgrading mumble-server directly from 1.1.x to 1.2.1 -- Thorvald Natvig Sat, 09 Jan 2010 19:28:50 +0100 mumble (1.2.1-1) unstable; urgency=low * New upstream release. * Now detects ipv6only properly. Closes: #563365 -- Thorvald Natvig Thu, 07 Jan 2010 23:57:54 +0100 mumble (1.2.0-1) unstable; urgency=low * New upstream release. -- Thorvald Natvig Thu, 10 Dec 2009 20:29:29 +0100 mumble (1.2.0~beta2-1) unstable; urgency=low [ Thorvald Natvig ] * New upstream release. * Add celt dependency to binary package; celt is dynamically loaded, so isn't picked up by dh_shlibdeps. * Add patch to include all directly used libraries. Closes: #555758 * Update mumble-server.postinst to ignore dbus restart errors. (Thanks, Leo!) [ Patrick Matthäi ] * Convert package to the 3.0 (quilt) format. * Rebuild against the new protobuf version. Closes: #556561 -- Thorvald Natvig Tue, 01 Dec 2009 22:23:56 +0100 mumble (1.2.0~beta1-1) unstable; urgency=low [ Patrick Matthäi ] * Do not build with missing libcap2-dev on kfreebsd-*. * Merge 1.1.8-3 and 1.1.8-4 changelog. * Merge remaining changes from the 1.1.8 branch. * Also install the menu icon for the mumble-11x package. * Extend the long description of the mumble-11x package. Thanks lintian. [ Thorvald Natvig ] * New upstream beta release. * Update get-orig-source. * Update dependencies. * Let the qmake script find the celt/speex libraries on its own. -- Thorvald Natvig Wed, 11 Nov 2009 23:33:38 +0100 mumble (1.2.0~200910141302-8af721-1) experimental; urgency=low [ Thorvald Natvig ] * New upstream release. * Add a NEWS; this version is incompatible with 1.1.8. * Use bundled CELT version for now. [ Patrick Matthäi ] * Suggest mumble-django at the mumble-server package. -- Thorvald Natvig Wed, 14 Oct 2009 16:27:29 +0200 mumble (1.2.0~200909111826-402695-1) experimental; urgency=low [ Patrick Matthäi ] * Drop quilt, we do not have any patches applied. * Bump Standards-Version to 3.8.3 (no changes needed). [ Michael Ziegler ] * Change Alias for mumble-server-web from /mumble/ to /mumble-server/. [ Thorvald Natvig ] * New upstream tarball. * Update section in menu entries. * Install new, upstream .svg icon and remove deprecated .pngs. * Update mumble-server postrm and postinst to remove /var/lib/mumble-server even if deluser isn't found. Fixes piuparts uninstall failure. * Multiline depends, build-depends. * Update PHP settings to depend on ice33-slice and include the Glacier2 slice files. -- Thorvald Natvig Fri, 11 Sep 2009 20:27:03 +0200 mumble (1.2.0~200908081144-c7cffd-1) experimental; urgency=low [ Thorvald Natvig ] * Remove dh_desktop * Upstream fixes for positional audio in server. * Update various dependencies. * Update mumble-server-web to not include deprecated web registration. * New mumble-11x package with the compatibility client. [ Patrick Matthäi ] * New upstream git snapshot of the upcoming 1.2.0 release. * Merge 1.1.8-2~bpo50+1 changelog. * Replace my old email address in debian/copyright. -- Patrick Matthäi Sat, 08 Aug 2009 10:32:11 +0200 mumble (1.2.0~200907301646-b5b94c-1) experimental; urgency=low [ Patrick Matthäi ] * Merge 1.1.8-1~bpo50+1 changelog. * Bump Standards-Version to 3.8.2 (no changes needed). [ Thorvald Natvig ] * Update for upcoming release 1.2.0 -- Thorvald Natvig Thu, 30 Jul 2009 17:23:30 +0200 mumble (1.1.8-4) unstable; urgency=low * Do not build with missing libcap2-dev on kfreebsd-*. * Add debian/README.source. * Add mumble-server doc-base. -- Patrick Matthäi Sun, 01 Nov 2009 14:13:56 +0100 mumble (1.1.8-3) unstable; urgency=low * Backport ALSA and PulseAudio modules from 1.2.0 git, makes them work with modern releases of these sound systems. * Standards-version 3.8.3 * Remove dh_desktop -- Thorvald Natvig Sun, 16 Aug 2009 17:52:43 +0200 mumble (1.1.8-2~bpo50+1) lenny-backports; urgency=low * Rebuild for lenny-backports. - Adjust build dependencies: We need the libzeroc-ice32 packages to avoid a FTBFS. -- Patrick Matthäi Tue, 04 Aug 2009 18:29:39 +0200 mumble (1.1.8-2) unstable; urgency=low [ Thorvald Natvig ] * Add --oknodo to logrotate script. (Closes: #520639) [ Patrick Matthäi ] * Change my email address. -- Patrick Matthäi Wed, 22 Apr 2009 15:02:08 +0200 mumble (1.1.8-1~bpo50+1) lenny-backports; urgency=low * Rebuild for lenny-backports. -- Patrick Matthäi Mon, 6 Apr 2009 18:35:50 +0200 mumble (1.1.8-1) unstable; urgency=low [ Patrick Matthäi ] * Fix override disparity. Set section of mumble-dbg to devel. * Drop all patches (merged upstream). * Bump Standards-Version to 3.8.1 (no changes needed). [ Thorvald Natvig ] * New upstream release. * New overlay library doesn't use private ELF symbols anymore. * Update defaults file to match new init-script options. * Move mumble-dbg to section debug. -- Patrick Matthäi Sun, 22 Mar 2009 16:21:58 +0100 mumble (1.1.7-3) unstable; urgency=low [ Patrick Matthäi ] * Fix basque translation: Do not translate the username. Closes: #515031 [ Thorvald Natvig ] * Run qmake recursively, to be forward compatible with qmake from Qt 4.5.0. -- Patrick Matthäi Wed, 18 Feb 2009 18:12:09 +0200 mumble (1.1.7-2) unstable; urgency=low [ Thorvald Natvig ] * Add workaround for threading bug in ALSA. * Add 32-bit overlay library on amd64. * Add documentation for the Ice interface to mumble-server. -- Patrick Matthäi Wed, 18 Feb 2009 17:56:28 +0200 mumble (1.1.7-1) unstable; urgency=low [ Patrick Matthäi ] * Add a mumble-dbg package, which contains the debugging symbols of mumble and mumble-server. * Move swedish translation debian/sv.po to debian/po/sv.po. This was a bad error of mine. * Remove debian/patches and dpatch, everything has been merged by upstream. [ Thorvald Natvig ] * New upstream release. Closes: #513119 * Added Spanish translation from Álvaro M. Recio * Synchronized copyright -- Patrick Matthäi Wed, 4 Feb 2009 10:32:16 +0200 mumble (1.1.6-5) unstable; urgency=low * Correct old webscript URL paths in mumble-server-web.README.Debian. * Fix copyright-with-old-dh-make-debian-copyright. Thanks lintian. * Pass -xglibc-private to dpkg-shlibdeps. This avoids an unsatisfied dependency on glibc-private with glibc >= 2.8, because mumble uses private symbols of glibc for the overlay feature. -- Patrick Matthäi Thu, 8 Jan 2009 19:45:09 +0200 mumble (1.1.6-4) unstable; urgency=low [ Patrick Matthäi ] * Do not use the "X$FOO" != "X" notation in mumble-server.{postinst,config}. This notation is just in the unquoted version needed. * Merged changelog from the 1.1.4-4+lenny1 release. * Add missing ${misc:Depends}. Thanks lintian. [ Debian l10n ] * Swedish translation from Martin Bagge . Closes: #506594 -- Patrick Matthäi Sat, 13 Dec 2008 12:59:18 +0200 mumble (1.1.6-3) unstable; urgency=low * Added 01-ftbfs_arm_qreal.dpatch. This patch fixes a FTBFS on arm{el} where qreal is not double. - Include dpatch. * Added needed ice33-translators | ice32-translators | ice-translators dependencies to mumble-server-web. -- Patrick Matthäi Fri, 3 Oct 2008 18:45:33 +0200 mumble (1.1.6-2) unstable; urgency=low * Added DEFINES+=HAVE_LIMITS_H DEFINES+=HAVE_ENDIAN_H to debian/rules. Now it should build on s390 and ia64. -- Patrick Matthäi Fri, 19 Sep 2008 21:35:35 +0200 mumble (1.1.6-1) unstable; urgency=low [ Thorvald Natvig ] * New upstream release. - Includes various minor bugfixes. -- Patrick Matthäi Sat, 13 Sep 2008 13:06:36 +0200 mumble (1.1.5-1) unstable; urgency=low [ Thorvald Natvig ] * New upstream release. * Added ZeroC ICE dependencies. * mumble-server-web now includes PHP setup, which necessitates setting the global ice.slice PHP variable. This will have to persist until the zeroc-ice-php package adds support for profiles. * Japanese translation from Masayuki Hamasaki . * Create a apache config file and put the web files under /usr/share/mumble-server-web * Remove the restart of hald, as we no longer use it. * Default to starting mumble-server. [ Patrick Matthäi ] * Do not install var/www/mumble-server/index.php with executable rights. Thanks lintian. * Changed preferred postfix depend to exim4 at the mumble-server-web package. Closes: #495852 -- Patrick Matthäi Sat, 6 Sep 2008 15:27:57 +0200 mumble (1.1.4-4+lenny1) testing-proposed-updates; urgency=low * Add missing dependency on hal to the mumble package and failover to "true" if invoke-rc.d should fail. Closes: #502748 -- Patrick Matthäi Sun, 19 Oct 2008 17:15:56 +0200 mumble (1.1.4-4) unstable; urgency=low [ Thorvald Natvig ] * Add README and README.Linux to mumble.docs * Revert to asking for server password, as you currently can't change the password once it's set. -- Patrick Matthäi Fri, 15 Aug 2008 14:53:19 +0200 mumble (1.1.4-3) unstable; urgency=low [ Thorvald Natvig ] * Fix ownership of /var/run/mumble-server so the pid file can be written. [ Patrick Matthäi ] * Add my forgotten signature in the 1.1.4-1 changelog, it was confusing. * Only ask for the serverpassword if no previous one has been set. * Set priority of the mumble-server/password question to medium instead of high. * Ordered the parameters of install in debian/rules, it looks now more clean. -- Patrick Matthäi Tue, 22 Jul 2008 21:51:43 +0200 mumble (1.1.4-2) unstable; urgency=medium [ Patrick Matthäi ] * Added missing Language-Team field in the german debconf translation. * Replaced initial template values in french debconf translation. * Replaced inline perl in mumble-server.config with shell scripting. * Removed libcgi-perl depend at mumble-server-web, it is not needed. Closes: #485010 * Bumped Standards-Version to 3.8.0 (no changes needed). [ Thorvald Natvig ] * Add mumble-server-web.README.Debian and move the information on the web scripts there. -- Patrick Matthäi Mon, 19 May 2008 17:38:05 +0100 mumble (1.1.4-1) unstable; urgency=low [ Patrick Matthäi ] * New upstream release. - Removed dpatch and all patches. They are merged in upstream. - Define the Plugin Path and added liblink plugin for mumble. - Renamed murmur-wrapper to murmur-user-wrapper and use murmur.ini now as example file. - Use the new -readsupw option instead of -supw for mumble-server. - Adjusted debian/copyright. * Changed destination of /etc/mumble-server/mumble-server.ini to /etc/mumble-server.ini. So on it is in sync now with the Ubuntu packaging and we can use mumble-server.{init,logrotate} from the upstream source. * Moved mumble-server from Recommends to Suggests at the mumble package. * Added libspeechd-dev build depend and speech-dispatcher recommend. * Added libqt4-opengl-dev build dependency. * Removed suggesting of festival. * The packaging itself is now BSD licensed. * Removed debconf depend. It will be added with ${misc:Depends}. * Handle /etc/mumble-server.ini and /etc/dbus-1/system.d/mumble-server.conf about conffile instead of ucf. * Changed priority of mumble-server/password from medium to high. It is highly recommend to set a password for the SuperUser account. [ Debian l10n ] * Czech translation from Miroslav Kure . Closes: #480302 * Russian translation from Yuri Kozlov . Closes: #480623 [ Thorvald Natvig ] * Add libqt4-sql-sqlite dependency for mumble-server. * Rename murmur-wrapper to murmur-user-wrapper in README.Debian * Adjusted '-readsupw'. * Don't manually remove files under /etc in postrm as that's handled by conffiles. * Add myself as Co-Maintainer. * Remove all unneeded dependencies from Build-Depends. -- Patrick Matthäi Tue, 13 May 2008 10:32:13 +0100 mumble (1.1.4-0ubuntu1~slicer) hardy; urgency=low * New upstream version. * murmur-wrapper renamed to murmur-user-wrapper. * Build-Depends and Recommends for Speech Dispatcher added, festival removed. * Link plugin added for positional audio. * Audio-system detection is handled at runtime, so no need to suggest PulseAudio/ALSA anymore. * Synced translations from debian's pkg-voip team. -- Thorvald Natvig Fri, 09 May 2008 01:30:00 +0200 mumble (1.1.3-4) unstable; urgency=low [ Patrick Matthäi ] * Added DM-Upload-Allowed control field. * Added build depend libglu1-mesa-dev. * Clean up on purge /var/lib/mumble-server/.config complete. * Removed the sed hack from debian/rules. It is fixed in qmake now. * Removed some whitespaces at EOL and newlines at EOF. * Some clean target fixes. [ Debian l10n ] * French translation from Steve Petruzzello . Closes: #477777 * Galician translation from Jacobo Tarrio . Closes: #478061 * Finnish translation from Esko Arajärvi . Closes: #478182 * Vietnamese translation from Clytie Siddall . Closes: #478222 * Euskara translation from Piarres Beobide . Closes: #478678 -- Patrick Matthäi Mon, 5 May 2008 09:40:02 +0100 mumble (1.1.3-3) unstable; urgency=low * Call do_configuration() in mumble-server.postinst after the function has been declared. Shame on me, I did not test it with bash and dash. Thanks for reporting Jan Hauke Rahm. Closes: #476554 * Added portuguese debconf translation. Thanks to Américo Monteiro. Closes: #476472 * Delete the mumble-server group and system account only, if it is available on the system on purge time. * Remove on purge time also /etc/dbus-1/system.d/murmur.conf and /etc/mumble-server/mumble-server.ini if they exist. -- Patrick Matthäi Fri, 18 Apr 2008 18:00:00 +0100 mumble (1.1.3-2) unstable; urgency=low * Added dirty workaround which removes some extra slashes generated from the newest Qt4.4-rc1 framework. Closes: #476307 * Added missing depend on libqt4-sql-sqlite for mumble. It will not be added through ${shlibs:Depends} since Qt4.4-rc1. Closes: #476308 * Added missing build-depends. -- Patrick Matthäi Tue, 16 Apr 2008 18:31:07 +0100 mumble (1.1.3-0ubuntu2) hardy; urgency=low * Make mumble-server depend on dbus. (LP: #202672) * Avoid crash when renaming tree objects (patch from upstream SVN). * Remove a warning when installing (missing --no-create-home). -- Thorvald Natvig Sat, 22 Mar 2008 01:25:00 +0200 mumble (1.1.3-1) unstable; urgency=low * Initial release. Closes: #429988 -- Patrick Matthäi Sun, 16 Mar 2008 11:09:08 +0100 mumble (1.1.3-0ubuntu1) hardy; urgency=low * New upstream version, which fixes a few crashbugs. * Licensing issues worked out, package is now BSD licensed (same as source). * Mumble-specific changes to Speex are now in upstream Speex, and this version includes all changes necessary to mumble to unbundle Speex. Once Speex 1.2beta4 or 1.2 final is out, unbundling can be completed. * Changed to use PulseAudio as default audio device, as it's the new default in Hardy. * Moved the perl cgi scripts for mumble-server into a separate package, which means mumble-server doesn't depend on httpd and mail-transport-agent. Those dependencies were also missing from mumble-server. * Updated packaging to adhere to "Debian Developer's Reference - Best Packaging Practices." * Closes the request to update to 1.1.3 (LP: #194836) -- Thorvald Natvig Sat, 23 Feb 2008 19:00:00 +0200 mumble (1.1.2-0ubuntu1) hardy; urgency=low * Packaging for inclusion in ubuntu universe (LP: #129081) -- Thorvald Natvig Mon, 03 Dec 2007 10:40:00 +0200