redmine (1.0.1-2+deb6u11) squeeze-lts; urgency=high * [CVE-2015-8346] Time logging form may disclose subjects of issues that are not visible. -- Chris Lamb Thu, 26 Nov 2015 10:55:58 +0200 redmine (1.0.1-2) stable-security; urgency=high * Security update, fixes - Infoleak in journals controller, - Persistent XSS in issue description, - Command Execution in repository. (Closes: #608397) -- Jérémy Lal Tue, 04 Jan 2011 22:49:03 +0100 redmine (1.0.1-1) unstable; urgency=low * Upstream update, fixes many 1.0.0 RC bugs, see : http://www.redmine.org/versions/show/21 * Patch for libi18n-ruby 0.4.1 support. (Closes: #592672) * Postinst note should be an error. (Closes: #591220) * Update translations. (Closes: #591072, #591219, #591235, #591268, #591308, #591689, #591716, #592371) * Fix /usr/share/doc/redmine/examples/apache2-* to work with libapache2-mod-fcgid >= 2.3.5 (LP: #620392) * Rephrase web server configuration section in README.Debian (LP: #620412) -- Jérémy Lal Sun, 01 Aug 2010 15:41:26 +0200 redmine (1.0.0-4) unstable; urgency=low * If package redmine- is not installed, display a postinst debconf note and do not configure that db instance. (Closes: #590695) * Migration from rails 2.2 links : check if link exists with -L, not -e. * Add cs translation. (Closes: #589951) * Display correct path for email.yml configuration. (Closes: #590846) * Fix multiple db config by executing dbconfig scripts in a subshell. -- Jérémy Lal Fri, 30 Jul 2010 15:12:38 +0200 redmine (1.0.0-3) unstable; urgency=low * Ensure vendor/rails link is created. -- Jérémy Lal Tue, 20 Jul 2010 23:22:42 +0200 redmine (1.0.0-2) unstable; urgency=low * Fix detection of rails 2.2 links. (Closes: #588583) -- Jérémy Lal Tue, 20 Jul 2010 16:00:17 +0200 redmine (1.0.0-1) unstable; urgency=low * New upstream release : upstream considers it is a Release Canditate. Expect an update soon. * Refreshed quilt patches * Coderay plugin has been updated : update debian/rules and patch one of its files to remove an unnecessary shebang. * README.Debian : add more info about launching with webrick. (Closes: #589033) -- Jérémy Lal Sun, 18 Jul 2010 23:13:46 +0200 redmine (0.9.6-1) unstable; urgency=low * New upstream release -- Jérémy Lal Fri, 09 Jul 2010 23:48:32 +0200 redmine (0.9.5-1) unstable; urgency=low * New upstream release * Standards-Version 3.9.0, BSD license included in copyright file. * uscan calls uupdate. -- Jérémy Lal Tue, 29 Jun 2010 06:59:34 +0200 redmine (0.9.4-4) unstable; urgency=low * Let rails decide GC. (Closes: #585976) -- Jérémy Lal Fri, 18 Jun 2010 23:36:14 +0200 redmine (0.9.4-3) unstable; urgency=low * Depends on rails 2.3.5. (Closes: #583107, #583313) * Clean up dependencies and recommandations. * Overall improvement over previous rails 2.2.3 version, since upstream supports redmine-0.9.4 / rails 2.3.5 combination. -- Jérémy Lal Thu, 27 May 2010 02:44:42 +0200 redmine (0.9.4-2) unstable; urgency=low * ENV['RAILS_RELATIVE_URL_ROOT'] should never be empty. (Closes: #581383) -- Jérémy Lal Wed, 12 May 2010 17:25:00 +0200 redmine (0.9.4-1) unstable; urgency=low * New upstream release. * Migration from trac fix. (Closes: #576682) * /usr/share/redmine/config/environment.rb owned by www-data:root, so Passenger runs redmine as www-data instead of nobody. (Closes: #575462) * Use dh_installexamples instead of docs. * Additionnal and tested examples for passenger, nginx, spawn-fcgi. * Security fix : Escape revision on repository view. * DM-Upload-Allowed: yes -- Jérémy Lal Sun, 02 May 2010 13:58:12 +0200 redmine (0.9.3-3) unstable; urgency=low * Removes completely ineffective fcgi patch. * Security fix : Escape href attribute in auto links. * Security fix : Fixes permission check in QueriesController. -- Jérémy Lal Thu, 25 Mar 2010 00:13:02 +0100 redmine (0.9.3-2) unstable; urgency=low * Rails 2.2 fix for mantis and trac migration tasks. * Rails 2.2 fix for application_controller naming, allows better compatibility with plugins. * Rails 2.2 fix hanging fcgi processes when database connections are left open : restarting spawn-fcgi is no more painful. * fr.po update. (Closes: #575152) -- Jérémy Lal Wed, 24 Mar 2010 12:28:13 +0100 redmine (0.9.3-1) unstable; urgency=low * First attempt to support plugins. Unfortunately, many of them already depend on rails 2.3, so they'll need some patches. * Load session.yml in config/environment.rb before loading plugins. (Closes: #549453) * Move public/plugin_assets to /var/cache/redmine/plugin_assets. The server config must be fixed, examples are provided. (Closes: #570308) * Recommends libapache2-mod-passenger and provide some example for its configuration. (Closes: #570184) * Update email.yml example, document in README.Debian a bug with delivery method async_smtp. (Closes: #570402) -- Jérémy Lal Sun, 28 Feb 2010 19:32:55 +0100 redmine (0.9.2-2) unstable; urgency=low * Switch to dpkg-source 3.0 (quilt) format. * Drop get-orig-source, use uscan only, add copyright for rails * Fix forms select helper, another rails 2.2 incompatibility. (Closes: #569080) * Correctly declare generate_session_store task. (Closes: #569555) * Monkey patch to allow XHR requests in rails 2.2.3-2. -- Jérémy Lal Sun, 14 Feb 2010 15:58:08 +0100 redmine (0.9.2-1) unstable; urgency=low * Upstream update * Adds id language to debian/config list. * Correct apache2 host example config. (Closes: #568859) * Migrate databases and plugins even when not reinstalled by dbconfig. (Closes: #568861) -- Jérémy Lal Mon, 08 Feb 2010 14:08:42 +0100 redmine (0.9.1-1) unstable; urgency=low * Stop using deprecated dbfile param in database.yml. * Use session.yml to store secret session key. * Supports and documents running as unprivileged user. (Closes: #564086) * Split debian/patches. * Fix typo in po templates. (Closes: #553376) * Adds pt, de, sv, ru, es, ja translations. (Closes: #553375, #551002, #552736, #554351, #560999, #555693) * Fixes CVE-2009-4459 : uses the title tag before defining the character encoding in a meta tag. (Closes: #563940) * Install does not fail if rake fails (Closes: #566160) * Several rails 2.2 incompatibilities have been fixed, patches are applied with greater care. (Closes: #555956, #567512) -- Jérémy Lal Sat, 30 Jan 2010 16:48:26 +0100 redmine (0.9.0~svn2907-1) unstable; urgency=low * Upstream update. * Supports reconfigure in postinst. * Db migration of plugins in postinst. * Advertise async_smtp in email.yml example. -- Jérémy Lal Sat, 10 Oct 2009 17:43:46 +0200 redmine (0.9.0~svn2903-1) unstable; urgency=low * Upstream update. * Removes circular dependencies (Closes: #549442) * Session cookies path should respect RAILS_RELATIVE_URL_ROOT env variable. * Add folder for proper initialization of some plugins. -- Jérémy Lal Thu, 08 Oct 2009 18:59:18 +0200 redmine (0.9.0~svn2902-1) unstable; urgency=low * Initial release (Closes: #478741) -- Jérémy Lal Thu, 01 Oct 2009 12:16:16 +0200