variety (0.6.3-5+deb9u1) stretch; urgency=medium * Backport various security fixes from Variety 0.6.6: - Fix shell injection on deleting files to trash, from upstream commit https://github.com/varietywalls/variety/commit/475a5e076b9c8c7c83176214f84455dc78834723 - Fix shell injection in filter and clock with specially crafted filenames; upstream commit https://github.com/varietywalls/variety/commit/65722237baa996b0ef2389cea693bfeeba62b224 - Harden ImageMagick calls against potential shell injection: https://github.com/varietywalls/variety/commit/a7c134ecd494bb878c73df9f65cb838dbb57413a -- James Lu Tue, 14 Nov 2017 12:42:11 -0800 variety (0.6.3-5) unstable; urgency=medium * Add fix-autoscroll-high-cpu.patch backported from upstream Bzr revision 592 (https://bazaar.launchpad.net/~variety/variety/trunk/revision/592) This fixes an issue where the Wallpaper Selector and History panels drain entire CPU cores when open. (LP: #1494992) * Fix list of supported sites in package extended description: Wallbase.cc support was removed in 0.6.3, while Wallhaven.cc was never mentioned even though it is supported. -- James Lu Sat, 06 May 2017 16:43:32 -0700 variety (0.6.3-4) unstable; urgency=medium * Upload to unstable. * Remove python-lxml from build dependencies as well. -- James Lu Thu, 27 Apr 2017 22:49:27 -0700 variety (0.6.3-3) experimental; urgency=medium * d/control: Remove Wallpapers.net from the extended description; it was removed upstream in Variety 0.6.1. * Remove lxml dependency, it is unused since the Wallpapers.net removal in Variety 0.6.1. * Drop unused patch setup.py-install-requires.diff * Add disable-panoramio.patch from Arch Linux version 0.6.3-3, modifying it to also migrate away from Panoramio sources (LP: #1636389) - Also remove libjs-underscore dependency, as Panoramio was the only source using it. * Refresh menu-position-varargs.patch. * Refresh forwarded state & dates of most patches. -- James Lu Mon, 17 Apr 2017 11:13:39 -0700 variety (0.6.3-2) experimental; urgency=medium * Add menu-position-varargs.patch from upstream Bzr revision 582 (https://bazaar.launchpad.net/~peterlevi/variety/trunk/revision/582) to fix menus showing up at the top left of the screen on some systems. (LP: #1598298) -- James Lu Wed, 15 Mar 2017 12:12:09 -0700 variety (0.6.3-1) unstable; urgency=medium * New upstream release. * Add patch d/patches/remove-timebombs.patch, to remove a fixed 180-day timebomb introduced upstream. * debian changes: - Switch Vcs-Browser field to cgit. - Fix Vcs-Git URL. -- James Lu Wed, 09 Nov 2016 20:55:55 -0800 variety (0.6.2-1) unstable; urgency=medium * New upstream release. * Merge upstream packaging changes: - Add depends on python-requests and python-imaging, removing python-pil. - Suggest feh for i3-wm support (LP: #1584748) * debian/ changes: - Bump Standards Version to 3.9.8 - no changes needed. - Fix python-distutils-extra build-dep version (should be >= 2.18, not >= 2.10) (LP: #1368424) - Update watch file for new tarball version format used by upstream. - Override script-not-executable Lintian warning for install_ssl_deps.sh (not directly executed by the user). - Use https:// links in Vcs-* fields. -- James Lu Mon, 29 Aug 2016 17:07:51 -0700 variety (0.6.0-1) unstable; urgency=low * Set section to graphics instead of python. (Closes: #814705) * New upstream release. -- James Lu Sun, 21 Feb 2016 18:01:34 -0800 variety (0.5.5-1) unstable; urgency=medium * Initial Debian release. (Closes: #758223) -- James Lu Sun, 08 Nov 2015 10:08:48 -0800