radicale (0.9-1+deb8u1) jessie-security; urgency=high

  * Non-maintainer upload.
  * CVE-2015-8748 and CVE-2015-8747:
    Fix insecure path handling by sanitizing system paths and always
    making them absolute. Fix multifilesystem backend allowed access
    to arbitrary files on all platforms. (Closes: #809920)

 -- Markus Koschany <apo@debian.org>  Sat, 30 Jan 2016 16:36:20 +0100

radicale (0.9-1) unstable; urgency=medium

  [ upstream ]
  * New release - codename "Rivers".
    + Custom handlers for auth, storage and rights.
    + 1-file-per-event storage.
    + Git support for filesystem storages.
    + DB storage working with PostgreSQL, MariaDB and SQLite.
    + Clean rights manager based on regular expressions.
    + Support of contacts for Apple's clients.
    + Support colors.
    + Decode URLs in XML.
    + Fix PAM authentication.
    + Use consistent etags.
    + Use consistent sorting order.
    + Return 401 on unauthorized DELETE requests.
    + Move pid file creation in child process.
    + Allow requests without base_prefix.

  [ Jonas Smedegaard ]
  * Fix tidy execution bit and hashbang of FCGI and WSGI scripts.
  * Update copyright info:
    + Add a copyright holder.
    + Add email of a copyright holder.
  * Improve short and long descriptions.
  * Suggest python-dulwich: Needed for git-tracked filesystem backend.
  * Update patches.

 -- Jonas Smedegaard <dr@jones.dk>  Mon, 25 Aug 2014 02:45:51 +0200

radicale (0.8-2) unstable; urgency=medium

  * Update TODOs with references to upstream issue tracking.
  * Include as normal files (not examples) WSGI and FCGI scripts and SQL
    schema: They should be perfectly usable as-is.
    Closes: Bug#682016. Thanks to Konstantin Khomoutov.
  * Tidy SysV init file slightly.
  * Fix allow read access for adm group to logfiles.
    Thanks to Konstantin Khomoutov.
  * Bump standards-version to 3.9.5.
  * Include upstream documentation, fetched from Github.
    Closes: Bug#730044. Thanks to W. Martin Borgert.
  * Relax build-dependency on cdbs (likely was too tight due to a bug in
    cdbs in checking Python build system was used from a subdir).

 -- Jonas Smedegaard <dr@jones.dk>  Thu, 08 May 2014 18:00:56 +0200

radicale (0.8-1) unstable; urgency=low

  [ upstream ]
  * New release.
    + New rights management; configurations need to be updated.
    Closes: bug#676660.

  [ Christian M. Amsüss ]
  * Drop patch 0001: Applied upstream.
  * Update patch 1001 to comment out new options, and refresh.
  * Add myself as uploader.

  [ Martín Ferrari ]
  * Check DISABLED var before restarting. (Closes: #713936).
  * Remove Default-Stop levels from the LHS initscript header.
    Closes: bug#714165.
  * Add FCGI and WSGI scripts as examples.
    Related to bug#682016.

  [ Jonas Smedegaard ]
  * Adjust init script to allow stopping even when daemon disabled (only
    skip start part of restart action, not also stop part).
  * Bump debhelper compatibility to 8.
  * Use anonscm.debian.org URL for Vcs-Git.
  * Bump standards-version to 3.9.4.
  * Fix use comment pseudo-sections in copyright file to obey silly
    restrictions of copyright format 1.0.
  * Have git-import-orig suppress upstream .gitignore file.
  * Build-depend on devscripts, enabling copyright check always.
  * Relax to build-depend unversioned on help2man: Needed version
    satisfied even in oldstable.
  * Update watch and rules files to directly use github.com URL (not
    githubredir.debian.net).
  * Stop tracking md5sum of upstream tarball.
  * Install SQL schema file as example.
  * Fix suggest python-pampy (not python-pam).
  * Suggest python-requests (for http auth) and python-sqlalchemy (for
    SQL storage).

 -- Jonas Smedegaard <dr@jones.dk>  Fri, 30 Aug 2013 22:42:14 +0200

radicale (0.7-1.1) unstable; urgency=low

  * Non-maintainer upload. (Acknowledged by Jonas Smedegaard)
  * Tighten dependency on python-radicale.
    Make the Depends on python-radicale explicit on the binary package
    version. (Closes: #699724)

 -- Salvatore Bonaccorso <carnil@debian.org>  Sun, 10 Feb 2013 21:02:27 +0100

radicale (0.7-1) unstable; urgency=low

  * New upstream release.

  [ Martin Stigge ]
  * Remove build-dependency on python-dev. Not needed.
  * Add myself to Uploaders:
  * Remove build/ directory in clean target.
  * Implement daemon handling:
    + Add postinst for creation of user and directory.
    + Add postrm to remove log and run dirs from /var.
    + Add initscript and defaults file
    + Patch configuration to fit daemon needs.
    + Add logrotate config file.
    + Depend on adduser.
  * Comment out all config defaults to ease maintenance.
  * Add patch 0001 to fix Iceowl support in newly created calendars,
    cherry-picked from upstream VCS.

  [ Jonas Smedegaard ]
  * Update CDBS suppression for unneeded build-dependency on python-dev.
  * Bump standards-version to 3.9.3.
  * Simplify install files, as supported by debhelper 7.
  * Use anonscm.debian.org for Vcs-Browser field.
  * Extend my copyright for Debian packaging.
  * Update copyright file:
    + Bump format to 1.0.
    + Fix double-indent in Copyright fields as per Policy §5.6.13.
    + Shorten GPL comments.
    + Quote license strings in comments.
    + Move reference to upstream licensing URL to topmost GPL comment.
    + Extend copyright years.
  * Document authentication needs in long description.
    Suggest apache2-utils python-ldap python-pam courier-authdaemon.
  * Sync long descriptions with intro on upstream project website.
  * Reduce patch and split into multiple ones to ease upstream adoption.
  * Add --daemon and --pid options as default daemon arguments (and stop
    patching similarly in config file).

 -- Jonas Smedegaard <dr@jones.dk>  Fri, 15 Jun 2012 00:13:19 +0200

radicale (0.6.4-1) unstable; urgency=low

  * New upstream release.
  * Use Github as upstream source.
  * Drop dpkg-source local-options hint: Declared options are default
    since dpkg-source 1.16.1.
  * Bump debhelper compat level to 7.
  * Fix install logging config file.
    Closes: bug#655155. Thanks to Martin Stigge.

 -- Jonas Smedegaard <dr@jones.dk>  Mon, 09 Jan 2012 14:51:38 +0100

radicale (0.6.3-1) unstable; urgency=low

  * New upstream release.
    Closes: bug#640145.
  * Drop all patches: applied upstream now.
  * Use new default python helper (not deprecated python-support).
    Tighten build-dependency on python and python-dev to versions
    supporting it. Stop build-depending on python-support.
  * Have radicale explicitly depend on python (though already satisfied
    through python-radicale), to silence lintian.
  * Update copyright file:
    + Rewrite using draft 174 of DEP-5 format.
    + Shorten license comments.
  * Bump policy compliance to standards-version 3.9.2.
  * Adjust source for upstream changed download URL:
    + Relax watch file regexp.
    + Update DEB_UPSTREAM_URL (used by CDBS get-orig-source target).
  * Tighten build-dependency on cdbs.
  * Build-depend unversioned on debhelper: Needed version satisfied even
    in unstable.

 -- Jonas Smedegaard <dr@jones.dk>  Tue, 20 Dec 2011 20:37:43 +0700

radicale (0.4-2) unstable; urgency=low

  * Ease building with git-buildpackage:
    + Git-ignore quilt .pc dir.
    + Add dpkg-source local-options.
  * Ease backporting:
    + Avoid optional build-dependencies.
    + Bump down debhelper compat level to 6.
      Relax build-dependency on debhelper accordingly.
    + Adjust CDBS usage to only optionally use new features.
      Build-depend unversioned on cdbs.
      Stop build-depending on devscripts.
  * Build-depend on dh-buildinfo.
  * Add patches 0001-0014 from upstream Git, for improved inter-
    operability with MacOS, Windows and iPhone clients.
  * Update copyright file:
    + Rewrite using Subversion rev.173 of draft DEP5 format.
  * Use new default python helper (not deprecated python-support).
    + Stop explicitly setting python helper hint in rules file.
    + Tighten build-dependency on python and python-dev to versions
      supporting it.
    + Stop build-depending on python-support.
  * Have radicale explicitly depend on python (though already satisfied
    through python-radicale), to silence lintian.

 -- Jonas Smedegaard <dr@jones.dk>  Sat, 12 Mar 2011 15:49:03 +0100

radicale (0.4-1) unstable; urgency=low

  * New upstream release.

  [ Jonas Smedegaard ]
  * Install new global config file below /etc.
  * Bump standards-version to 3.9.1.

 -- Jonas Smedegaard <dr@jones.dk>  Sun, 05 Sep 2010 15:07:52 +0200

radicale (0.3-2) unstable; urgency=low

  * Tighten watch file to avoid git snapshot tarball.

 -- Jonas Smedegaard <dr@jones.dk>  Tue, 20 Jul 2010 12:28:33 +0200

radicale (0.3-1) unstable; urgency=low

  * New upstream release.
  * Fix watch file.
  * Bump Policy compliance to Standards-Version 3.9.0.

 -- Jonas Smedegaard <dr@jones.dk>  Tue, 29 Jun 2010 20:02:32 +0200

radicale (0.2-3) unstable; urgency=low

  * Fix tighten build-dependency on help2man to versions implementing
    option --version-string.

 -- Jonas Smedegaard <dr@jones.dk>  Tue, 18 May 2010 16:44:14 +0200

radicale (0.2-2) unstable; urgency=low

  * Generate manpage using script and library in destdir (not builddir).
  * Ensure proper hash-bang in Python script.
  * Fix append version to python dependency if using non-default
    version.
  * Fix have radicale depend on python-radicale.
  * Fix use of ${python:Provides} (not bogus ${python:Replaces}) and
    ${python:Versions}.

 -- Jonas Smedegaard <dr@jones.dk>  Tue, 18 May 2010 04:06:34 +0200

radicale (0.2-1) unstable; urgency=low

  * Initial release. Closes: bug#581979.

 -- Jonas Smedegaard <dr@jones.dk>  Mon, 17 May 2010 16:19:37 +0200
