lemonldap-ng (1.3.3-1+deb8u2) jessie-security; urgency=high * CVE-2019-13031: Disable external entities in XML parsers to fix an issue that may lead to the disclosure of confidential data, denial of service, server side request forgery, port scanning from the perspective of the machine where the parser is located, etc. (Closes: #931117) -- Chris Lamb Thu, 04 Jul 2019 10:14:32 -0300 lemonldap-ng (1.3.3-1+deb8u1) jessie-security; urgency=high * Add patch to fix SAML token vulnerability (Closes: #928944, CVE-2019-12046) * Add NEWS to recommend storage separation -- Xavier Guimard Thu, 16 May 2019 16:26:12 +0200 lemonldap-ng (1.3.3-1) unstable; urgency=medium [ Xavier Guimard ] * Imported Upstream version 1.3.3 (Closes: #736739, #736807) * Update images copyrights * Add captcha directories management * Rename liblemonldap-ng-conf-perl to liblemonldap-ng-common-perl with a transitional package * Add libnet-facebook-oauth2-perl to recommended dependencies * Add libunicode-string-perl in dependencies * Rearrange dependencies as required in upstream * Update lintian overrides to add notifications directory * Call "migrate" debconf arg only if a previous version exists * Bump Standards-Version to 3.9.5 * Update javascript patch * Restore libxml-simple-perl in manager dependencies * Add psession dirs in lintian overrides * Use dpkg only to compare versions * Modify Apache-2.4 patch to be compliant both with Apache 2.2 and 2.4 unsing mod_version [ Salvatore Bonaccorso ] * Update Vcs-Browser URL to cgit web frontend [ gregor herrmann ] * Guard `dpkg --compare-versions' call in .config script with a check if the currently installed package version exists. Thanks to Ryan Tandy for the bug report. (Closes: #755945) * Explicitly (build) depend on libcgi-pm-perl. * Declare compliance with Debian Policy 3.9.6. -- Xavier Guimard Wed, 15 Oct 2014 21:14:52 +0200 lemonldap-ng (1.2.5-1) unstable; urgency=low * Imported Upstream version 1.2.5 * Change dependencies as proposed by upstream : + Add liblwp-protocol-https-perl in dependencies + Move liblemonldap-ng-handler-perl from portal dependencies to suggested dependencies * Remove hide-perl-warning and remove-dev-hook patches now included in upstram * Update description -- Xavier Guimard Thu, 05 Sep 2013 06:37:22 +0200 lemonldap-ng (1.2.4-2) unstable; urgency=low * Fix "transition towards Apache 2.4" by adding a patch to comment Apache-2.4 example configuration files (Closes: #669808, #669809, #669822) -- Xavier Guimard Sun, 02 Jun 2013 17:08:26 +0200 lemonldap-ng (1.2.4-1) unstable; urgency=low * Imported upstream version 1.2.4 * Replace libhttp-message-perl dependency by "libhttp-message-perl | libwww-perl (<< 6)" -- Xavier Guimard Wed, 24 Apr 2013 07:05:48 +0200 lemonldap-ng (1.2.3-1) unstable; urgency=low [ Salvatore Bonaccorso ] * Change Vcs-Git to canonical URI (git://anonscm.debian.org) [ Xavier Guimard ] Thanks a lot to Florian Schlichting for its review * Imported upstream version 1.2.3 * Update debian/copyright: + change remote license to GPL-2+ + update years * Update dependencies (many changes in upstream) * Remove verify-saml-signatures.patch now included in upstream * Fix permissions in debian/rules instead of in postinst scripts and add lintian-overrides files to hide lintian permissions warnings * Add patch to fix "Use of qw(...) as parentheses is deprecated" warning * Install MyHandler.pm in /usr/share/lemonldap-ng/handler/ * Update debian/control description * Change remote license to GPL-2+ (change introduced in 1.2.3) * Use dpkg --compare-versions to launch migration scripts in *.postinst * Correct #DEBHELPER# usage in *.postinst * Add patch to remove upstream dev hook -- Xavier Guimard Mon, 15 Apr 2013 06:33:58 +0200 lemonldap-ng (1.2.2-3) unstable; urgency=low * Remove recursive changes in debian/*.postinst (chown and chmod) * Remove /var/lib/lemonldap-ng/handler from dh_installdirs list (Closes: #694890) * Remove pre-defined MyHandler file. Now available from examples only * Move test application to examples directory * Update README.Debian file * Replace duplicate files by links * Update descriptions * Update debian/copyright (missing entries) * Add verify-saml-signatures.patch, fix for CVE-2012-6426 (Closes: #696329) -- Xavier Guimard Sun, 23 Dec 2012 17:36:39 +0100 lemonldap-ng (1.2.2-2) unstable; urgency=low * Change maintainer to Debian Perl Group * Add Brazilian template translation (Closes: #693366) * Update debian/rules to modern format * Clean documentation * Clean postinst scripts * Update debian/copyright * Replace old jquery removal script by a patch * Update README.Debian * Add debian/NEWS * Remove lemonldap-ng-doc.dirs * Add Vcs-* fields in debian/control * Remove debian/distributions file * Add libauthcas-perl in the recommended list * Update Build-Depends-Indep to test all cases -- Xavier Guimard Fri, 30 Nov 2012 20:30:17 +0100 lemonldap-ng (1.2.2-1) unstable; urgency=low * New upstream release * Bump Standard-Version to 3.9.4 -- Xavier Guimard Sun, 23 Sep 2012 07:34:49 +0200 lemonldap-ng (1.2.1-1+svn20120715) unstable; urgency=low * New upstream release * SVN repo include some little bugfixes added here -- Xavier Guimard Sun, 15 Jul 2012 09:54:17 +0200 lemonldap-ng (1.1.2-5) unstable; urgency=low * Remove some mistakes reported by http://lintian.debian.org/full/x.guimard@free.fr.html : - use http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ instead of http://wiki.debian.org/Proposals/CopyrightFormat?action=recall&rev=196 - points to /usr/share/common-licenses/LGPL-3 instead of usr/share/common-licenses/LGPL * Use dh_link for examples in doc -- Xavier Guimard Sat, 24 Mar 2012 17:56:34 +0100 lemonldap-ng (1.1.2-4) unstable; urgency=low * Debian po update: - da translation (Closes: #664234) -- Xavier Guimard Mon, 19 Mar 2012 21:32:17 +0100 lemonldap-ng (1.1.2-3) unstable; urgency=low * Use libjs-jquery-cookie package instead of embeddeding it * Upgrade to standard 3.9.3 * Minify js and css -- Xavier Guimard Mon, 05 Mar 2012 21:53:40 +0100 lemonldap-ng (1.1.2-2) unstable; urgency=low * Fix files not purged (Closes: #656458) -- Xavier Guimard Mon, 20 Feb 2012 18:00:09 +0100 lemonldap-ng (1.1.2-1) unstable; urgency=low * New upstream release * liblemonldap-ng-portal-perl:should depend on libmime-lite-perl (Closes: #645217) -- Xavier Guimard Sat, 15 Oct 2011 09:16:53 +0200 lemonldap-ng (1.1.1-2) unstable; urgency=low * liblasso3-perl has been renamed to liblasso-perl * lemonldap-ng should depend on javascript-common (Closes: #637223) -- Xavier Guimard Sun, 18 Sep 2011 14:14:58 +0200 lemonldap-ng (1.1.1-1) unstable; urgency=low * New upstream release -- Xavier Guimard Mon, 08 Aug 2011 11:31:40 +0200 lemonldap-ng (1.1.0-1) unstable; urgency=low * New upstream release * Debian po update: * fi translation (Closes: #619752) * ja translation update (Closes: #624829) -- Xavier Guimard Sat, 09 Jul 2011 09:12:21 +0200 lemonldap-ng (1.0.4-1) unstable; urgency=low * New upstream release * Debian po update: * es translation update (Closes: #607735) * sv translation update (Closes: #608785) * sk translation update (Closes: #619264) * Missing build dependencies (libhtml-template-perl and libxml-simple-perl) (Closes: #608878) -- Xavier Guimard Sat, 26 Mar 2011 09:56:35 +0100 lemonldap-ng (1.0.1-1) unstable; urgency=low * New upstream release * Debian po update: * ru translation (Closes:#606366) * cz translation (Closes:#606435) -- Xavier Guimard Fri, 17 Dec 2010 21:32:33 +0100 lemonldap-ng (1.0-2) unstable; urgency=low * Debian po update: * pt translation (Closes: #605917) * de translation (Closes: #605936) * Minor language improvement (Closes: #605937) -- Xavier Guimard Sun, 05 Dec 2010 08:16:08 +0100 lemonldap-ng (1.0-1) unstable; urgency=low * New upstream release -- Xavier Guimard Wed, 01 Dec 2010 14:55:09 +0100 lemonldap-ng (0.9.4.1-5) unstable; urgency=low * Fix bug "cleanup sub slows down considerably the Apache server" (Closes: #599688) * quilt format -- Xavier Guimard Sun, 10 Oct 2010 10:24:04 +0200 lemonldap-ng (0.9.4.1-4) unstable; urgency=low * Spanish po-debconf template translation (Closes: #584453) * Debian policy update -- Xavier Guimard Sat, 18 Sep 2010 06:56:36 +0200 lemonldap-ng (0.9.4.1-3) unstable; urgency=low * Japanese po-debconf template translation (Closes: #559396) * Debian policy update -- Xavier Guimard Sat, 13 Feb 2010 14:36:40 +0100 lemonldap-ng (0.9.4.1-2) unstable; urgency=low * Lintian : - lintian.override for liblemonldap-ng-conf - registering doc * change lemonldap-ng section to perl as claimed by archive-administrator -- Xavier Guimard Mon, 12 Oct 2009 16:26:26 +0200 lemonldap-ng (0.9.4.1-1) unstable; urgency=low * New upstream release * Russian translation (Closes: #550552) -- Xavier Guimard Mon, 12 Oct 2009 14:40:46 +0200 lemonldap-ng (0.9.4-1) unstable; urgency=low * New upstream release * Closes: #512009 (closed since 0.9.3.2) -- Xavier Guimard Sun, 05 Jul 2009 13:46:54 +0200 lemonldap-ng (0.9.3.4-2) unstable; urgency=low * Missing build-depends libregexp-assemble-perl (Closes: #521959) -- Xavier Guimard Sat, 11 Apr 2009 08:14:19 +0200 lemonldap-ng (0.9.3.4-1) unstable; urgency=low * New upstream release * Closes 3 bugs (see http://forge.objectweb.org/tracker/?atid=350401&group_id=274&func=browse bugs number 312418, 312625 and 312627) -- Xavier Guimard Thu, 05 Feb 2009 16:27:16 +0100 lemonldap-ng (0.9.3.2-1) unstable; urgency=low * New upstream release * Closes: #510562 * Closes: #510563 -- Xavier Guimard Sat, 03 Jan 2009 09:51:55 +0100 lemonldap-ng (0.9.3-1) unstable; urgency=low * New upstream release -- Xavier Guimard Wed, 31 Dec 2008 12:11:50 +0100 lemonldap-ng (0.9.2-1) unstable; urgency=low * New upstream release * Czech translation for debconf (Closes: #483301) * Swedish translation for debconf (Closes: #487713) -- Xavier Guimard Tue, 24 Jun 2008 15:12:09 +0200 lemonldap-ng (0.9.1-1) unstable; urgency=low * New upstream release -- Xavier Guimard Fri, 11 Apr 2008 16:48:59 +0200 lemonldap-ng (0.9-1) unstable; urgency=low New upstream release * purgeCentralCache was not correctly installed (Closes: #461572) * Portuguese debconf translation (Closes: #451820) * German debconf translation (Closes: #462807) -- Xavier Guimard Mon, 25 Feb 2008 15:06:49 +0100 lemonldap-ng (0.8.3.1-1) unstable; urgency=low * Initial release. (Closes: #429441: ITP: lemonldap-ng -- lemonldap-ng is a Perl web single-sign-on system usable as Apache module - Debian Bug report logs) -- Xavier Guimard Wed, 07 Nov 2007 16:51:23 +0100