typo3-src (4.5.40+dfsg1-1~tanglu1.1) bartholomea-updates; urgency=high

  * No-change rebuild for Tanglu because of security issue DSA 3164-1

 -- Thomas Funk <t.funk@web.de>  Sun, 22 Feb 2015 22:50:45 +0100

typo3-src (4.5.40+dfsg1-1) unstable; urgency=high

  * New upstream release:
    - fixes: "TYPO3-CORE-SA-2015-001: Authentication Bypass"
      (Closes: #778870)
    - fixes: "TYPO3-CORE-SA-2014-002: Multiple Vulnerabilities in TYPO3 CMS"
      (Closes: #766502)

 -- Christian Welzel <gawain@camlann.de>  Sat, 21 Feb 2015 20:00:00 +0100

typo3-src (4.5.35+dfsg1-1) unstable; urgency=low

  * New upstream release.

 -- Christian Welzel <gawain@camlann.de>  Thu, 31 Aug 2014 12:00:00 +0200

typo3-src (4.5.34+dfsg1-1) unstable; urgency=high

  * New upstream release:
    - fixes: "TYPO3-CORE-SA-2014-001: Multiple Vulnerabilities in TYPO3 CMS"
      (Closes: #749215)

 -- Christian Welzel <gawain@camlann.de>  Sun, 25 May 2014 10:00:00 +0200

typo3-src (4.5.33+dfsg1-1) unstable; urgency=low

  * New upstream release.

 -- Christian Welzel <gawain@camlann.de>  Wed, 30 Apr 2014 10:00:00 +0200

typo3-src (4.5.32+dfsg1-1) unstable; urgency=medium

  * New upstream release:
    - fixes: "TYPO3-CORE-SA-2013-004: Multiple Vulnerabilities in
      TYPO3 CMS" (Closes: #731999)

 -- Christian Welzel <gawain@camlann.de>  Fri, 13 Dec 2013 20:08:14 +0100

typo3-src (4.5.30+dfsg1-2) unstable; urgency=low

  * Reworked typo3-dummy.postinst and typo3-dummy.postrm (Closes: 714888).
  * Added mysql-client to dependency list of typo3-dummy.

 -- Christian Welzel <gawain@camlann.de>  Thu, 21 Sep 2013 23:08:14 +0200

typo3-src (4.5.30+dfsg1-1) unstable; urgency=low

  * New upstream release.

 -- Christian Welzel <gawain@camlann.de>  Thu, 21 Sep 2013 22:08:14 +0200

typo3-src (4.5.29+dfsg1-1) unstable; urgency=medium

  * New upstream release:
    - fixes: "TYPO3-CORE-SA-2013-002: Cross-Site Scripting and Remote
      Code Execution Vulnerability in TYPO3 Core" (Closes: 720194)
  * Import of sources of 2.0.4.6 of 1pixelout audio player from 
    http://subversion.assembla.com/svn/1pixelout/audio-player/tags/2.0.4.6.
  * Changed audio player license (GPL-2 -> MIT).

 -- Christian Welzel <gawain@camlann.de>  Wed, 21 Aug 2013 22:08:14 +0200

typo3-src (4.5.27+dfsg1-3) unstable; urgency=low

  * Added italian translation (Closes: #712400)

 -- Christian Welzel <gawain@camlann.de>  Thu, 20 Jun 2013 11:26:36 +0200

typo3-src (4.5.27+dfsg1-2) unstable; urgency=low

  * Fix detection of apache 2.2 (Closes: #710512).

 -- Christian Welzel <gawain@camlann.de>  Tue, 04 Jun 2013 20:13:56 +0200

typo3-src (4.5.27+dfsg1-1) unstable; urgency=low

  * New upstream release.
  * Removed patch for wheezy patch level version.
  * Removed patch for TYPO3-SA-2013-001 (integrated into upstream).
  * Removed patch for TYPO3-CORE-SA-2012-004 (integrated into upstream).
  * Set standards version to 3.9.4.
  * Removed DM-Upload-Allowed header.
  * Removed access to /lib/init/vars.sh from typo3-dummy.init.
  * Added database schema change for typo3 bug 16762.

 -- Christian Welzel <gawain@camlann.de>  Thu, 30 May 2013 17:37:22 +0200

typo3-src (4.5.19+dfsg1-5) unstable; urgency=low

  * Added patch for TYPO3-SA-2013-001. (Closes: #702574)
  * Set patch level version to -pl.4.5.25.

 -- Christian Welzel <gawain@camlann.de>  Fri, 08 Mar 2013 17:02:05 +0100

typo3-src (4.5.19+dfsg1-4.1) unstable; urgency=low

  * Non-maintainer upload.
  * Fix "copyright file missing after upgrade (policy 12.5)":
    replace directory with symlink in typo3.postinst.
    Thanks Andreas Beckmann for the bug report and the template for the fix.
    (Closes: #698631)

 -- gregor herrmann <gregoa@debian.org>  Mon, 28 Jan 2013 21:23:03 +0100

typo3-src (4.5.19+dfsg1-4) unstable; urgency=medium

  * Added patch for regression introduced by TYPO3-SA-2012-5-patch.
  * Set patch level version to -pl.4.5.22.

 -- Christian Welzel <gawain@camlann.de>  Tue, 13 Nov 2012 12:04:00 +0100

typo3-src (4.5.19+dfsg1-3) unstable; urgency=medium

  * Added patch for TYPO3-SA-2012-5 (Closes: #692775)
  * Set patch level version to -pl.4.5.21.

 -- Christian Welzel <gawain@camlann.de>  Thu, 08 Nov 2012 22:04:00 +0100

typo3-src (4.5.19+dfsg1-2) unstable; urgency=low

  * Added rsaauth and saltedpasswords to the list of installed extensions and
    change owner and permissions of generated localconf.php in postinst.
    (Closes: 689329)

 -- Christian Welzel <gawain@camlann.de>  Wed, 10 Oct 2012 15:09:57 +0200

typo3-src (4.5.19+dfsg1-1) unstable; urgency=high

  * New upstream release:
    - fixes: "TYPO3 Security Bulletin TYPO3-CORE-SA-2012-004: Several
      Vulnerabilities in TYPO3 Core" (Closes: 685011)

 -- Christian Welzel <gawain@camlann.de>  Wed, 15 Aug 2012 22:40:03 +0200

typo3-src (4.5.17+dfsg1-1) unstable; urgency=low

  * New upstream release.
  * Added all linked external resources to open_basedir.
  * Increased max_post_size to match upload_max_filesize (both 10M now)
  * Removed PHP safe_mode options as they are removed from PHP 5.4 (and
    cause errors with external resources and the TYPO3 compressor)
  * Removed E_STRICT patch for PHP 5.4 (applied upstream).

 -- Christian Welzel <gawain@camlann.de>  Thu, 05 Jul 2012 22:40:03 +0200

typo3-src (4.5.16+dfsg3-1) unstable; urgency=low

  * Remove jslint.js because of non free license.

 -- Christian Welzel <gawain@camlann.de>  Mon, 28 May 2012 16:56:48 +0200

typo3-src (4.5.16+dfsg2-1) unstable; urgency=low

  * Cleanup of build target.
  * Removes embeded swfupload and adds depend on libjs-swfupload.
  * Moved source code for multimedia players from patches to debian/contrib/
  * Moved source code for modernizr from patches to debian/contrib/
  * Remove typo3/contrib/extjs/resources/charts.swf because of missing source.
  * Added source of typo3/contrib/svgweb.
  * Build svgweb javascript from source.
  * Make get-orig-source use gzip -9.

 -- Christian Welzel <gawain@camlann.de>  Sat, 26 May 2012 09:40:17 +0200

typo3-src (4.5.16+dfsg1-1) unstable; urgency=low

  * New upstream release.
  * Fixed upstream version mangling for alpha/beta/rc upstream packages.
  * Added DM-Upload-Allowed: yes
  * Removed 0001-BUGFIX-Pagetree-broken-due-to-JavaScript-exception.patch
    (applied upstream).

 -- Christian Welzel <gawain@camlann.de>  Tue, 22 May 2012 17:00:53 +0200

typo3-src (4.5.15+dfsg1-2) unstable; urgency=low

  * Install localconf.php as localconf.php_template, and create localconf.php
    from it at install time. (Closes: 666237)
  * Added support for apache2.4, protected apache2.2 commands by check for
    apache2.2-common. (Closes: 669793, 618381)
  * Updated README.debian files. (Closes: 614140)

 -- Christian Welzel <gawain@camlann.de>  Sun, 22 Apr 2012 14:54:15 +0200

typo3-src (4.5.15+dfsg1-1) unstable; urgency=medium

  * New upstream release:
    - fixes: "TYPO3 Security Bulletin TYPO3-CORE-SA-2012-002: Cross-Site
      Scripting Vulnerability in TYPO3 Core" (Closes: 669158)
  * Database update for field uc in be_users.
  * Added bugfix patch for TYPO3 bug #36238.
  * Added patch for errors with PHP 5.4
  * Move Homepage field to source package.
  * Added Vcs-Git, changed Vcs-Browser to point to github
  * changed Homepage field to typo3.org
  * Cleanup of watch file.
  * Added comments to lintian overrides.
  * Raised compat level to 7.
  * Deleted typo3-src-4.5.examples because its empty.
  * Removed numbering from patches, changed order to alphabetical.
  * Changed index.html files to print warning about directory listing only,
    not redirect anymore.
  * Disable directory listing globally in apache config.

 -- Christian Welzel <gawain@camlann.de>  Sat, 21 Apr 2012 12:32:23 +0200

typo3-src (4.5.14+dfsg1-1) unstable; urgency=high

  * New upstream release:
    - fixes: "TYPO3 Security Bulletin TYPO3-CORE-SA-2012-001: Several
      Vulnerabilities in TYPO3 Core" (Closes: 666074)
  * Package descriptions rewritten
  * Reworked copyright file
  * Add RSA-Auth to default configuration
  * Fix description of patch 05-add-source-for-mediaplayer-swfs.patch
  * Added source for modernizr and and swfupload as debian-patches
  * Added target "get-orig-source" to rules to fetch upstream blankpackage.zip
    file and repack it to .tar.gz
  * Removed find-sql target from rules
  * Added target prepare-source to rules
  * Adopted watch file for zip download
  * Added note about creation of source package to README.source
  * Changed depend from ttf-dejavu to ttf-bitstream-vera. Adjusted symlink of
    vera.tff accordingly.
  * Refreshed patches for removed "dummy" directory.
  * Bumped standards version to 3.9.3
  * Added description to patches 07 and 08.

 -- Christian Welzel <gawain@camlann.de>  Wed, 28 Mar 2012 15:47:41 +0200

typo3-src (4.5.13+dfsg1-1) unstable; urgency=low

  * New upstream release.
  * Added Dutch debconf translation (Closes: 661129)
  * Ported patch 06-fix-im-command.patch to new class.t3lib_utility_command.php
  * Added description to patches
  * Removed embedded copy of swfobject, added depends on libjs-swfobject
  * Remove .gitignore from linkvalidator subfolder
  * Added lintian override
    typo3-dummy: init.d-script-does-not-implement-optional-option
  * Added lintian override for typo3-src-4.5: font-in-non-font-package
    (nimbus.ttf)
  * Rewritten short description of binary package typo3.

 -- Christian Welzel <gawain@camlann.de>  Sat, 17 Mar 2012 13:44:38 +0100

typo3-src (4.5.11+dfsg1-1) unstable; urgency=low

  * New upstream release.
  * Changed symlink of prototype.js to point to prototype-1.js instead
    of prototype-1.6.js (Closes: 651128)

 -- Christian Welzel <gawain@camlann.de>  Sat, 11 Feb 2012 21:51:10 +0100

typo3-src (4.5.10+dfsg1-1) unstable; urgency=medium

  * New upstream release:
   - fixes regression introduced with last update.

 -- Christian Welzel <gawain@camlann.de>  Sat, 24 Dec 2011 14:00:00 +0100

typo3-src (4.5.9+dfsg1-1) unstable; urgency=high

  * New upstream release:
    - fixes: "TYPO3 Security Bulletin TYPO3-CORE-SA-2011-004: Remote
      Code Execution in TYPO3 Core" (Closes: #652365)

 -- Christian Welzel <gawain@camlann.de>  Fri, 16 Dec 2011 20:00:00 +0100

typo3-src (4.5.8+dfsg1-1) unstable; urgency=medium

  * New upstream release.
  * Adopted patch 02-dummy-defaults.patch to new localconf.php.
  * Removed unused lintian override "embedded-php-library".
  * Added build-arch to build-indep rules.
  * Raised standards version to 3.9.2

 -- Christian Welzel <gawain@camlann.de>  Thu, 13 Dec 2011 20:00:00 +0100

typo3-src (4.5.6+dfsg1-1) unstable; urgency=high

  * New upstream release:
    - fixes: "TYPO3 Security Bulletin TYPO3-CORE-SA-2011-002: Potential
      SQL injection vulnerability in TYPO3 Core" (Closes: 641682)
    - fixes: "TYPO3 Security Bulletin TYPO3-CORE-SA-2011-003: Improper error
      handling could lead to cache flooding in TYPO3 Core" (Closes: 641683)

 -- Christian Welzel <gawain@camlann.de>  Thu, 15 Sep 2011 10:00:00 +0100

typo3-src (4.5.4+dfsg1-1) unstable; urgency=high

  * New upstream release:
    - fixes: "TYPO3 Security Bulletin TYPO3-CORE-SA-2011-001: Multiple
      vulnerabilities in TYPO3 Core" (Closes: 635937)
  * Adopted patch 02-dummy-defaults.patch to new localconf.php.
  * Removed typo3-dummy.examples, because its empty now.

 -- Christian Welzel <gawain@camlann.de>  Fri, 29 Jul 2011 20:00:00 +0100

typo3-src (4.5.3+dfsg1-1) unstable; urgency=low

  * New upstream release.
  * Patches refreshed.
  * debian/rules: set correct permissions for cron script.

 -- Christian Welzel <gawain@camlann.de>  Wed, 1 Jun 2011 22:00:00 +0100

typo3-src (4.5.2+dfsg1-1) unstable; urgency=low

  * New upstream release.
  * Moved php5-xcache to Recommends and added php-apc as alternative.
  * Removed 07-fix-beforeWrap-of-TMENU.patch (now included in upstream).
  * Removed swiftmailer from typo3/contrib, added depend on libphp-swiftmailer.
  * Added /usr/share/php/Swift/ to open_basedir in apache config.

 -- Christian Welzel <gawain@camlann.de>  Wed, 2 Mar 2011 22:00:00 +0100

typo3-src (4.5.0+dfsg1-3) unstable; urgency=low

  * Fix spelling error (Closes: 611482)
  * Add patch to enable beforeWrap on TMENU (Closes: 606740)

 -- Christian Welzel <gawain@camlann.de>  Sun, 30 Jan 2011 22:00:00 +0100

typo3-src (4.5.0+dfsg1-2) unstable; urgency=low

  * Fix encoding of Swedish debconf translation
    (Christian Perrier <bubulle@debian.org>).
  * Removed mistakenly doubled content in mysql file (Closes: 611386).
  * Add apache2.2-common to recommends. (Closes: #611387)

 -- Christian Welzel <gawain@camlann.de>  Sat, 29 Jan 2011 14:00:00 +0100

typo3-src (4.5.0+dfsg1-1) unstable; urgency=low

  * New upstream release.
  * Removed dummy/misc from rules and typo3-src.examples  because its missing
    in upstream.
  * Removed plupload from copyright and rules (removed by upstream).

 -- Christian Welzel <gawain@camlann.de>  Sat, 15 Jan 2011 14:00:00 +0100

typo3-src (4.5.0+dfsg1~beta3-1) experimental; urgency=low

  * New upstream release.
  * Removed patch for TYPO3-SA-2010-022 (fixed by upstream now).
  * Added patch 06-fix-im-command.patch to fix a wrong command quoting
    (Closes: 606738)
  * Added php5-suhosin to Recommends.

 -- Christian Welzel <gawain@camlann.de>  Wed, 05 Jan 2011 22:00:00 +0100

typo3-src (4.5.0+dfsg1~beta2-3) experimental; urgency=high

  * Fixed regression bug imported by last version. (Closes: 607577)

 -- Christian Welzel <gawain@camlann.de>  Tue, 21 Dec 2010 22:00:00 +0100

typo3-src (4.5.0+dfsg1~beta2-2) experimental; urgency=high

  * Ported some security fixes from TYPO3 4.4.5 to this version
    - fixes: "TYPO3 Security Bulletin TYPO3-SA-2010-022: Multiple
      vulnerabilities in TYPO3 Core" (Closes: 607286)

 -- Christian Welzel <gawain@camlann.de>  Thu, 16 Dec 2010 22:00:00 +0100

typo3-src (4.5.0+dfsg1~beta2-1) experimental; urgency=low

  * New upstream release.
  * Added source for player.swf and flvplayer.swf (see #591969).

 -- Christian Welzel <gawain@camlann.de>  Fri, 02 Dec 2010 22:00:00 +0200

typo3-src (4.5.0+dfsg1~beta1-1) experimental; urgency=low

  * Removed typo3/contrib/jsmin/jsmin.php because of non free license
    (Closes: 602250)
  * Added notice about license of qtobject.js to copyright file.
  * Added README.source.
  * Corrected watch file.
  * Added rule "dfsg" to rules to remove non free files.

 -- Christian Welzel <gawain@camlann.de>  Fri, 26 Nov 2010 22:00:00 +0200

typo3-src (4.5.0~beta1-1) experimental; urgency=low

  * New upstream release.
  * Merged typo3-src and typo3-dummy source packages.
  * Fixed spelling error in control (Closes: 598816)
  * Added lintian override for "embedded-php-library" on "libnusoap-php"
    because of customized nusoap in these packages (see 529581)
  * Added japanese translation (Closes: 599088)
  * Reorganized and updated changelog. Uses DEP-5 format now.
  * localconf.php:
    - raised memory limit to 64MB
    - disabled donation window
    - set search path for binaries
    - disabled deprecation logging
  * Moved mysql sql file to own directory and added upgrade sql to 4.5.
  * Added backend user "admin"/"password" to mysql/mysql.
  * Added generation of encryption key to typo3-dummy.postinst.

 -- Christian Welzel <gawain@camlann.de>  Mon, 18 Nov 2010 22:00:00 +0200

typo3-src (4.3.8-1) unstable; urgency=medium

  * New upstream release:
    - fixes a regression introduced during last upstream release.

 -- Christian Welzel <gawain@camlann.de>  Wed, 13 Oct 2010 22:00:00 +0200

typo3-src (4.3.7-1) unstable; urgency=high

  * New upstream release:
    - fixes: "TYPO3 Security Bulletin TYPO3-SA-2010-020: Multiple
      vulnerabilities in TYPO3 Core" (Closes: 599334)
  * raised standards version to 3.9.1

 -- Christian Welzel <gawain@camlann.de>  Fri, 08 Oct 2010 22:00:00 +0200

typo3-src (4.3.5-1) unstable; urgency=high

  * New upstream release:
    - Fixes some regressions introduced in 4.3.4

 -- Christian Welzel <gawain@camlann.de>  Fri, 06 Aug 2010 22:00:00 +0200

typo3-src (4.3.4-1) unstable; urgency=high

  * New upstream release:
    - fixes "TYPO3 Security Bulletin TYPO3-SA-2010-012: Multiple
      vulnerabilities in TYPO3 Core" (Closes: 590719)
  * fixed spelling error in typo3-src-4.3.README.Debian (Closes: 588518)
  * added debian/source/include-binaries with content "nimbus.sfd.gz".
  * raised standards version to 3.9.0

 -- Christian Welzel <gawain@camlann.de>  Wed, 28 Jul 2010 22:00:00 +0200

typo3-src (4.3.3-2) unstable; urgency=low

  * Moved source format from "1.0" to "3.0 (quilt)".
  * Removed README.source.
  * Removed dpatch system.
  * Moved debian/patches/00list to debian/patches/series, modified it.
  * Moved debian/patches/*.dpatch to debian/patches/*.patch, removed
    dpatch specific code.
  * Changed dependency "libapache2-mod-php5 | php5-cgi" to "php5"
  * Moved nimbus.sfd.gz.uuencoded to nimbus.sfd.gz.

 -- Christian Welzel <gawain@camlann.de>  Wed, 05 May 2010 17:27:41 +0200

typo3-src (4.3.3-1) unstable; urgency=medium

  * New upstream release:
    - fixes "TYPO3 Security Bulletin TYPO3-SA-2010-008:
      Remote Command Execution in TYPO3 Core" (Closes: 577993)
  * Added file debian/source/format with "1.0" as content.

 -- Christian Welzel <gawain@camlann.de>  Thu, 22 Apr 2010 22:00:00 +0100

typo3-src (4.3.2-1) unstable; urgency=high

  * New upstream release:
    - fixes "TYPO3 Security Bulletin TYPO3-SA-2010-004: Multiple
      vulnerabilities in TYPO3 Core" (Closes: 571151)

 -- Christian Welzel <gawain@camlann.de>  Wed, 24 Feb 2010 22:00:00 +0100

typo3-src (4.3.1-2) unstable; urgency=low

  * fixed wrong link to prototype javascript library (Closes: 561095)
  * raised standards version to 3.8.4

 -- Christian Welzel <gawain@camlann.de>  Sat, 13 Feb 2010 15:00:00 +0100

typo3-src (4.3.1-1) unstable; urgency=high

  * New upstream release:
    - fixes "TYPO3 Security Bulletin TYPO3-SA-2010-001: Authentication
      Bypass in TYPO3 Core" (Closes: 567163)
  * fixed spelling error in typo3-database.README.Debian.

 -- Christian Welzel <gawain@camlann.de>  Fri, 29 Jan 2010 18:00:00 +0100

typo3-src (4.3.0-1) unstable; urgency=low

  * New upstream release.
  * Fixed "dpkg-gencontrol: Warnung: relation > is deprecated: use >> or >=".
  * debian/rules: Added target find-sql to get a list of important sql-files.
    (needed for maintainance only)
  * debian/mysql: SQL commands for populating mysql don't include help texts
    anymore, to make the package smaller. They can be imported with the TYPO3
    database-assistant.

 -- Christian Welzel <gawain@camlann.de>  Thu, 03 Dec 2009 22:00:00 +0100

typo3-src (4.3.0~beta2-1) experimental; urgency=high

  * New upstream release.
    - fixes "TYPO3 Security Bulletin TYPO3-SA-2009-016: Multiple
      vulnerabilities in TYPO3 Core" (Closes: 552020)

 -- Christian Welzel <gawain@camlann.de>  Thu, 22 Oct 2009 22:00:00 +0100

typo3-src (4.3.0~beta1-1) experimental; urgency=low

  * New upstream release.
  * Raised standards version to 3.8.3.
  * Added lintian override for non-free-flash error. The flvplayer.swf is
    based on the GPL licensed anarchy player.
  * Added README.source. Texts points to dpatchs README.source.
  * Added version mangling to watch file (Closes: 539489)
  * Added license of typo3/contrib/flashmedia/player.swf to "copyright".

 -- Christian Welzel <gawain@camlann.de>  Mon, 12 Oct 2009 22:00:00 +0100

typo3-src (4.3.0~alpha3-1) experimental; urgency=low

  * New upstream release.
  * Raised standards version to 3.8.1.
  * Raised compat version to 5.
  * Added dephelper depends.
  * Moved homepage to header field.
  * Added lintian override for embedded-php-library in open-id (the 
    version shipped is a stripped down and patched version for TYPO3).
  * Added README file for typo3-database.

 -- Christian Welzel <gawain@camlann.de>  Sun, 07 Jun 2009 20:00:00 +0100

typo3-src (4.3.0~alpha2-1) experimental; urgency=low

  * New upstream release.
  * Degraded binary package typo3 to a meta package.
  * Added new binary package typo3-database.
  * Dependency cleanup for the binary package typo3-src.
  * Some cleanup in README files.
  * Rewritten long description.
  * Added debian/mysql, a manually created database dump of an empty TYPO3 DB.
  * Integrated dbconfig-common in maintenance mode.

 -- Christian Welzel <gawain@camlann.de>  Sun, 22 Mar 2009 20:00:00 +0100

typo3-src (4.2.10-1) unstable; urgency=high

  * New upstream release.
    - fixes "TYPO3 Security Bulletin TYPO3-SA-2009-016: Multiple
      vulnerabilities in TYPO3 Core" (Closes: 552020)

 -- Christian Welzel <gawain@camlann.de>  Thu, 22 Oct 2009 22:00:00 +0100

typo3-src (4.2.9-1) unstable; urgency=low

  * New upstream release.

 -- Christian Welzel <gawain@camlann.de>  Mon, 12 Oct 2009 22:00:00 +0100

typo3-src (4.2.8-1) unstable; urgency=low

  * New upstream release.

 -- Christian Welzel <gawain@camlann.de>  Sat, 04 Jul 2009 17:00:00 +0100

typo3-src (4.2.6-1) unstable; urgency=high

  * New upstream release.
    - fixes TYPO3 Security Bulletin TYPO3-SA-2009-002: Information
      disclosure and XSS vulnerabilities in TYPO3 (Closes: 514713)

 -- Christian Welzel <gawain@camlann.de>  Mon, 10 Feb 2009 12:00:00 +0100

typo3-src (4.2.5-1) unstable; urgency=medium

  * New upstream release.
    - fixes a serious bug in session handling with not logged in FE-Users.

 -- Christian Welzel <gawain@camlann.de>  Mon, 26 Jan 2009 20:00:00 +0100

typo3-src (4.2.4-1) unstable; urgency=high

  * New upstream release.
    - fixes TYPO3 Security Bulletin TYPO3-SA-2009-001: Multiple vulnerabilities
      in TYPO3 Core (Closes: 512608)
  * Updated package description.
  * Updated copyright file to list the license of two icons.

 -- Christian Welzel <gawain@camlann.de>  Thu, 22 Jan 2009 12:00:00 +0100

typo3-src (4.2.3-1) unstable; urgency=high

  * New upstream release.
    - fixes XSS vulnerability in Typo3 backendmodul "fileadmin" (Closes: 505324)
    - fixes XSS vulnerability in Typo3 sysext "felogin" (Closes: 505325)
    - fixes the passwords are not changeable bug in the backend (Closes: 505326)
  * added dependency on libjs-scriptaculous

 -- Christian Welzel <gawain@camlann.de>  Tue, 11 Nov 2008 20:00:00 +0100

typo3-src (4.2.2-1) unstable; urgency=low

  * New upstream release.

 -- Christian Welzel <gawain@camlann.de>  Wed, 25 Jun 2008 20:00:00 +0100

typo3-src (4.2.1-3) unstable; urgency=low

  * Fixed versioned dependency on libjs-prototype

 -- Christian Welzel <gawain@camlann.de>  Wed, 25 Jun 2008 20:00:00 +0100

typo3-src (4.2.1-2) unstable; urgency=low

  * Moved libjs-prototype from Recommends-field do Depends-field.

 -- Christian Welzel <gawain@camlann.de>  Sun, 22 Jun 2008 11:00:00 +0100

typo3-src (4.2.1-1) unstable; urgency=low

  * New upstream release.
    - Support for php4 has been dropped.
  * cleaned typo3.README.Debian and typo3-src-4.2.README.Debian
  * some fixes to debian/rules
  * Depend on libjs-prototype for prototype.js (Closes: 475282)
  * Raised stardards version to 3.8.0

 -- Christian Welzel <gawain@camlann.de>  Fri, 20 Jun 2008 22:00:00 +0100

typo3-src (4.1.7-1) unstable; urgency=high

  [ Christian Welzel ]
  * New upstream release
    - fixes TYPO3-20080611-1: Multiple vulnerabilities in TYPO3 Core
      (Closes: #485814)

  [ Holger Levsen ]
  * Change recommends from gs to ghostscript.
  * Remove obsolete overrides for linda, which is obsolete itself.
  * Fix spelling error in description.

 -- Christian Welzel <gawain@camlann.de>  Wed, 11 Jun 2008 15:00:00 +0100

typo3-src (4.1.6-1) unstable; urgency=low

  * New upstream release.
  * Dependency changed from ttf-bitstream-vera to ttf-dejavu (Closes: 461294)

 -- Christian Welzel <gawain@camlann.de>  Sun, 09 Mar 2008 10:00:00 +0100

typo3-src (4.1.5-1) unstable; urgency=medium

  * New upstream release (Closes: 454265).

 -- Christian Welzel <gawain@camlann.de>  Fri, 14 Dec 2007 20:00:00 +0100

typo3-src (4.1.4-1) unstable; urgency=low

  * New upstream release.
    - Fixes a low-severity SQL injection in the modfunc2 of indexed_search
  * t3lib/fonts/readme.txt is now patched by dpatch.
  * nimbus.sfd.gz added to debian diff (perl encoded).
  * copying of linda overides slightly changed.
  * added watch file.
  * unreleased.

 -- Christian Welzel <gawain@camlann.de>  Thu, 13 Dec 2007 21:00:00 +0100

typo3-src (4.1.2+debian-1) unstable; urgency=low

  * New upstream release.
    - Several improvements to avoid security issues by 3rd party extensions.
  * Added linda overrides.
  * Fixed some whitespaces in t3lib/fonts/readme.txt.

 -- Christian Welzel <gawain@camlann.de>  Wed, 18 Jul 2007 14:00:00 +0100

typo3-src (4.1.1+debian-1) unstable; urgency=low

  * New upstream release.
    - Fixes problem with rtehtmlarea and Mozilla Firefox 2.0.0.3

 -- Christian Welzel <gawain@camlann.de>  Wed, 04 Apr 2007 14:00:00 +0100

typo3-src (4.1.0+debian-1) unstable; urgency=low

  * New upstream release.

 -- Christian Welzel <gawain@camlann.de>  Tue, 20 Mar 2007 09:00:00 +0100

typo3-src (4.0.5+debian-1) unstable; urgency=low

  * New upstream release.
    - Fixes "TYPO3 Security Bulletin TYPO3-20070221-1: Email header injection"
  * Removed t3lib_div-PHP52.dpatch (now integrated by upstream)
  * Fixed typo and added note to typo3.README.Debian (Closes: 405577) 

 -- Christian Welzel <gawain@camlann.de>  Thu, 22 Feb 2007 21:00:00 +0100

typo3-src (4.0.4+debian-2) unstable; urgency=low

  * Added t3lib_div-PHP52.dpatch to fix crash of PHP 5.2.0

 -- Christian Welzel <gawain@camlann.de>  Fri, 22 Dec 2006 12:00:00 +0100

typo3-src (4.0.4+debian-1) unstable; urgency=high

  * New upstream release.
    - Fixed security problem in rtehtmlarea extension. (Closes: 403906)

 -- Christian Welzel <gawain@camlann.de>  Sat, 20 Dec 2006 23:35:41 +0100

typo3-src (4.0.3+debian-1) unstable; urgency=low

  * New upstream release.
  * added some comments on memory usage and further help to README.Debian.
    (Closes: 403114)
  * Changed ownership of /usr/share/typo3/typo3_src-4.0 to root:www-data.
  * Dropped depend on imagemagick. Use graphicsmagick (better results).

 -- Christian Welzel <gawain@camlann.de>  Sat, 16 Dec 2006 23:05:41 +0100

typo3-src (4.0.2+debian-1) unstable; urgency=low

  * Depend on ttf-bitstream-vera for vera.ttf (Closes: 374141)
  * Repackaged source.tgz to include source and license of nimbus.ttf.
    (Closes: 374137)
  * Removed the creation of "latest"-link; typo3-dummy has hardcoded sourcedir.

 -- Christian Welzel <gawain@camlann.de>  Mon, 24 Nov 2006 12:37:00 +0200

typo3-src (4.0.2-3) unstable; urgency=low

  * Do not depend on gs. This violate the policy. Recommend it.
  * Removed suggestion of typo3-site-installer.
  * Changed recommendation of mysql-server-4.1 to mysql-server.
  * Changed recommendation of graphicsmagick-im-compat | imagemagick to
    graphicsmagick | graphicsmagick-imagemagick-compat | imagemagick

 -- Christian Welzel <gawain@camlann.de>  Mon, 23 Nov 2006 19:37:00 +0200

typo3-src (4.0.2-2) unstable; urgency=low

  * Do not depend on php-mysql. Recommendation is enough.
  * moved phpX-cgi to Depends as another alternative (Typo3 and PHP in fcgid)
  * added phpX-xcache to Recommends

 -- Christian Welzel <gawain@camlann.de>  Mon, 21 Oct 2006 19:37:00 +0200

typo3-src (4.0.2-1) unstable; urgency=low

  * New maintainer (Closes: #388766).
  * New upstream release (Closes: #341709):
    - fixed by upstream: Remote command execution, arbitrary file viewing
      [CVE-2006-0327] (Closes: #364351).
    - fixed by upstream: Mail forms can be used to send spam (Closes: #364350).
  * removed recommendation of eaccelerator (Closes: #377821).
  * removed dep on non existing ooo_extract (Closes: #310776).
  * added alternative dep on php-cgi (Closes: #311277).
  * added alternative dep on php5 (Closes: #366533).

 -- Christian Welzel <gawain@camlann.de>  Mon, 18 Sep 2006 12:37:00 +0200

typo3-src (3.7.0-8) unstable; urgency=low

  * debian/control: depend on MySQL > 4.0.18 to allow the usage of the
    versioning extension

 -- Christian Leutloff <leutloff@debian.org>  Wed, 11 May 2005 18:07:56 +0200

typo3-src (3.7.0-7) unstable; urgency=low

  * debian/typo3.README.Debian: started new section with common pitfalls

 -- Christian Leutloff <leutloff@debian.org>  Mon,  9 May 2005 09:56:37 +0200

typo3-src (3.7.0-7) unstable; urgency=low

  * debian/control: modified dependencies according to Michael Stucki
  * debian/typo3.README.Debian: mention packages source for eaccelerator
    and graphicsmagick

 -- Christian Leutloff <leutloff@debian.org>  Fri,  6 May 2005 14:57:06 +0200

typo3-src (3.7.0-6) unstable; urgency=low

  * debian/typo3-src-3.7.prerm: can not remove the symlink maintained by this 
    package
  * debian/typo3-src-3.7.postinst: reworked
  * debian/typo3-src-3.7.README.Debian: updated to version 3.7

 -- Christian Leutloff <leutloff@debian.org>  Wed,  4 May 2005 21:48:04 +0200

typo3-src (3.7.0-5) unstable; urgency=low

  * debian/control: added dependency to libapache2-mod-php4 | libapache-mod-php4
    (thanks to Thomas Barth)
  * typo3.README.Debian: clarified some points
  
 -- Christian Leutloff <leutloff@debian.org>  Wed,  4 May 2005 16:25:52 +0200

typo3-src (3.7.0-4) unstable; urgency=low

  * control: added depned on postfix as an alternative to exim
  * added TODO file
  * typo3.README.Debian: concentrated now all the TYPO3 specific remarks
    in this single file and added references in the READMEs of the other
    packages
  * renamed packages from typo3-db-dummy to typo3-dummy

 -- Christian Leutloff <leutloff@debian.org>  Wed,  4 May 2005 07:45:12 +0200

typo3-src (3.7.0-3) unstable; urgency=low

  * typo3.README.Debian: more improvements through doing a step by step validation

 -- Christian Leutloff <leutloff@debian.org>  Fri, 22 Apr 2005 18:40:27 +0200

typo3-src (3.7.0-2) unstable; urgency=low

  * polish package documention in typo3

 -- Christian Leutloff <leutloff@debian.org>  Mon, 11 Apr 2005 19:18:00 +0200

typo3-src (3.7.0-1) unstable; urgency=low

  * un-do package split because the way choosen was to simple

 -- Christian Leutloff <leutloff@debian.org>  Tue, 23 Nov 2004 21:13:46 +0100

typo3-src (3.7.0-0.2) experimental; urgency=low

  * Add dependency on libgd2-xpm (>= 2.0.28-2), as mentioned by
    renedustmann@maxx2.de in news:typo3.install.debian on 13.08.2004 to be
    a working combination.
  * add provides typo3-frontend/typo3-backend

 -- Christian Leutloff <leutloff@debian.org>  Thu,  4 Nov 2004 10:51:32 +0100

typo3-src (3.7.0-0.1) experimental; urgency=low

  * NMU, working towards inclusion into the Debian main archive
  * update to new upstream version
  * updated to Standards 3.6.1
  * packaging reworked: split package in frontend and backend to allow
    installation of frontend only servers (as mentioned in the Typo3-Book)
  * packaging reworked: Undoing the "Move everything from /usr/share/typo3
    to /var/lib/typo3 This solves all problems we had with
    symlinks. However, I think it is not really FHS-conform, so I'm still
    not happy with that." from 3.5.0-3 to be FHS and Debian conform.
  * manage "lastest" symlink in postinst and prerm
  * change package priority from extra to optional

 -- Christian Leutloff <leutloff@debian.org>  Wed,  3 Nov 2004 19:43:08 +0100

typo3-src (3.5.0-7) experimental; urgency=low

  * typo3-site-installer: complete rewrite
  * typo3-site-installer: added 2 more options (-a, -g)
  * the source of TYPO3 now belongs to root.root (was root.www-data)
  * example localconf.php: now using the im_noFramePrepended option
  * typo3-site-installer: manpage update
  * typo3-base now depends on apache or httpd (provided by apache-ssl, etc.)

 -- Michael Stucki <mundaun@gmx.ch>  Mon, 20 Oct 2003 23:00:24 +0200

typo3-src (3.5.0-6) experimental; urgency=low

  * removed dependency for apache and php4 in typo3-base
  * typo3-site-installer: one more bugfix in sed command

 -- Michael Stucki <mundaun@gmx.ch>  Tue, 16 Sep 2003 01:07:37 +0200

typo3-src (3.5.0-5) experimental; urgency=low

  * typo3-site-installer: Added README.Debian / removed obsolete documentation
  * Added a manpage for typo3-site-installer (thanks to Edelhard Becker)
  * typo3-site-installer.sh was renamed to typo3-site-installer
  * typo3-site-installer: accepts abolute paths now
  * typo3-site-installer: compatibility bugfix in sed command

 -- Michael Stucki <mundaun@gmx.ch>  Mon, 16 Jun 2003 18:11:53 +0100

typo3-src (3.5.0-4) experimental; urgency=low

  * Fixes in typo3-base preinst script
  * typo3-site-installer does no more need to download a dummysite archive

 -- Michael Stucki <mundaun@gmx.ch>  Thu,  5 Jun 2003 17:42:08 +0100

typo3-src (3.5.0-3) experimental; urgency=low

  * Added a localconf.php example
  * Added a new package "typo3-site-installer" that contains a little install
    helper
  * Added a new package "typo3-env" which depends on all needed components.
    "typo3-base" only recommends them, since you could still run your server
    without them. However it's easier to to an 'apt-get install typo3-env'
    since apt wouldn't worry about the recommendations else.
  * Fix wrong PHP short tags: '<?' => '<?php'
  * Fix permissions so that Lintian doesn't complain anymore
    Files and directories are now writable for Apache by changing the owner of
    them to www-data
  * Move everything from /usr/share/typo3 to /var/lib/typo3
    This solves all problems we had with symlinks. However, I think it is not
    really FHS-conform, so I'm still not happy with that.
  * control file: Turn all Suggests into Recommends
  * Site is now based on typo3_src from http://typo3.sunsite.dk/unix-archives/
  * php4-gd can no more be used (use php4-gd2 instead)
  * wget and zip are no longer required
  * README.Debian was updated
  * Documentation has been updated / optimized
  * Code cleanup / optimisations contributed by Edelhard Becker (thank you!)
      
 -- Michael Stucki <mundaun@gmx.ch>  Thu,  5 Jun 2003 02:07:28 +0100

typo3-src (3.5.0-2) experimental; urgency=low

  * Change ownership of /var/lib/typo3 to www-data (webserver could not write
    global extensions before)
  * Fix problem with some missing files by adding symlinks in
    /var/lib/typo3/<version> (this is only a workaround, I am not happy with
    this solution...)

 -- Michael Stucki <mundaun@gmx.ch>  Wed, 26 Mar 2003 15:40:44 +0100

typo3-src (3.5.0-1) experimental; urgency=low

  * New upstream release
  * Move /var/cache/typo3 to /var/lib/typo3 (this was wrong, since extensions
    are not really cache files...)

 -- Michael Stucki <mundaun@gmx.ch>  Sat, 22 Feb 2003 17:16:24 +0100

typo3-src (3.5b5-5) experimental; urgency=low

  * Alter contents of debian/executables
  * Update TODO notes
  * Move typo3/ext to /var/cache/typo3/<version>/ext (keep read-only for now)
  * t3lib/config_default.php: Change 'TTFdpi' from 72 to 96

 -- Michael Stucki <mundaun@gmx.ch>  Tue, 11 Feb 2003 13:39:04 +0100

typo3-src (3.5b5-4) experimental; urgency=low

  * Update TODO notes
  * Move typo3/temp to /var/cache/typo3/<version>/temp
  * Do some code cleanup in debian/rules

 -- Michael Stucki <mundaun@gmx.ch>  Thu,  6 Feb 2003 19:57:37 +0100

typo3-src (3.5b5-3) experimental; urgency=low

  * Fix some dependencies

 -- Michael Stucki <mundaun@gmx.ch>  Thu,  6 Feb 2003 05:39:51 +0100

typo3-src (3.5b5-2) experimental; urgency=low

  * Add a note in README.Debian about how to use this package at all
  * Fix Lintian complains: Small changes in copyright file
  * Add recommendation for php4-cgi (used by some direct_mail scripts)
  * Fix Lintian complains: Change ownership of /typo3/temp from root to
    www-data; remove write permission for group
  * Fix permissions for executable scripts
  * Add symlink that points to latest source installation

 -- Michael Stucki <mundaun@gmx.ch>  Sat,  1 Feb 2003 05:14:52 +0100

typo3-src (3.5b5-1) experimental; urgency=low

  * Initial Release.

 -- Michael Stucki <mundaun@gmx.ch>  Fri, 31 Jan 2003 12:31:54 +0100

