[ubuntu/lucid] sage-extension 1.4.3-5 (Accepted)

Tue Feb 16 17:51:23 GMT 2010

sage-extension (1.4.3-5) unstable; urgency=low

  * Rename source package name to sage-extension.
  * Use mozilla-devscripts 0.16 and cdbs.
  * Add myself to uploaders.
  * Add Vcs-Browser and Vcs-Git links.
  * Refer to versioned license files.
  * Mention Iceweasel in description.
  * Update Homepage.
  * Bump Standards-Version to 3.8.4.
  * Drop unused patches (default_nohtml.patch, iceweasel20.patch,
    xss_fix.patch).
  * Switch to 3.0 (quilt) source format and use quilt as patch system.
  * Drop debian/chrome.manifest and debian/Uninstall.
  * Rename binary package from firefox-sage to xul-ext-sage according to
    new policy.

firefox-sage (1.4.3-4) unstable; urgency=medium

  * Make cleanHref in security patch stricter to avoid
    another potential exploit. (Medium urgency)
  * Review remainder of code, with inline comments

firefox-sage (1.4.3-3) unstable; urgency=high

  * Fix two security bugs:
    - Setting urgency=high, this vulnerability allowed remote
      exploitation, without any user interaction.
    - CVE-2009-4102 Cross Domain Scripting vulnerability. 
      Don't trust HTML in titles, descriptions. Don't allow
      'strange' (i.e. javascript:, data:) URLs in Links.
    - CVE-2006-4712 (Regression), some of the old test cases
      no longer passed due to problem with htmlToText.
    - Closes: #559267

firefox-sage (1.4.3-2) unstable; urgency=low

  [ Andrea Veri ]
  * debian/control:
    - Standards-version bumped to latest 3.8.3,
      and debhelper to level 7.
    - Maintainer has been set to Mozilla Extension Packaging
      Team <pkg-mozext-maintainers at lists.alioth.debian.org>
    - added myself under Uploaders field together with Alan.
    - added homepage field pointing it to the right project's
      homepage.
  * debian/compat:
    - bumped to level 7 after moving debhelper to level 7.

  [ Alan Woodland ]
  * Added DM-Upload-Allowed
  * debian/rules s/dh_clean -k/dh_prep/

firefox-sage (1.4.3-1) unstable; urgency=low

  * Updated to new upstream version 1.4.3
  * Ack NMU (no bug report/diff supplied)
  * Update to standards 3.8.2 (no changes needed)

firefox-sage (1.4.2-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * New upstream release compatible with Iceweasel 3.0. (Closes: #496704)
  * debian/watch: Update for a currently working mirror. (Closes: #450148)

firefox-sage (1.3.10-2) unstable; urgency=low

  * Moving 1.3.10 into unstable now.

firefox-sage (1.3.10-1) experimental; urgency=low

  * New upstream release (Closes: #409031)
  * Re-enabling HTML mode, given new upstream code. (Closes: #389523)
  * New upstream release should end security issues (Closes: #399170)
  * No longer need to apply Iceweasel/Firefox patch.
  * New patch to make HTML mode not be default.
  * Uploading to experimental - would like to wait until after Etch 
    for more feedback after re-enabling HTML mode.

firefox-sage (1.3.6-5) unstable; urgency=low

  * Removed files from /usr/lib/firefox to fix possible iceweasel 
    upgrade problems

firefox-sage (1.3.6-4) unstable; urgency=low

  * Adding support for iceweasel. 

firefox-sage (1.3.6-3) unstable; urgency=low

  * HTML is nolonger permitted in RSS feeds. Fixed a bug whereby HTML
    could be injected into output even if HTML option was turned off.
    Fixed: (Closes: #388149)
      CVE-2006-4711
      CVE-2006-4712

firefox-sage (1.3.6-2) unstable; urgency=low

  * Fixed Build-Depends. (Closes: #387077)

firefox-sage (1.3.6-1) unstable; urgency=low

  * Initial release. (Closes: #350207)

Date: Mon,  15 Feb 2010 18:59:30 +0000
Changed-By: Benjamin Drung <benjamin.drung at gmail.com>
Maintainer: Mozilla Extension Packaging Team <pkg-mozext-maintainers at lists.alioth.debian.org>
Origin: Debian/unstable
https://launchpad.net/ubuntu/lucid/+source/sage-extension/1.4.3-5
-------------- next part --------------
Origin: Debian/unstable
Format: 1.7
Date: Mon,  15 Feb 2010 18:59:30 +0000
Source: sage-extension
Binary: xul-ext-sage, firefox-sage
Architecture: source
Version: 1.4.3-5
Distribution: lucid
Urgency: high
Maintainer: Mozilla Extension Packaging Team <pkg-mozext-maintainers at lists.alioth.debian.org>
Changed-By: Benjamin Drung <benjamin.drung at gmail.com>
Closes: 350207 387077 388149 389523 399170 409031 450148 496704 559267
Changes: 
 sage-extension (1.4.3-5) unstable; urgency=low
 .
   * Rename source package name to sage-extension.
   * Use mozilla-devscripts 0.16 and cdbs.
   * Add myself to uploaders.
   * Add Vcs-Browser and Vcs-Git links.
   * Refer to versioned license files.
   * Mention Iceweasel in description.
   * Update Homepage.
   * Bump Standards-Version to 3.8.4.
   * Drop unused patches (default_nohtml.patch, iceweasel20.patch,
     xss_fix.patch).
   * Switch to 3.0 (quilt) source format and use quilt as patch system.
   * Drop debian/chrome.manifest and debian/Uninstall.
   * Rename binary package from firefox-sage to xul-ext-sage according to
     new policy.
 .
 firefox-sage (1.4.3-4) unstable; urgency=medium
 .
   * Make cleanHref in security patch stricter to avoid
     another potential exploit. (Medium urgency)
   * Review remainder of code, with inline comments
 .
 firefox-sage (1.4.3-3) unstable; urgency=high
 .
   * Fix two security bugs:
     - Setting urgency=high, this vulnerability allowed remote
       exploitation, without any user interaction.
     - CVE-2009-4102 Cross Domain Scripting vulnerability. 
       Don't trust HTML in titles, descriptions. Don't allow
       'strange' (i.e. javascript:, data:) URLs in Links.
     - CVE-2006-4712 (Regression), some of the old test cases
       no longer passed due to problem with htmlToText.
     - Closes: #559267
 .
 firefox-sage (1.4.3-2) unstable; urgency=low
 .
   [ Andrea Veri ]
   * debian/control:
     - Standards-version bumped to latest 3.8.3,
       and debhelper to level 7.
     - Maintainer has been set to Mozilla Extension Packaging
       Team <pkg-mozext-maintainers at lists.alioth.debian.org>
     - added myself under Uploaders field together with Alan.
     - added homepage field pointing it to the right project's
       homepage.
   * debian/compat:
     - bumped to level 7 after moving debhelper to level 7.
 .
   [ Alan Woodland ]
   * Added DM-Upload-Allowed
   * debian/rules s/dh_clean -k/dh_prep/
 .
 firefox-sage (1.4.3-1) unstable; urgency=low
 .
   * Updated to new upstream version 1.4.3
   * Ack NMU (no bug report/diff supplied)
   * Update to standards 3.8.2 (no changes needed)
 .
 firefox-sage (1.4.2-0.1) unstable; urgency=low
 .
   * Non-maintainer upload.
   * New upstream release compatible with Iceweasel 3.0. (Closes: #496704)
   * debian/watch: Update for a currently working mirror. (Closes: #450148)
 .
 firefox-sage (1.3.10-2) unstable; urgency=low
 .
   * Moving 1.3.10 into unstable now.
 .
 firefox-sage (1.3.10-1) experimental; urgency=low
 .
   * New upstream release (Closes: #409031)
   * Re-enabling HTML mode, given new upstream code. (Closes: #389523)
   * New upstream release should end security issues (Closes: #399170)
   * No longer need to apply Iceweasel/Firefox patch.
   * New patch to make HTML mode not be default.
   * Uploading to experimental - would like to wait until after Etch 
     for more feedback after re-enabling HTML mode.
 .
 firefox-sage (1.3.6-5) unstable; urgency=low
 .
   * Removed files from /usr/lib/firefox to fix possible iceweasel 
     upgrade problems
 .
 firefox-sage (1.3.6-4) unstable; urgency=low
 .
   * Adding support for iceweasel. 
 .
 firefox-sage (1.3.6-3) unstable; urgency=low
 .
   * HTML is nolonger permitted in RSS feeds. Fixed a bug whereby HTML
     could be injected into output even if HTML option was turned off.
     Fixed: (Closes: #388149)
       CVE-2006-4711
       CVE-2006-4712

 .
 firefox-sage (1.3.6-2) unstable; urgency=low
 .
   * Fixed Build-Depends. (Closes: #387077)
 .
 firefox-sage (1.3.6-1) unstable; urgency=low
 .
   * Initial release. (Closes: #350207)
Files: 
 8d24cd269f8cd12f6ce41745af0ddfbd 101506 web optional sage-extension_1.4.3.orig.tar.gz
 c38c4cc916b0720b208120a02beb670c 14222 web optional sage-extension_1.4.3-5.debian.tar.gz
 61ebb241c8be92473651bb34db5a49c2 2089 web optional sage-extension_1.4.3-5.dsc