* SECURITY REGRESSION: simple-scan email functionality break
- debian/patches/CVE-2020-27748.patch: was reverted/delete in
scripts/xdg-email.in.
* SECURITY UPDATE: local file inclusion vulnerability
- debian/patches/CVE-2020-27748.patch: remove attachment handling from
mailto in scripts/xdg-email.in.
- CVE-2020-27748
* Use perl's decode() to ensure we don't pass invalid UTF-8 to D-Bus, as
doing so triggers an assertion from libdbus which makes us crash. LP:
#1743216 (Debian #910070, Upstream #108121)
* SECURITY UPDATE: Argument-injection attack
- debian/patches/CVE-2017-18266.patch: fix in xdg-open.in.
- debian/patches/CVE-2017-18266-final.patch: fix autotest and
refactoring the vulnerability fix.
- CVE-2017-18266
* Add proper support for LXQt; don't treat it the same as LXDE.
- proper-lxqt-handling.patch (LP: #1701783)
* Refresh lp779156-lubuntu.diff.
* Sync with Debian (LP: #1739372). Remaining changes:
- Add debian/xdg-utils.links:
+ Symlink /usr/bin/xdg-open to /usr/bin/browse (LP: #1624022)
- Add lp779156-lubuntu.diff
+ Adds open_lxde shell function, used when LXDE detected.
+ Adds run_sylpheed function, used to call sylpheed (LP: #779156)
* Drop patches applied in new release:
- mimeappslist-file-location
- prefer-gio.patch
- xdg-screensaver-restore-timeout.diff
* Drop xdg-email-mutt-detect.diff:
- Debian dropped their patch in 1.1.0~rc3+git20150907-2
[ Nicholas Guriev ]
* New maintainer, Debian freedesktop.org group. Closes: #876401.
* New upstream release. Closes: #865210.
* Bump Standards Version, no modifications for this.
* Remove gvfs-bin package from dependencies. Closes: #877747.
[ Per Olofsson ]
* Update Description.
- Correctly indent the list of commands.
- Remove mention of the Portland project. (xdg-utils is the only
surviving product from Portland.)
- gvfs-bin is also needed in MATE and Cinnamon.
* Add bug-script that reports the value of $XDG_CURRENT_DESKTOP.
* Add bug-presubj asking for 'sh -x' output.
[ Emilio Pozuelo Monfort ]
* Remove Fathi from Uploaders. Thanks for your previous work!
* New upstream release.
- xdg-open: Handle whitespace in filenames and fix generic mode
regression. Closes: #801048.
- xdg-screensaver: Reset DPMS timer. Closes: #745340.
* Update debian/watch, primary URL is working again.
* Update Description.
* New upstream release.
- Adds references to specifications to the manuals. Closes: #800826.
- xdg-open: Handle files with '?' and '#' in their names in generic mode.
Closes: #800355.
- xdg-settings: Detect generic DE instead of failing. Closes: #787791.
- xdg-open, xdg-email: Add iceweasel to the list of fallback browsers.
Closes: #788047.
- xdg-open: Fall back to generic mode if gvfs-open and gnome-open are
missing. Closes: #685304.
- xdg-mime: Check ~/.config/mimeapps.list for default application.
Closes: #800825.
* Don't build html documentation, we don't install it anyway.
* Update Description.
* Update Homepage.
* Merge latest upstream git tree.
- xdg-icon-resource: Don't try to install anything into /.
Closes: #799741.
* Remove autotests/Makefile in distclean target.
* Rebase on latest upstream git tree.
- Drop the following patches which were applied upstream:
+ xdg-email-detect-icedove.patch
+ xdg-email-thunderbird-quoting.patch
+ xdg-email-try-xdg-open.patch
+ xdg-open-browser-multiword.diff
+ xdg-open-printf.diff
+ fix-bashism-use-of-echo.patch
* Maintain Debian patches in git instead of using quilt patches.
* Update git URLs in debian/control.
* xdg-open: Try $BROWSER first in generic mode if it is set by the
user. Closes: #799568.
* Add an automated test suite (under development).
* Add upstream bug URL to xdg-open-browser-multiword.diff.
* Use local variable in patch xdg-open-browser-multiword.diff.
* Add upstream bug URL to patch xdg-open-printf.diff.
* Add upstream bug URL to fix-bashism-use-of-echo.patch.
* Add xdg-email-try-xdg-open.patch: Try using xdg-open in xdg-email's
generic mode. Closes: #691259.
* Only try to auto-detect Mutt in xdg-email in generic mode after we
tried xdg-open.
* Add xdg-email-detect-icedove.patch: Also detect Icedove in xdg-email
for Thunderbird special handling.
* Add xdg-email-thunderbird-quoting.patch: Don't quote header fields
when calling Thunderbird from xdg-email.
* Drop patch xdg-email-mutt-detect.diff. Currently difficult to pinpoint
exactly when to use auto-detection.
* New upstream release. Closes: #773753, #754219.
- Drop patch xdg-open-escape-sed.diff, applied upstream.
- Drop patch xdg-open-spaces.diff, obsolete.
- Drop patch command-injection.patch, obsolete.
- Drop patch xdg-open-safe.diff, applied upstream.
- Drop patch CVE-2015-1877.patch, obsolete.
- Parses multiple sections in desktop files correctly. Closes: #776419.
- URI scheme handlers should work now, even in generic mode.
Closes: #678886.
- mailto: URIs should work in MATE now. Closes: #770333.
- xdg-screensaver should detect KDE5 correctly now.
Closes: #798084, #792138.
* Acknowledge NMUs. Closes: #685078, #691182, #773085, #777722.
* Remove scripts/html/index.html when cleaning.
* Bump debian/compat to 9.
* Bump Standards-Version to 3.9.6 (no changes).
* Add new location to debian/watch and add mangle rules for rc's.
* Non-maintainer upload.
* Add CVE-2015-1877.patch patch.
CVE-2015-1877: Command injection vulnerability due to local variables
collision.
Thanks to Jiri Horner <laeqten@gmail.com> (Closes: #777722)
* Non-maintainer upload.
* Fix command injection vulnerability in xdg-open (closes: #773085).
* Non-maintainer upload by the Security Team.
* Fix command injection vulnerability in xdg-open (closes: #773085).
* Non-maintainer upload.
* Add fix-bashism-use-of-echo.patch patch.
Instead of using echo -e in xdg-email use directly /bin/echo. Fixes
bashism use of echo and fixes opening of composer window in Thunderbird.
(Closes: #685078, #691182)
* Set Multi-Arch: foreign. Closes: #688681.
* Fix regression in patch xdg-open-escape-sed.diff. Because of
insufficient quoting, files with spaces could not be opened in
generic mode. Thanks to Jesse Hathaway for noticing this.
* Add patch xdg-open-escape-sed.diff: Escape the sed replacement string
in xdg-open when replacing command arguments for the generic
method. Fixes issue with the '&' character in URLs.
Thanks to Cyril Soldani. Closes: #654863.
* Bump debhelper compat level to v8.
* Add patch no-X.diff: Make xdg-open and xdg-email work without an X
display. Closes: #654306.
* Modify xdg-email-mutt-detect.diff so that it only tries to run mutt
inside a terminal window if running under X.
* Use 'set -e' in the for loops in debian/rules.
* Only fallback on mutt if MAILER is not set and not running under a
DE. Thanks to Jindřich Makovička. Closes: #653578.
* Medium urgency due to RC bugfix.
* Build-depend on w3m, needed by xmlto to generate text output.
Closes: #652781.
* Run make with the C.UTF-8 locale to get correct characters in
output.
* Also preserve scripts/README during builds.
* Fix debian/rules so that all scripts are really built from source.
Closes: #652066.
* Add patch xdg-open-spaces.diff: Single-double-quote argument to eval
so that filenames with spaces can be opened. Closes: #652067.
* Avoid .PHONY in debian/rules.
* New upstream git snapshot b961235b197647d6649ef3d48d7cc2cecafe3d47.
* Drop patches applied upstream:
- xdg-mime-follow-symlinks.diff
- x-www-browser.diff
- xdg-mime-generic-use-mimetype.diff
- bashisms.diff
- xdg-screensaver-check-gnome.diff
* Modify patches to make changes to scripts/xdg-*.in, instead of the
generated scripts.
* Also check for ~/.mutt/muttrc when deciding whether to use mutt as
MUA or not. Thanks to martin f krafft. Closes: #648733.
* Build scripts/xdg-* from *.in files.
* Build-depend on xmlto and awk, as they are needed when building the
scripts.
* Also build the manual pages.
* Bump Standards-Version to 3.9.2. No changes.
[ Per Olofsson ]
* Remove debian/patches/xserver-blanking.diff, already applied
upstream. Thanks to Tanguy Ortolo for spotting this.
Closes: #647794.
* Add patch xdg-screensaver-check-gnome.diff: Use DBus API to check if
gnome-screensaver is running, as gnome-screensaver-command no longer
returns correct exit status. Thanks to Tanguy Ortolo for noticing
this. Closes: #647791.
[ Ben Hutchings ]
* Add patch xdg-screensaver-new-gnome.diff: Use DBus API for GNOME
since gnome-screensaver-command --poke has been removed.
Closes: #610155.
* Tag patches with upstream bug URLs.
* Add patch xdg-mime-follow-symlinks.diff: Follow symlinks when
querying MIME type in xdg-mime.
* Add patch xdg-open-browser-multiword.diff: Fix support for multi-word
$BROWSER commands. Closes: #612339.
* Add patch xdg-open-printf.diff: Use /usr/bin/printf if available when
decoding URLs. dash's printf doesn't understand \xHH
sequences. Closes: #613272.
* New upstream release.
* Drop patches included upstream:
- xdg-email-mawk-support.diff
- run-mailcap-decode.diff
- xdg-open-spaces.diff
* Add debian/source/local-options with option unapply-patches.
* Recommend libfile-mimeinfo-perl instead of file, mime-support,
shared-mime-info, www-browser.
* Add patch xdg-mime-generic-use-mimetype.diff: Try mimetype first as
the generic method for xdg-mime. Closes: #609630.
* Add patch bashism.diff fixing some new bashisms.
* debian/patches/xserver-blanking.diff: Support X server blanking in
xdg-screensaver. Thanks to Ben Hutchings. Closes: #511248.
* debian/patches/xdg-email-envvar.diff: Add $MAILER support to
xdg-email. Thanks to Jonathan Nieder and Jan Braun for input.
Info about this added to NEWS.Debian.
Closes: #574131.
* debian/patches/xdg-email-mutt-detect.diff: Fallback to mutt if
~/.muttrc exists. Thanks to Jan Braun.
* Replace sensible-browser.diff with x-www-browser.diff. Instead of
using sensible-browser, try x-www-browser as the first choice when
$BROWSER is unset (and using generic method). This will approximate
sensible-browser's behaviour.
* Bump Standard-Version to 3.9.1. No changes.
* debian/patches/xdg-open-spaces.diff: Support paths with spaces in
open_generic_xdg_mime(). Thanks to Fabien Bochu. Closes: #592682.
* Add patch xdg-email-mawk-support.diff: Fix bug in awk script
in xdg-email so that it works with mawk. Closes: #589133.
* Make a new upstream release from CVS.
- Make xdg-open's open_generic() check for URLs before trying to open them
with non-browsers. Closes: #571557.
* Make a new upstream release from CVS.
- Add gvfs-copy and gvfs-info support. Closes: 479578.
- Add email attachments support to Thunderbird from xdg-email.
Closes: #531850.
- Add KDE 4 support to xdg-email. Closes: #555212.
- Add dbus commands to xdg-screensaver for KDE 4. Closes: #557104.
[ Per Olofsson ]
* Use source format 3.0 (quilt).
* Use dh override rules in debian/rules. Build-dep on debhelper 7.4.15.
* Add ${misc:Depends} to make lintian happy.
* Ack NMU. Closes: #508125.
* Bump standards-version to 3.8.4. No changes.
* Update Suggests to refer to GVfs and KDE4 packages for opening
files, etc.
* Remove libgtk2.0-bin and desktop-file-utils from Suggests. They are
not interesting for users and are usually installed anyway.
* Both kdebase-runtime and exo-utils are pretty much guaranteed to be
installed if KDE or Xfce is installed. So don't suggest those. Keep
gvfs-bin, however.
* mimeopen doesn't work as it should, so don't use it.
[ Fathi Boudra ]
* Add myself to Uploaders field.
* Remove debian/postinst and debian/postrm: they are not required.
Closes: 566165.
* Add xdg-settings to xdg-utils description.
* Non-maintainer upload.
* debian/patches/fix-xdg-screensaver-race: Fix race condition which
leads to process leak. Closes: #508125.
* debian/patches/run-mailcap.diff: Test $1 instead of $file which has
not been assigned yet. Fixes failure to open URLs other than file://
when xdg-open is called under a generic desktop environment
(regression in 1.0.2-5). Closes: #484602.
* debian/patches/xdg-open-generic: Use 'local' according to policy.
* Add a .diff extension to all patch filenames.
* Split up patches to make them more fine-grained (one feature per
patch).
* Remove libexo alternative dep for exo-utils, now that exo-utils is
in lenny.
* Remove xsltproc from Recommends, not used anymore.
* Add debian/patches/xdg-mime-xfce.diff: Fix xdg-mime under Xfce.
Closes: #430654.
* Add debian/patches/xdg-mime-errorchecking.diff: Check return code
from programs invoked by "xdg-mime query filetype". Closes: #465443.
* Update debian/patches/xdg-email-generic:
- Don't add things already added by upstream now.
- Don't check if gnome-open/exo-open exists, because they almost
certainly do if running under the corresponding desktop environment.
- Remove upstream's default BROWSER list, sensible-browser will
take care of it instead.
* Update debian/patches/xdg-open-generic:
- Don't check if gnome-open/exo-open exists, because they almost
certainly do if running under the corresponding desktop environment.
Check for kfmclient though, as the user might not have konqueror.
- Decode file:/// URLs correctly before passing them to run-mailcap,
expanding any percent-encoded characters.
* Remove menu from Suggests. Was only ever used by xdg-su which does
not exist anymore.
* Switch to the new, cool debhelper v7. Rewrite debian/rules so it gets
much smaller.
* Remove the -1 revision from the quilt build-dep.
* Add debian/patches/bashisms.patch, correcting some bashisms.
Thanks to Chris Lamb for part of it. Closes: #472890.
* Suggest the new exo-utils package. Keep libexo-0.3-0 as an
alternative. Closes: #462498.
* Recommend iceweasel instead of firefox.
* Suggest kdelibs4c2a instead of kdelibs-bin. (Provides the dcop
command.)
* Recommend x11-utils and x11-xserver-utils instead of xbase-clients.
(Provide xprop and xset.)
* New upstream release. Closes: #454925.
* Point Vcs-{Git,Browser} to new repo at git.debian.org. Also remove
XS- prefix.
* Bump Standards-Version to 3.7.3 (no changes).
* Add new Homepage field. Remove Website psuedo-field from
description.
* Don't ignore errors from make distclean in debian/rules. Check if
Makefile exists first instead.
* Leading lowercase character in short description.
* New upstream release
* Fix debian/watch.
* Use quilt's supplied make rules for patch handling.
* Distribute RELEASE_NOTES and TODO
* Update description
* Use XS-Vcs-Git: instead of XS-X-Vcs-Git:.
* New upstream release.
- Remove debian/patches/xdg-open-xfce, integrated upstream.
- Remove debian/patches/xdg-icon-resource-check-for-cache,
integrated upstream.
- Remove debian/patches/no-tests-clean, integrated upstream.
* Update debian/watch.
* Added XS-X-Vcs-Git reference to repository in source control file.
* New upstream release.
- xdg-su is gone.
* Fix xfce support in xdg-open. Closes: #382836.
* Added debian/watch.
* Check for icon-theme.cache before running gtk-update-icon-cache. If we
create a cache where none was, things will break for other packages.
* Disable tests-clean rule (does nasty things).
* Added postinst/prerm which create/remove the following directories in
/usr/local:
- /usr/local/share/applications
- /usr/local/share/desktop-directories
- /usr/local/share/icons
- /usr/local/share/icons/hicolor
- /usr/local/share/mime
- /usr/local/share/mime/packages
* Recommend: shared-mime-info.
* Remove comments from debian/rules.
* Move Depends: to Recommends:. Closes: #380141.
* Recommend: mime-support.
* Use run-mailcap for generic xdg-open support.
* Use generic fallbacks even if running a desktop environment (if the
needed program is not found).
* Try su-to-root as a generic fallback in xdg-su. Suggest: menu.
* Initial release. Closes: #375362