zope2.13 (2.13.22-1ubuntu1) vivid; urgency=low * Merge from Debian unstable. Remaining changes: - debian/rules: + Fix installation of README file, fixes FTBFS. -- Artur Rona Sun, 04 Jan 2015 02:14:48 +0100 zope2.13 (2.13.22-1) unstable; urgency=medium * New upstream release. + debian/patches/use-python-initgroups.patch: Refreshed. + debian/build-scripts/gen_versions_cfg.py: - Handle relative extends file when parsing buildout recipe (versions) for generating versions for source tarball, previously was an absolute URL. -- Arnaud Fontaine Wed, 11 Jun 2014 14:13:48 +0900 zope2.13 (2.13.21-1ubuntu1) trusty; urgency=medium * Fix installation of README file. -- Matthias Klose Wed, 02 Apr 2014 09:55:51 +0200 zope2.13 (2.13.21-1) unstable; urgency=high * New upstream release fixing security issues. * debian/control: + Make Vcs-Svn URI canonical. * debian/zopeZVER-sandbox.templates.in: + Fix lintian error as it expects 'for internal use', not 'Internal use' for debconf fields not intended for users to see. -- Arnaud Fontaine Wed, 11 Sep 2013 16:39:52 +0900 zope2.13 (2.13.20-1) unstable; urgency=low [ Jonas Meurer ] * New major upstream release (2.13). - Update build scripts for Zope2.13. - Bump python version from 2.6 to 2.7. - Remove obsolete patch Zope2-remove_documenttemplate_release_script.patch - Update remaining patches. * Update Homepage field to point to correct page http://zope2.zope.org/. [ Arnaud Fontaine ] * Python 2.6 is going to be removed, so update asserts on Python version. * debian/control: bump Standards-Version to 3.9.4. No changes needed. * New major upstream release (2.13). + debian/control: update Vcs-* fields URL. + debian/patches/use-python-initgroups.patch: - Use os.initgroups (>= 2.7) rather than relying on a third-party module, keep it in DEB_SATISFIED as it is included in versions.cfg. * Ignore egg-info directory and setup.cfg in debian/source/options to avoid diff of files in this directory. * Call clean in distclean Makefile target to remove build directory even when only distclean target is called. -- Arnaud Fontaine Tue, 28 May 2013 12:41:39 +0900 zope2.12 (2.12.26-1) unstable; urgency=high * New upstream release. Closes: #692899. + Fix Reflexive HTTP header injection (CVE-2012-5486). + Fix Timing attack in password validation (CVE-2012-5507). + Fix PRNG which wasn't reseeded (CVE-2012-5508). * debian/patches/CVE-2012-5505.patch: + Fix Attempting to access a view with no name returns an internal data structure (CVE-2012-5505). Thanks to Tres Seaver. Closes: #692899. * debian/control: + Bump zope.common required version as the debconf template has been updated. Closes: #656552. * debian/rules: + As dh_python (>= 2.7.3-1) rewrites shebangs by default, overriding dh_auto_install to fix shebangs does not work anymore as dh_python2 is called afterwards, instead use dh_python2 to rewrite them. - debian/control: bump python Build-Depends. - Drop now useless ZODB3-fix_shebang.patch. -- Arnaud Fontaine Wed, 06 Mar 2013 18:46:14 +0900 zope2.12 (2.12.23-1) unstable; urgency=low * New upstream release. * debian/control: bump Standards-Version to 3.9.3. + debian/copyright: update Format URL. * debian/watch: fix missing version delimiters in filename pattern. -- Arnaud Fontaine Thu, 14 Jun 2012 09:44:20 +0900 zope2.12 (2.12.22-1) unstable; urgency=low * New upstream release (2.12.22) - Fixes cross-site-scripting attack (CVE-2010-1104). - Remove patch Zope2-fix_serious_authentication_vulnerability.patch, now incorporated upstream. -- Jonas Meurer Thu, 19 Jan 2012 01:28:13 +0100 zope2.12 (2.12.20-3) unstable; urgency=low * Remove ClientForm from DEB_SATISFIED as it's going to be dropped soonish. -- Arnaud Fontaine Fri, 16 Dec 2011 14:20:35 +0900 zope2.12 (2.12.20-2) unstable; urgency=high * Update Homepage field to point to correct page http://zope2.zope.org/. * Change Depends on zope-common from (>= 0.5.51) to (>= 0.5.51~), to ease backports to squeeze. * Add debian/patches/Zope2-fix_serious_authentication_vulnerability.patch, fixing a serious authentication vulnerability in stock configuration. No CVE number assigned yet. See https://mail.zope.org/pipermail/zope-dev/2011-October/043592.html for further information. * Set urgency=high in order to push the security fix to testing. -- Jonas Meurer Fri, 28 Oct 2011 13:51:41 +0200 zope2.12 (2.12.20-1) unstable; urgency=low * Zope 2.12.20 release. [ Gael Le Mignot ] * Allowing to install eggs in lib/python of instances. [ Jonas Meurer ] * Remove Zope eggs from dependencies in debian/control, and from DEB_SATISFIED in debian/rules. All Zope dependencies are shipped with the local tarball. See README.source for further information. * Add python distribute modules to list of DEB_SATISFIED modules. * Remove python-transaction from depends and from DEB_SATISFIED. It's a zope module and should be included in the zope2.12 binary package. * Add python2.6 package to list of dependencies. * Major update and reformating of debian/copyright. * Bump standards-version to 3.9.2, no changes required. * Remove Suggests on zope-zopebook and zope-devguide. Neither of them are available in Debian archives. * Remove unused debian/patches/fix_lib_location.patch. * Enable and rename debian/patches/ZODB3-fix-shebang.patch. * Lintian overrides: - Remove unused lintian overrides package-contains-empty-directory and file-in-unusual-dir - Add lintian override wrong-path-for-interpreter for python wrapper * Add debian/README.source to explain the current packaging approach. * Install the upstream changelogs to /usr/share/doc/zope2.12/changelogs. * Remove upstream LICENSE.txt in eggs from zope2.12 binary package. * Remove scripts from EGG-INFO subfolders in zope2.12 binary package. * Add versions to dependencies on python modules for zope2.12 package. * Fix debian/build-scripts/fetch.py to lowercase dependency names before checking for them. gen_versions_cfg.py already writes lowercased names. Thanks to Michael Mulich for help with investigation. * Remove Michael Mulich from Uploaders field. * Migrate the package from dh_pysupport to dh_python2. - Bump build-depends: python2.6-dev (>= 2.6.6-3~) and python (>= 2.7.2-9~). - Remove build-depends on python, as python-dev build-depends pull it in. - Remove debian/pyversions, add X-Python-Version: 2.6 to debian/control. - Add --with python2 to dh in debian/rules, to invoke dh_python2. * Update watchfile to search for Zope2.12 releases at pypi.python.org. * Remove obsolete debian/zopeZVER.preinst.in magic, not needed anymore. * Add $(PYTHON) variable in debian/rules to make python version configurable. * Add versioned depends on python-pkg-resources (<= 0.6.14) | python-pkg-resources (>= 0.6.16-1.1) in order to prevent bug#644003. [ Arnaud Fontaine ] * Add myself as uploader. * Fix debian/copyright following recent changes on DEP5. * Add initgroups to deb-satisfied list as it's a basic module already available in the archive. * Ignore duplicated changelog warning from lintian. * Fix custom interpreter to have Zope2 paths after current working directory and PYTHONPATH, but before other Python paths to avoid conflicts with other Zope Debian packages installed. -- Jonas Meurer Tue, 11 Oct 2011 15:52:50 +0200 zope2.12 (2.12.11-1) unstable; urgency=low * New upstream release. A tarball version of Zope 2.12.11 is available. * Added pip to the deb-satisfied list, which prevents get-orig-source from fetching it. * Updated the patches. * Reapplied the commenting syntax for the zope.conf zodb storage configuration. This syntax allows the zope creation scripts to enable the proper storage type while leaving the other commented out. * Transitioned the copyright from the old style to the DEP5 standard. * Added the build-scripts to the debian directory. These scripts previously came with the tarball source. These have been pulled out in an effort to lessen the dependencies and time it would take to get the latest release built. * Added the configure script and makefile.in file from the tarball source to a build-resources.patch. These have been simplified to address only the needs of this package. These resources could potentially be factored out in the future. * Fixed the custom python interpreter to set the sys.executable as itself. We set the executable so scripts like mkzeoinstance generate configuration that points at an executable that can load zope2.12's private environment. -- Michael Mulich (pumazi) Thu, 09 Dec 2010 23:50:43 -0500 zope2.12 (2.12.10-1) unstable; urgency=low * Adding myself to the package Uploaders. * Adding python-pkg-resources as a dependency. * Modified the watch file to point at the new tarball location. * Rewrote the rules file to use the newest style debhelper with override support. * Added the following package dependencies: python-clientform, python-mechanize, python-transaction, python-zconfig, python-zc.lockfile, python-zdaemon, python-zodb, python-zope.authentication, python-zope.browser, python-zope.component, python-zope.component-zcml, python-zope.configuration, python-zope.contenttype, python-zope.copy, python-zope.event, python-zope.exceptions, python-zope.hookable, python-zope.i18n, python-zope.i18nmessageid, python-zope.location, python-zope.proxy, python-zope.publisher, python-zope.schema, python-zope.security * Adding python-profiler as a suggested package, since a Zope2 ZPublisher test module uses the profiler. * Adding python-pip as a build dependency. * Added a get-orig-source rules target to build an orig.tar.gz. * Restored exclusive support for Python version 2.6. * Bumped zope-common's version compatiblity. * Removed the executable bit from the built distribution's python modules. * Removed an acient shell script in DocumentTemplate that dates back to the time of Python version 1.5. * Touched up the init script to provide remote_fs compatiblity. * Updated the copyright. Everything pulled in via the rules' get-orig-source is now under ZPL 2.1. Consult the source's COPYRIGHT file to verify these findings. -- Michael Mulich (pumazi) Wed, 24 Nov 2010 11:18:53 -0500 zope2.12 (2.12.0-1) unstable; urgency=low * Zope 2.12.0 release. [ Matthias Klose ] * Add the existing modular zope modules as dependencies. * Modules which are not yet packaged: Acquisition DateTime ExtensionClass Persistence RestrictedPython tempstorage zLOG zope.container zope.contentprovider zope.contenttype zope.deferredimport zope.formlib zope.lifecycleevent zope.pagetemplate zope.processlifetime zope.sendmail zope.sequencesort zope.site zope.size zope.structuredtext zope.tal zope.tales zope.testbrowser [zope-functional-testing] (UNRELEASED?) zope.viewlet zope.app.form zope.app.publication zope.app.publisher zope.app.schema * Fix the build such that the package builds again. [ Jonas Meurer ] * Remove pycentral cleanup code from debian/zopeZVER.preinst.in. * Remove exclusion of python2.5/2.6 code from dh_pysupport. * Bump python version to 2.6. * Remove useless tarball handling from debian/rules, distribute zope upstream tarball directly. * Migrate to quilt patch system from dpatch. * Build-Depend on python-setuptools. [ Bernd Zeimetz ] * Removing myself from Uploaders. Unfortunately I don't have enough spare time to contribute. -- Jonas Meurer Mon, 08 Mar 2010 18:14:40 +0100 zope2.11 (2.11.3-1) unstable; urgency=low * New upstream release * Minor improvement to the long description of zope2.11-sandbox. (closes: #527030) * Don't delete lib/python/pytz/LICENSE.txt as it is not provided any longer. * Reorder targets and dependencies in debian/rules to actually fix parallel building. Still disable parallel building for now, as suggested by Lucas Nussbaum. (closes: #534013) * Migrate from python-central to python-support: - add debian/pyversions, remove debian/pycompat - add depends on ${python:Depends} - add pycentral cleanup code to debian/zopeZVER.preinst.in * Exclude lib/python/RestrictedPython/tests and lib/python/mechanize from byte-compiling with dh_pysupport, as both include code for python2.5+ that fails to compile with python2.4. * Bump standards-version to 3.8.2, no changes needed. * Check for /etc/default/zope2.10 before including it in initscript. * lintian cleanup: - zopeZVER-sandbox.copyright.in: link to GPL-2 instead of GPL. - *.{post|pre}{inst|rm}: use set -e instead of /bin/sh -e. -- Jonas Meurer Fri, 03 Jul 2009 14:42:22 +0200 zope2.11 (2.11.2-1) unstable; urgency=low * New major upstream release. New source package. - Update debian/rules, debian/watch and debian/control. - Update deb-zopeconf.dpatch. - Don't remove lib/python/Products/Five/doc/ZopePublicLicense.txt and lib/python/ZConfig/LICENSE.txt, as upstream doesn't ship them any more - Don't chmod lib/python/ImageFile.py and lib/python/Products/ZGadflyDA/Setup for the same reason. - Update initscript to talk about @ZVER@ instead of zope2.9. * Bump standards-version to 3.8.1, no changes needed * Bump debian/compat to 5, adjust versioned Build-Depends on debhelper. * Change section to zope in debian/control, according to http://ftp-master.debian.org/~joerg/sections.march2009.txt -- Jonas Meurer Sun, 15 Mar 2009 17:42:03 +0100 zope2.10 (2.10.7-1) unstable; urgency=low [ Bernd Zeimetz ] * debian/control: - Updating my email address. [ Jonas Meurer ] * New upstream release. * Redirect output of 'bin/zopectl logreopen' to /dev/null in logrotate postrotate script. (closes: #514059) * Bump standards-version to 3.8.0: - debian/control: Add Homepage and Vcs-Browser fields, change XS-Vcs-Svn to Vcs-Svn. - debian/README.source: Added. - debian/rules: Add $(confflags) as described in /usr/share/doc/autotools-dev/README.Debian.gz, and build options like $(CFLAGS) as described in policy. * lintian checks: - Remove linda overrides. - Add overrride for package-contains-empty-directory usr/lib/zope2.10/skel/etc/package-includes/ -- Jonas Meurer Wed, 25 Feb 2009 16:24:18 +0100 zope2.10 (2.10.6-1) unstable; urgency=low * New upstream release. * debian/rules, debian/control: use python-tz instead of shipping a private version of it. (Closes: #474597) -- Fabio Tranchitella Mon, 12 May 2008 12:18:37 +0200 zope2.10 (2.10.5-3) unstable; urgency=low * debian/zopeZVER.NEWS.Debian: removed, the content was out-dated. (Closes: #456881) -- Fabio Tranchitella Tue, 18 Dec 2007 10:50:22 +0100 zope2.10 (2.10.5-2) unstable; urgency=low * debian/zopeZVER.logrotate.in: use the original mode, user and group while rotating the logs. (Closes: #453396) -- Fabio Tranchitella Thu, 29 Nov 2007 11:51:34 +0100 zope2.10 (2.10.5-1) unstable; urgency=low * New upstream release. * debian/patches/deb-zopeconf.dpatch: fixed argument handling. (Closes: #440224) -- Fabio Tranchitella Sun, 04 Nov 2007 12:25:25 +0100 zope2.10 (2.10.4-2) unstable; urgency=low [ Jonas Meurer ] * Add a watch file. [ Bernd Zeimetz ] * Porting the new deb patch was a bit hasty, we should not use zope2.9 directories - fixing that. -- Bernd Zeimetz Mon, 13 Aug 2007 20:11:39 +0200 zope2.10 (2.10.4-1) unstable; urgency=low [ Bernd Zeimetz ] * Adding the latest Debian specific patch to support ZEOs as primary datastore in mkzopeinstance. [ Jonas Meurer ] * New upstream release. -- Bernd Zeimetz Thu, 26 Jul 2007 11:29:53 +0200 zope2.10 (2.10.3-2) unstable; urgency=low * Upload to unstable. -- Fabio Tranchitella Wed, 11 Apr 2007 13:28:18 +0200 zope2.10 (2.10.3-1) unstable; urgency=low * New upstream release. -- Fabio Tranchitella Mon, 2 Apr 2007 08:46:23 +0200 zope2.10 (2.10.2-2) experimental; urgency=low * debian/patches/webdav.dpatch: applied patch to fix webdav quoting for resources with names containing spaces. (Closes: #410051) -- Fabio Tranchitella Fri, 9 Feb 2007 12:59:18 +0100 zope2.10 (2.10.2-1) experimental; urgency=low [ Jonas Meurer] * New upstream release 2.10.2 * add XS-Vcs-Svn to debian/control -- Jonas Meurer Sat, 27 Jan 2007 02:13:58 +0100 zope2.10 (2.10.1-1) experimental; urgency=low * New upstream release 2.10.1 -- Jonas Meurer Sat, 25 Nov 2006 18:58:45 +0100 zope2.10 (2.10.0-3) experimental; urgency=low * upload with orig.tar.gz this time (build with dpkg-buildpackage -sa) -- Jonas Meurer Fri, 17 Nov 2006 16:09:30 +0100 zope2.10 (2.10.0-2) experimental; urgency=low * add myself to uploaders * really upload to experimental -- Jonas Meurer Fri, 17 Nov 2006 15:27:33 +0100 zope2.10 (2.10.0-1) experimental; urgency=low * New major upstream release, new source package. - Update deb-zopeconf.dpatch. - Don't remove lib/python/docutils/COPYING.txt as upstream doesn't ship it any more. * upload to experimental -- Jonas Meurer Fri, 17 Nov 2006 15:22:02 +0100 zope2.9 (2.9.5-1) unstable; urgency=low * New upstream release. -- Fabio Tranchitella Sun, 8 Oct 2006 15:31:20 +0200 zope2.9 (2.9.4-1) unstable; urgency=low * New upstream release. * debian/patches/rst-docutils.dpatch: removed, applied upstream. -- Fabio Tranchitella Fri, 21 Jul 2006 09:43:48 +0200 zope2.9 (2.9.3-3) unstable; urgency=high * Fixed an information disclosure vulnerability (CVE-2006-3458) applying upstream patch: disable reStructuredText's 'raw' and 'include' directives. (Closes: #377286) * debian/control: use --home instead of --prefix when calling make install. (Closes: #373710) -- Fabio Tranchitella Tue, 11 Jul 2006 16:26:48 +0200 zope2.9 (2.9.3-2) unstable; urgency=low * debian/rules: zope2.9-sandbox should be created by binary-indep. (Closes: #368614) * debian/patches/deb-zopeconf.dpatch: patch mkzeoinstance to fix the python library path. -- Fabio Tranchitella Tue, 13 Jun 2006 09:57:20 +0200 zope2.9 (2.9.3-1) unstable; urgency=low * New upstream release. * Standards-Version: 3.7.2, no changes necessary. -- Fabio Tranchitella Fri, 12 May 2006 15:13:05 +0200 zope2.9 (2.9.2-1) unstable; urgency=low * New upstream release. -- Fabio Tranchitella Tue, 11 Apr 2006 10:32:16 +0200 zope2.9 (2.9.1-1) unstable; urgency=low * New major upstream release, new source package. (Closes: #344224, #355758) -- Fabio Tranchitella Mon, 20 Mar 2006 21:18:58 +0000 zope2.8 (2.8.5-1) unstable; urgency=low * New upstream release. * debian/zopeZVER.init.in: fixed a typo which prevents zeo instances to be started by the init script. (Closes: #341527) -- Fabio Tranchitella Sun, 15 Jan 2006 19:54:59 +0000 zope2.8 (2.8.4-2) unstable; urgency=low * debian/rules: remove RestrictedPython/tests/before_and_after24.py, because contains a syntax error. (Closes: #340542) -- Fabio Tranchitella Thu, 24 Nov 2005 13:34:47 +0000 zope2.8 (2.8.4-1) unstable; urgency=low * New upstream release (2.8.4). * Don't remove /var/log/zope2.8/ on package removal. (Closes: #333855) * debian/copyright: added a note about Medusa license, since some copyright notices inside the upstream tarball are wrong. I think this is enough to close the bugreport, and I'll ask upstream to change the license statement, too. (Closes: #340164) -- Fabio Tranchitella Wed, 23 Nov 2005 14:59:27 +0000 zope2.8 (2.8.3-1) unstable; urgency=low * New upstream release (2.8.3). -- Fabio Tranchitella Sun, 23 Oct 2005 14:15:23 +0000 zope2.8 (2.8.1-7) unstable; urgency=medium * Apply Hotfix 2005-10-09, resolving a security issue with docutils. -- Matthias Klose Sat, 15 Oct 2005 11:55:49 +0200 zope2.8 (2.8.1-6) unstable; urgency=low * Fix debconf dependency (closes: #332178). * Fix error in mkzeoinst.py script (closes: #331061). -- Matthias Klose Sat, 8 Oct 2005 16:38:48 +0200 zope2.8 (2.8.1-5) unstable; urgency=low * Upload to unstable. -- Fabio Tranchitella Wed, 7 Sep 2005 14:57:11 +0000 zope2.8 (2.8.1-4) experimental; urgency=low * debian/control: build-depends on lsb-release, and use it in debian/rules to guess the distribution (Debian or Ubuntu). -- Fabio Tranchitella Tue, 23 Aug 2005 14:16:18 +0000 zope2.8 (2.8.1-3) experimental; urgency=low * debian/rules: do not remove tests, Five needs them. -- Fabio Tranchitella Fri, 19 Aug 2005 12:19:59 +0000 zope2.8 (2.8.1-2) experimental; urgency=low * debian/patches/deb-zopeconf.dpatch: added --service-port argument to makezopeinstance.py. -- Fabio Tranchitella Thu, 18 Aug 2005 19:47:27 +0000 zope2.8 (2.8.1-1) experimental; urgency=low * New upstream release. -- Fabio Tranchitella Fri, 12 Aug 2005 06:56:48 +0000 zope2.8 (2.8.0-2) experimental; urgency=low * debian/control: o provides zope o build-deps on python o depends on lsb-base * debian/zopeZVER-sandbox.dzinstance.in: use @ZVER@ substitution. * debian/zopeZVER.init.in: use lsb-base functions. * debian/rules: use $(ZOPE) instead of zope2.8. * debian/patches/deb-zopeconf.dpatch: allow to run instances with a custom user instead of zope. -- Fabio Tranchitella Wed, 10 Aug 2005 17:49:57 +0000 zope2.8 (2.8.0-1) experimental; urgency=low * Initial Release. (Closes: #314589) -- Fabio Tranchitella Wed, 13 Jul 2005 14:12:32 +0000