web2py (2.12.3-1ubuntu0.1) xenial-security; urgency=medium

  * SECURITY UPDATE: remote code execution
   - debian/patches/CVE-2016-3957-1.patch: more secure sessions in
     cookies using json
   - debian/patches/CVE-2016-3957-2.patch: restored pickles in sessions
   - debian/patches/CVE-2016-3957-3.patch: fixed sessions for long keys
   - CVE-2016-3957
   - CVE-2016-3954
   - CVE-2016-3953
  * SECURITY UPDATE: brute force password attack
   - debian/patches/CVE-2016-10321.patch: check if host is denied before
     verifying passwords
   - CVE-2016-10321
  * SECURITY UPDATE: information disclosure
   - debian/patches/CVE-2016-3952-1.patch: do not leak global settings into
     request object
   - debian/patches/CVE-2016-3952-2.patch: adding back cmd_options
   - debian/patches/CVE-2016-3952-3.patch: simplified beautify example
   - debian/patches/CVE-2016-3952-4.patch: fixing error due to removing 
     global settings from request
   - debian/patches/CVE-2016-3952-5.patch: fixing typo on previous patch
   - CVE-2016-3952 

 -- Emilia Torino <emilia.torino@canonical.com>  Tue, 18 Jun 2019 14:01:55 -0300

web2py (2.12.3-1) unstable; urgency=medium

  [ José L. Redrejo Rodríguez]
  * Removed gtk patch, no needed now as tk looks good on Gnome  
  * Added extras directory to the instalation
  * Added apache configuration file to examples (Closes: #777696)
  * Removed python-support references (Closes: #798479)
  * Bump Standards-Version to 3.9.6 (no changes needed)

  [ Raphael Lechner ]
  * New upstream release (Closes: #689658, #772360)
  * Refreshed patches
  * Add version patch
  * Add fix_websocket_messaging patch

 -- José L. Redrejo Rodríguez <jredrejo@debian.org>  Sat, 26 Sep 2015 18:56:08 +0200

web2py (1.99.7-2) unstable; urgency=low

  * Team upload.

  [ Jakub Wilk ]
  * Use canonical URIs for Vcs-* fields.
  * Use empty lines to separate paragraphs in debian/control.

  [ Ana Rodríguez López ]
  * Replace python-support with dh-python (Closes: #786088)

 -- Piotr Ożarowski <piotr@debian.org>  Mon, 07 Sep 2015 23:40:28 +0200

web2py (1.99.7-1) unstable; urgency=low

  * New upstream release
  * Refreshed gtk_gui and fix_interpreters patches
  
 -- José L. Redrejo Rodríguez <jredrejo@debian.org>  Mon, 12 Mar 2012 12:44:02 +0100

web2py (1.99.4-1) unstable; urgency=low

  * New upstream release
  * Refreshed gtk_gui and avoid_upgrading patches
  * Fixed bug in debian/patches/launcher (Closes: #650721)

 -- José L. Redrejo Rodríguez <jredrejo@debian.org>  Wed, 14 Dec 2011 18:14:45 +0100

web2py (1.99.2.1-1) unstable; urgency=low

  * Updated upstream sources with real 1.99.2 version
  * Ensure python-gtk2 is not needed to run web2py, fixing 
    debian/patches/gtk_gui (Closes: #646931)
  * Refreshed debian/patches/avoid_updating patch

 -- José L. Redrejo Rodríguez <jredrejo@debian.org>  Fri, 04 Nov 2011 10:12:01 +0100

web2py (1.99.2-2) unstable; urgency=low

  * Fixed paths in Vcs* fields (Closes: #643924) 

 -- José L. Redrejo Rodríguez <jredrejo@debian.org>  Sat, 01 Oct 2011 12:01:56 +0200

web2py (1.99.2-1) unstable; urgency=low

  * New upstream version
  * Reverted transition to dh_python2 because of bad placement of
    files causing importing problems (Closes: #637971)

 -- José L. Redrejo Rodríguez <jredrejo@debian.org>  Mon, 26 Sep 2011 10:28:59 +0200

web2py (1.98.2-1) unstable; urgency=low

  * New upstream version
  * Transition to dh_python2:
    - Removed python-support from build dependencies in debian/control
    - Bumped python version dependencies to 2.6.6-3 in debian/control

 -- José L. Redrejo Rodríguez <jredrejo@debian.org>  Mon, 08 Aug 2011 13:20:06 +0200

web2py (1.97.1-1) unstable; urgency=low

  * New upstream version
  * Refreshed debian/patches/launcher to fix bug when used for first time
  * Moved most examples from python-web2py to python-gluon package

 -- José L. Redrejo Rodríguez <jredrejo@debian.org>  Mon, 27 Jun 2011 10:14:46 +0200

web2py (1.96.4-2) unstable; urgency=low

  * Refreshed debian/patches/launcher: new module importing now works 

 -- José L. Redrejo Rodríguez <jredrejo@debian.org>  Fri, 10 Jun 2011 13:51:18 +0200

web2py (1.96.4-1) unstable; urgency=low

  * New upstream version

 -- José L. Redrejo Rodríguez <jredrejo@debian.org>  Wed, 08 Jun 2011 08:26:32 +0200

web2py (1.96.3-1) unstable; urgency=low

  * New upstream version

 -- José L. Redrejo Rodríguez <jredrejo@debian.org>  Sun, 05 Jun 2011 11:18:24 +0200

web2py (1.96.2-1) unstable; urgency=low

  * New upstream version

 -- José L. Redrejo Rodríguez <jredrejo@debian.org>  Sat, 04 Jun 2011 11:28:42 +0200

web2py (1.96.1-1) unstable; urgency=low

  * New upstream version
  * Move wsgihandler.py from python-web2py to examples of python-gluon
  * Added subwsgihandler.py to python-gluon examples (as a patch)
  * Added web2py.apache-subdir and updated web2py.apache and README.Debian
  * Refreshed debian/patches/avoid_upgrading 

 -- José L. Redrejo Rodríguez <jredrejo@debian.org>  Thu, 02 Jun 2011 16:55:29 +0200

web2py (1.95.1-1) unstable; urgency=low

  * New upstream version
  * Improved web2py launcher
  * Removed debian/patches/welcome_without_sessions
  * debian/rules: fix some files in the welcome application 

 -- José L. Redrejo Rodríguez <jredrejo@debian.org>  Mon, 25 Apr 2011 16:39:57 +0200

web2py (1.94.6-1) unstable; urgency=low

  * New upstream version
  * debian/patches/avoid_write_translations avoid web2py trying to
    rewrite language files whenever a string is translated  

 -- José L. Redrejo Rodríguez <jredrejo@debian.org>  Fri, 08 Apr 2011 13:18:32 +0200

web2py (1.92.1-1) unstable; urgency=low

  * Initial release (Closes: #583384)

 -- José L. Redrejo Rodríguez <jredrejo@debian.org>  Sun, 30 Jan 2011 10:32:55 +0000
