libyaml-libyaml-perl (0.903.0+ds-1) unstable; urgency=medium

  * Import upstream version 0.903.0+ds.
    Security fix: Use 3-arg form of open in LoadFile (issue#120 PR#121)
  * Update years of upstream and packaging copyright.

 -- gregor herrmann <gregoa@debian.org>  Fri, 07 Feb 2025 23:04:08 +0100

libyaml-libyaml-perl (0.902.0+ds-2) unstable; urgency=medium

  * Add versioned Breaks on libdebian-dep12-perl and lintian to prevent
    broken combinations with partial upgrades.
    Thanks to Niko Tyni for the bug report. (Closes: #1083106)

 -- gregor herrmann <gregoa@debian.org>  Wed, 02 Oct 2024 00:09:57 +0200

libyaml-libyaml-perl (0.902.0+ds-1) unstable; urgency=medium

  * Import upstream version 0.902.0+ds.
  * Refresh system-libyaml.patch (offset).
  * Drop debian/clean, not needed anymore.
  * debian/libyaml-libyaml-perl.docs: update filename.
  * Declare compliance with Debian Policy 4.7.0.
  * Update test and runtime dependencies.

 -- gregor herrmann <gregoa@debian.org>  Sun, 22 Sep 2024 16:50:03 +0200

libyaml-libyaml-perl (0.89+ds-1) unstable; urgency=medium

  * Import upstream version 0.88+ds.
  * Import upstream version 0.89+ds.
  * Update years of upstream and packaging copyright.
  * Add debian/clean: remove generated test files. (Closes: #1048118)

 -- gregor herrmann <gregoa@debian.org>  Sun, 04 Feb 2024 03:33:03 +0100

libyaml-libyaml-perl (0.86+ds-1) unstable; urgency=medium

  * Import upstream versions 0.85+ds, 0.86+ds.
  * Update years of upstream and packaging copyright.
  * Update short description: prefer newer module name YAML::XS.
  * Declare compliance with Debian Policy 4.6.2.

 -- gregor herrmann <gregoa@debian.org>  Mon, 30 Jan 2023 20:54:32 +0100

libyaml-libyaml-perl (0.84+ds-1) unstable; urgency=medium

  * Import upstream version 0.84+ds.
  * Update years of upstream and packaging copyright.
  * Build-depend on libyaml-dev 0.2.4.
  * Declare compliance with Debian Policy 4.6.1.

 -- gregor herrmann <gregoa@debian.org>  Fri, 09 Sep 2022 17:49:44 +0200

libyaml-libyaml-perl (0.83+ds-1) unstable; urgency=medium

  * Update 'DEB_BUILD_MAINT_OPTIONS = hardening=+bindnow' to '=+all'.
  * debian/watch: change repacksuffix from 'repack' to conventional 'ds'.

  * Import upstream version 0.83+ds.
  * Update years of upstream and packaging copyright.
  * Declare compliance with Debian Policy 4.6.0.
  * Bump debhelper-compat to 13.

 -- gregor herrmann <gregoa@debian.org>  Sun, 12 Sep 2021 19:34:40 +0200

libyaml-libyaml-perl (0.82+repack-1) unstable; urgency=medium

  * Import upstream version 0.82+repack.
  * Set Rules-Requires-Root: no.

 -- gregor herrmann <gregoa@debian.org>  Mon, 04 May 2020 16:39:57 +0200

libyaml-libyaml-perl (0.81+repack-1) unstable; urgency=medium

  * Import upstream version 0.81+repack.
    Fixes "Unconditionally instantiates objects from yaml data"
    (Closes: #862373)
  * Add a debian/NEWS entry about the changed default for
    $YAML::XS::LoadBlessed.
  * Update years of upstream and packaging copyright.
  * Declare compliance with Debian Policy 4.5.0.
  * Update Build-Depends for cross builds.
  * Set upstream metadata fields: Bug-Submit.

 -- gregor herrmann <gregoa@debian.org>  Wed, 29 Jan 2020 12:19:37 +0100

libyaml-libyaml-perl (0.80+repack-2) unstable; urgency=medium

  * Bump versioned build dependency on libyaml-dev to 0.2.2 now that it is
    available in the archive.
  * Remove obsolete fields Name, Contact from debian/upstream/metadata.

 -- gregor herrmann <gregoa@debian.org>  Sun, 15 Sep 2019 14:34:24 +0200

libyaml-libyaml-perl (0.80+repack-1) unstable; urgency=medium

  * Import upstream version 0.80+repack.

 -- gregor herrmann <gregoa@debian.org>  Sun, 25 Aug 2019 16:57:26 +0200

libyaml-libyaml-perl (0.79+repack-2) unstable; urgency=medium

  * Drop part of system-libyaml.patch which handled end-of-document
    markers.
    Thanks to Tina Müller for the hint on the mailing list.

 -- gregor herrmann <gregoa@debian.org>  Fri, 19 Jul 2019 15:58:12 -0300

libyaml-libyaml-perl (0.79+repack-1) unstable; urgency=medium

  * Import upstream version 0.79+repack.
  * Drop disable-update.sh.patch.
    The code we commented out is now commented out upstream.
  * Refresh system-libyaml.patch (offset).
  * Update years of upstream copyright.
  * Declare compliance with Debian Policy 4.4.0.
  * Bump debhelper-compat to 12.
  * debian/watch: use uscan version 4.

 -- gregor herrmann <gregoa@debian.org>  Thu, 18 Jul 2019 21:48:04 -0300

libyaml-libyaml-perl (0.76+repack-1) unstable; urgency=medium

  * Import upstream version 0.76+repack.
  * Refresh system-libyaml.patch (offset).
  * Update years of packaging copyright.
  * Declare compliance with Debian Policy 4.3.0.

 -- gregor herrmann <gregoa@debian.org>  Thu, 03 Jan 2019 23:56:13 +0100

libyaml-libyaml-perl (0.75+repack-1) unstable; urgency=medium

  * Import upstream version 0.75+repack.
  * Refresh system-libyaml.patch (offset).
  * Remove trailing whitespace from debian/*.

 -- gregor herrmann <gregoa@debian.org>  Fri, 09 Nov 2018 20:13:34 +0100

libyaml-libyaml-perl (0.74+repack-1) unstable; urgency=medium

  * Import upstream version 0.74+repack.
  * Declare compliance with Debian Policy 4.2.1.

 -- gregor herrmann <gregoa@debian.org>  Fri, 07 Sep 2018 19:20:07 +0200

libyaml-libyaml-perl (0.72+repack-1) unstable; urgency=medium

  [ Salvatore Bonaccorso ]
  * Update Vcs-* headers for switch to salsa.debian.org

  [ gregor herrmann ]
  * Add repacksuffix in debian/watch.

  * Import upstream version 0.72.
  * Drop pod-spelling.patch, applied upstream.
  * Refresh system-libyaml.patch (offset).
  * Make build dependency on libyaml-dev versioned.
  * Update years of upstream and packaging copyright.
  * Declare compliance with Debian Policy 4.1.5.

 -- gregor herrmann <gregoa@debian.org>  Sat, 21 Jul 2018 19:53:06 +0200

libyaml-libyaml-perl (0.69+repack-1) unstable; urgency=medium

  * Team upload

  [ Alex Muntada ]
  * Remove inactive pkg-perl members from Uploaders.

  [ Damyan Ivanov ]
  * use system-wide libyaml instead of a bundled copy
    Closes: #664224
    add Exclude-Files: to debian/copyright removing the bundled copy
    add system-libyaml.patch adding linkage with system libyaml
  * New upstream version 0.69+repack
  * watch: add dversionmangle removing +repack suffix
  * bump years of upstream copyright
  * add libyaml-dev to build dependencies
  * drop Load-B-Deparse-at-runtime.patch (applied upstream)
  * declare compliance with Policy 4.1.3
  * add pod-spelling.patch, fixing an "allows to" phrasing
  * bump debhelper compatibility level to 11

 -- Damyan Ivanov <dmn@debian.org>  Sun, 21 Jan 2018 22:22:13 +0000

libyaml-libyaml-perl (0.63-2) unstable; urgency=medium

  * Team upload.
  * Load B::Deparse at runtime.
    Thanks to Eric Wong <e@80x24.org> for the report (Closes: #849843)

 -- Salvatore Bonaccorso <carnil@debian.org>  Thu, 05 Jan 2017 06:42:48 +0100

libyaml-libyaml-perl (0.63-1) unstable; urgency=medium

  [ gregor herrmann ]
  * New upstream releases 0.43, 0.44, 0.45.
  * Update copyright years. Drop information about removed files.
  * Install new CONTRIBUTING file.
  * Add debian/upstream/metadata.

  [ Salvatore Bonaccorso ]
  * Update Vcs-Browser URL to cgit web frontend
  * debian/control: Use HTTPS transport protocol for Vcs-Git URI

  [ gregor herrmann ]
  * Imported upstream version 0.52.
  * Mark package as autopkgtest-able.

  * Import upstream version 0.60.
  * Drop a bunch of patches which all have been applied upstream.
  * Update years of upstream and packaging copyright.

  * Import upstream version 0.62
  * debian/copyright: change Copyright-Format 1.0 URL to HTTPS.
  * Remove Jonathan Yu from Uploaders. Thanks for your work!
  * Remove Ryan Niebur from Uploaders. Thanks for your work!

  * Import upstream version 0.63
  * Set bindnow linker flag in debian/rules.
  * Declare compliance with Debian Policy 3.9.8.
  * Add lintian override for embedded libyaml.

  * One of those upstream releases since 0.41 also closes: #834999
    according to the test cases Marco d'Itri provided in the bug report.

 -- gregor herrmann <gregoa@debian.org>  Fri, 26 Aug 2016 19:46:11 +0200

libyaml-libyaml-perl (0.41-6) unstable; urgency=high

  * Team upload.
  * Add CVE-2014-9130.patch patch.
    Fix CVE-2014-9130: assertion failure caused by wrapped strings.
    (Closes: #771365)

 -- Salvatore Bonaccorso <carnil@debian.org>  Sat, 29 Nov 2014 08:23:09 +0100

libyaml-libyaml-perl (0.41-5) unstable; urgency=high

  * Team upload.

  [ gregor herrmann ]
  * Strip trailing slash from metacpan URLs.

  [ Salvatore Bonaccorso ]
  * Add CVE-2014-2525.patch patch.
    CVE-2014-2525: Heap overflow when parsing YAML tags.
    The heap overflow is caused by not properly expanding a string before
    writing to it in function yaml_parser_scan_uri_escapes in scanner.c.

 -- Salvatore Bonaccorso <carnil@debian.org>  Sun, 23 Mar 2014 08:32:24 +0100

libyaml-libyaml-perl (0.41-4) unstable; urgency=medium

  * Team upload.
  * Add libyaml-string-overflow.patch patch.
    Addresses CVE-2013-6393 for the LibYAML embedded copy in YAML::LibYAML.
  * Add libyaml-node-id-hardening.patch patch.
    Guard against integer overflow.
  * Add libyaml-guard-against-overflows-in-indent-and-flow_level.patch patch.
    Guard against overflows in indent and flow_level.

 -- Salvatore Bonaccorso <carnil@debian.org>  Sun, 23 Feb 2014 22:28:32 +0100

libyaml-libyaml-perl (0.41-3) unstable; urgency=medium

  * Team upload.
  * Revert applying libyaml-node-id-hardening.patch patch,
    libyaml-indent-column-overflow-v2.patch and
    libyaml-string-overflow.patch patch as this uncovered a regression
    on libyaml's side, discovered when rebuilding the packages with
    build-dependency on libyaml-libyaml-perl.

 -- Salvatore Bonaccorso <carnil@debian.org>  Mon, 10 Feb 2014 16:16:32 +0100

libyaml-libyaml-perl (0.41-2) unstable; urgency=medium

  * Team upload.
  * Add libyaml-string-overflow.patch patch.
    Addresses CVE-2013-6393 for the LibYAML embedded copy in YAML::LibYAML.
  * Add libyaml-indent-column-overflow-v2.patch.
    Addresses regression for the initial patch for CVE-2013-6393.
  * Add libyaml-node-id-hardening.patch patch.
    Guard against integer overflow.
  * Declare compliance with Debian Policy 3.9.5

 -- Salvatore Bonaccorso <carnil@debian.org>  Sun, 09 Feb 2014 00:16:03 +0100

libyaml-libyaml-perl (0.41-1) unstable; urgency=low

  [ Salvatore Bonaccorso ]
  * Change Vcs-Git to canonical URI (git://anonscm.debian.org)
  * Change search.cpan.org based URIs to metacpan.org based URIs

  [ gregor herrmann ]
  * New upstream release.
  * Update years of copyright.
  * Add patch to disable maintainer helper script.
  * Drop build dependency on not (yet) used libyaml-dev.
  * Declare compliance with Debian Policy 3.9.4.

 -- gregor herrmann <gregoa@debian.org>  Fri, 11 Oct 2013 18:37:51 +0200

libyaml-libyaml-perl (0.38-3) unstable; urgency=low

  * Document copyright and license for embedded libyaml. Thanks to Niko
    Tyni for spotting. (Closes: #664196)
  * Bump debhelper build dependency to 9.20120312 to get all hardening
    flags.
  * Fix a grammatical error in the long description.

 -- gregor herrmann <gregoa@debian.org>  Fri, 16 Mar 2012 21:49:42 +0100

libyaml-libyaml-perl (0.38-2) unstable; urgency=medium

  * Team upload.

  [ Julián Moreno Patiño ]
  * Enable hardening flags. (Closes: #661548)
    + Switch compat level 8 to 9.
    + Add fix_ftbfs_hardening_flags.diff patch.
    + Bump debhelper version to 9.
  * Bump Standards-Version to 3.9.3.
    + Update to DEP5 copyright-format 1.0.
      + Add /me to debian copyright.

  [ Niko Tyni ]
  * Note that this fixes CVE-2012-1152.
  * Upload at urgency=medium

 -- Niko Tyni <ntyni@debian.org>  Sat, 10 Mar 2012 08:57:07 +0200

libyaml-libyaml-perl (0.38-1) unstable; urgency=low

  * New upstream release.
  * Update copyright years.

 -- gregor herrmann <gregoa@debian.org>  Tue, 10 Jan 2012 19:09:44 +0100

libyaml-libyaml-perl (0.37-1) unstable; urgency=low

  [ Ansgar Burchardt ]
  * debian/control: Convert Vcs-* fields to Git.

  [ Salvatore Bonaccorso ]
  * debian/copyright: Replace DEP5 Format-Specification URL from
    svn.debian.org to anonscm.debian.org URL.

  [ gregor herrmann ]
  * New upstream release.
  * Update copyright years for inc/Module/*.
  * Add /me to Uploaders.

 -- gregor herrmann <gregoa@debian.org>  Sat, 01 Oct 2011 17:23:11 +0200

libyaml-libyaml-perl (0.35-1) unstable; urgency=low

  * Team upload.
  * New upstream release
  * debian/copyright:
    - Update copyright years.
    - Explicitly point to GPL-1 license text in common-licenses.
    - Refer to Debian systems in general instead of only Debian GNU/Linux
      systems.
  * Bump Debhelper compat level to 8.
  * debian/control: Bump versioned Build-Depends on debhelper to (>= 8).
  * Bump Standards-Version to 3.9.2.

 -- Salvatore Bonaccorso <carnil@debian.org>  Fri, 15 Apr 2011 22:41:15 +0200

libyaml-libyaml-perl (0.34-1) unstable; urgency=low

  * New upstream release
  * Update Standards-Version to 3.9.1 (no changes)
  * Added me to Uploaders (debian/control) and debian/copyright file

 -- Krzysztof Krzyżaniak (eloy) <eloy@debian.org>  Fri, 24 Sep 2010 17:35:42 +0200

libyaml-libyaml-perl (0.33-1) unstable; urgency=low

  [ Jonathan Yu ]
  * New upstream release (Closes: #578629).
  * This version has fixes for Perl 5.12
  * Use new 3.0 (quilt) source format
  * Use new DEP5 copyright format
  * Rewrite control description
  * Standards-Version 3.8.4 (drop perl version dep)
  * Add myself to Uploaders and Copyright

  [ Nathan Handler ]
  * debian/watch: Update to ignore development releases.

  [ Ryan Niebur ]
  * Update ryan52's email address

  [ gregor herrmann ]
  * debian/copyright: update years of upstream copyright.

 -- Jonathan Yu <jawnsy@cpan.org>  Sun, 02 May 2010 10:52:35 -0400

libyaml-libyaml-perl (0.32-1) unstable; urgency=low

  * Initial Release. (Closes: #531150)

 -- Ryan Niebur <ryanryan52@gmail.com>  Mon, 01 Jun 2009 02:17:22 -0700