movabletype-opensource (4.2.3-1+lenny3) oldstable-security; urgency=high

  * Apply patch from 4.36 fixing various security vulnerabilities
    (closes: #627936)

 -- Dominic Hargreaves <dom@earth.li>  Sun, 29 May 2011 10:51:20 +0100

movabletype-opensource (4.2.3-1+lenny2) stable; urgency=low

  * Various XSS/SQL security fixes backported from 4.35 (closes: #606311)

 -- Dominic Hargreaves <dom@earth.li>  Fri, 10 Dec 2010 22:16:07 +0000

movabletype-opensource (4.2.3-1+lenny1) stable; urgency=low

  * Don't allow any access to mt-wizard.cgi by default as it shouldn't
    normally be needed and presents an unnecessary security exposure
    (closes: #537935)

 -- Dominic Hargreaves <dom@earth.li>  Sat, 03 Oct 2009 14:22:47 +0100

movabletype-opensource (4.2.3-1) unstable; urgency=medium

  * Urgency medium due to security fixes
  * New upstream release: contains XSS security fixes and minor bugfixes

 -- Dominic Hargreaves <dom@earth.li>  Thu, 11 Dec 2008 20:00:05 +0000

movabletype-opensource (4.2.1-3) unstable; urgency=high

  * Urgency high due to security fix targetted at lenny
  * Fix multiple XSS issues (CVE-2008-4634). Thanks to Nico Golde for
    providing the patch, extracted from a release made by
    Six Apart KK (closes: #503114)

 -- Dominic Hargreaves <dom@earth.li>  Tue, 18 Nov 2008 17:55:33 +0000

movabletype-opensource (4.2.1-2) unstable; urgency=low

  * Fix SignIn widget by adapting JSON related code to new JSON.pm
    behaviour (closes: #498747). Thanks to Peter Gervai for the fix.

 -- Dominic Hargreaves <dom@earth.li>  Sat, 20 Sep 2008 23:50:53 +0100

movabletype-opensource (4.2.1-1) unstable; urgency=low

  * New upstream release (version 4.21)
    - fixes archive mapping bug (closes: #496776)
  * Change MTA dependencies to exim4 | mail-transport-agent. This is still
    not ideal but the best we can do pending a global fix (closes: #495858)

 -- Dominic Hargreaves <dom@earth.li>  Sun, 31 Aug 2008 22:01:39 +0100

movabletype-opensource (4.2-1) unstable; urgency=medium

  * New upstream final release
    - contains translation/doc updates and small bugfixes
  * Preserve urgency from previous release

 -- Dominic Hargreaves <dom@earth.li>  Wed, 13 Aug 2008 22:30:03 +0100

movabletype-opensource (4.2~rc5-1) unstable; urgency=medium

  * New upstream release candidate
  * Urgency medium as new release includes some preventative security fixes:
    http://www.movabletype.org/2008/08/movable_type_42_rc5_and_security_updates.html

 -- Dominic Hargreaves <dom@earth.li>  Sat,  9 Aug 2008 15:13:40 +0100

movabletype-opensource (4.2~rc4-1) unstable; urgency=low

  * New upstream release
  * Include SendMailPath explicitly as in some cases it seems
    to be required (closes: #491618)
  * Add versioned Depends on libclass-trigger-perl (>= 0.13-1)
    as the version in etch is not compatible with MT.

 -- Dominic Hargreaves <dom@earth.li>  Wed, 23 Jul 2008 22:56:37 +0100

movabletype-opensource (4.2~rc3-2) unstable; urgency=low

  * Set captcha image source path in default config (closes: #489306)
  * Add Depends on libclass-trigger-perl, libdbi-perl,
    libclass-data-inheritable-perl needed for bundled Data::ObjectDriver
    (closes: #489930)

 -- Dominic Hargreaves <dom@earth.li>  Tue,  8 Jul 2008 22:22:07 +0100

movabletype-opensource (4.2~rc3-1) unstable; urgency=low

  * New upstream release candidate
  * Add Swedish debconf translation (closes: #487739)
  * Include local versions of TheSchwartz and Data::ObjectDriver as
    MT distribution includes newer versions than on CPAN
  * Recommend libarchive-zip-perl

 -- Dominic Hargreaves <dom@earth.li>  Wed,  2 Jul 2008 01:52:49 +0100

movabletype-opensource (4.2~rc2-2) unstable; urgency=low

  * lib/MT/CMS/Entry.pm, lib/MT/CMS/Asset.pm: update JSON constructor
    calls to new API (closes: #486882)
  * Fix crazy typo in debian/control Depends

 -- Dominic Hargreaves <dom@earth.li>  Fri, 20 Jun 2008 00:25:02 +0100

movabletype-opensource (4.2~rc2-1) unstable; urgency=low

  * New upstream release candidate
  * Update Standards-Version (no changes)
  * Ensure that schema upgrade message is always seen

 -- Dominic Hargreaves <dom@earth.li>  Fri, 13 Jun 2008 23:28:40 +0100

movabletype-opensource (4.2~rc1-1) experimental; urgency=low

  * New upstream release candidate
    - Add Depends on liblucene-queryparser-perl
  * Add Depends on libjson-perl to movabletype-plugin-core to be
    strictly correct
  * Update debconf translations (closes: #475871, #478736, #480631, #483077,
    #483597, #478736, #483979, #475871)
  * Include schema upgrade notice when installing new upstream releases
  * Add exact versioned depends on movabletype-opensource to
    movabletype-plugin-core for safety
  * Add Galician, Czech, Basque, Japanese debconf translations
    (closes: #482579, #482803, #482852, #483203, #483513)
  * New debconf question to ask whether to reload Apache configuration
    and only reload it when we need to
  * Set permissions of SQLite database file so that web server can access
    it (closes: #484692)

 -- Dominic Hargreaves <dom@earth.li>  Sat,  7 Jun 2008 18:56:24 +0100

movabletype-opensource (4.1-6) unstable; urgency=low

  * patch plugins/StyleCatcher/lib/StyleCatcher/CMS.pm:
    - don't try and pass pretty-printing options in JSON call;
      they are not available in new JSON versions (closes: #476266)

 -- Dominic Hargreaves <dom@earth.li>  Tue, 15 Apr 2008 20:51:11 +0100

movabletype-opensource (4.1-5) unstable; urgency=high

  * Fix typo in default configuration causing files to be created
    with an insecure umask
  * Add German debconf translation (closes: #472670)
  * Add French debconf translation (closes: #474635)

 -- Dominic Hargreaves <dom@earth.li>  Thu, 10 Apr 2008 22:52:58 +0100

movabletype-opensource (4.1-4) unstable; urgency=low

  * Add Portuguese debconf translation (closes: #471955)

 -- Dominic Hargreaves <dom@earth.li>  Mon, 24 Mar 2008 12:44:27 +0000

movabletype-opensource (4.1-3) unstable; urgency=low

  * libdbd-sqlite-perl should be libdbd-sqlite3-perl
  * Add Provides: movabletype for more obvious installation

 -- Dominic Hargreaves <dom@earth.li>  Fri, 21 Mar 2008 10:31:33 +0000

movabletype-opensource (4.1-2) unstable; urgency=low

  * Fix permissions of configuration file (may include database
    passwords).
  * Move static content to /usr/share, and include an apache2 config
    snippet.
  * Fix behaviour of debconf prompting

 -- Dominic Hargreaves <dom@earth.li>  Tue, 11 Mar 2008 23:15:54 +0000

movabletype-opensource (4.1-1) unstable; urgency=low

  * Initial Release. (Closes: #427709)

 -- Dominic Hargreaves <dom@earth.li>  Thu,  6 Mar 2008 21:43:53 +0000