Change logs for loggerhead source package in Lucid

loggerhead (1.17+bzr400-1ubuntu0.1) lucid-security; urgency=low

  * SECURITY UPDATE: Cross-site scripting vulnerabilities by crafted branch
    contents. (LP: #740142)
    - debian/patches/bug-740142.diff: improve escaping of filenames.
    - CVE-2011-0728
 -- William Grant <email address hidden>   Thu, 24 Mar 2011 13:39:43 +1100

loggerhead (1.17+bzr400-1) unstable; urgency=low

  * New upstream snapshot.
 -- Ubuntu Archive Auto-Sync <email address hidden>   Mon,  01 Feb 2010 23:59:29 +0000

loggerhead (1.17-1) unstable; urgency=low
  
  * New upstream release.  Loggerhead no longer flattens branch
    hierarchies (closes: #507001).

  [ Roland Mas ]
  * Use the YUI library provided by libjs-yui. (Closes: #511286)
  * Switch init script to use serve-branches rather than
    start-loggerhead (closes: #511295).

  [ Jelmer Vernooij ]
  * Use my debian.org address in Uploaders field.
  * Add ${misc:Depends} to please lintian.
  * Suggest recent version of paste, which doesn't expose internal port
    numbers in links. (Closes: #507000)
  * Bump standards version to 3.8.3.

  [ James Westby ]
  * New upstream release.
  * Drop get-orig-source rule in favour of debian/watch.
  * Add python-pkg-resources and python-paste to Build-Depends,
    python-pkg-resources to Depends and python-simplejson to
    Recommends due to dependency changes.

  [ Jelmer Vernooij ]
  * Remove references to bzrlib installation from example config file.

  [ Roland Mas ]
  * Added myself to Uploaders.
  * Documented version discrepancy between the YUI shipped by libjs-yui
    and the one used by Loggerhead, as well as a workaround to be used
    until YUI 3 becomes available.
 -- Artur Rona <email address hidden>   Mon,  21 Dec 2009 17:45:24 +0000

loggerhead (1.17-0ubuntu1) karmic; urgency=low

  [ Roland Mas ]
  * Use the YUI library provided by libjs-yui. (Closes: #511286)

  [ Jelmer Vernooij ]
  * Use my debian.org address in Uploaders field.
  * Add ${misc:Depends} to please lintian.
  * Suggest recent version of paste, which doesn't expose internal port
    numbers in links. (Closes: #507000)
  * Bump standards version to 3.8.1.

  [ James Westby ]
  * New upstream release.
  * Drop get-orig-source rule in favour of debian/watch.
  * Add python-pkg-resources and python-paste to Build-Depends,
    python-pkg-resources to Depends and python-simplejson to
    Recommends due to dependency changes.

 -- James Westby <email address hidden>   Wed, 26 Aug 2009 13:18:03 +0100