libdbi-perl (1.650-1) unstable; urgency=medium

  * Import upstream version 1.650.
    - Set a hard limit of 99999 on '?' placeholders
      (CVE-2026-14739)
    - Fix out-of-bounds read in preparse of SQL that starts with a comment
      (CVE-2026-14740)
    - Fix code injection via Profile DSN attribute or DBI_PROFILE variable
      (CVE-2026-14380)
    Closes: #1141667
  * Install new upstream document.

 -- gregor herrmann <gregoa@debian.org>  Wed, 08 Jul 2026 18:31:30 +0200

libdbi-perl (1.649-1) unstable; urgency=medium

  * Import upstream version 1.649.

 -- gregor herrmann <gregoa@debian.org>  Sun, 05 Jul 2026 20:48:53 +0200

libdbi-perl (1.648-1) unstable; urgency=medium

  * Import upstream version 1.648.
    Fixes CVE-2026-9698 and CVE-2026-10879.
  * Update years of upstream and packaging copyright.
  * Declare compliance with Debian Policy 4.7.4.
  * Remove «Rules-Requires-Root: no», which is the current default.
  * Remove «Priority: optional», which is the current default.

 -- gregor herrmann <gregoa@debian.org>  Sat, 06 Jun 2026 01:45:08 +0200

libdbi-perl (1.647-1) unstable; urgency=medium

  * Import upstream version 1.647.
  * Update years of upstream and packaging copyright.
  * Update debian/upstream/metadata.
  * Refresh dependencies.

 -- gregor herrmann <gregoa@debian.org>  Sat, 01 Feb 2025 01:02:21 +0100

libdbi-perl (1.645-1) unstable; urgency=medium

  * Import upstream version 1.645.
  * Drop 0001-Fix-building-on-Fedora-40-with-GCC-14.2.1.patch
    which was taken from upstream Git.
  * Update upstream copyright notice.
  * Add new file to debian/copyright.
  * Make some dependencies versioned.
  * Drop now unneeded test dependencies.

 -- gregor herrmann <gregoa@debian.org>  Tue, 03 Sep 2024 18:30:47 +0200

libdbi-perl (1.644-1) unstable; urgency=medium

  * Import upstream version 1.644.
    This release ships with the fix for CVE-2014-10401 (and CVE-2014-10402),
    so drop the patches which have been taken from upstream Git before:
    - t-51dbm_file.t-add-test-from-RT-99508.patch
    - lib-DBD-File.pm-fix-CVE-2014-10401.patch
  * Update years of upstream and packaging copyright.
  * debian/libdbi-perl.examples: removed dropped test.pl.
  * Drop spelling.patch, applied upstream.
  * Declare compliance with Debian Policy 4.7.0.
  * Drop "Breaks: libdbd-anydata-perl".
    The package has been removed from Debian in 2013.
  * Add patch from upstream Git repo to fix build with current gcc.

 -- gregor herrmann <gregoa@debian.org>  Mon, 26 Aug 2024 18:51:14 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libdbi-perl`.
