ckeditor (4.22.1+dfsg1-2ubuntu1.1) questing-security; urgency=medium

  * Reverting the following patches due to licensing ambiguity
   - debian/patches/CVE-2024-24816.patch
   - debian/patches/CVE-2024-24815.patch
   - debian/patches/CVE-2024-43411.patch

 -- Bruce Cable <bruce.cable@canonical.com>  Wed, 04 Feb 2026 09:40:01 +1100

ckeditor (4.22.1+dfsg1-2ubuntu1) plucky; urgency=medium

  * SECURITY UPDATE: Cross Site Scripting
    - debian/patches/CVE-2024-24815.patch: Fix CDATA parsing logic
    - debian/patches/CVE-2024-24816.patch: Updated samples
    - CVE-2024-24815
    - CVE-2024-24816
  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2024-43411.patch: Use exception handling when
      parsing a JSON request
    - CVE-2024-43411

 -- Bruce Cable <bruce.cable@canonical.com>  Tue, 04 Feb 2025 12:37:33 +1100

ckeditor (4.22.1+dfsg1-2) unstable; urgency=medium

  * Remove codemirror and use libjs-codemirror for samples
  * Bump standard version (no changes)

 -- Bastien Roucariès <rouca@debian.org>  Tue, 01 Aug 2023 08:23:31 +0000

ckeditor (4.22.1+dfsg-1) unstable; urgency=medium

  * New upstream version
  * Disable by default phoning home for checking newer version.
    user could renable by setting config.versionCheck to true
    in config.js or use as usual on debian system
    check-support-status command.
  * Bug fix: "CVE-2023-28439", thanks to Salvatore Bonaccorso (Closes:
    #1034481).

 -- Bastien Roucariès <rouca@debian.org>  Sat, 29 Jul 2023 19:13:44 +0000

ckeditor (4.19.1+dfsg-2) UNRELEASED; urgency=medium

  * Remove constraints unnecessary since buster:
    + Build-Depends: Drop versioned constraint on ckbuilder.
  * Update lintian override info to new format on line 4-5, 9-10, 15-16, 18-19,
    22-23.
  * Set upstream metadata fields: Repository-Browse, Security-Contact.

 -- Debian Janitor <janitor@jelmer.uk>  Thu, 28 Jul 2022 08:56:18 -0000

ckeditor (4.19.1+dfsg-1) unstable; urgency=medium

  * Team upload
  * New upstream version 4.19.1+dfsg

 -- Yadd <yadd@debian.org>  Thu, 28 Jul 2022 08:25:27 +0200

ckeditor (4.19.0+dfsg-1) unstable; urgency=medium

  * Team upload
  * Fix debian/watch: use /tags instead of /releases
  * Declare compliance with policy 4.6.1
  * Update excluded files list
  * New upstream version (Closes: #999909, CVE-2021-41164, CVE-2021-41165)
  * Drop 0002-Remove-flash-example.patch, now included in upstream
  * Refresh patches
  * Fix build

 -- Yadd <yadd@debian.org>  Sat, 16 Jul 2022 22:23:46 +0200

ckeditor (4.16.2+dfsg-1) unstable; urgency=medium

  * Team upload

  [ lintian-brush ]
  * Use secure URI in Homepage field.

  [ Yadd ]
  * New upstream version 4.16.2 (Closes: #992290, 992291, 992292,
    CVE-2021-37695, CVE-2021-32809, CVE-2021-32808)
  * Remove CVE-2021-33829.patch now included in upstream
  * Update lintian overrides

 -- Yadd <yadd@debian.org>  Tue, 17 Aug 2021 10:28:49 +0200

ckeditor (4.16.0+dfsg-2) unstable; urgency=medium

  * Team upload
  * Treat "--!>" as a valid comment end tag (Closes: CVE-2021-33829)

 -- Yadd <yadd@debian.org>  Fri, 11 Jun 2021 13:28:40 +0200

ckeditor (4.16.0+dfsg-1) unstable; urgency=medium

  * Team upload

  [ Debian Janitor ]
  * Update renamed lintian tag names in lintian overrides.
  * Set upstream metadata fields: Bug-Database, Bug-Submit, Repository,
    Repository-Browse.
  * Fix day-of-week for changelog entry 3.2-1.

  [ Yadd ]
  * Bump debhelper compatibility level to 13
  * Declare compliance with policy 4.5.1
  * Add debian/gbp.conf
  * New upstream version 4.16.0+dfsg (Closes: CVE-2021-26271, CVE-2021-26272)
  * Refresh patches

 -- Yadd <yadd@debian.org>  Sun, 07 Mar 2021 06:09:13 +0100

ckeditor (4.12.1+dfsg-1) unstable; urgency=medium

  * New upstream release: fixes data lost during copy paste from
    MS word.
  * Use builddir for buildding tree instead of manual patching
  * Bump policy and debhelper version

 -- Bastien Roucariès <rouca@debian.org>  Tue, 03 Sep 2019 21:54:24 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog ckeditor`.
