flask (2.0.1-2ubuntu1.2) jammy-security; urgency=medium

  * SECURITY UPDATE: cache poisoning
    - debian/patches/CVE-2026-27205.patch: session is marked as accessed
      for operations that only access the keys but not the values, such as
      `in` and `len`
    - CVE-2026-27205

 -- Shishir Subedi <shishir.subedi@canonical.com>  Mon, 16 Mar 2026 16:03:31 +0545

flask (2.0.1-2ubuntu1.1) jammy-security; urgency=medium

  * SECURITY UPDATE: Expose sensitive information
    - debian/patches/CVE-2023-30861.patch: set 'Vary: Cookie'
      header consistently for session in src/flask/sessions.py,
      tests/test_basic.py.
    - CVE-2023-30861

 -- Leonidas Da Silva Barbosa <leo.barbosa@canonical.com>  Wed, 17 May 2023 10:22:20 -0300

flask (2.0.1-2ubuntu1) jammy; urgency=medium

  * d/control: Demote python3-{asgiref,dotenv} to Suggests; these
    are optional dependencies and neither is in Ubuntu main.

 -- James Page <james.page@ubuntu.com>  Wed, 17 Nov 2021 08:35:27 +0000

flask (2.0.1-2) unstable; urgency=medium

  * Uploading to unstable.

 -- Thomas Goirand <zigo@debian.org>  Wed, 06 Oct 2021 17:14:16 +0200

flask (2.0.1-1) experimental; urgency=medium

  * Team upload.
  * New upstream release.
  * Fixed (build-)depends for this release.
  * Refreshed patches.
  * Fixed PYBUILD_TEST_ARGS to use new pytest syntax.
  * Add python3-sphinx-tabs to build-depends, needed to build the doc.
  * Add remove-using-intersphinx.patch.
  * Add remove-eticalads-in-doc.patch.

 -- Thomas Goirand <zigo@debian.org>  Fri, 17 Sep 2021 23:14:09 +0200

flask (1.1.2-3) unstable; urgency=medium

  * Remove obsolete field Name from debian/upstream/metadata (already present in
    machine-readable debian/copyright).

 -- Debian Janitor <janitor@jelmer.uk>  Sun, 22 Aug 2021 03:28:56 +0100

flask (1.1.2-2) unstable; urgency=medium

  [ Ondřej Nový ]
  * d/control: Update Maintainer field with new Debian Python Team
    contact address.
  * d/control: Update Vcs-* fields with new Debian Python Team Salsa
    layout.
  * Make the documentation build reproducibly (Closes: #943674).
  * Bump debhelper compat level to 13.

  [ Debian Janitor ]
  * Apply multi-arch hints.
    + python-flask-doc: Add Multi-Arch: foreign.

 -- Ondřej Nový <onovy@debian.org>  Mon, 26 Oct 2020 15:10:15 +0100

flask (1.1.2-1) unstable; urgency=medium

  * New upstream release.
  * Move DPMT into Maintainer and myself into Uploaders.
  * Removed Piotr from Maintainer/Uploaders as he requested.
  * d/copyright: Bump my copyright year.
  * d/p/0002-Fix-Python-3-8.patch: Drop applied upstream
  * Rebased other patches.
  * Add Rules-Requires-Root: no.
  * Bump Standards-Version to 4.5.0.

 -- Ondřej Nový <onovy@debian.org>  Tue, 21 Apr 2020 11:08:38 +0200

flask (1.1.1-2) unstable; urgency=medium

  * Enable sphinx-issues extension.
  * Drop Python 2 support (Closes: #936522).
  * Fix tests in Python 3.8.

 -- Ondřej Nový <onovy@debian.org>  Fri, 27 Dec 2019 17:44:34 +0100

flask (1.1.1-1) unstable; urgency=medium

  [ Ondřej Nový ]
  * New upstream version
  * wrap-and-sort -ast
  * Drop patches, not needed anymore or applied upstream:
    - 0002-remove-DocVersion-related.patch
    - 0003-fix-issue-no-theme-named-flask-found.patch
    - 0004-empty-CONTRIBUTING-rst.patch
    - 0005-remove-carbon-ads.patch
  * Bump required version of python{,3}-werkzeug
  * d/rules:
    - Disable test_main_module_paths test, it doesn't work
    - Fix building for new upstream release
  * d/copyright: Bump my copyright year.
  * Use debhelper-compat instead of debian/compat.
  * Bump Standards-Version to 4.4.1.
  * Disable sphinx-issues extension until python-sphinx-issues hits unstable.
  * Bump debhelper compat level to 12.

  [ Salman Mohammadi ]
  * d/control: Change python-flask-doc to recommend python3-flask.

 -- Ondřej Nový <onovy@debian.org>  Fri, 25 Oct 2019 14:31:38 +0200

# For older changelog entries, run 'apt-get changelog python-flask-doc'
