graphite-web (1.1.10-5) unstable; urgency=medium

  * fix typo in python3.12 related switch from module imp to importlib

 -- Alexandre Rossi <niol@zincube.net>  Fri, 02 Feb 2024 10:23:38 +0100

graphite-web (1.1.10-4) unstable; urgency=medium

  * autopkgtest: some consistency in scripts called with full path
  * fix autopkg test with python3.12 (Closes: #1061800)

 -- Alexandre Rossi <niol@zincube.net>  Thu, 01 Feb 2024 17:03:27 +0100

graphite-web (1.1.10-3) unstable; urgency=medium

  * rename fix-build-py312 patch
  * fixup some major py3.12 and Django 4.2 deprecations
  * fix /var/lib/graphite permissions in postinst
  * add autopkgtest ensuring webapp startup

 -- Alexandre Rossi <niol@zincube.net>  Sun, 17 Dec 2023 19:29:11 +0100

graphite-web (1.1.10-2) unstable; urgency=medium

  * raise standards compliance to 4.6.2 (no change)
  * add forward info for CVE-2022-4728 CVE-2022-4729 CVE-2022-4730 patch
  * fix build with python 3.12 (Closes: #1058124)

 -- Alexandre Rossi <niol@zincube.net>  Fri, 15 Dec 2023 16:30:39 +0100

graphite-web (1.1.10-1) unstable; urgency=medium

  [ Debian Janitor ]
  * Remove constraints unnecessary since buster (oldstable):
    + Build-Depends-Indep: Drop versioned constraint on python3-whisper (>=
      1.1.4).
    + graphite-web: Drop versioned constraint on python3-whisper (>= 1.1.4) in
      Depends.

  [ Alexandre Rossi ]
  * raise dh compat level to 13
  * raise standards-version to 4.6.0
  * fix local_settings.py is world-readable (Closes: #882691)
  * drop custom compression in debian source options
  * update d/watch standard and use secure upstream uri
  * fix local_settings path when using wsgi (Closes: #995461, #1038599)
  * New upstream version 1.1.10 (Closes: #972283, #1038438)
  * fix dashboard theme not found
  * add myself to uploaders
  * refresh patches and drop fix-compat-with-pyparsing-3 (integrated upstream)

 -- Alexandre Rossi <niol@zincube.net>  Thu, 21 Sep 2023 16:39:16 +0200

graphite-web (1.1.8-2) unstable; urgency=medium

  * Add fix-compat-with-pyparsing-3.patch.

 -- Thomas Goirand <zigo@debian.org>  Fri, 17 Mar 2023 14:24:47 +0100

graphite-web (1.1.8-1.1) unstable; urgency=medium

  * NMU
  * CVE-2022-4728, CVE-2022-4729 & CVE-2022-4730: Prevent a series of
    cross-site scripting (XSS) vulnerabilties that could have been exploited
    remotely. Issues existed in the Cookie Handler, Template Name Handler and
    Absolute Time Range Handler components. (Closes: #1026992)

 -- Christoph Martin <martin@uni-mainz.de>  Tue, 07 Feb 2023 15:42:01 +0100

graphite-web (1.1.8-1) unstable; urgency=medium

  * New upstream release:
    - Works with Python 3.9 (Closes: #962623).
  * Refresh local_settings.patch.
  * Rebase settings_debian.patch (taken from bug report).
  * Drop CVE-2017-18638.patch applied upstream.

 -- Thomas Goirand <zigo@debian.org>  Mon, 06 Sep 2021 13:33:05 +0200

graphite-web (1.1.4-5) unstable; urgency=high

  * Non-maintainer upload.
  * Add patch to remove the 'send_email' function to avoid SSRF attack.
    This was insecure, not used in the code, and was undocumented as well.
    (Fixes: CVE-2017-18638)

 -- Utkarsh Gupta <guptautkarsh2102@gmail.com>  Thu, 17 Oct 2019 05:47:35 +0530

graphite-web (1.1.4-4) unstable; urgency=medium

  * Avoid hourly error in cron with no whisper db (Closes: #940554). Thanks to
    Alexandre Rossi <niol@zincube.net> for the patch.
  * Removed use of Python 2 (Closes: #936651). Thanks to Alexander again for
    the patch.

 -- Thomas Goirand <zigo@debian.org>  Sat, 21 Sep 2019 21:38:06 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog graphite-web`.
