graphviz (2.36.0-0ubuntu3.1) trusty-security; urgency=medium

  * SECURITY UPDATE: Format string vulnerability may allow attackers to
    cause a denial of service or possibly execute code.
    - debian/patches/CVE-2014-9157.patch: Fix format string vulnerability in
      lib/cgraph/scan.l yyerror() routine.
    - CVE-2014-9157

 -- Seth Arnold <seth.arnold@canonical.com>  Thu, 04 Dec 2014 16:12:24 -0800

graphviz (2.36.0-0ubuntu3) trusty; urgency=medium

  * No change rebuild for phpapi-20121212+lfs (LFS ABI break on 32-bit archs).

 -- Matthias Klose <doko@ubuntu.com>  Thu, 20 Feb 2014 13:58:45 +0100

graphviz (2.36.0-0ubuntu2) trusty; urgency=medium

  * debian/*.post{inst,rm}: Update for libgvc5-config-update →
    libgvc6-config-update to correctly configure plugins. (LP: #1270025)
  * Add a simple autopkgtest that ensures that "dot" works.

 -- Martin Pitt <martin.pitt@ubuntu.com>  Fri, 17 Jan 2014 07:55:19 +0100

graphviz (2.36.0-0ubuntu1) trusty; urgency=medium

  * New upstream version.

 -- Matthias Klose <doko@ubuntu.com>  Thu, 16 Jan 2014 08:33:48 +0100

graphviz (2.34.0-0ubuntu6) trusty; urgency=low

  * SECURITY UPDATE: buffer overflow in yyerror()
    - debian/patches/CVE-2014-0978.patch: don't overflow buf in
      lib/cgraph/scan.l.
    - CVE-2014-0978
  * SECURITY UPDATE: buffer overflow in yyerror() security fix
    - debian/patches/CVE-2014-1235.patch: once again, don't overflow buf
      in lib/cgraph/scan.l.
    - CVE-2014-1235
  * SECURITY UPDATE: buffer overflow in chkNum of scanner
    - debian/patches/CVE-2014-1236.patch: don't overflow buf in
      lib/cgraph/scan.l.
    - CVE-2014-1236

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Tue, 14 Jan 2014 13:01:36 -0500

graphviz (2.34.0-0ubuntu5) trusty; urgency=medium

  * Fix dh-autoreconf invocation to not override the arguments to autoreconf;
    without -i, libtoolize is never called.

 -- Steve Langasek <steve.langasek@ubuntu.com>  Sun, 15 Dec 2013 22:47:35 -0800

graphviz (2.34.0-0ubuntu4) trusty; urgency=low

  * Revert the last change and remove references to libgraph.

 -- Matthias Klose <doko@ubuntu.com>  Thu, 24 Oct 2013 15:38:48 +0200

graphviz (2.34.0-0ubuntu3) trusty; urgency=low

  * Build libgraph again.

 -- Matthias Klose <doko@ubuntu.com>  Thu, 24 Oct 2013 13:57:49 +0200

graphviz (2.34.0-0ubuntu2) trusty; urgency=low

  * New upstream version.
  * Build using lua5.2. LP: #1196921.
  * Build using ruby1.9.1.

 -- Matthias Klose <doko@ubuntu.com>  Wed, 25 Sep 2013 12:35:03 +0200

graphviz (2.26.3-15ubuntu3) saucy; urgency=low

  * Recommend fonts-liberation rather than ttf-liberation.

 -- Jackson Doak <noskcaj@ubuntu.com>  Fri, 13 Sep 2013 08:05:04 +1000

# For older changelog entries, run 'apt-get changelog libgvc6-plugins-gtk'
