jython (2.5.3-9ubuntu0.1) xenial-security; urgency=high

  [ Simon Quigley ]
  * SECURITY UPDATE: Creates executables class files with wrong permissions
    (LP: #1714728)
    - CVE-2013-2027
    - 1-CVE-2013-2027.patch
    - 2-CVE-2013-2027.patch
    - 3-CVE-2013-2027.patch
    - Thanks to Lubomir Rintel for the patches!

  [ Markus Koschany ]
  * SECURITY UPDATE: Unsafe deserialization may lead to arbitrary code
    execution
    - CVE-2016-4000
    - CVE-2016-4000.patch

 -- Simon Quigley <tsimonq2@ubuntu.com>  Mon, 18 Sep 2017 06:25:00 -0500

jython (2.5.3-9) unstable; urgency=medium

  * Team upload.
  * Fixed the build classpath to really use the Servlet API 3.1
    (Closes: #801027)

 -- Emmanuel Bourg <ebourg@apache.org>  Mon, 21 Dec 2015 15:13:15 +0100

jython (2.5.3-8) unstable; urgency=medium

  * Team upload.
  * Transition to bnd 2.1.0.
  * Vcs-Browser: Switch to cgit and https.
  * Fix Lintian warning binary-control-field-duplicates-source.
  * Switch to libservlet3.1-java. (Closes: #801027)
  * Drop unused jython-doc.override and jython.override files.
  * Build depend on dh-python and add substvar ${python:Depends} to jython
    package. Run dh_python2 in binary-indep target and fix Lintian error
    python-script-but-no-python-dep.

 -- Markus Koschany <apo@debian.org>  Wed, 18 Nov 2015 22:56:31 +0100

jython (2.5.3-7) unstable; urgency=medium

  * Team upload.
  * Depend on ANTLR 3.2 to avoid the incompatibilities with ANTLR 3.5
    (Closes: #796437, #796933)

 -- Emmanuel Bourg <ebourg@apache.org>  Mon, 26 Oct 2015 22:09:30 +0100

jython (2.5.3-6) unstable; urgency=medium

  * Team upload.
  * Add binary dependency on libjnr-constants-java and
    libjnr-posix-java (>= 3.0.10~). (Closes: #786651)

 -- tony mancill <tmancill@debian.org>  Thu, 14 May 2015 21:32:38 -0700

jython (2.5.3-5) unstable; urgency=medium

  * Team upload.
  * Upload to unstable.

 -- tony mancill <tmancill@debian.org>  Thu, 07 May 2015 22:08:00 -0700

jython (2.5.3-4) experimental; urgency=low

  * Team upload.
  * Updated debian/control and added patch to build against updated
    jnr-constants and jnr-posix packages.
  * Standards-Version updated to 3.9.6
  * Use DH 9.
  * Upload to experimental due to build-deps in experimental.

 -- tony mancill <tmancill@debian.org>  Wed, 08 Apr 2015 22:49:51 +0000

jython (2.5.3-3) unstable; urgency=medium

  * Make junit.framework OSGi package import optional since it's needed
    only to run tests.

 -- Jakub Adam <jakub.adam@ktknet.cz>  Tue, 07 Oct 2014 17:14:40 +0200

jython (2.5.3-2) unstable; urgency=medium

  [ Emmanuel Bourg ]
  * Team upload.
  * Use canonical URLs for the Vcs-* fields

  [ Jakub Adam ]
  * Generate OSGi metadata for jython.jar.
  * Add Jakub Adam to Uploaders.

  [ Miguel Landaeta ]
  * Moved the package to Git.
  * Fix clean target in d/rules to allow twice in a row builds.

 -- Jakub Adam <jakub.adam@ktknet.cz>  Thu, 31 Jul 2014 22:06:36 +0200

jython (2.5.3-1) unstable; urgency=low

  * New upstream release (Closes: #690116)
  * Adopt the package under the pkg-java umbrella
    (Closes: #705825)
  * Standards-Version updated to 3.9.5
  * Import in the pkg-java VCS
  * Switch to dpkg-source 3.0 (quilt) format
  * jython should work unde virtualenv (Closes: #705146)
    Thanks to Arthur Noel for the patch
  * Update of the description (Closes: #676831)

 -- Sylvestre Ledru <sylvestre@debian.org>  Thu, 21 Nov 2013 14:25:27 +0100

# For older changelog entries, run 'apt-get changelog jython-doc'
