nodejs (0.10.25~dfsg2-2ubuntu1.2) trusty-security; urgency=medium

  * SECURITY UPDATE: CRLF injection vulnerability
    - debian/patches/CVE-2016-5325.patch: Previously, the reason argument
      passed to ServerResponse#writeHead was not being properly validated. One
      could pass CRLFs which could lead to http response splitting. This
      commit changes the behavior to throw an error in the event any invalid
      characters are included in the reason.
      lib/http.js
    - CVE-2016-5325

 -- Mike Salvatore <mike.salvatore@canonical.com>  Tue, 07 Aug 2018 10:42:55 -0400

nodejs (0.10.25~dfsg2-2ubuntu1) trusty; urgency=medium

  * 2014_powerpc_support.patch: Pull in powerpc support from alow.
  * 2015_ppc64el_configure.patch: Make configure understand ppc64.

 -- Adam Conrad <adconrad@ubuntu.com>  Wed, 26 Mar 2014 23:59:23 -0600

nodejs (0.10.25~dfsg2-2) unstable; urgency=medium

  * Update 2005 patch, allow test-abort-fatal-error to time out. 

 -- Jérémy Lal <kapouer@melix.org>  Mon, 27 Jan 2014 14:35:21 +0100

nodejs (0.10.25~dfsg2-1) unstable; urgency=medium

  * Exclude doc/sh_javascript.min.js, closes: #736779.
  * Add 1005 patch to include a non-minified version of
    doc/sh_javascript.min.js, and update path in debian/copyright.
  * Update 2005 patch, allow test-abort-fatal-error to fail,
    closes: #736576.

 -- Jérémy Lal <kapouer@melix.org>  Mon, 27 Jan 2014 09:58:56 +0100

nodejs (0.10.25~dfsg1-1) unstable; urgency=medium

  * Upstream update 

 -- Jérémy Lal <kapouer@melix.org>  Fri, 24 Jan 2014 15:45:29 +0100

nodejs (0.10.24~dfsg1-1) unstable; urgency=medium

  * Upstream update

 -- Jérémy Lal <kapouer@melix.org>  Mon, 23 Dec 2013 00:45:40 +0100

nodejs (0.10.23~dfsg1-3) unstable; urgency=medium

  * Update 2005 patch, allow test-http-client-timeout-event to fail.

 -- Jérémy Lal <kapouer@melix.org>  Sat, 14 Dec 2013 10:00:16 +0100

nodejs (0.10.23~dfsg1-2) unstable; urgency=medium

  * Add 2013 patch, remove --no-parallel option incompatible with
    gyp < r1773. Was breaking kfreebsd builds as side-effect.
  * Empty DEB_CONFIGURE_NORMAL_ARGS without quotes because
    configure assumes it is a path argument.

 -- Jérémy Lal <kapouer@melix.org>  Sat, 14 Dec 2013 01:52:05 +0100

nodejs (0.10.23~dfsg1-1) unstable; urgency=medium

  * Upstream update.
  * Refresh patches, remove 1005 patch, applied upstream.

 -- Jérémy Lal <kapouer@melix.org>  Thu, 12 Dec 2013 23:04:07 +0100

nodejs (0.10.22~dfsg1-2) unstable; urgency=low

  * Update 2005 patch, allow test-cluster-dgram-2 to time out.
  * Apply 1005 patch, upstream fix for BSD builds.

 -- Jérémy Lal <kapouer@melix.org>  Sat, 30 Nov 2013 23:54:20 +0100

# For older changelog entries, run 'apt-get changelog nodejs'
