python-flask-httpauth (4.8.1-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * New upstream version
  - Fix CVE-2026-34531: Flask-HTTPAuth can invoke the application's token
    verification callback function with the token argument set to an empty
    string and this will return. If the application had any users in its
    database with an empty string set as their token, then it could
    potentially authenticate the client request against any of those users
    (Closes: #1132581).
  * Standards-Version: 4.7.4 (routine-update)
  * d/control: Add furo as Build Depends.

 -- Emmanuel Arias <eamanu@debian.org>  Tue, 21 Apr 2026 17:20:09 -0300

python-flask-httpauth (4.8.0-1) unstable; urgency=medium

  * Non-maintainer upload.
  * New upstream release 4.8.0 (Closes: #1061002).
  * build dependencies:
    + Add pybuild-plugin-pyproject
    + Remove dh-python as the pybuild plugin is enough
  * Bump Standards-Version to 4.7.0 (no changes needed).
  * Cleanup rules file, as pybuild already exports http*_proxy
  * Add lintian override for svg in html.
  * Add basic upstreamm metadata file.

 -- Sandro Knauß <hefee@debian.org>  Fri, 03 May 2024 14:44:15 +0200

python-flask-httpauth (4.5.0-4) unstable; urgency=medium

  * Another attempt at fixing the manpage. (Hopefully) closes: #1003606

 -- Martina Ferrari <tina@debian.org>  Tue, 25 Jan 2022 04:36:56 +0000

python-flask-httpauth (4.5.0-3) unstable; urgency=medium

  * Move manpage to section 3. Closes: #1003606

 -- Martina Ferrari <tina@debian.org>  Thu, 13 Jan 2022 15:09:34 +0000

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog python-flask-httpauth-doc`.
