reportbug (6.5.0+nmu1ubuntu0.1) trusty-security; urgency=medium

  * SECURITY UPDATE:
  * References
  * CVE-2014-0479
  * LP: #1353046
  * Merge from Debian unstable. Remaining changes:
    - bin/reportbug: If bts=ubuntu or unconfigured, exit with an
      an error and refer user "ubuntu-bug" instead.
    - reportbug/__init__.py: Match reportbug version with package version.
    - debian/control: Add prominent note to package description.
    - debian/rules, debian/dirs: Do not install .desktop file.

 -- Scott Kitterman <scott@kitterman.com>  Tue, 05 Aug 2014 14:49:52 -0400

reportbug (6.5.0+nmu1) unstable; urgency=high

  * Non-maintainer upload.
  * CVE-2014-0479: Arbitrary code execution in compare_versions.
    A man-in-the-middle attacker could put shell metacharacters in the
    version number, causing execution of code of their choice.
    Thanks to Jakub Wilk <jwilk@debian.org>

 -- Salvatore Bonaccorso <carnil@debian.org>  Sun, 03 Aug 2014 16:03:15 +0200

reportbug (6.5.0ubuntu1) trusty; urgency=medium

  * Merge from Debian unstable. Remaining changes:
    - bin/reportbug: If bts=ubuntu or unconfigured, exit with an
      an error and refer user "ubuntu-bug" instead.
    - reportbug/__init__.py: Match reportbug version with package version.
    - debian/control: Add prominent note to package description.
    - debian/rules, debian/dirs: Do not install .desktop file.

 -- Logan Rosen <logan@ubuntu.com>  Tue, 28 Jan 2014 14:01:57 -0500

reportbug (6.5.0) unstable; urgency=low

  [ Sandro Tosi ]
  * bin/reportbug
    - changed to "No" the default to local MTA question in configuration mode;
      thanks to Hartmut Bruening for the report; Closes: #732789
  * reportbug/debbugs.py
    - improve the ITP template to ask for more information; thanks to Lucas
      Nussbaum for the report and patch; Closes: #719067
  * bin/reportbug, reportbug/utils.py, doc/README.developers
    - implement support for attachments in bugscripts; thanks to Joachim
      Breitner for the report and to Michael Stapelberg for the patch;
      Closes: #526110
  * reportbug/utils.py
    - improve the template provided to less-expert reporters to be clear the
      questions should be answered by the reporter themselves; thanks to Tony
      Houghton for the report; Closes: #690782
    - match 'Description-en' too when getting package description
  * reportbug/checkversions.py
    - if NEW has several versions of the given package, choose the bigger;
      thanks to Thorsten Glaser for the report; Closes: #704040
  * debian/control
    - use canonical URL for Alioth service
    - bump Standards-Version to 3.9.5 (no changes needed)
  * debian/copyright
    - extend copyright years

  [ Julien Cristau ]
  * Update codename/suite mapping for wheezy release
  * test: don't assert that unstable version is strictly greater than stable
  * checkversions: let rmadison do the architecture/suite filtering
  * debbugs: retire the opu tag for release.debian.org; Closes: #707631

 -- Sandro Tosi <morph@debian.org>  Sun, 26 Jan 2014 20:40:56 +0100

reportbug (6.4.4ubuntu1) raring; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - bin/reportbug: If bts=ubuntu or unconfigured, exit with an
      an error and refer user "ubuntu-bug" instead.
    - reportbug/__init__.py: Match reportbug version with package version.
    - debian/control: Add prominent note to package description.
    - debian/rules, debian/dirs: Do not install .desktop file.

 -- Logan Rosen <logan@ubuntu.com>  Mon, 18 Mar 2013 20:30:52 -0400

reportbug (6.4.4) unstable; urgency=low

  * reportbug/ui/gtk2_ui.py
    - proper update GTK+ UI from threads, using gobject.idle_add(), possibily
      fixing the crashes seen with GTK+ reportbug UI; thanks to all the
      reporters and to Bruno Filipe Oliveira Ramos for the patch;
      Closes: #620225

 -- Sandro Tosi <morph@debian.org>  Tue, 12 Mar 2013 23:45:13 +0100

reportbug (6.4.3ubuntu1) quantal; urgency=low

  * Merge from Debian unstable.  Remaining changes:
   - bin/reportbug: If bts=ubuntu or unconfigured, exit with an
     an error and refer user "ubuntu-bug" instead.
   - reportbug/__init__.py: Match reportbug version with package version.
   - debian/control: Add prominent note to package description.
   - debian/rules, debian/dirs: Do not install .desktop file.

 -- Felix Geyer <debfx@ubuntu.com>  Sun, 19 Aug 2012 17:48:32 +0200

reportbug (6.4.3) unstable; urgency=low

  * reportbug/debbugs.py
    - add a note to include/attach the debdiff in case of unblocks for
      release.d.o; thanks to Ulrich Dangel for the report and to Niels Thykier
      for ack'ing it on IRC; Closes: #681206
  * reportbug/utils.py
    - recognize Control as a pseudo-header; thanks to Paul Wise for the report;
      Closes: #684540
  * reportbug/ui/urwid_ui.py
    - fix a crash when selecting 'Quit' in the Urwid UI window presenting the
      list of bugs already filed; thanks to Ryan Kavanagh for the report;
      Closes: #668395
  * bin/reportbug
    - in Urwid UI, when cancelling on the list of packages matching the input
      package, don't present '-1' as resulting package, but that nothing was
      selected; thanks to Valentin Lorentz for the report; Closes: #667663

 -- Sandro Tosi <morph@debian.org>  Sat, 18 Aug 2012 22:49:44 +0200

reportbug (6.4.2) unstable; urgency=low

  * reportbug/debbugs.py
    - remove 'freeze-exception' option for release.d.o package; thanks to Niels
      Thykier for the report; Closes: #683272

 -- Sandro Tosi <morph@debian.org>  Mon, 30 Jul 2012 18:55:52 +0200

reportbug (6.4.1) unstable; urgency=low

  * bin/reportbug
    - remove arch qualifier (for m-a) only if we're not reporting against the
      source package; thanks to Vincent Lefevre for the report; Closes: #681157

 -- Sandro Tosi <morph@debian.org>  Sun, 29 Jul 2012 11:10:25 +0200

# For older changelog entries, run 'apt-get changelog python-reportbug'
