znuny (6.5.22-1) unstable; urgency=medium

  * New upstream release.

 -- Patrick Matthäi <pmatthaei@debian.org>  Thu, 25 Jun 2026 15:09:14 +0200

znuny (6.5.21-1) unstable; urgency=medium

  * New upstream release.

 -- Patrick Matthäi <pmatthaei@debian.org>  Thu, 28 May 2026 14:55:08 +0200

znuny (6.5.20-1) unstable; urgency=medium

  * New upstream release.

 -- Patrick Matthäi <pmatthaei@debian.org>  Thu, 30 Apr 2026 10:58:13 +0200

znuny (6.5.19-1) unstable; urgency=high

  * New upstream release.
    - Refresh patch 08-usable-apache-config.
  * Add new dependency libhtml-treebuilder-xpath-perl.
  * Install embedded Sisimai module, since Znuny is not compatible with the
    newer version 5.
  * Bump Standards-Version to 4.7.3 (Remove priority field).
  * Remove Rules-Requires-Root control field.
  * Replace libgd-gd2-perl with libgd-perl.
    Closes: #1126359
  * Switch to debian/watch version 5.
  * Adjust lintian overrides.

 -- Patrick Matthäi <pmatthaei@debian.org>  Thu, 26 Mar 2026 15:24:01 +0100

znuny (6.5.18-1) unstable; urgency=medium

  * New upstream release.

 -- Patrick Matthäi <pmatthaei@debian.org>  Wed, 15 Oct 2025 16:03:14 +0200

znuny (6.5.16-1) unstable; urgency=medium

  * New upstream release.
  * Fix patch 08-usable-apache-config.

 -- Patrick Matthäi <pmatthaei@debian.org>  Thu, 11 Sep 2025 16:06:33 +0200

znuny (6.5.15-2) unstable; urgency=medium

  * Uploading to unstable.
    Closes: #1104739

 -- Patrick Matthäi <pmatthaei@debian.org>  Wed, 07 May 2025 14:00:14 +0200

znuny (6.5.15-1) experimental; urgency=high

  * New upstream release.
    - CVE-2025-26847: Fixed masking of passwords in support bundle generator
      for modified settings YAML file.
    - CVE-2025-43926: AgentPreferences now only supports configured user
      preference keys to be updated via AJAX request.
  * Bump Standards-Version to 4.7.2.

 -- Patrick Matthäi <pmatthaei@debian.org>  Mon, 05 May 2025 11:27:14 +0200

znuny (6.5.14-1) unstable; urgency=medium

  * New upstream release.
    - Refresh patch 08-usable-apache-config.

 -- Patrick Matthäi <pmatthaei@debian.org>  Fri, 21 Feb 2025 17:19:50 +0100

znuny (6.5.13-1) unstable; urgency=medium

  * New upstream release.
    - Refresh patch 08-usable-apache-config.

 -- Patrick Matthäi <pmatthaei@debian.org>  Fri, 14 Feb 2025 15:43:48 +0100

znuny (6.5.11-1) unstable; urgency=medium

  * New upstream release.
    - Adjust debian/rules.

 -- Patrick Matthäi <pmatthaei@debian.org>  Wed, 02 Oct 2024 11:27:13 +0200

znuny (6.5.10-1) unstable; urgency=medium

  * New upstream release.
    - Adjust lintian overrides.
  * Bump Standards-Version to 4.7.0.

 -- Patrick Matthäi <pmatthaei@debian.org>  Wed, 24 Jul 2024 16:01:54 +0200

znuny (6.5.9-1) unstable; urgency=medium

  * New upstream release.

 -- Patrick Matthäi <pmatthaei@debian.org>  Mon, 08 Jul 2024 14:00:11 +0200

znuny (6.5.8-1) unstable; urgency=high

  * New upstream release.
    - Fixes CVE-2024-32493: Fixed SQL injection issue regarding Form IDs when
      cleaning up drafts.
    - Fixes CVE-2024-32491: Fixed security issue with uploading files that could
      be placed to any writable location and used for remote code execution.

 -- Patrick Matthäi <pmatthaei@debian.org>  Fri, 19 Apr 2024 16:09:51 +0200

znuny (6.5.6-1) unstable; urgency=medium

  * New upstream release.

 -- Patrick Matthäi <pmatthaei@debian.org>  Mon, 05 Feb 2024 11:06:00 +0100

znuny (6.5.5-1) unstable; urgency=medium

  * New upstream release.

 -- Patrick Matthäi <pmatthaei@debian.org>  Wed, 13 Dec 2023 15:14:42 +0100

znuny (6.5.4-1) unstable; urgency=medium

  * New upstream release.
  * Watch 6.x releases.

 -- Patrick Matthäi <pmatthaei@debian.org>  Thu, 24 Aug 2023 11:36:56 +0200

znuny (6.5.3-1) unstable; urgency=high

  * New upstream release.
    - This fixes CVE-2023-38060: Host header injection by attachments in web
      service.
  * Update debian/copyright.
  * Add znuny Debian package for the upcoming transition to it.
  * Adjust lintian overrides.

 -- Patrick Matthäi <pmatthaei@debian.org>  Fri, 28 Jul 2023 11:20:15 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog otrs2`.
