graphite-web (0.9.12+debian-6+deb8u1) jessie-security; urgency=high

  * Non-maintainer upload by the LTS Team.
  * Add patch to remove 'send_email' function to avoid SSRF attack.
    This was insecure, not used in the code, and was undocumented as well.
    (Fixes: CVE-2017-18638)

 -- Utkarsh Gupta <guptautkarsh2102@gmail.com>  Thu, 17 Oct 2019 04:55:01 +0530

graphite-web (0.9.12+debian-6) unstable; urgency=medium

  [ Vincent Bernat ]
  * d/postinst: fix directory creation

  [ Jonas Genannt ]
  * added patch to remove Graphlot feature
    Graphlot feature was broken in Debian. Upstream
    removed Graphlot feature.

 -- Jonas Genannt <jonas.genannt@capi2name.de>  Wed, 03 Sep 2014 19:25:55 +0200

graphite-web (0.9.12+debian-5) unstable; urgency=low

  * Team upload.
  * Graphite works now with Django 1.6 and 1.7 (Closes: #755638)
  * d/README.Debian: use service to restart apache

 -- Jonas Genannt <jonas.genannt@capi2name.de>  Fri, 15 Aug 2014 18:34:55 +0200

graphite-web (0.9.12+debian-4) unstable; urgency=medium

  * added missing sources of extjs and ace (Closes: #744708)

 -- Jonas Genannt <jonas.genannt@capi2name.de>  Mon, 28 Jul 2014 15:52:22 +0200

graphite-web (0.9.12+debian-3) unstable; urgency=low

  * d/control: removed python-sqlite from depends (Closes: #739517)

 -- Jonas Genannt <jonas.genannt@capi2name.de>  Sat, 22 Feb 2014 17:04:47 +0100

graphite-web (0.9.12+debian-2) unstable; urgency=low

  [ Bernhard Schmidt ]
  * Import upstream patch to fix Django 1.6 compatibility
  * drop part about webapp/graphite/manage.py from patch, included upstream
  * changelog
  * graphite-manage: fix Django 1.6 compatibility (Closes: #729854)

  [ Jonas Genannt ]
  * d/control:
    - bumped standards version
    - added version depend to python-django >> 1.6-1~

 -- Jonas Genannt <jonas.genannt@capi2name.de>  Mon, 25 Nov 2013 21:37:19 +0100

graphite-web (0.9.12+debian-1) unstable; urgency=high

  * New Upstream Version (Closes: #720454, #721085)
    - Security fix included: CVE-2013-5093
  * refreshed patches against new version
  * d/control: updated Homepage field
  * d/control: added version depend on python-django-tagging
    since pyhton-django-taggit mistake
  * d/copyright: added Copyright section for ace
  * Added NEWS file

 -- Jonas Genannt <jonas.genannt@capi2name.de>  Sun, 01 Sep 2013 21:30:47 +0200

graphite-web (0.9.10+debian-2) unstable; urgency=low

  [ Marcelo Jorge Vieira ]
  * libjs-flot was renamed to libjs-jquery-flot (Closes: #710452)

  [ Jonas Genannt ]
  * run cronjob only if binary is available (Closes: #705976)
  * changed git to anonscm.debian.org as recommended by lintian

  [ Mathieu Parent ]
  * gbp.conf: Build to build-area
  * gbp.conf: Set pristine-tar to true
  * d/rules: Check for embedded libraries

 -- Mathieu Parent <sathieu@debian.org>  Mon, 10 Jun 2013 18:17:39 +0200

graphite-web (0.9.10+debian-1) unstable; urgency=low

  * Initial release. (Closes: #659632)

 -- Jonas Genannt <jonas.genannt@capi2name.de>  Sat, 09 Mar 2013 16:06:34 +0100
