graphite2 (1.3.10-0ubuntu0.14.04.1) trusty-security; urgency=medium

  * SECURITY UPDATE: Update to 1.3.10 to fix security issues
    - CVE-2017-7771, CVE-2017-7772, CVE-2017-7773, CVE-2017-7774,
      CVE-2017-7775, CVE-2017-7776, CVE-2017-7777, CVE-2017-7778

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Fri, 18 Aug 2017 09:10:40 -0400

graphite2 (1.3.6-1ubuntu0.14.04.1) trusty-security; urgency=medium

  * Updated to new upstream release 1.3.6 to fix multiple security issues.
    - CVE-2016-1977, CVE-2016-2790, CVE-2016-2791, CVE-2016-2792,
      CVE-2016-2793, CVE-2016-2794, CVE-2016-2795, CVE-2016-2796,
      CVE-2016-2797, CVE-2016-2798, CVE-2016-2799, CVE-2016-2800,
      CVE-2016-2801, CVE-2016-2802
  * Dropped upstreamed patches:
    - include-and-libraries.diff, no-specific-nunit-version.diff,
      soname.diff, CVE-2016-152x-1.patch, CVE-2016-152x-2.patch,
      CVE-2016-152x-3.patch, CVE-2016-152x-4.patch, CVE-2016-152x-5.patch
  * Updated patches for 1.3.6:
    - no-icons.diff
  * debian/patches/disable_tests.diff: disable tests that require the
    fonttools package from universe.

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Thu, 10 Mar 2016 14:06:56 -0500

graphite2 (1.2.4-1ubuntu1.1) trusty-security; urgency=medium

  * SECURITY UPDATE: multiple security issues
    - debian/patches/CVE-2016-152x-1.patch: fix out of bounds access in
      src/Bidi.cpp.
    - debian/patches/CVE-2016-152x-2.patch: handle fonts with 0 features in
      src/FeatureMap.cpp, src/inc/FeatureMap.h.
    - debian/patches/CVE-2016-152x-3.patch: check size in src/TtfUtil.cpp.
    - debian/patches/CVE-2016-152x-4.patch: check for cntxtItem
      misalignment in src/Code.cpp.
    - debian/patches/CVE-2016-152x-5.patch: disallow nested cntxt_item in
      src/Code.cpp.
    - CVE-2016-1521
    - CVE-2016-1522
    - CVE-2016-1523
    - CVE-2016-1526
  * debian/patches/no-icons.diff: run a2x without --icons to avoid FTBFS.

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Thu, 11 Feb 2016 11:09:38 -0500

graphite2 (1.2.4-1ubuntu1) trusty; urgency=low

  * Allow the package to cross build.

 -- Matthias Klose <doko@ubuntu.com>  Fri, 06 Dec 2013 14:23:52 +0100

graphite2 (1.2.4-1) unstable; urgency=low

  * New upstream release
  * some tests need apparently need python, build-dep on python (>= 2.6) 

 -- Rene Engelhard <rene@debian.org>  Fri, 29 Nov 2013 20:12:13 +0100

graphite2 (1.2.3-1) unstable; urgency=low

  * New upstream release

 -- Rene Engelhard <rene@debian.org>  Tue, 11 Jun 2013 19:25:25 +0200

graphite2 (1.2.2-2) unstable; urgency=low

  * add patch from Michael Cree <mcree@orcon.net.nz> to fix
    misaligned memory access - thanks (closes: #710336) 

 -- Rene Engelhard <rene@debian.org>  Sun, 02 Jun 2013 12:05:28 +0000

graphite2 (1.2.2-1) unstable; urgency=low

  * New upstream release
  * stop building with -O3 gotten from somewhere and overriding
    dpkg-buildflags' value, just remove  via sed
  * converto multiarch again... (closes: #689813)

 -- Rene Engelhard <rene@debian.org>  Fri, 31 May 2013 18:10:55 +0200

graphite2 (1.2.1-2) unstable; urgency=low

  * upload to unstable 

 -- Rene Engelhard <rene@debian.org>  Thu, 18 Apr 2013 23:49:24 +0200

graphite2 (1.2.1-1) experimental; urgency=low

  * New upstream release

 -- Rene Engelhard <rene@debian.org>  Mon, 04 Mar 2013 19:44:28 +0100

graphite2 (1.2.0-4) experimental; urgency=low

  * revert multiarch stuff as harfbuzz now doesn't need us
    anymore... (reopens: #699714) 

 -- Rene Engelhard <rene@debian.org>  Sat, 02 Mar 2013 14:29:58 +0100

graphite2 (1.2.0-3) experimental; urgency=low

  * apply patch from Daniel Schaal to convert to multiarch
    as already multiarchified pango now needs us via harfbuzz...
    (closes: #699714)
  * clean up (not packaged) perl module packaging
  * add (not used yet) stuff to build mono binding
  * split arch-dep and arch-indep (docs...) build
  * disable the compare renderer stuff - enough compared ;-)

 -- Rene Engelhard <rene@debian.org>  Wed, 27 Feb 2013 20:24:34 +0100

graphite2 (1.2.0-2) experimental; urgency=low

  * break libgraphite2-2.0.0 (<< 1.2.0) (closes: #689813)

 -- Rene Engelhard <rene@debian.org>  Sat, 06 Oct 2012 18:24:32 +0200

graphite2 (1.2.0-1) experimental; urgency=low

  * New upstream release

 -- Rene Engelhard <rene@debian.org>  Fri, 21 Sep 2012 16:41:23 +0200

graphite2 (1.1.3-1) unstable; urgency=low

  * New upstream release

 -- Rene Engelhard <rene@debian.org>  Sat, 02 Jun 2012 01:10:10 +0200

graphite2 (1.1.2-1) unstable; urgency=low

  * New upstream release

 -- Rene Engelhard <rene@debian.org>  Fri, 20 Apr 2012 01:45:47 +0200

graphite2 (1.1.1-1) unstable; urgency=low

  * New upstream release

 -- Rene Engelhard <rene@debian.org>  Mon, 27 Feb 2012 22:32:26 +0100

graphite2 (1.1.0-2) unstable; urgency=low

  * upload to unstable 

 -- Rene Engelhard <rene@debian.org>  Tue, 21 Feb 2012 20:41:47 +0100

graphite2 (1.1.0-1) experimental; urgency=low

  * New upstream release
  * fix copyright syntax 

 -- Rene Engelhard <rene@debian.org>  Tue, 07 Feb 2012 22:55:08 +0000

graphite2 (1.0.3.real-1) unstable; urgency=low

  * fixup upstream release for 1.0.3

 -- Rene Engelhard <rene@debian.org>  Thu, 22 Sep 2011 20:59:53 +0200

graphite2 (1.0.3-1) unstable; urgency=low

  * New upstream release
  * add libxml2-utils to B-D-I 

 -- Rene Engelhard <rene@debian.org>  Tue, 20 Sep 2011 00:28:27 +0200

graphite2 (1.0.2-1) unstable; urgency=low

  * New upstream release

 -- Rene Engelhard <rene@debian.org>  Mon, 15 Aug 2011 13:29:41 +0000

graphite2 (1.0.1-3) unstable; urgency=low

  * debian/patches/fix-typedefs.diff: move ...
  * debian/patches/words-bigendian-fixes.diff: ... here and add additional
    upstream fix for setting -DWORDS_BIGENDIAN also for the tests...
  * clean up Build-Depends:
    + move asciidoc, dblatex, doxygen, docbook-xsl, latex-xcolor to B-D-I
    + remove libxml2-utils

 -- Rene Engelhard <rene@debian.org>  Wed, 10 Aug 2011 15:42:59 +0200

graphite2 (1.0.1-2) unstable; urgency=low

  * debian/patches/fix-typedefs.diff: fix Main.h typedefs for 
    WORDS_BIGENDIAN 

 -- Rene Engelhard <rene@debian.org>  Tue, 09 Aug 2011 17:47:10 +0000

graphite2 (1.0.1-1) unstable; urgency=low

  * New upstream release
    - removes -nostdlibs (closes: #634810)

  * build with -DDISABLE_TRACING:bool=1
  * stop symlinking to Debian's fonts as they are not sufficient for the
    tests
  * update debian/copyright; mention ppport.h according to
    http://pkg-perl.alioth.debian.org/copyright.html#devel__ppport 
  * fix libgraphite2-2.0.0's short description 

 -- Rene Engelhard <rene@debian.org>  Thu, 28 Jul 2011 12:54:36 +0000

graphite2 (0.9.4.dfsg-4) unstable; urgency=low

  * grr, remove dpkg-source generated patch which readds ppport.h...

 -- Rene Engelhard <rene@debian.org>  Thu, 14 Jul 2011 14:50:55 +0200

graphite2 (0.9.4.dfsg-3) unstable; urgency=low

  * upload to unstable

 -- Rene Engelhard <rene@debian.org>  Tue, 12 Jul 2011 16:58:19 +0000

graphite2 (0.9.4.dfsg-2) experimental; urgency=low

  * add missing build-dep on latex-xcolor

 -- Rene Engelhard <rene@debian.org>  Sun, 10 Jul 2011 00:05:23 +0200

graphite2 (0.9.4.dfsg-1) experimental; urgency=low

  * remove perl/pport.h and tests/fonts/* from .orig

  * debian/changelog: update 
  * debian/control: build-depend on ttf-sil-padauk, ttf-sil-scheherazade
  * debian/rules: symlink to Debian's versions pf Padauk and Scheherazade,
    though....
  * debian/patches/disable_font_tests.diff: disable them (fail)
  * debian/rules, debian/control: disable perl build

 -- Rene Engelhard <rene@debian.org>  Sat, 09 Jul 2011 16:50:25 +0000

graphite2 (0.9.4-1) experimental; urgency=low

  * Initial release (closes: #617718)

 -- Rene Engelhard <rene@debian.org>  Fri, 03 Jun 2011 11:08:48 +0000
