-libyaml (0.1.5-1) UNRELEASED; urgency=medium
+libyaml (0.1.7-2) UNRELEASED; urgency=medium
- * New upstream version 0.1.5.
+ * Clean doxygen-generated documentation with dh_doxygen.
+ * Mark libyaml-doc Multi-Arch: foreign.
+
+ -- Anders Kaseorg <andersk@mit.edu> Sun, 04 Sep 2016 04:34:55 -0400
+
+libyaml (0.1.7-1) unstable; urgency=medium
+
+ * New upstream version 0.1.7.
+ + Fix segfault in yaml_string_write_handler.
+ + Fix invalid simple key assertion.
+ * Drop upstreamed patches.
+ * Migrate packaging from CDBS to dh.
+ * Drop libyaml-0-2-dbg in favor of automatically generated
+ libyaml-0-2-dbgsym package.
+
+ -- Anders Kaseorg <andersk@mit.edu> Sat, 03 Sep 2016 06:48:38 -0400
+
+libyaml (0.1.6-3) unstable; urgency=high
+
+ * debian/patches/CVE-2014-9130.patch: Fix CVE-2014-9130 assertion
+ failure caused by wrapped strings. (Closes: #771366)
+ * Bump Standards-Version to 3.9.6 (no changes needed).
+
+ -- Anders Kaseorg <andersk@mit.edu> Fri, 28 Nov 2014 22:05:10 -0500
+
+libyaml (0.1.6-2) unstable; urgency=medium
+
+ * Move doxygen from Build-Depends to Build-Depends-Indep.
+
+ -- Anders Kaseorg <andersk@mit.edu> Tue, 19 Aug 2014 21:56:25 -0400
+
+libyaml (0.1.6-1) unstable; urgency=medium
+
+ * New upstream version 0.1.6.
+ Fix CVE-2013-6393: heap-based buffer overflow when parsing YAML
tags.
+ + Fix CVE-2014-2525: heap-based buffer overflow in
+ yaml_parser_scan_uri_escapes.
* Drop upstreamed patches.
* Run tests at build time.
* Bump Standards-Version to 3.9.5 (no changes needed).
- * Use dh-autoreconf.
+ * Use dh-autoreconf. (Closes: #745078)
* Use dh-buildinfo.
* Add libyaml-doc package for Doxygen-generated API documentation and
examples. (Closes: #696821)
* Acknowledge NMUs.
- -- Anders Kaseorg <andersk@mit.edu> Sun, 23 Feb 2014 21:48:49 -0500
+ -- Anders Kaseorg <andersk@mit.edu> Tue, 19 Aug 2014 00:03:53 -0400
libyaml (0.1.4-3.2) unstable; urgency=high