pyyaml (5.3.1-1ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: FullLoader arbitrary code execution
    - debian/patches/CVE-2020-14343.patch: move a few constructors from
      full_load to unsafe_load in lib/yaml/constructor.py,
      lib3/yaml/constructor.py, tests/lib/test_recursive.py,
      tests/lib3/test_recursive.py.
    - CVE-2020-14343

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Mon, 12 Apr 2021 09:28:38 -0400

pyyaml (5.3.1-1) unstable; urgency=medium

  * New upstream security release
    - Issue was already fixed in 5.3-2 in Debian, but this update switches us
      to the final upstream version of the fix

 -- Scott Kitterman <scott@kitterman.com>  Wed, 18 Mar 2020 23:57:48 -0400

pyyaml (5.3-2) unstable; urgency=high

  [ Emmanuel Arias ]
  * Call python2 instead of python in autopkgtest. (Closes: #948492)
  * d/control: python-yaml-dbg depends on python2-dbg instead of python-dbg.
    - Patch by Matthias Klose.

  [ Debian Janitor ]
  * Bump debhelper from old 11 to 12.
  * Set upstream metadata fields: Bug-Database, Bug-Submit, Name,
    Repository, Repository-Browse.

  [ Scott Kitterman ]
  * Add d/p/CVE-2020-1747.patch due to command injection vulnerability
    (Closes: #953013)
    - Resolves CVE-2020-1747: arbitrary command execution through python/
      object/new when FullLoader is used
  * Bump standards-version to 4.5.0 without further change

 -- Scott Kitterman <scott@kitterman.com>  Fri, 06 Mar 2020 21:56:58 -0500

pyyaml (5.3-1) unstable; urgency=medium

  * New upstream relaese

 -- Scott Kitterman <scott@kitterman.com>  Wed, 08 Jan 2020 02:14:32 -0500

pyyaml (5.2-1) unstable; urgency=medium

  [ Ondřej Nový ]
  * Bump Standards-Version to 4.4.1.

  [ Scott Kitterman ]
  * New upstream release

 -- Scott Kitterman <scott@kitterman.com>  Wed, 11 Dec 2019 00:35:29 -0500

pyyaml (5.1.2-1) unstable; urgency=medium

  [ Ondřej Nový ]
  * Use debhelper-compat instead of debian/compat.
  * Bump Standards-Version to 4.4.0.

  [ Scott Kitterman ]
  * New upstream release
    - Dropped all patches, incorporated in upstream release
  * Update debian/copyright
  * Update autopkgtests to use yaml.FullLoader to avoid deprecation warnings
    - https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load(input)-Deprecation

 -- Scott Kitterman <scott@kitterman.com>  Sun, 04 Aug 2019 19:00:21 -0400

pyyaml (3.13-2) unstable; urgency=medium

  * Team upload

  [ Scott Kitterman ]
  * Remove obsolete build-depends on quilt

  [ Simon McVittie ]
  * Apply patch from upstream PR #181 to fix deprecation warning for
    import of collections.Hashable, which won't work in Python 3.8.
    Thanks to Niels Thykier. (Closes: #917603)
  * Standards-Version: 4.3.0 (no changes required)
  * Set Rules-Requires-Root to no
  * d/p/0001-support-high-codepoints.patch.patch:
    Add attribution
  * Explicitly use #!/bin/sh for autopkgtest scripts
  * Include debug symbols in python[3]-yaml-dbg instead of creating -dbgsym
    packages
  * Enable autopkgtest-pkg-python tests in addition to the ones in d/tests
  * Skip build-time tests if nocheck is in DEB_BUILD_OPTIONS

 -- Simon McVittie <smcv@debian.org>  Thu, 10 Jan 2019 11:09:51 +0000

pyyaml (3.13-1) unstable; urgency=medium

  [ Chris Lamb ]
  * d/control: Bump Standards-Version to 4.2.1.

  [ Ondřej Nový ]
  * d/control: Set Vcs-* to salsa.debian.org
  * d/control: Deprecating priority extra as per policy 4.0.1
  * d/changelog: Remove trailing whitespaces
  * d/control: Remove trailing whitespaces
  * d/rules: Remove trailing whitespaces
  * Convert git repository from git-dpm to gbp layout

  [ Tristan Seligmann ]
  * d/watch: Point at PyPI.
  * d/rules: Various fixes.
  * d/changelog: Remove trailing newline.
  * d/rules: Turn on hardening flags.
  * d/compat, d/control: Bump debhelper compat level to 11.
  * d/rules: Switch to pybuild. (Closes: #907422)

  [ Scott Kitterman ]
  * New upstream release

 -- Scott Kitterman <scott@kitterman.com>  Fri, 02 Nov 2018 19:26:49 -0400

pyyaml (3.12-1) unstable; urgency=medium

  [ Scott Kitterman ]
  * Update Homepage field in debian/control
  * New upstream release
  * Add dh-python to build-depends
  * Bump standards version to 3.9.8 without further change

  [ Ondřej Nový ]
  * Fixed VCS URL (https)

  [ SVN-Git Migration ]
  * Migrate packaging to git with git-dpm

 -- Scott Kitterman <scott@kitterman.com>  Sun, 04 Sep 2016 01:38:51 -0400

pyyaml (3.11-3) unstable; urgency=medium

  * Team upload.
  * d/control: Bump Standards-Version with no other changes necessary.
  * d/patches/support-high-codepoints.patch: Added to fix support for
    codepoints above 0xffff.  Given by John R. Lenton.  (Closes: #806826)
  * d/tests/{control,python2.sh,python3.sh}: Added to test the above patch
    since a unittest is problematic.

 -- Barry Warsaw <barry@debian.org>  Wed, 02 Dec 2015 16:29:22 -0500

# For older changelog entries, run 'apt-get changelog python3-yaml'
