--- drupal6-6.22.orig/debian/drupal6.install +++ drupal6-6.22/debian/drupal6.install @@ -0,0 +1,10 @@ +*.php usr/share/drupal6 +includes usr/share/drupal6 +misc usr/share/drupal6 +modules usr/share/drupal6 +themes usr/share/drupal6 +robots.txt usr/share/drupal6 +profiles etc/drupal/6 +debian/etc/apache.conf etc/drupal/6 +debian/etc/settings.php etc/drupal/6/sites/default +debian/cron.sh usr/share/drupal6/scripts --- drupal6-6.22.orig/debian/drupal6.postinst +++ drupal6-6.22/debian/drupal6.postinst @@ -0,0 +1,57 @@ +#!/bin/bash +# postinst script for drupal + +set -e + +dbc_generate_include='php:/etc/drupal/6/sites/default/dbconfig.php' +dbc_generate_include_owner='root:www-data' +dbc_generate_include_perms='640' +dbc_pgsql_createdb_encoding='UTF8' + +. /usr/share/debconf/confmodule +# source dbconfig-common stuff'); +. /usr/share/dbconfig-common/dpkg/postinst +dbc_go drupal6 $@ + +if [ "$DPKG_DEBUG" = "developer" ]; then + set -x +fi + +package_name="drupal6" +datadir="/var/lib/${package_name}" +filesdir="${datadir}/files" +backupdir="${datadir}/backups" +pkgdir="/usr/share/${package_name}" +docdir="/usr/share/doc/${package_name}" +upgradesdir="${docdir}/upgrades" +configdir="/etc/drupal/6" +default_configfile="${configdir}/sites/default/settings.php" +includefile="${configdir}/apache.conf" +cronfile="/etc/cron.d/${package_name}" + +OLDVERSION="$2" + +case "$1" in + configure) + + # Permissions + dpkg-statoverride --list $filesdir || dpkg-statoverride --add --force --update www-data www-data 0750 $filesdir + + ;; + + abort-upgrade|abort-remove|abort-deconfigure) + + ;; + + *) + echo "postinst called with unknown argument \`$1'" >&2 + exit 1 + ;; +esac + +# dh_installdeb will replace this with shell code automatically +# generated by other debhelper scripts. + +#DEBHELPER# + +exit 0 --- drupal6-6.22.orig/debian/docs +++ drupal6-6.22/debian/docs @@ -0,0 +1,5 @@ +MAINTAINERS.txt +UPGRADE.txt +INSTALL.mysql.txt +INSTALL.pgsql.txt +scripts --- drupal6-6.22.orig/debian/drupal6.templates +++ drupal6-6.22/debian/drupal6.templates @@ -0,0 +1,9 @@ +Template: drupal6/post_install_guidance +Type: note +_Description: Post-Install Instructions + Once Drupal is finished installing, you will still need to perform a few steps. + . + - Restart the webserver (i.e. restart apache2) + - Run installation script via URL http://host/drupal6/install.php + . + Be sure to read /usr/share/doc/drupal6/README.Debian for detailed instructions. --- drupal6-6.22.orig/debian/cron.d +++ drupal6-6.22/debian/cron.d @@ -0,0 +1 @@ +0 * * * * www-data if test -x /usr/share/drupal6/scripts/cron.sh ; then /usr/share/drupal6/scripts/cron.sh ; fi --- drupal6-6.22.orig/debian/drupal6.config +++ drupal6-6.22/debian/drupal6.config @@ -0,0 +1,51 @@ +#!/bin/bash + +# Debconf config script for Drupal + +set -e + + +# Source debconf library +. /usr/share/debconf/confmodule + +if [ -f /usr/share/dbconfig-common/dpkg/config ]; then + # we support mysql and pgsql + dbc_dbtypes="mysql, pgsql" + dbc_dbname=drupal6 + dbc_dbuser=drupal6 + + # source dbconfig-common stuff + . /usr/share/dbconfig-common/dpkg/config --debconf-ok + dbc_go drupal6 $@ +fi + +if [ "$DPKG_DEBUG" = "developer" ]; then + set -x +fi + +################################################## +# Begin installation directories definition block# +################################################## +package_name="drupal6" +datadir="/var/lib/${package_name}" +backupdir="${datadir}/backups/" +docdir="/usr/share/doc/${package_name}" +upgradesdir="${docdir}/upgrades" +configdir="/etc/drupal/6" +configfile="${configdir}/conf.php" +includefile="${configdir}/apache.conf" +################################################ +# End installation directories definition block # +################################################ + +######################################################################## +# The actual configuration + +OLDVERSION="$2" + +db_input high drupal6/post_install_guidance || true +db_go || true + +db_stop + +exit 0 --- drupal6-6.22.orig/debian/dirs +++ drupal6-6.22/debian/dirs @@ -0,0 +1,5 @@ +etc/drupal/6/sites/default +var/lib/drupal6/files +var/lib/drupal6/backups +usr/share/doc/drupal6 +usr/share/lintian/overrides --- drupal6-6.22.orig/debian/drupal6.prerm +++ drupal6-6.22/debian/drupal6.prerm @@ -0,0 +1,14 @@ +#! /bin/bash +# prerm script for ${package_name} +# + +set -e + +. /usr/share/debconf/confmodule +. /usr/share/dbconfig-common/dpkg/prerm +dbc_go drupal6 $@ + +#DEBHELPER# + +exit 0 + --- drupal6-6.22.orig/debian/drupal6.lintian +++ drupal6-6.22/debian/drupal6.lintian @@ -0,0 +1,2 @@ +drupal6: package-contains-upstream-install-documentation usr/share/doc/drupal6/INSTALL.mysql.txt +drupal6: package-contains-upstream-install-documentation usr/share/doc/drupal6/INSTALL.pgsql.txt --- drupal6-6.22.orig/debian/rules +++ drupal6-6.22/debian/rules @@ -0,0 +1,60 @@ +#!/usr/bin/make -f +# -*- makefile -*- +# Sample debian/rules that uses debhelper. +# GNU copyright 1997 to 1999 by Joey Hess. + +# Uncomment this to turn on verbose mode. +# export DH_VERBOSE=1 + +PACKAGE=drupal6 + +include /usr/share/dpatch/dpatch.make + +build: patch + +clean-patched: + dh_testdir + dh_testroot + dh_clean + +clean: clean-patched unpatch + debconf-updatepo + +install:build + dh_testdir + dh_testroot + dh_prep + dh_installdirs -X.svn -XCVS + dh_install -XCVS -X.svn + # fix permissions + find $(CURDIR)/debian/$(PACKAGE)/usr/share/drupal6 \ + -name '*.png' -o -name '*.jpg' | xargs chmod a-x + chmod +x $(CURDIR)/debian/$(PACKAGE)/usr/share/drupal6/scripts/* + # rm $(CURDIR)/debian/$(PACKAGE)/usr/share/drupal6/misc/jquery.js + + install -m640 .htaccess debian/drupal6/etc/drupal/6/htaccess + install -m644 debian/drupal6.lintian debian/drupal6/usr/share/lintian/overrides/drupal6 +# Everything else is handled by dh_install + +# Build architecture-independent files here. +binary-indep: build install + dh_testdir + dh_testroot + dh_installchangelogs CHANGELOG.txt + dh_installdocs -XCVS -X.svn + dh_installexamples + dh_installdebconf + dh_installcron + dh_link + dh_compress + dh_fixperms + dh_installdeb +ifeq ($(PO2DEBCONF),yes) + po2debconf -e utf8 debian/templates.master > debian/templates +endif + dh_gencontrol -- -V'debconf-depends=debconf (>= $(MINDEBCONFVER))' + dh_md5sums + dh_builddeb + +binary: binary-indep +.PHONY: build clean binary-indep binary install #PHONY_CONFIGURE# --- drupal6-6.22.orig/debian/links +++ drupal6-6.22/debian/links @@ -0,0 +1,4 @@ +etc/drupal/6/htaccess usr/share/drupal6/.htaccess +etc/drupal/6/sites usr/share/drupal6/sites +etc/drupal/6/profiles usr/share/drupal6/profiles +var/lib/drupal6/files etc/drupal/6/sites/default/files --- drupal6-6.22.orig/debian/copyright +++ drupal6-6.22/debian/copyright @@ -0,0 +1,44 @@ +This package was debianized by Hugo Espuny on +Sat, 29 Jun 2002 22:13:16 +0200. + +The current Debian Maintainer is Luigi Gangitano + +It was downloaded from http://www.drupal.org + +Upstream authors: Dries Buytaert +James Walker +Moshe Weitzman +Charlie Lowe +Steven Wittens +Károly Négyesi +Gabor Hojtsy +Richard Archer +Matt Westgate +Piotr Krukowiecki +Károly Négyesi +Jeremy Andrews +Károly Négyesi +Hilko Bengen +Gerhard Killesreiter + +Copyright: 2000-2008 Dries Buytaert + + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 2 of the License. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License with + the Debian GNU/Linux distribution in file /usr/share/common-licenses/GPL-2; + if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth + Floor, Boston, MA 02110-1301, USA. + +On Debian systems, the complete text of the GNU General Public +License, version 2, can be found in /usr/share/common-licenses/GPL-2. + +The Debian packaging is (C) 2006-2008, Luigi Gangitano and +is licensed under the GPL, see above. --- drupal6-6.22.orig/debian/watch +++ drupal6-6.22/debian/watch @@ -0,0 +1,2 @@ +version=3 +ftp://ftp.drupal.org/pub/drupal/files/projects/drupal-(6[\d\.]+)\.tar\.gz --- drupal6-6.22.orig/debian/control +++ drupal6-6.22/debian/control @@ -0,0 +1,25 @@ +Source: drupal6 +Section: web +Priority: extra +Maintainer: Ubuntu Developers +XSBC-Original-Maintainer: Luigi Gangitano +Build-Depends: debhelper (>= 7), dpatch + ,po-debconf +Homepage: http://www.drupal.org/ +Standards-Version: 3.9.2.0 +Xs-Vcs-Svn: svn://alioth.debian.org/svn/pkg-drupal/branches/drupal6 +Xs-Vcs-Browser: http://svn.debian.org/wsvn/pkg-drupal/branches/drupal6 + +Package: drupal6 +Architecture: all +Depends: ${misc:Depends}, apache2 | httpd, php5, php5-mysql | php5-pgsql, php5-gd, default-mta | mail-transport-agent, wwwconfig-common (>= 0.0.37), mysql-client | virtual-mysql-client | postgresql-client, dbconfig-common, curl +Recommends: mysql-server | postgresql +Description: fully-featured content management framework + Drupal is a dynamic web site platform which allows an individual or + community of users to publish, manage and organize a variety of + content, Drupal integrates many popular features of content + management systems, weblogs, collaborative tools and discussion-based + community software into one easy-to-use package. + . + This package contains version 6 of Drupal. + --- drupal6-6.22.orig/debian/drupal6.postrm +++ drupal6-6.22/debian/drupal6.postrm @@ -0,0 +1,95 @@ +#! /bin/bash +# postrm script for ${package_name} +# + +set -e + +if [ -f /usr/share/debconf/confmodule ]; then + . /usr/share/debconf/confmodule +fi + +# source dbconfig-common stuff +if [ -f /usr/share/dbconfig-common/dpkg/postrm ]; then + . /usr/share/dbconfig-common/dpkg/postrm + dbc_go drupal6 $@ +fi + +# summary of how this script can be called: +# * `remove' +# * `purge' +# * `upgrade' +# * `failed-upgrade' +# * `abort-install' +# * `abort-install' +# * `abort-upgrade' +# * `disappear' overwrit>r> +# for details, see http://www.debian.org/doc/debian-policy/ or +# the debian-policy package + +if [ "$DPKG_DEBUG" = "developer" ]; then + set -x +fi + +package_name="drupal6" +datadir="/var/lib/${package_name}/" +backupdir="${datadir}backups/" +nukedir="/usr/share/${package_name}/" +docdir="/usr/share/doc/${package_name}/" +sqlfile="${docdir}database/database.mysql" +upgradesdir="${docdir}upgrades/" +configdir="/etc/drupal/6/" +configfile="${configdir}conf.php" +includefile="${configdir}apache.conf" +dbconfigfile="${configdir}/sites/default/dbconfig.php" +cronfile="/etc/cron.d/${package_name}" + +webserver="apache2" + +case "$1" in + purge|remove) + + # Un-configure webservers + if [ -L /etc/$webserver/conf.d/drupal6.conf ]; then + rm -f /etc/$webserver/conf.d/drupal6.conf || true + restart="$i $restart" + fi + + servers="apache2" + # may not exist if package was manually installed + if [ -r /usr/share/wwwconfig-common/restart.sh ]; then + . /usr/share/wwwconfig-common/restart.sh + fi + + + # Remove configuration files (conf.php, $SITE.php) + rm -f /etc/drupal/sites/default/settings.php + + if [ "$1" = "purge" ]; then + rm -f ${dbconfigfile} + if which ucf >/dev/null 2>&1; then + ucf --purge ${dbconfigfile} + fi + + db_purge || true + + fi + + ;; + + upgrade|failed-upgrade|abort-install|abort-upgrade|disappear) + + ;; + + *) + echo "postrm called with unknown argument \`$1'" >&2 + exit 1 + ;; +esac + +# dh_installdeb will replace this with shell code automatically +# generated by other debhelper scripts. + +#DEBHELPER# + +exit 0 + --- drupal6-6.22.orig/debian/examples +++ drupal6-6.22/debian/examples @@ -0,0 +1,2 @@ +sites/default/default.settings.php + --- drupal6-6.22.orig/debian/compat +++ drupal6-6.22/debian/compat @@ -0,0 +1 @@ +7 --- drupal6-6.22.orig/debian/README.Debian +++ drupal6-6.22/debian/README.Debian @@ -0,0 +1,182 @@ +Drupal for Debian +----------------- + +1. Introduction +2. Manual initial database generation and configuration +3. Enabling access in Apache +4. Database population script +5. Deleting the Drupal database +6. Changes to Apache 2 configuration +7. Securing your portal +8. Upgrading database from previous versions +9. Virtual hosts +10. Additional themes and modules +11. Privacy of session cookies + +A. Customizing themes +B. Links for more support + + +1. Introduction +--------------- +The latest version of Drupal can always be found at +. + +A running database server is needed for this package to work. It +doesn't matter whether the DBMS runs on the same machine as the +web server. MySQL and PostgreSQL servers are supported by this package. + +You can change the DBMS configuration after installation by running +"dpkg-reconfigure drupal6" + + +2. Manual initial database generation and configuration +------------------------------------------------------- +This is only necessary if you chose not to automatically create the +database at installation time or if automatic creation failed. + +Directions on how to create a database for you drupal portal can be found +in INSTALL.mysql.txt and INSTALL.pgsql.txt files in /usr/share/doc/drupal6. + + +3. Enabling access in Apache +---------------------------- + +Since version 6.20-1, drupal is not enabled by default in Apache 2. To enable +web access to the drupal application, simply link the /etc/drupal/6/apache2.conf +in /etc/apache2/conf.d/drupal6.conf with this command: + + ln -s /etc/drupal/6/apache2.conf /etc/apache2/conf.d/drupal6.conf + + +4. Database population script +----------------------------- +Once a database is set up and configured, drupal needs to create tables and +insert default records into it. + +This can be done running the install.php script on portal web site, e.g. + + http://localhost/drupal6/install.php + + +5. Deleting the Drupal database +------------------------------- +The database may be deleted automatically on purging the package +(debconf prompt the user asking to do it or not). + +If you want to purge the data stored at MySQl database manually you +can use the following command: + +'mysqladmin -p drop drupal6' + +being the user who admin MySQL. + + +6. Changes to Apache 2 configuration +------------------------------------ + +By default, Drupal passes path arguments to itself via its dynamically +generated URLs. This results in URLs that look like +"http://www.example.com/?q=node/83." This can make URLs hard to read and it +prevents some search engines from indexing the pages with these URLs + +You can tell Drupal to use "clean URLs", eliminating the "?q=" in internal +URLs, simply enabling mod_rewrite in apache 2 configuration (a2enmod rewrite). +Please note that you may need to adjust the /etc/drupal/6/htaccess +configuration file to match your site configuration. + + +7. Securing your portal +----------------------- +It is very good security measure to restrict access to admin.php only +to trusted IP's and localhost (you can see an example at +/etc/drupal/6/htaccess) As an added security measure, is a good idea to +set up a ssl-enabled web server in your apache, and allow access to +admin page only to ssl streams. + + +8. Upgrading database from previous versions +-------------------------------------------- +From version 4.7.4 drupal packages will be separated for each major version. +Automatic upgrading the database will not be attempted anymore. + +To upgrade an existing version of drupal, install the new package and manually +configure the database to point to the existing database, then execute the +upstream upgrade script by pointing a web browser to + + + +Then remove the old package. + +WARNING: be sure to _NOT_ remove the old package's database. + + +9. Virtual hosts +---------------- +Drupal supports a setup with multiple virtual hosts. Each virtual host +has its own configuration directory in /etc/drupal/6/sites/_virtualhost_. +At install time the 'default' virtual host is created with the required +settings.php configuration file. + +To create new virtual hosts simply duplicate the default virtual host directory +and adjust the settings.php and dbconfig.php configuration files. + +This package supports running cron scripts on each virtual host, as long as you +define the $base_url variable in the virtual host settings.php configuration +file. + + +10. Additional modules and themes +-------------------------------- + +Drupal looks for modules and themes in the modules/ and themes/ +subdirectories, respectively. However, it would be a bad idea to put +additional modules and themes into those directories because they +might be overwritten on upgrades. Instead, create links to another +directory that won't be touched by dpkg, e.g. in the /usr/local +hierarchy: + + # ln -s /usr/local/share/drupal/modules /usr/share/drupal6/modules/local + # ln -s /usr/local/share/drupal/themes /usr/share/drupal6/themes/local + + +11. Privacy of session cookies +------------------------------ + +Drupal does not set the secure flag for the session cookie in an https +session, which can cause the cookie to be sent in http requests and make +it easier for remote attackers to capture this cookie. + +If you are using drupal on an https connection you can fix this issue +setting the session.cookie_secure PHP properties to on either in the +global PHP configuration file or adding the following line to +/etc/drupal/6/htaccess: + + php_value session.cookie_secure 1 + + +A. Customizing themes +--------------------- +To create or customize a theme for your site, I recommend to start +with an existing theme (as exmaple), copy it to a different location + + # cp -ai /etc/drupal/6/themes/example /etc/drupal/6/themes/Custom + +and modify this new created theme. You can now select your "Custom" +theme in the Preferences menu from the admin interface. + +You should not modify and use an included theme in the package +directly, as your changes could be overwritten next time you upgrade +drupal. + + +B. Links for more support +------------------------- +* http://www.drupal.org/ + - Drupal's project page for those willing to get involved in the + ongoing development + +* http://www.drupal.org/node.php?id=253 + - online installation guidelines + + -- Luigi Gangitano Mon, 11 Aug 2008 12:00:12 +0100 --- drupal6-6.22.orig/debian/cron.sh +++ drupal6-6.22/debian/cron.sh @@ -0,0 +1,19 @@ +#!/bin/sh +# $Id: cron.sh 1878 2008-02-12 10:56:45Z luigi $ + +for site in /etc/drupal/6/sites/* ; do + BASE_URL="" + + if [ ! "`basename $site`" = "all" ]; then + for file in $site/baseurl.php $site/settings.php; do + [ -f "$file" ] && BASE_URL=`grep '^$base_url' $file | cut -d"'" -f2` + [ "X$BASE_URL" != "X" ] && break + done + + if [ "X$BASE_URL" = "X" ] ; then + BASE_URL='http://localhost/drupal6' + fi + + curl --fail --silent --compressed --location $BASE_URL/cron.php + fi +done --- drupal6-6.22.orig/debian/changelog +++ drupal6-6.22/debian/changelog @@ -0,0 +1,954 @@ +drupal6 (6.22-1ubuntu1) oneiric; urgency=low + + * Merge from debian unstable. Remaining changes: + - adding debconf note to guide user post install + + -- Angel Abad Mon, 20 Jun 2011 15:01:23 +0200 + +drupal6 (6.22-1) unstable; urgency=low + + [ Luigi Gangitano ] + * New upstream release (Closes: #628896) + + * debian/control + - Bumped Standard-Version to 3.9.2.0, no change needed + - Removed article from start of Description: field + + * debian/watch + - Updated watch file to changed upstream repo + + -- Luigi Gangitano Thu, 16 Jun 2011 15:55:08 +0200 + +drupal6 (6.20-2ubuntu1) oneiric; urgency=low + + * Merge from debian unstable. Remaining change: + - adding debconf note to guide user post install (LP: #370994) + + -- Bhavani Shankar Mon, 16 May 2011 18:44:28 +0530 + +drupal6 (6.20-2) unstable; urgency=low + + * debian/patches/21-ssl-cache-control + - Added patch to fix Attachment downloads on HTTPS with IE7 + (Closes: #624467) + + * debian/README.Debian + - Fixed typo (Closes: #616307) + + -- Luigi Gangitano Mon, 16 May 2011 00:18:13 +0200 + +drupal6 (6.20-1ubuntu1) natty; urgency=low + + * Merge from debian unstable. Remaining change: + - adding debconf note to guide user post install (LP: #370994) + + -- Bhavani Shankar Sat, 19 Feb 2011 19:44:21 +0530 + +drupal6 (6.20-1) unstable; urgency=low + + [ Luigi Gangitano ] + * New upstream release (Closes: #613343) + + * debian/watch + - Updated watch file to changed upstream repo + + * debian/{drupal6.post{inst,rm},README.Debian} + - Removed automatic link in apache2 configuration directory, added + instructions on how to enable to README.Debian (Closes: #565738) + + -- Luigi Gangitano Fri, 18 Feb 2011 20:00:12 +0100 + +drupal6 (6.18-1ubuntu1) maverick; urgency=low + + * adding debconf note to guide user post install (LP: #370994) + + -- Clint Byrum Wed, 06 Oct 2010 13:03:22 +0200 + +drupal6 (6.18-1) unstable; urgency=high + + [ Luigi Gangitano ] + * Urgency high due to security fixes + + * New upstream release + - Fixes multiple remote vulnerabilities (Closes: #592716) + (Ref: SA-CORE-2010-002, CVE-TBA) + + * debian/control + - Bumped Standard-Version to 3.9.1.0, no change needed + + -- Luigi Gangitano Tue, 24 Aug 2010 16:17:22 +0200 + +drupal6 (6.17-2) unstable; urgency=low + + * debian/control + - Removed dependency on exim4, now depends on default-mda (Closes: #587239) + - Bumped Standard-Version to 3.9.0, no change needed + + * debian/drupal6.postrm + - Made postrm check for restart.sh in case dependencies were not properly + installed (thanks to Bhavani Shankar.R, from Ubuntu) + + -- Luigi Gangitano Wed, 30 Jun 2010 19:56:57 +0200 + +drupal6 (6.17-1) unstable; urgency=low + + [ Luigi Gangitano ] + * New upstream release + + * debian/cron.sh + - Added --fail option to curl to work around missing base_url in + configuration files (Closes: #561419) + + * debian/cron.d + - Fixed conditional to avoid warnings on removed package (Closes: #582430) + + -- Luigi Gangitano Sun, 06 Jun 2010 22:31:57 +0200 + +drupal6 (6.16-1) unstable; urgency=high + + [ Luigi Gangitano ] + * Urgency high due to security fixes + + * New upstream release + - Fixes multiple vulnerabilities (Closes: #572439) + (Ref: SA-CORE-2010-001, CVE-TBA) + + -- Luigi Gangitano Fri, 12 Mar 2010 14:04:02 +0100 + +drupal6 (6.15-2) UNRELEASED; urgency=low + + [ Alexandre De Dommelin ] + * Added patch to remove warnings about Drupal core updates (Closes: #521288) + * Bump Standards-Version from 3.8.3 to 3.8.4 (no changes needed) + + -- Luigi Gangitano Wed, 10 Feb 2010 17:11:35 +0100 + +drupal6 (6.15-1) unstable; urgency=low + + * New upstream release (Closes: #561726) + - Fixes several XSS vulnerabilities (Closes: #562165) + (Ref: SA-CORE-2009-009, CVE-2009-4369, CVE-2009-4370, CVE-2009-4371) + + * debian/rules + - Use dh_prep instead of dh_clean -k + + * debian/control + - Upgraded versioned dependency on debhelper to 7 + + * debian/README.source + - Added directions on source handling + + -- Luigi Gangitano Mon, 11 Jan 2010 19:47:13 +0100 + +drupal6 (6.14-1) unstable; urgency=low + + * New upstream release + - Removed security patches integrate upstream + + 20_SA-CORE-2009-007 + - Fixes multiple vulnerabilities (Ref: SA-CORE-2009-008) + (Closes: #547140) + + * debian/control + - Bumped Standard-Version to 3.8.3, no change needed + + * debian/compat + - Switch debhelper compatibility to 7 + + * debian/copyright + - Added reference to copyright file with version + + -- Luigi Gangitano Sun, 20 Sep 2009 04:57:57 +0200 + +drupal6 (6.13-1) UNRELEASED; urgency=low + + * New upstream release + + -- Luigi Gangitano Mon, 13 Jul 2009 19:42:38 +0200 + +drupal6 (6.12-1.1) unstable; urgency=high + + * Non-maintainer upload by the Security Team. + * Apply upstream patch to fix: + - XSS in the forum module + - Input format access bypass via signatures + - Password leakage via URLs + (no CVE id yet; SA-CORE-2009-007; Closes: #535435). + + -- Nico Golde Mon, 06 Jul 2009 20:27:45 +0200 + +drupal6 (6.12-1) unstable; urgency=low + + [ Luigi Gangitano ] + * New upstream release (Closes: #529309) + (Acknoledges NMU by Security Team) (Closes: #531386) + - Removed security patch integrate upstream + + 20_xss + + * debian/{control,rules,links} + - Removed dependency on libjs-jquery and use jquery.js from drupal + sources to avoid conflict with newer version of jquery + (Closes: #530779) + + -- Luigi Gangitano Tue, 02 Jun 2009 18:25:58 +0200 + +drupal6 (6.11-1.1) unstable; urgency=high + + * Non-maintainer upload by the Security Team. + * Fix several XSS issues (SA-CORE-2009-006; Closes: #529190). + + -- Nico Golde Thu, 28 May 2009 20:45:35 +0200 + +drupal6 (6.11-1) unstable; urgency=low + + [ Luigi Gangitano ] + * New upstream release + - Fixes XSS vulnerability (Ref: SA-CORE-2009-005, CVE-2009-1575, + CVE-2009-1576) (Closes: #526378) + + -- Luigi Gangitano Mon, 04 May 2009 19:56:12 +0200 + +drupal6 (6.10-1) unstable; urgency=low + + [ Luigi Gangitano ] + * New upstream release + - This version fixes two Windows-only security issues + (Ref: SA-CORE-2009-003, SA-CORE-2009-004) + Debian is not affected by this vulnerabilites + + -- Luigi Gangitano Sun, 01 Mar 2009 18:26:25 +0100 + +drupal6 (6.9-1) unstable; urgency=low + + [ Luigi Gangitano ] + * New upstream release + - Removed security patch integrate upstream + + 12_SA-2008-073 + + 13_SA-CORE-2009-001 + + * debian/cron.sh + - Handle sites/all correctly (Closes: #513522) + + -- Luigi Gangitano Mon, 16 Feb 2009 19:37:31 +0100 + +drupal6 (6.6-3) unstable; urgency=high + + [ Luigi Gangitano ] + * Urgency high due to security fixes + + * debian/patches/13_SA-CORE-2009-001 + - Added upstream patch fixing multiple vulnerabilities + (Ref: SA-CORE-2009-001, CVE-TBD) + + -- Luigi Gangitano Fri, 16 Jan 2009 01:49:58 +0100 + +drupal6 (6.6-2) unstable; urgency=high + + * debian/patches/12_SA-2008-073 + - Moved NMU changes to dpatch file + + * debian/control + - Added dependency on ${misc:Depends} to make lintian happy + + * debian/drupal6.{postinst,postrm} + - Changed apache configuration link name to drupal6.conf, to avoid + collision with drupal5 (Closes: #509769, #505146) + - Set default Postgres encoding to UTF8 (Closes: #508506) + + * debian/README.Debian + - Fixed link to installation script (Closes: 507914) + + -- Luigi Gangitano Thu, 08 Jan 2009 20:49:51 +0100 + +drupal6 (6.6-1.1) unstable; urgency=high + + * Non-maintainer upload. + * Urgency high because this fixes a security issue + * Include upstream patch for SA-2008-073, to fix a security issue: + The update system is vulnerable to Cross site request forgeries. Malicious + users may cause the superuser (user 1) to execute old updates that may + damage the database. + (Ref: SA-2008-073, CVE-2008-6170, CVE-2008-6532, CVE-2008-6533) (Closes: #508473) + + -- Patrick Schoenfeld Fri, 12 Dec 2008 09:30:28 +0100 + +drupal6 (6.6-1) unstable; urgency=high + + [ Luigi Gangitano ] + * Urgency high due to security fixes + + * New upstream release + - Fixes two security vulnerabilities + (Ref: SA-2008-067, CVE-2008-6171) (Closes: #503222) + + * debian/drual6.postrm + - Fixed missing -e option to make lintian happy + + * debian/patches/10_cronjob.dpatch + - Added patch descritpion to make lintian happy + + * debian/control + - Bumped Standard-Version to 3.8.0, no change needed + + * debian/{control,rules,links} + - Added dependency on libjs-jquery and use jquery.js from it + + -- Luigi Gangitano Fri, 24 Oct 2008 23:06:15 +0200 + +drupal6 (6.5-1) unstable; urgency=low + + [ Luigi Gangitano ] + * New upstream release + - Removed security patch integrate upstream + + 11-SA-2008-060 + + -- Luigi Gangitano Mon, 20 Oct 2008 23:59:27 +0200 + +drupal6 (6.4-2) unstable; urgency=high + + [ Luigi Gangitano ] + * Urgency high due to security fixes + + * debian/patches/11-SA-2008-060 + - Added upstream patch fixing several security vulnerabilities + (Ref: SA-2008-060, CVE-TBA) (Closes: #501640) + + * debian/README.Debian + - Added a notice about cookie security and session.cookie_secure + configuration (Ref: CVE-2008-3661) (Closes: #501058) + + -- Luigi Gangitano Fri, 14 Oct 2008 15:47:20 +0200 + +drupal6 (6.4-1) unstable; urgency=low + + [ Luigi Gangitano ] + * New upstream release + - Fixes several XSS vulnerabilities + (Ref: SA-2008-047, CVE-TBD) + + -- Luigi Gangitano Fri, 15 Aug 2008 01:35:59 +0200 + +drupal6 (6.3-1) unstable; urgency=low + + [ Luigi Gangitano ] + * New upstream release (Closes: 465833) + + * debian/links + - Changed files directory link to match new upstream configuration + + * debian/README.Debian + - Fixed references to database population script and added instructions + to enable apache2 mod_rewrite. + + -- Luigi Gangitano Mon, 11 Aug 2008 19:16:04 +0200 + +drupal6 (6.0-1) UNRELEASED; urgency=low + + [ Luigi Gangitano ] + * New upstream branch 6.0 + + * debian/* + - Rename file and directories from 5 to 6 + - In debian/control switch to Source: drupal6 + + -- Luigi Gangitano Mon, 11 Aug 2008 12:00:12 +0100 + +drupal5 (5.7-1) unstable; urgency=low + + [ Luigi Gangitano ] + * New upstream release + - Fixes several non-security related bugs (Closes: #464876) + + * debian/po/hu.po + - Updated Hungarian debconf templates translation (Thanks to Miklos + Lukacs) (Closes: #459378) + + * debian/cron.sh + - Fixed cron script for multisite setup (thanks to Fernando Lucas + Rodriguez) (Closes: #464599) + + * debian/watch + - Removed unused 'uupdate' token + + -- Luigi Gangitano Tue, 12 Feb 2008 11:40:29 +0100 + +drupal5 (5.6-2) unstable; urgency=low + + [ Luigi Gangitano ] + * debian/cron.d + - Fix typo in cron script that makes it running every minutes, set it + to one hour (Closes: #456182) + + -- Luigi Gangitano Sat, 26 Jan 2008 20:51:39 +0100 + +drupal5 (5.6-1) unstable; urgency=high + + [ Luigi Gangitano ] + * Urgency high due to security fixes + + * New upstream release + - Fixes Cross site request forgery in Aggregator module + (Ref: SA-2008-005, CVE-TBA) + - Fixes Cross site scripting vulnerability with IE6 and user submitted + UTF8 input (Ref: SA-2008-006, CVE-TBA) + + * debian/cron.d + - Run cron script every hour and not every 5 minutes (Closes: #456182) + + * debian/rules + - Removed binary-arch section, moved all actions to binary-indep + + * debian/control + - Swapped httpd | apache2 order to comply with policy + - Bumped Standard-Version to 3.7.3, no change needed + + -- Luigi Gangitano Fri, 11 Jan 2008 15:02:09 +0100 + +drupal5 (5.5-1) unstable; urgency=high + + [ Luigi Gangitano ] + * Urgency high due to security fixes + + * New upstream release + - Fixes SQL Injection vulnerability in contributed modules + (Ref: DRUPAL-SA-2007-031, CVE-2007-6299) + + * debian/cron.sh + - Added check of BASE_URL in baseurl.php (Closes: #448774) + + -- Luigi Gangitano Fri, 07 Dec 2007 21:29:18 +0100 + +drupal5 (5.3-1) unstable; urgency=high + + [ Luigi Gangitano ] + * Urgency high due to security fixes + + * New upstream release + - Fixes several security vulnerabilities + + DRUPAL-SA-2007-024 (Ref: CVE-2007-5595) + + DRUPAL-SA-2007-025 (Ref: CVE-2007-5593) + + DRUPAL-SA-2007-026 (Ref: CVE-2007-5596) + + DRUPAL-SA-2007-029 (Ref: CVE-2007-5594) + + DRUPAL-SA-2007-030 (Ref: CVE-2007-5597) + + + -- Luigi Gangitano Sat, 20 Oct 2007 09:52:38 +0200 + +drupal5 (5.2-3) unstable; urgency=low + + * debian/drupal5.install + - Install default robots.txt (Closes: #440291) + + * debian/control + - Changed Recommends to postgresql + + -- Luigi Gangitano Thu, 23 Aug 2007 15:44:15 +0200 + +drupal5 (5.2-2) unstable; urgency=low + + * debian/README.Debian + - Fixed references to configuration directory + + * debian/etc/settings.php + - Apply fixes from upstream version (Closes: #435433) + + -- Luigi Gangitano Fri, 27 Jul 2007 02:12:20 +0200 + +drupal5 (5.2-1) unstable; urgency=high + + [ Luigi Gangitano ] + * Urgency high due to security fixes + + * New upstream release + - Fixes XSS in server variables (Ref: DRUPAL-SA-2007-018, CVE: TBD) + - Fixes XSRF in Forms API (Ref: DRUPAL-SA-2007-017, CVE: TBD) + + * debian/copyright + - Fixed FSF address to make lintian happy + + * debian/control + - Removed dependencies on php4 + - Updated httpd real package dependency to apache2 + - Changed Build-Depend-Indep to Build-Depend (policy 7.6) + + -- Luigi Gangitano Fri, 27 Jul 2007 01:48:04 +0200 + +drupal5 (5.1-3) unstable; urgency=low + + [ Luigi Gangitano ] + * debian/control + - Removed dependencies on 8.1 version of postgresql packages + - Fixed typo in postgresql-server package (Closes: #429229) + + -- Luigi Gangitano Wed, 29 Jun 2007 21:39:33 +0200 + +drupal5 (5.1-2) unstable; urgency=low + + [ Luigi Gangitano ] + - debian/control + * Added Xs-Vcs-{Svn,Browser} tags + + - debian/README.Debian + * Added istructions on Postgres database install and PHP memory limit + (Closes: #427001) + + [ Bart Cornelis (cobaco) ] + - New Norwegian Bokmael translation by Hans Fredrik Nordhaug + + -- Luigi Gangitano Tue, 13 Mar 2007 00:21:14 +0100 + +drupal5 (5.1-1) unstable; urgency=low + + [ Luigi Gangitano ] + * New upstream release (Closes: #409522) + + * debian/{links,drupal5.install,cron.d,etc/apache.conf} + - Applied patch from Karl-Heinz Nirschl fixing paths + + [ Bart Cornelis ] + Translations + * Updated Dutch translation by Bart Cornelis + * Updated Japanese translation by Hideki Yamane + * Updated German translation by Helge Kreutzmann (Closes: #413891) + * Updated Portuguese translation by Miguel Figueiredo (Closes: #413905) + * New Swedisch Translation by Daniel Nylander + * New Tamil translation by Tirumurti Vasudevan (Closes: #413824) + * New Czech translation by Miroslav Kure (Closes: #413798) + * New Russion translation by Yuriy Talakan (Closes: #414063) + * New Basque translation by Piarres Beobide (Closes: #413966) + * New Galician translation by Jacobo Tarrio (Closes: #413764) + + -- Luigi Gangitano Sat, 10 Mar 2007 20:04:24 +0100 + +drupal5 (5.0-1) UNRELEASED; urgency=low + + * (NOT RELEASED YET) New upstream release + + * debian/* + - Rename file and directories from 4.7 to 5 + - In debian/control switch to Source: drupal5 + - Add watch file + + * debian/control + - Removed Suggests on ssl enabled packages + - Removed dependencies on apache and added dependency on httpd | apache + - Added dependency on php4-gd | php5-gd + + * debian/{rules,drupal5.install} + - Removed reference to not-existing directory 'database' + + * debian/patches/10_cronjob.dpatch + - Updated patch to new cron script + + -- Luigi Gangitano Fri, 26 Jan 2007 20:04:24 +0100 + +drupal (4.7.5-2) UNRELEASED; urgency=low + + [ Luigi Gangitano ] + * NOT RELEASED YET + + * debian/control + - Bumped Standards-Version to 3.7.2 (no change needed) + - Removed dependency on postgsql-{client,server}-8.0 which is not in + the archive anymore + + * Translations + - Updated Dutch translations by Bart Cornelis + + -- Bart Cornelis (cobaco) Tue, 23 Jan 2007 11:50:45 +0100 + +drupal (4.7.5-1) unstable; urgency=low + + * New upstream release + - Fixes Denial of Service (DRUPAL-SA-2007-002) + - Fixes CSS Vulnerability (DRUPAL-SA-2007-001) + + -- Luigi Gangitano Sun, 7 Jan 2007 00:33:33 +0100 + +drupal (4.7.4-3) unstable; urgency=low + + * debian/po/fr.po + - Updated French debconf templates translation (Thanks to Thomas Huriaux) + (Closes: #404967) + + * debian/control + - Add php5 dependency (Closes: #405162) + + -- Luigi Gangitano Sun, 7 Jan 2007 00:13:36 +0100 + +drupal (4.7.4-2) unstable; urgency=low + + * debian/control + - Fixed dependency on postgresql-client + - Removed dependency on makepasswd (not needed since we use + dbconfig.common) + - Removed dependency on php4-cli (not needed with new cron script) + - Promote Recommends: php4 to Depends: php4 + + * debian/etc/settings.php + - Fix warning if baseurl.php does not exists + + * debian/copyright + - Fixed copyright information as requested by ftp-master + + -- Luigi Gangitano Tue, 5 Dec 2006 15:37:25 +0100 + +drupal (4.7.4-1) unstable; urgency=low + + * Prepare package for new inclusion in Debian + - Thanks to Karl-Heinz Nirschl for keeping this package in his repository + and allowing me to start from his work + - Change (binary) package name to drupal-4.7 allowing for multiple version + to be installed concurrently, so admins can control upgrade between + releases + - Add dependency on dbconfig-common and switch custom config script to use + functions provided by dbconfig-common (Closes: #366692) + - Removed unused templates + - Added dependency on curl for cron script execution + - Take over removal request (Closes: #375496) + - Update to latest revision (Closes: #307821, #365047, #365709) + + -- Luigi Gangitano Thu, 23 Nov 2006 21:53:19 +0100 + +drupal (4.7.4-0brainlog1) unstable; urgency=low + + * new upstream release because patches do not apply cleanly + * fixes: DRUPAL-SA-2006-024, DRUPAL-SA-2006-025, DRUPAL-SA-2006-026 + + -- Karl-Heinz Nirschl Fri, 20 Oct 2006 19:26:16 +0200 + +drupal (4.7.2-0brainlog4) unstable; urgency=low + + * add security fix DRUPAL-SA-2006-011 + XSS Vulnerability in user module + * move scripts dir to doc + + -- Karl-Heinz Nirschl Thu, 3 Aug 2006 19:46:57 +0200 + +drupal (4.7.2-0brainlog3) unstable; urgency=low + + * fix initial database generation - now checks for mysql version + + -- Karl-Heinz Nirschl Sat, 8 Jul 2006 13:13:12 +0200 + +drupal (4.7.2-0brainlog2) unstable; urgency=low + + * Using a fresh tarball and no .svn files. + * Fix x. permissions. + * Use debian mysql maint password for mysql install + + -- Tzafrir Cohen Fri, 7 Jul 2006 15:59:41 +0300 + +drupal (4.7.2-0brainlog1) unstable; urgency=low + + * new upstream release + * add patch handling to package + - make cron job less verbose + + -- Karl-Heinz Nirschl Fri, 16 Jun 2006 17:13:50 +0200 + +drupal (4.7.1-0brainlog1) unstable; urgency=low + + * new upstream version + + -- Karl-Heinz Nirschl Mon, 29 May 2006 14:01:48 +0200 + +drupal (4.6.5-0brainlog1) unstable; urgency=low + + * update to drupal 4.6.5 (new upstream) + + -- Karl-Heinz Nirschl Mon, 29 May 2006 13:58:55 +0200 + +drupal (4.6.3-0brainlog1) unstable; urgency=low + + * New upstream version (Closes: #307821) + * based on the drupal 4.5.2-4 debian package + * remove the auto update database stuff + * added debconf entry for the base_url + + -- Karl-Heinz Nirschl Thu, 29 Sep 2005 19:10:17 +0200 + +drupal (4.5.2-4) unstable; urgency=low + + * [Miguel Figueiredo ] Added Portuguese translation + (Closes: #301394) + * [Valentina Commissari ] Added Italian translation + (Closes: #301946) + * [Gleydson Mazioli da Silva ] Updated Brazilian + Portuguese translation. + * Fixed typo in package description (Closes: #306997) + + -- Hilko Bengen Thu, 19 May 2005 21:23:27 +0200 + +drupal (4.5.2-3) unstable; urgency=high + + * Fixes "Bypass access via comments" problem mentioned in + http://drupal.org/node/19009. Patch from Gerhard Killesreiter, thanks. + I consider this a critical bug, hence urgency=high. + * [Sergio Talens-Oliag ] Updated Spanish and Catalan + Debconf translations and converted them to UTF-8. + + -- Hilko Bengen Tue, 22 Mar 2005 11:14:36 +0100 + +drupal (4.5.2-2) unstable; urgency=low + + * Changed includes/bootstrap.inc: conf.php (or $site.php) is loaded from + /etc/drupal directly, without the need for any link. + * Removed indentations from sed script which is used to edit the + configuration file. + * Rolled back session.inc to version found in 4.5.1; fixes bug documented + in http://drupal.org/node/15666 + * Added documentation about manual update procedure in README.Debian + and Debconf templates (Closes: #293804) + * Added documentation about adding modules and themes that are not + part of the package. + * NEWS.Debian mentions where to get Marvin and UnConeD themes that used + to be part of the Drupal distribution. + + -- Hilko Bengen Tue, 15 Mar 2005 15:16:26 +0100 + +drupal (4.5.2-1) unstable; urgency=low + + * New upstream version (Closes: #290745; That was fast, wasn't it?) + * Updates Japanese Debconf template, thanks to Hideki Yamane + (Closes: #290439) + * The config file /etc/drupal/conf.php is only generated if it hasn't + existed. It is no longer edited. + + -- Hilko Bengen Sun, 16 Jan 2005 14:49:50 +0100 + +drupal (4.5.1-2) unstable; urgency=low + + * /etc/drupal/conf.php is no longer a conffile (Closes: #289624) + * Should install with mysql-client-4.1 now (Closes: #285733) + + -- Hilko Bengen Wed, 12 Jan 2005 02:16:28 +0100 + +drupal (4.5.1-1) unstable; urgency=low + + * New upstream version (Closes: #277547, #289216, #278345) + * Marvin and UnConeD have been split off into separate packages, as they + are not officially supported by upstream any longer. + * Added Japanese Debconf template (Closes: #288040) + + -- Hilko Bengen Sun, 9 Jan 2005 04:21:03 +0100 + +drupal (4.4.2-2) unstable; urgency=low + + * Bump version dependency to 0.0.37 where better support for PostgreSQL + is included (Closes: 263730) + * Another patch to node.module for DB-independennce (Closes: 258015) + + -- Hilko Bengen Wed, 18 Aug 2004 00:39:58 +0200 + +drupal (4.4.2-1) unstable; urgency=low + + * New upstream bugfix release + - PostgreSQL support fixed in node.module + (Closes: #258015, #258016) + * Fixed sed statement in postinst so it will work with woody's sed. + (Closes: #257529) + * Depends: sharutils (Closes: #258156) + * Cron script checks whether /usr/share/drupal/scripts/cron.sh exists + and is executable (Closes: #251853) + + -- Hilko Bengen Tue, 20 Jul 2004 00:03:06 +0200 + +drupal (4.4.1-3) unstable; urgency=low + + * Included Marvin and Unconed themes from contrib (Closes: #255039) + + -- Hilko Bengen Mon, 28 Jun 2004 14:34:40 +0200 + +drupal (4.4.1-2) unstable; urgency=high + + * Applied admin_node.patch from + against the "Invalid argument supplied for foreach() in + /usr/share/drupal/modules/node.module" error (Closes: #242992) + * Fixed removal of links in webserver directories + * Shut up cron.sh (Closes: #251853) + * Install misc/ directory (images and css) (Closes: #253550) + * Fixed PostgreSQL removal, added some docs (Closes: #253282) + + -- Hilko Bengen Thu, 10 Jun 2004 16:06:47 +0200 + +drupal (4.4.1-1) unstable; urgency=low + + * New upstream version (Closes: #246307) + * Added to cron.d (Closes: #242199) + * Create language in database/database.pgsql (Closes: #242572) + * Fixed dependencies (Closes: #242622): + - Depends on php4-cgi (since it's used by maintainer scripts) + - Recommends: php4 | libapache2-mod-php4 (After all, one _can_ run + Drupal with a PHP-CGI setup + * Fixed generation of links in webserver directories (Closes: #249488) + * Out-of-the-box support for multiple sites (Closes: #246009) + * Put themes directory under /usr/share/drupal. Themes are no longer + handled as conffiles. + * Fixed path to database.mysql in README.Debian (Closes: #246414) + + -- Hilko Bengen Tue, 25 May 2004 10:12:34 +0200 + +drupal (4.3.2-3) unstable; urgency=low + + * Rewrote README.Debian, copying substantial parts from the INSTALL file + (Closes: #240505) + * Re-added a (commented-out) directive for restricting access to + admin.php to htaccess file + + -- Hilko Bengen Sun, 28 Mar 2004 17:38:11 +0200 + +drupal (4.3.2-2) unstable; urgency=low + + * [Bart Cornelis ] Added Dutch debconf translation + (Closes: #232230) + * [Sergio Talens-Oliag ] Added Spanish and Catalan + debconf translations (Closes: #235018 + * [Gleydson Mazioli da Silva ] Added Brazilian + Portugese debconf translation (Closes: #185829) + * [Christian Perrier ] Added French debconf translation + (Closes: #200722) + * Added German debconf translation + + -- Hilko Bengen Tue, 16 Mar 2004 00:43:55 +0100 + +drupal (4.3.2-1) unstable; urgency=low + + * New maintainer (Closes: #227771) + * New upstream release (Closes: #204241, #220066) + - Test shows that kuro5hin RSS feed can be imported just fine + (Closes: #184252) + - The encoding bug in ping.module appears to have been fixed + (Closes: #215643) + * Revamped installation and automatic upgrade procedure + - Update sets password in config.php _and_ database (Closes: #193545) + - It's possible to install the package without performing any database + setup at all (Closes: #201202) + * Fixed /etc/drupal/apache.conf (Closes: #219143) + * Basic PostgreSQL support -- user and database are created + (Closes: #186563) + * Should work with apache2 (Closes: #235912) + + -- Hilko Bengen Thu, 11 Mar 2004 17:30:11 +0100 + +drupal (4.1.0-10) unstable; urgency=low + + * Maintainer field set to QA Group + * New Brazilian Portuguese debconf template translation, provided by + Andre Luis Lopes . Closes: #228109 + + -- Emanuele Rocca Sun, 1 Feb 2004 20:35:04 +0100 + +drupal (4.1.0-9.1) unstable; urgency=low + + * NMU + * French debconf templates translation. Closes: #200722 + * Correction to english templates for (I guess) better english and + formulations. Closes: #186566 + * Brazilian portuguese debconf tempaltes translation. Closes: #185829 + + -- Christian Perrier Tue, 16 Sep 2003 08:55:38 +0200 + +drupal (4.1.0-9) unstable; urgency=low + + * Two corrections in postinst to allow manually setting up the DB + on upgrade. + + -- Hugo Espuny Wed, 19 Mar 2003 22:02:50 +0100 + +drupal (4.1.0-8) unstable; urgency=low + + * Added patch from drupal.org (Closes: #185217) + * Minor typo on apache.conf + * Now htaccess is set up dynamically. + * Example of restricted admin.php is now at htaccess + * Debconf now does not repeat questions after preconfiguring. + + -- Hugo Espuny Wed, 19 Mar 2003 20:09:45 +0100 + +drupal (4.1.0-7) unstable; urgency=high + + * Added securing point to README.Debian + * Alias directive on /etc/drupal/apache.conf now is changed + dynamically according with debconf question. + + -- Hugo Espuny Fri, 14 Mar 2003 20:33:29 +0100 + +drupal (4.1.0-6) unstable; urgency=high + + * Corrected postrm problem whe downgrading to certain versions. + + -- Hugo Espuny Fri, 14 Mar 2003 19:38:15 +0100 + +drupal (4.1.0-5) unstable; urgency=low + + * Corrected mv themes order in rules file. + + -- Hugo Espuny Fri, 14 Mar 2003 19:22:12 +0100 + +drupal (4.1.0-4) unstable; urgency=low + + * Corrected themes moving engine. (Closes: #184752) + * Themes are now configfiles (since 4.1.0-2). I forgot to say... + + -- Hugo Espuny Fri, 14 Mar 2003 17:30:45 +0100 + +drupal (4.1.0-3) unstable; urgency=low + + * Updated to policy version 3.5.9 + + -- Hugo Espuny Fri, 14 Mar 2003 00:28:18 +0100 + +drupal (4.1.0-2) unstable; urgency=low + + * Corrected directive "AllowOverride None" to "AllowOverride All" in + /etc/drupal/apache.conf. (Closes: #184183) + * Corrected directive to in + /etc/drupal/apache.conf. + * Corrected cron file, postinst and templates. Now debconf asks for the + whole URL, not only TCP port. (Closes: #184182) (Closes: #184182) + Thanks to John Goerzen to point me those. + * News feed now works properly. (Closes: #184252) (Closes: #184253) + + -- Hugo Espuny Wed, 12 Mar 2003 18:25:35 +0100 + +drupal (4.1.0-1) unstable; urgency=high + + * New upstream version (Closes: #178506) (Closes: #173107) + * Moved to use po-debconf. + * Fixed README.Debian (Closes: #173103) (Closes: #184111) + + -- Hugo Espuny Fri, 7 Mar 2003 21:09:02 +0100 + +drupal (4.0-4) unstable; urgency=low + + * Corrected a bug on cron.d file. + + -- Hugo Espuny Wed, 11 Dec 2002 22:39:16 +0100 + +drupal (4.0-3) unstable; urgency=low + + * Corrected /etc/cron.d/drupal (thanx to Paul van Tilburg + ). (Closes: #172153) + * Corrected link in README.Debian. (Closes: #169949) + * Changed priority to extra. + * postrm now executes an abort install properly. + * Updated policy standars to 3.5.8 + + -- Hugo Espuny Tue, 10 Dec 2002 00:38:36 +0100 + +drupal (4.0-2) unstable; urgency=low + + * Minor typo correction in templates file. + * Minor bug correction about webserver port in postinst. + * Added versioned dependency on wget to support HTTPS + * Moved update.php to /usr/share/doc/drupal/upgrades + + -- Hugo Espuny Wed, 30 Oct 2002 16:54:06 +0100 + +drupal (4.0-1) unstable; urgency=low + + * New debian package. (Closes: #164676) + * Code taken from phpnuke package. + + -- Hugo Espuny Tue, 29 Oct 2002 21:21:26 +0100 + --- drupal6-6.22.orig/debian/README.source +++ drupal6-6.22/debian/README.source @@ -0,0 +1,3 @@ +This package uses dpatch to manage all modifications to the upstream +source. Please refer to /usr/share/doc/dpatch/README.source.gz in package +dpatch for details. --- drupal6-6.22.orig/debian/patches/21-ssl-cache-control.dpatch +++ drupal6-6.22/debian/patches/21-ssl-cache-control.dpatch @@ -0,0 +1,25 @@ +#! /bin/sh /usr/share/dpatch/dpatch-run +## 21-cache-control.dpatch by Luigi Gangitano +## +## All lines beginning with `## DP:' are a description of the patch. +## DP: Fixes download issue with IE7 on HTTPS + +@DPATCH@ +diff -urNad '--exclude=CVS' '--exclude=.svn' '--exclude=.git' '--exclude=.arch' '--exclude=.hg' '--exclude=_darcs' '--exclude=.bzr' drupal6~/includes/file.inc drupal6/includes/file.inc +--- drupal6~/includes/file.inc 2011-02-18 19:59:32.000000000 +0100 ++++ drupal6/includes/file.inc 2011-05-16 00:17:05.000000000 +0200 +@@ -842,6 +842,14 @@ + ob_end_clean(); + } + ++ // IE cannot download private files because it cannot store files downloaded ++ // over https in the browser cache. The problem can be solved by sending ++ // custom headers to IE. See http://support.microsoft.com/kb/323308/en-us ++ if (isset($_SERVER['HTTPS']) && ($_SERVER['HTTPS'] == 'on')) { ++ drupal_set_header('Cache-Control: private'); ++ drupal_set_header('Pragma: private'); ++ } ++ + foreach ($headers as $header) { + // To prevent HTTP header injection, we delete new lines that are + // not followed by a space or a tab. --- drupal6-6.22.orig/debian/patches/10_cronjob.dpatch +++ drupal6-6.22/debian/patches/10_cronjob.dpatch @@ -0,0 +1,19 @@ +#! /bin/sh /usr/share/dpatch/dpatch-run +## 10_cronjob.dpatch by +## +## All lines beginning with `## DP:' are a description of the patch. +## DP: Disable reporting to system log every cron run + +@DPATCH@ +diff -urNad drupal6~/includes/common.inc drupal6/includes/common.inc +--- drupal6~/includes/common.inc 2008-02-18 12:32:44.000000000 +0100 ++++ drupal6/includes/common.inc 2008-02-18 12:37:09.000000000 +0100 +@@ -2540,7 +2540,7 @@ + + // Record cron time + variable_set('cron_last', time()); +- watchdog('cron', 'Cron run completed.', array(), WATCHDOG_NOTICE); ++ #watchdog('cron', 'Cron run completed.', array(), WATCHDOG_NOTICE); + + // Release cron semaphore + variable_del('cron_semaphore'); --- drupal6-6.22.orig/debian/patches/20_drupal_core_updates.dpatch +++ drupal6-6.22/debian/patches/20_drupal_core_updates.dpatch @@ -0,0 +1,79 @@ +#! /bin/sh /usr/share/dpatch/dpatch-run +## drupal_core_updates.dpatch by Alexandre De Dommelin +## +## All lines beginning with `## DP:' are a description of the patch. +## DP: Remove warnings about available Drupal core updates + +@DPATCH@ +diff -urNad drupal6~/modules/update/update.fetch.inc drupal6/modules/update/update.fetch.inc +--- drupal6~/modules/update/update.fetch.inc 2010-02-10 17:39:19.000000000 +0100 ++++ drupal6/modules/update/update.fetch.inc 2010-02-10 22:09:43.000000000 +0100 +@@ -153,12 +153,10 @@ + $status = update_requirements('runtime'); + $params = array(); + $notify_all = (variable_get('update_notification_threshold', 'all') == 'all'); +- foreach (array('core', 'contrib') as $report_type) { +- $type = 'update_'. $report_type; +- if (isset($status[$type]['severity']) +- && ($status[$type]['severity'] == REQUIREMENT_ERROR || ($notify_all && $status[$type]['reason'] == UPDATE_NOT_CURRENT))) { +- $params[$report_type] = $status[$type]['reason']; +- } ++ ++ if (isset($status['update_contrib']['severity']) ++ && ($status['update_contrib']['severity'] == REQUIREMENT_ERROR || ($notify_all && $status['update_contrib']['reason'] == UPDATE_NOT_CURRENT))) { ++ $params['contrib'] = $status['update_contrib']['reason']; + } + if (!empty($params)) { + $notify_list = variable_get('update_notify_emails', ''); +diff -urNad drupal6~/modules/update/update.module drupal6/modules/update/update.module +--- drupal6~/modules/update/update.module 2010-02-10 21:42:41.000000000 +0100 ++++ drupal6/modules/update/update.module 2010-02-10 22:07:29.000000000 +0100 +@@ -74,15 +74,13 @@ + case 'admin/build/modules': + include_once './includes/install.inc'; + $status = update_requirements('runtime'); +- foreach (array('core', 'contrib') as $report_type) { +- $type = 'update_'. $report_type; +- if (isset($status[$type]['severity'])) { +- if ($status[$type]['severity'] == REQUIREMENT_ERROR) { +- drupal_set_message($status[$type]['description'], 'error'); +- } +- elseif ($status[$type]['severity'] == REQUIREMENT_WARNING) { +- drupal_set_message($status[$type]['description'], 'warning'); +- } ++ ++ if (isset($status['update_contrib']['severity'])) { ++ if ($status['update_contrib']['severity'] == REQUIREMENT_ERROR) { ++ drupal_set_message($status['update_contrib']['description'], 'error'); ++ } ++ elseif ($status['update_contrib']['severity'] == REQUIREMENT_WARNING) { ++ drupal_set_message($status['update_contrib']['description'], 'warning'); + } + } + return '

'. t('See the available updates page for information on installed modules and themes with new versions released.', array('@available_updates' => url('admin/reports/updates'))) .'

'; +@@ -203,7 +201,7 @@ + module_load_include('inc', 'update', 'update.compare'); + $data = update_calculate_project_data($available); + // First, populate the requirements for core: +- $requirements['update_core'] = _update_requirement_check($data['drupal'], 'core'); ++ //$requirements['update_core'] = _update_requirement_check($data['drupal'], 'core'); + // We don't want to check drupal a second time. + unset($data['drupal']); + if (!empty($data)) { +diff -urNad drupal6~/modules/update/update.report.inc drupal6/modules/update/update.report.inc +--- drupal6~/modules/update/update.report.inc 2010-02-10 21:42:41.000000000 +0100 ++++ drupal6/modules/update/update.report.inc 2010-02-10 22:07:29.000000000 +0100 +@@ -223,6 +223,13 @@ + 'disabled-theme' => t('Disabled themes'), + ); + foreach ($project_types as $type_name => $type_label) { ++ if ( $type_name == "core" ) { ++ $deb_message = array( array('class' => 'info','data' => array("Drupal core updates (including security patches) are applied by your sysadmin through the Debian package management system, you don't need to manually download them."))); ++ $output .= "\n

". $type_label ."

\n"; ++ $output .= theme('table', $header, $deb_message,array('class' => 'update')); ++ continue; ++ } ++ + if (!empty($rows[$type_name])) { + ksort($rows[$type_name]); + $output .= "\n

". $type_label ."

\n"; --- drupal6-6.22.orig/debian/patches/00list +++ drupal6-6.22/debian/patches/00list @@ -0,0 +1,3 @@ +10_cronjob +20_drupal_core_updates +21-ssl-cache-control --- drupal6-6.22.orig/debian/po/POTFILES.in +++ drupal6-6.22/debian/po/POTFILES.in @@ -0,0 +1 @@ +[type: gettext/rfc822deb] drupal6.templates --- drupal6-6.22.orig/debian/po/templates.pot +++ drupal6-6.22/debian/po/templates.pot @@ -0,0 +1,48 @@ +# SOME DESCRIPTIVE TITLE. +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# FIRST AUTHOR , YEAR. +# +#, fuzzy +msgid "" +msgstr "" +"Project-Id-Version: PACKAGE VERSION\n" +"Report-Msgid-Bugs-To: drupal6@packages.debian.org\n" +"POT-Creation-Date: 2010-08-26 05:36-0700\n" +"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" +"Last-Translator: FULL NAME \n" +"Language-Team: LANGUAGE \n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=CHARSET\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: note +#. Description +#: ../drupal6.templates:1001 +msgid "Post-Install Instructions" +msgstr "" + +#. Type: note +#. Description +#: ../drupal6.templates:1001 +msgid "" +"Once Drupal is finished installing, you will still need to perform a few " +"steps." +msgstr "" + +#. Type: note +#. Description +#: ../drupal6.templates:1001 +msgid "" +" - Restart the webserver (i.e. restart apache2)\n" +" - Run installation script via URL http://host/drupal6/install.php" +msgstr "" + +#. Type: note +#. Description +#: ../drupal6.templates:1001 +msgid "" +"Be sure to read /usr/share/doc/drupal6/README.Debian for detailed " +"instructions." +msgstr "" --- drupal6-6.22.orig/debian/etc/settings.php +++ drupal6-6.22/debian/etc/settings.php @@ -0,0 +1,170 @@ + 'main_', + * 'users' => 'shared_', + * 'sessions' => 'shared_', + * 'role' => 'shared_', + * 'authmap' => 'shared_', + * 'sequences' => 'shared_', + * ); + * + * Database URL format: + * $db_url = 'mysql://username:password@localhost/databasename'; + * $db_url = 'mysqli://username:password@localhost/databasename'; + * $db_url = 'pgsql://username:password@localhost/databasename'; + */ +require_once('dbconfig.php'); +if (!isset($dbserver) || empty($dbserver)) + $dbserver='localhost'; +$db_url = "$dbtype://$dbuser:$dbpass@$dbserver/$dbname"; +$db_prefix = ''; + +/** + * Base URL (optional). + * + * If you are experiencing issues with different site domains, + * uncomment the Base URL statement below (remove the leading hash sign) + * and fill in the URL to your Drupal installation. + * + * You might also want to force users to use a given domain. + * See the .htaccess file for more information. + * + * Examples: + * $base_url = 'http://www.example.com'; + * $base_url = 'http://www.example.com:8888'; + * $base_url = 'http://www.example.com/drupal'; + * $base_url = 'https://www.example.com:8888/drupal'; + * + * It is not allowed to have a trailing slash; Drupal will add it + * for you. + */ +# $base_url = 'http://www.example.com'; // NO trailing slash! +if (file_exists('baseurl.php')) + include_once('baseurl.php'); + +/** + * PHP settings: + * + * To see what PHP settings are possible, including whether they can + * be set at runtime (ie., when ini_set() occurs), read the PHP + * documentation at http://www.php.net/manual/en/ini.php#ini.list + * and take a look at the .htaccess file to see which non-runtime + * settings are used there. Settings defined here should not be + * duplicated there so as to avoid conflict issues. + */ +ini_set('arg_separator.output', '&'); +ini_set('magic_quotes_runtime', 0); +ini_set('magic_quotes_sybase', 0); +ini_set('session.cache_expire', 200000); +ini_set('session.cache_limiter', 'none'); +ini_set('session.cookie_lifetime', 2000000); +ini_set('session.gc_maxlifetime', 200000); +ini_set('session.save_handler', 'user'); +ini_set('session.use_only_cookies', 1); +ini_set('session.use_trans_sid', 0); +ini_set('url_rewriter.tags', ''); + +/** + * Drupal automatically generates a unique session cookie name for each site + * based on on its full domain name. If you have multiple domains pointing at + * the same Drupal site, you can either redirect them all to a single domain + * (see comment in .htaccess), or uncomment the line below and specify their + * shared base domain. Doing so assures that users remain logged in as they + * cross between your various domains. + */ +# $cookie_domain = 'example.com'; + +/** + * Variable overrides: + * + * To override specific entries in the 'variable' table for this site, + * set them here. You usually don't need to use this feature. This is + * useful in a configuration file for a vhost or directory, rather than + * the default settings.php. Any configuration setting from the 'variable' + * table can be given a new value. + * + * Remove the leading hash signs to enable. + */ +# $conf = array( +# 'site_name' => 'My Drupal site', +# 'theme_default' => 'minnelli', +# 'anonymous' => 'Visitor', +# ); + --- drupal6-6.22.orig/debian/etc/apache.conf +++ drupal6-6.22/debian/etc/apache.conf @@ -0,0 +1,8 @@ +Alias /drupal6 /usr/share/drupal6 + + + Options +FollowSymLinks + AllowOverride All + order allow,deny + allow from all +