Change log for tryton-server package in Ubuntu

tryton-server (6.0.34-1) unstable; urgency=high

  * Merging upstream version 6.0.34.
  * Contains fix for https://discuss.tryton.org/t/security-release-for-issue-12428
    Record rules are not enforced by trytond when only reading fields without an
    SQL type (like Function fields).
    (no CVE available)

 -- Mathias Behrle <email address hidden>  Mon, 21 Aug 2023 11:39:41 +0200

Available diffs

• diff from 6.0.33-1 to 6.0.34-1 (3.1 KiB)

tryton-server (6.0.33-1) unstable; urgency=medium

  * Update the Spanish translation (Closes: #1034726).
  * Update french debconf translation (Closes: #1036209).
  * Merging upstream version 6.0.33.
  * Updating copyright file.

 -- Mathias Behrle <email address hidden>  Tue, 27 Jun 2023 14:30:33 +0200

Available diffs

• diff from 6.0.29-2 to 6.0.33-1 (9.6 KiB)

tryton-server (6.0.29-2) unstable; urgency=medium

  * Add missing quotes in maintainer scripts (Closes: #1033055).
  * Make conf file parsing section aware (Closes: #1033055).
  * Correct a variable typo (Closes: #1033055).
  * Remove lsb-base from Depends.

 -- Mathias Behrle <email address hidden>  Fri, 24 Mar 2023 11:02:05 +0100

Available diffs

• diff from 6.0.27-1 to 6.0.29-2 (4.5 KiB)

tryton-server (6.0.27-1) unstable; urgency=medium

  * Add tryton-sao as Recommends/Suggests to respective packages.
  * Run wrap-and-sort -a.
  * Merging upstream version 6.0.27.

 -- Mathias Behrle <email address hidden>  Wed, 08 Feb 2023 13:11:57 +0100

Available diffs

• diff from 6.0.26-1 to 6.0.27-1 (2.3 KiB)

tryton-server (6.0.26-1) unstable; urgency=medium

  * Add the Spanish translation (Closes: #1022899).
  * Update the dutch translation (Closes: #1023459).
  * Update the portuguese translation (Closes: #1028164).
  * Add the translation for Brazilian Portuguese (Closes: #1028213):
  * Update the package URLS to https and the new mono repos location.
  * Bump the Standards-Version to 4.6.2, no changes needed.
  * Merging upstream version 6.0.26.
  * Updating copyright file.

 -- Mathias Behrle <email address hidden>  Tue, 17 Jan 2023 19:06:24 +0100

Available diffs

• diff from 6.0.22-1 to 6.0.26-1 (14.8 KiB)

tryton-server (6.0.22-1) unstable; urgency=medium

  [ Mathias Behrle ]
  * Merge the changes proposed by debian-l10n-english.
  * Add the german template translation (Closes: #1020678).
  * Correct some typos in the templates.
  * Add the galician translation.
  * Run debconf-updatepo.
  * Update the galician translation.
  * Add updated german translation.

  [ Debian Janitor ]
  * Remove constraints unnecessary since buster (oldstable)

  [ Mathias Behrle ]
  * Add the french translation.
  * Add the Portuguese translation.
  * Add the dutch translation.
  * Merging upstream version 6.0.22.

 -- Mathias Behrle <email address hidden>  Tue, 18 Oct 2022 10:26:20 +0200

Available diffs

• diff from 6.0.19-1 to 6.0.22-1 (46.3 KiB)

tryton-server (6.0.19-1) unstable; urgency=medium

  * Merging upstream version 6.0.19.
  * Update patches.

 -- Mathias Behrle <email address hidden>  Wed, 08 Jun 2022 12:35:04 +0200

Available diffs

• diff from 6.0.16-1 to 6.0.19-1 (8.2 KiB)

tryton-server (6.0.16-1) unstable; urgency=high

  * Merging upstream version 6.0.16.
    This release contains fixes for XML parsing vulnerabilities:
    https://discuss.tryton.org/t/security-release-for-issue11219-and-issue11244/5059
    https://bugs.tryton.org/issue11219 (CVE-2022-26661)
    https://bugs.tryton.org/issue11244 (CVE-2022-26662)
  * Updating copyright file.
  * Add python3-defusedxml to (Build-)Depends.
  * Refresh patches.

 -- Mathias Behrle <email address hidden>  Wed, 09 Mar 2022 10:26:15 +0100

Available diffs

• diff from 6.0.12-1 to 6.0.16-1 (6.6 KiB)

tryton-server (6.0.12-1) unstable; urgency=medium

  * Merging upstream version 6.0.12.

 -- Mathias Behrle <email address hidden>  Sat, 18 Dec 2021 11:57:07 +0100

Available diffs

• diff from 6.0.9-3 to 6.0.12-1 (4.6 KiB)

tryton-server (6.0.9-3) unstable; urgency=medium

  * Use debhelper-compat (=13).
  * Provide tryton-server-api.

 -- Mathias Behrle <email address hidden>  Fri, 12 Nov 2021 21:53:27 +0100

Available diffs

• diff from 5.0.33-2 to 6.0.9-3 (800.6 KiB)
• diff from 6.0.9-2 to 6.0.9-3 (1.8 KiB)

tryton-server (6.0.9-2) unstable; urgency=medium

  * Add versioned Breaks for correct dependency handling.

 -- Mathias Behrle <email address hidden>  Tue, 26 Oct 2021 20:04:21 +0200

Available diffs

• diff from 6.0.9-1 to 6.0.9-2 (1.2 KiB)

tryton-server (6.0.9-1) unstable; urgency=medium

  * Update year of debian copyright.
  * Bump the Standards-Version to 4.6.0, no changes needed.
  * Set the watch file version to 4.
  * Setting the branch in the watch file to the fixed version 6.0.
  * Merging upstream version 6.0.9.
  * Updating copyright file.
  * Add the SIL OPEN FONT LICENSE for the included font(s).
  * Add new optional dependencies as Recommends.
  * Update the debian patch set for 6.0.
  * Remove obsolete Breaks from d/control.
  * Update the man pages for 6.0.
  * Link the new binaries andman pages to their tryton-server correlates.
  * Update trytond.conf for 6.0.
  * Update the README for 6.0.
  * Add news for 6.0.
  * Build documentation without sphinx configuration, removed upstream.
  * Add python3-pil to Build-Depends, it is needed for testing.

 -- Mathias Behrle <email address hidden>  Mon, 18 Oct 2021 12:04:35 +0200

Available diffs

• diff from 5.0.39-1 to 6.0.9-1 (798.4 KiB)

tryton-server (5.0.39-1) unstable; urgency=medium

  * Add 04_werkzeug20_compatibility.patch (Closes: #995438).
  * Merging upstream version 5.0.39.

 -- Mathias Behrle <email address hidden>  Mon, 04 Oct 2021 15:39:55 +0200

tryton-server (5.0.33-2) unstable; urgency=medium

  * Refresh 03_werkzeug10_compatibility.patch.

 -- Mathias Behrle <email address hidden>  Wed, 17 Feb 2021 17:46:28 +0100

Available diffs

• diff from 5.0.30-1 to 5.0.33-2 (3.4 KiB)

tryton-server (5.0.30-1) unstable; urgency=medium

  * Merging upstream version 5.0.30.
  * Refresh 03_werkzeug10_compatibility.patch.

 -- Mathias Behrle <email address hidden>  Thu, 17 Dec 2020 13:13:21 +0100

Available diffs

• diff from 5.0.26-1 to 5.0.30-1 (5.2 KiB)

tryton-server (5.0.26-1) unstable; urgency=medium

  * Merging upstream version 5.0.26.

 -- Mathias Behrle <email address hidden>  Sat, 26 Sep 2020 10:13:15 +0200

Available diffs

• diff from 5.0.23-2 to 5.0.26-1 (2.4 KiB)

tryton-server (5.0.23-2) unstable; urgency=medium

  * Remove systemd from dh arguments, it is deprecated for this debhelper
    compat.
  * Correct a typo in a patch description.
  * Remove the version constraint for werkzeug (Closes: #966984).

 -- Mathias Behrle <email address hidden>  Mon, 10 Aug 2020 11:12:53 +0200

Available diffs

• diff from 5.0.23-1 to 5.0.23-2 (1.2 KiB)

tryton-server (5.0.23-1) unstable; urgency=medium

  * Remove tryton-server.lintian-overrides.
  * Add the according links for the binaries for compliance with the used
    namespace.
  * Update year of debian copyright.
  * Bump the Standards-Version to 4.5.0, no changes needed.
  * Add Rules-Requires-Root: no to d/control.
  * Merging upstream version 5.0.23.
  * Updating copyright file.

 -- Mathias Behrle <email address hidden>  Sat, 04 Jul 2020 13:01:14 +0200

Available diffs

• diff from 5.0.20-1 to 5.0.23-1 (3.7 KiB)

tryton-server (5.0.20-1) unstable; urgency=medium

  * Merging upstream version 5.0.20.

 -- Mathias Behrle <email address hidden>  Sun, 05 Apr 2020 13:34:55 +0200

Available diffs

• diff from 5.0.16-1 to 5.0.20-1 (5.9 KiB)

tryton-server (5.0.16-1) unstable; urgency=medium

  * Merging upstream version 5.0.16.

 -- Mathias Behrle <email address hidden>  Tue, 03 Dec 2019 10:01:44 +0100

Available diffs

• diff from 5.0.14-2 to 5.0.16-1 (2.8 KiB)

tryton-server (5.0.14-2) unstable; urgency=medium

  * Refresh patch 02_avoid_call_to_pypi.patch.

 -- Mathias Behrle <email address hidden>  Tue, 22 Oct 2019 13:08:52 +0200

Available diffs

• diff from 5.0.10-1 to 5.0.14-2 (3.9 KiB)

tryton-server (5.0.10-1) unstable; urgency=medium

  * Merging upstream version 5.0.10.

 -- Mathias Behrle <email address hidden>  Tue, 23 Jul 2019 18:43:54 +0200

Available diffs

• diff from 5.0.6-2 to 5.0.10-1 (4.4 KiB)

tryton-server (5.0.6-2) unstable; urgency=medium

  * Bump the Standards-Version to 4.4.0, no changes needed.
  * Update year of debian copyright.
  * Setting the branch in the watch file to the fixed version 5.0.

 -- Mathias Behrle <email address hidden>  Mon, 22 Jul 2019 12:17:42 +0200

Available diffs

• diff from 5.0.4-2 to 5.0.6-2 (19.3 KiB)

tryton-server (5.0.4-2) unstable; urgency=high

  * Add 03_sec_issue8189_check_read_access_on_search_order.patch
    for CVE-2019-10868.
    This patch fixes security issue http://bugs.tryton.org/issue8189:
     Check read access on field in search_order.
     An authenticated user can order records based on a field for which
     he has no access right. This may allow the user to guess values.
     See also https://discuss.tryton.org/t/security-release-for-issue8189/

 -- Mathias Behrle <email address hidden>  Wed, 03 Apr 2019 17:29:15 +0200

Available diffs

• diff from 5.0.4-1 to 5.0.4-2 (1.3 KiB)

tryton-server (5.0.4-1) unstable; urgency=medium

  * Add more configuration parameters to trytond.conf.
  * Merging upstream version 5.0.4.

 -- Mathias Behrle <email address hidden>  Wed, 23 Jan 2019 16:06:18 +0100

Available diffs

• diff from 5.0.3-1 to 5.0.4-1 (2.1 KiB)

tryton-server (5.0.3-1) unstable; urgency=medium

  * Use generic Depends in tests/control.
  * Bump the Standards-Version to 4.3.0, no changes needed.
  * Merging upstream version 5.0.3.
  * Updating copyright file.

 -- Mathias Behrle <email address hidden>  Sun, 06 Jan 2019 13:01:38 +0100

Available diffs

• diff from 5.0.2-2 to 5.0.3-1 (2.9 KiB)

tryton-server (5.0.2-2) unstable; urgency=medium

  * Run the package testsuite as autopkgtest.

 -- Mathias Behrle <email address hidden>  Sun, 30 Dec 2018 17:03:55 +0100

Available diffs

• diff from 5.0.2-1 to 5.0.2-2 (537 bytes)

tryton-server (5.0.2-1) unstable; urgency=medium

  * Merging upstream version 5.0.2.

 -- Mathias Behrle <email address hidden>  Mon, 03 Dec 2018 13:45:23 +0100

Available diffs

• diff from 5.0.1-1 to 5.0.2-1 (1.4 KiB)

tryton-server (5.0.1-1) unstable; urgency=medium

  * Merging upstream version 5.0.0.
  * Merging upstream version 5.0.1.
    Contains a fix for security issue
    https://bugs.tryton.org/issue7766
    https://discuss.tryton.org/t/security-release-for-issue7766
    No CVE available so far.
  * Add Build-Depends and Depends python3-passlib.
  * Move python3-bcrypt from Recommends to (Build-)Depends.
  * Replace no more needed unoconv by the needed libreoffice dependencies.
  * Add optional python3-html2text to Recommends.
  * Refresh patches.
  * Updating to Standards-Version: 4.2.1, no changes needed.
  * Update signing-key.asc with the minimized actual upstream maintainer
    key.
  * Update the man pages for series 5.0.
  * Add a man page for trytond-worker.
  * Add init scripts for trytond-worker.
  * Remove lintian override for application-in-library-section, the false
    positive was fixed in lintian.
  * Add tryton-server-worker to lintian overrides for omitted-systemd-
    service-for-init.d-script.
  * Update trytond.conf for series 5.0.
  * Add hints for the start of Tryton cron and workers.
  * Add NEWS for new major 5.0.1.

 -- Mathias Behrle <email address hidden>  Mon, 19 Nov 2018 21:21:40 +0100

Available diffs

• diff from 4.6.8-1 to 5.0.1-1 (363.8 KiB)

tryton-server (4.6.8-1) unstable; urgency=medium

  * Merging upstream version 4.6.8.

 -- Mathias Behrle <email address hidden>  Fri, 28 Sep 2018 12:32:56 +0200

Available diffs

• diff from 4.6.7-1 to 4.6.8-1 (1.0 KiB)

tryton-server (4.6.7-1) unstable; urgency=medium

  * Merging upstream version 4.6.7.

 -- Mathias Behrle <email address hidden>  Tue, 07 Aug 2018 19:33:15 +0200

Available diffs

• diff from 4.6.5-1 to 4.6.7-1 (4.5 KiB)

tryton-server (4.6.5-1) unstable; urgency=medium

  * Merging upstream version 4.6.5.

 -- Mathias Behrle <email address hidden>  Thu, 14 Jun 2018 14:41:57 +0200

Available diffs

• diff from 4.6.4-1 to 4.6.5-1 (1.3 KiB)

tryton-server (4.6.4-1) unstable; urgency=medium

  * Setting the branch in the watch file to the fixed version 4.6.
  * Merging upstream version 4.6.4.

 -- Mathias Behrle <email address hidden>  Sat, 12 May 2018 18:56:44 +0200

Available diffs

• diff from 4.6.3-2 to 4.6.4-1 (2.0 KiB)

tryton-server (4.6.3-2) unstable; urgency=medium

  * Call dh_installinit with correct parameters for compat level >=10
    (Closes: #895497).
  * Add tryton-server.lintian-overrides.

 -- Mathias Behrle <email address hidden>  Fri, 13 Apr 2018 13:01:38 +0200

Available diffs

• diff from 4.6.2-1 to 4.6.3-2 (6.7 KiB)

tryton-server (4.6.2-1) unstable; urgency=medium

  * Merging upstream version 4.6.2.

 -- Mathias Behrle <email address hidden>  Sat, 06 Jan 2018 11:49:44 +0100

Available diffs

• diff from 4.6.1-1 to 4.6.2-1 (3.7 KiB)

tryton-server (4.6.1-1) unstable; urgency=medium

  * Merging upstream version 4.6.1.

 -- Mathias Behrle <email address hidden>  Tue, 12 Dec 2017 19:15:11 +0100

Available diffs

• diff from 4.6.0-1 to 4.6.1-1 (3.1 KiB)

tryton-server (4.6.0-1) unstable; urgency=medium

  * Bump the Standards-Version to 4.1.1, no changes needed.
  * Merging upstream version 4.6.0.
  * Refresh patches.
  * Updating debian/manpages.
  * Prepare the NEWS for 4.6.0.
  * Remove superseded BD on dh_systemd.
  * Add 02_avoid_call_to_pypi.patch.
  * Add versioned dependency for relatorio to be safe with respect to BD
    python-magic.
  * Correcting a typo in a man page.
  * Use https in the watch file.

 -- Mathias Behrle <email address hidden>  Tue, 07 Nov 2017 10:20:49 +0100

Available diffs

• diff from 4.4.3-3 to 4.6.0-1 (60.7 KiB)
• diff from 4.4.4-1 to 4.6.0-1 (60.5 KiB)

tryton-server (4.4.4-1) unstable; urgency=medium

  * Bump the Standards-Version to 4.1.0, no changes needed.
  * Merging upstream version 4.4.4.

 -- Mathias Behrle <email address hidden>  Thu, 05 Oct 2017 11:16:16 +0200

tryton-server (4.4.3-3) unstable; urgency=medium

  * Switch to Python3.
  * Remove some duplicate sections from trytond.conf.
  * Set the standard log level to ERROR.

 -- Mathias Behrle <email address hidden>  Sun, 20 Aug 2017 17:59:49 +0200

Available diffs

• diff from 4.4.3-2 to 4.4.3-3 (1.7 KiB)

tryton-server (4.4.3-2) unstable; urgency=medium

  * Use the preferred https URL format in the copyright file.
  * Bump the Standards-Version to 4.0.1.

 -- Mathias Behrle <email address hidden>  Thu, 17 Aug 2017 16:03:14 +0200

Available diffs

• diff from 4.4.3-1 to 4.4.3-2 (603 bytes)

tryton-server (4.4.3-1) unstable; urgency=medium

  * Adapt trytond_log.conf to use correct configparser format.
  * Merging upstream version 4.4.3.

 -- Mathias Behrle <email address hidden>  Thu, 17 Aug 2017 12:48:41 +0200

Available diffs

• diff from 4.4.2-1 to 4.4.3-1 (2.3 KiB)

tryton-server (4.4.2-1) unstable; urgency=medium

  * Change the maintainer address to <email address hidden>
    (Closes: #865109).
  * Merging upstream version 4.4.2.

 -- Mathias Behrle <email address hidden>  Sun, 02 Jul 2017 16:49:52 +0200

Available diffs

• diff from 4.4.1-2 to 4.4.2-1 (2.3 KiB)

tryton-server (4.4.1-2) unstable; urgency=medium

  * Adapt the date in the NEWS file to the final changelog entry.

 -- Mathias Behrle <email address hidden>  Mon, 12 Jun 2017 13:13:18 +0200

Available diffs

• diff from 4.2.1-2 to 4.4.1-2 (107.5 KiB)

tryton-server (4.2.1-2) unstable; urgency=high

  * Add 02_CVE-2017-0360_sanitize_file_open.patch (CVE-2017-0360).
    Sanitize path in file_open against suffix.
    The patch for CVE-2016-1242 did not cover all cases. Indeed there is a
    case where an external file could be retrieved if it is stored in a folder
    next to the root of trytond starting with the same name but with a suffix.
    Example: '../trytond_suffix'.

 -- Mathias Behrle <email address hidden>  Tue, 28 Mar 2017 11:51:14 +0200

Available diffs

• diff from 4.2.1-1 to 4.2.1-2 (1.1 KiB)

tryton-server (4.2.1-1) unstable; urgency=medium

  * Merging upstream version 4.2.1.

 -- Mathias Behrle <email address hidden>  Wed, 04 Jan 2017 12:31:07 +0100

Available diffs

• diff from 4.2.0-2 to 4.2.1-1 (1.5 KiB)

tryton-server (4.2.0-2) unstable; urgency=medium

  * Use sudo instead of the root prefix for better understanding
    throughout the whole document.
  * Improve the command lines in NEWS for better understanding (Closes:
    #847436).
  * Add configuration parameters for module authentication_sms.
  * Include the language code update into the upgrade procedures for 4.2.
  * Extend the README.Debian to contain also hints for language activation
    and manual migration procedures.
  * Add also the manual upgrade procedures for 3.6 and 4.0 to the NEWS
    file.

 -- Mathias Behrle <email address hidden>  Mon, 19 Dec 2016 10:13:50 +0100

Available diffs

• diff from 4.2.0-1 to 4.2.0-2 (3.5 KiB)

tryton-server (4.2.0-1) unstable; urgency=medium

  * Merging upstream version 4.2.0.
  * Updating the Recommends for 4.2.
  * Updating 01_migrate_obsolete_modules.patch for 4.2.
  * Updating the man pages for 4.2.
  * Update README.Debian for 4.2.
  * Updating trytond.conf for 4.2.
  * Adding the NEWS for the new major 4.2.

 -- Mathias Behrle <email address hidden>  Mon, 05 Dec 2016 15:31:44 +0100

Available diffs

• diff from 4.0.5-1 to 4.2.0-1 (491.6 KiB)

tryton-server (4.0.5-1) unstable; urgency=medium

  * Setting the log level to WARNING, log level INFO logs meanwhile to
    many details.
  * Add missing lsb-base to Depends (Closes: #840751).
  * Merging upstream version 4.0.5.

 -- Mathias Behrle <email address hidden>  Tue, 08 Nov 2016 09:17:06 +0100

Available diffs

• diff from 4.0.4-1 to 4.0.5-1 (1.4 KiB)

tryton-server (4.0.4-1) unstable; urgency=high

  * Merging upstream version 4.0.4.
  * CVE-2016-1241 Prevent read of password hash.
  * CVE-2016-1242 Sanitize path in file_open.

 -- Mathias Behrle <email address hidden>  Tue, 30 Aug 2016 14:58:56 +0200

Available diffs

• diff from 4.0.3-1 to 4.0.4-1 (3.6 KiB)

tryton-server (4.0.3-1) unstable; urgency=medium

  * Merging upstream version 4.0.3.

 -- Mathias Behrle <email address hidden>  Fri, 05 Aug 2016 11:16:37 +0200

Available diffs

• diff from 4.0.2-2 to 4.0.3-1 (1.6 KiB)