sympa (6.2.60~dfsg-3) unstable; urgency=high

  For existing installations the "cookie" parameter is now set in the configuration literally
  instead of reading it from the file /etc/sympa/cookie. You can safely remove the file when
  the installation completed successfully.

  This was necessary as backticks in the configuration file are causing an error now
  in order to fix a potential security hole. Please see bug #980451 for more information.

 -- Stefan Hornburg (Racke) <racke@linuxia.de>  Sun, 31 Jan 2021 19:55:10 +0100

sympa (6.2.60~dfsg-1) unstable; urgency=medium

  Personalization (also known as "merge feature") is now subject to the
  following restrictions:

  - Allowed only for messages posted from the web interface
  - Applied only to the header and the footer of the message

  The restrictions can be configured with the new personalization list
  parameter. Listmasters are advised to review the current usage of
  template variables and adjust the configuration accordingly.

 --  Stefan Hornburg (Racke) <racke@linuxia.de>  Tue, 05 Jan 2021 12:15:29 +0100

sympa (6.2.58~dfsg-6) unstable; urgency=medium

  The setuid FCGI wrappers have been removed. There are no longer
  needed with recent webservers and they carry a potential security risk.

  For the recommended webserver configuration please check the official
  documentation at https://sympa-community.github.io/manual/install/configure-http-server.html.

 -- Stefan Hornburg (Racke) <racke@linuxia.de>  Wed, 30 Dec 2020 19:32:05 +0100

sympa (6.2.32~dfsg-1) unstable; urgency=medium

  - Starting from Sympa 6.2.28:
    - access_web_archive.* scenarios are renamed to archive_web_access.*
      If you have customized any of these scenarios, you have to rename
      them under the config directory.
    - it is possible to hash passwords using bcrypt, see the documentation
      for more information:
      https://sympa-community.github.io/manual/customize/builtin-auth.html
      (section "Upgrading password storage on earlier version")
    - to be more FHS compliant, autogenerated CSS and subscriber pictures
      are configurable and located (respectively) in /var/lib/sympa/css and
      /var/lib/sympa/pictures instead of /var/lib/sympa/static_content/css
      and /var/lib/sympa/static_content/pictures
      Therefore new web paths /css-sympa and /pictures-sympa (like
      /static-sympa) might needs to be added to your webserver configuration
      if you use a custom setup.

 -- Emmanuel Bouthenot <kolter@debian.org>  Wed, 25 Apr 2018 18:03:00 +0200

sympa (6.2.16~dfsg-2) unstable; urgency=medium

  Sympa 6.2 is a new major release which comes with the following changes:

   - /etc/sympa/sympa.conf and /etc/sympa/wwsympa.conf will be automatically
     merged in /etc/sympa/sympa/sympa.conf (the location is an upstream
     choice to fix a possible bug with the binary version of the config file)
   - The upgrade process will produce backup of configuration files
   - Custom actions must now be located in a dedicated /etc/sympa/custom_actions/
     directory
   - Formalism for storing messages sent from the web interface has changed
   - Bulk spools are back to filesystem
   - sympa daemon was renamed to sympa_msg
   - New web interface (it brings additional dependencies on javascript
     libraries and other web related tools)

 -- Emmanuel Bouthenot <kolter@debian.org>  Wed, 05 Oct 2016 09:31:28 +0200

sympa (5.4.7-1) unstable; urgency=low

  'parser.pl' dropped upstream
  ----------------------------
  If you use a custom version of the task model sync_include.ttl.task,
  please replace any occurrence of [list->ttl] by [list.ttl].

 -- Jonas Smedegaard <dr@jones.dk>  Mon, 23 Feb 2009 15:14:58 +0100

sympa (5.4.6-2) unstable; urgency=low

  icons no longer handled separately
  ----------------------------------
  Upstream now (since 5.4a.4) install icons as part of static_content.
  Web server "wwsicons" aliases no longer work and should be dropped.

 -- Jonas Smedegaard <dr@jones.dk>  Mon, 23 Feb 2009 15:14:58 +0100

sympa (5.4.6-1) unstable; urgency=low

  Improved database handling
  --------------------------
  Databases setup and maintenance is now done using dbconfig-common,
  with configuration stored in /etc/dbconfig-common/sympa.conf.
  Upgrading from earlier packaging releases should happen automatically.

 -- Jonas Smedegaard <dr@jones.dk>  Mon, 23 Feb 2009 10:34:38 +0100
