--- smarty-2.6.26.orig/debian/changelog +++ smarty-2.6.26/debian/changelog @@ -0,0 +1,220 @@ +smarty (2.6.26-0.2) unstable; urgency=low + + * QA upload: + * Orphan package, it is security-sensitive and currently unmaintained, + so it should find new maintainers or at least be transparently + unmaintained (Closes: #590030) + Also Closes: #576559 + + -- Moritz Muehlenhoff Thu, 05 Aug 2010 11:16:13 -0400 + +smarty (2.6.26-0.1) unstable; urgency=low + + * Non-maintainer upload. + * New upstream release to address open security issues. + (CVE-2008-4810, CVE-2008-4811, CVE-2009-1669, + closes: #529810, #504328) + * Remove installation of smarty_icon.README and unit_test, + dropped upstream. + + -- Thijs Kinkhorst Sat, 24 Oct 2009 12:40:12 +0200 + +smarty (2.6.22-1) unstable; urgency=low + + * New upstream release + * debian/control: + + Update debhelper to >= 6 + * debian/compat: + + Update debhelper compat level to 6. + * Acknowledged NMU. (Closes: #507316) + + -- Thierry Randrianiriana Tue, 23 Dec 2008 17:24:39 +0300 + +smarty (2.6.20-1.1) unstable; urgency=low + + * Non-maintainer upload. + * Remove non-free smarty logo included in package (Closes: #507316) + + -- Neil Williams Sun, 14 Dec 2008 09:52:16 +0000 + +smarty (2.6.20-1) unstable; urgency=low + + * New upstream release + * Updated debian/README.Debian to match the php5 path + * debian/control: + + updated homepage + + bumped Standards-Version to 3.8.0 + + -- Thierry Randrianiriana Sat, 11 Oct 2008 22:27:46 +0300 + +smarty (2.6.19-1) unstable; urgency=low + + * New upstream release + * Acknowledged NMU. (Closes: #469492) + * debian/control: + + bumped Standards-Version to 3.7.3 + + installed php5 first in Depends + + used the Homepage field + * Added a lintian override for the empty directory in demo + + -- Thierry Randrianiriana Tue, 18 Mar 2008 23:54:50 +0300 + +smarty (2.6.18-1.1) unstable; urgency=high + + * Non-maintainer upload by the Security Team. + * A null character in a search string + allows an attacker to call arbitrary php functions via + templates. Add patch to return the string after the null + in a string (CVE-2008-1066; Closes: #469492). + + -- Nico Golde Sat, 15 Mar 2008 15:10:58 +0100 + +smarty (2.6.18-1) unstable; urgency=low + + * New upstream release + * Added debian/docs + * debian/control: + + added Homepage + + removed Depends on debconf (Closes: #375234) + + bumped Standards-Version to 3.7.2 + + added myself to Uploaders + * debian/copyright: + + changed license to LGPL + + added authors + + -- Thierry Randrianiriana Tue, 13 Mar 2007 21:20:41 +0300 + +smarty (2.6.14-1) unstable; urgency=low + + * New upstream release + * Closes: #369675 - smarty 2.6.14 released + * Closes: #372263 - fixed upstream + + -- Dimitri Fontaine Fri, 9 Jun 2006 11:10:59 +0200 + +smarty (2.6.11-1) unstable; urgency=low + + * New upstream release + * Added myself to Uploaders + * Ack previous NMU (Closes: #332098) + + -- Igor Genibel Thu, 12 Jan 2006 11:21:13 +0100 + +smarty (2.6.10-0.2) unstable; urgency=low + + * Non-maintainer upload (with maintainer permission: 0-day NMU). + * Change Maintainer address + + -- Igor Genibel Wed, 2 Nov 2005 19:08:30 +0100 + +smarty (2.6.10-0.1) unstable; urgency=low + + * Non-maintainer upload (with maintainer permission: 0-day NMU) + * New upstream version + * depends on debconf | debconf-2.0 for cdebconf transition + (Closes: #332098) + * Bump standards to 3.6.2.1 (no changes) + * Put the new FSF address + + -- Igor Genibel Wed, 2 Nov 2005 19:04:39 +0100 + +smarty (2.6.9-1) unstable; urgency=high + + * New upstream release + * disallow variable function calls in {if} statements + * disallow variable function calls in {math} equations + + -- Dimitri Fontaine Mon, 11 Apr 2005 17:09:35 +0200 + +smarty (2.6.8-1) unstable; urgency=low + + * New upstream release + + -- Dimitri Fontaine Tue, 29 Mar 2005 11:53:20 +0200 + +smarty (2.6.7-1) unstable; urgency=low + + * New upstream release + + -- Dimitri Fontaine Fri, 11 Feb 2005 15:16:46 +0100 + +smarty (2.6.6-1) unstable; urgency=low + + * New upstream release + * package now contains the unit_test subdir + + -- Dimitri Fontaine Tue, 26 Oct 2004 11:16:08 +0200 + +smarty (2.6.5-3) unstable; urgency=low + + * Added dependancies for forthcomming PHP5 (Closes: #272762) + + -- Dimitri Fontaine Tue, 26 Oct 2004 10:59:17 +0200 + +smarty (2.6.5-2) unstable; urgency=low + + * Smarty depends on php, not on apache (Closes #272762) + * No more www-commons dependency, the package won't restart anything + + -- Dimitri Fontaine Wed, 22 Sep 2004 17:54:45 +0200 + +smarty (2.6.5-1) unstable; urgency=low + + * New upstream release (Closes: #272193) + + -- Dimitri Fontaine Mon, 20 Sep 2004 11:29:51 +0200 + +smarty (2.6.3-1) unstable; urgency=low + + * New upstream release (Closes: #257157) + * No more debconf abuse (Closes: #252787) + * Now you can choose apache2 as your server (Closes: #257156) + * Added the ja.po translation file (Closes: #253288) + + -- Dimitri Fontaine Fri, 2 Jul 2004 10:25:14 +0200 + +smarty (2.6.2-3) unstable; urgency=low + + * Added fr.po file (Closes: #246197) + + -- Dimitri Fontaine Wed, 28 Apr 2004 18:47:50 +0200 + +smarty (2.6.2-2) unstable; urgency=low + + * Adapted dependencies to allow running smarty with apache 2 (Closes: #241147) + * Prepared the template for i18n (Closes: #233098) + + -- Dimitri Fontaine Fri, 16 Apr 2004 17:41:20 +0200 + +smarty (2.6.2-1) unstable; urgency=low + + * New upstream release + + -- Dimitri Fontaine Wed, 10 Mar 2004 10:54:29 +0100 + +smarty (2.6.1-1) unstable; urgency=low + + * New upstream release + + -- Dimitri Fontaine Fri, 13 Feb 2004 10:43:35 +0100 + +smarty (2.6.0-2) unstable; urgency=low + + * Don't forget the new libs/core directory + + -- Dimitri Fontaine Wed, 7 Jan 2004 17:40:07 +0100 + +smarty (2.6.0-1) unstable; urgency=low + + * New upstream release + * debconf screen to warn for cache file (Closes: #222234) + * Add support for apache-perl (Closes: #222451) + + -- Dimitri Fontaine Mon, 15 Dec 2003 14:04:50 +0100 + +smarty (2.5.0-1) unstable; urgency=low + + * Initial Release. + * Closes: #207495 (ITP) + + -- Dimitri Fontaine Wed, 27 Aug 2003 14:13:02 +0200 --- smarty-2.6.26.orig/debian/Makefile +++ smarty-2.6.26/debian/Makefile @@ -0,0 +1,25 @@ +# Edited for Debian GNU/Linux. +DESTDIR = + +TARGETDIR = $(DESTDIR)/usr/share/php/smarty +DOCPATH = $(DESTDIR)/usr/share/doc/smarty + +LIBS = $(wildcard libs/*php) $(wildcard libs/*tpl) +INTERNALS = $(wildcard libs/internals/*php) +PLUGINS = $(wildcard libs/plugins/*php) +TOPFILES = BUGS ChangeLog FAQ NEWS README RELEASE_NOTES TODO QUICK_START + +install: + install -d -o www-data -m 755 $(TARGETDIR)/libs + install -d -o www-data -m 755 $(TARGETDIR)/libs/internals + install -d -o www-data -m 755 $(TARGETDIR)/libs/plugins + + install -o www-data -m 644 $(LIBS) $(TARGETDIR)/libs + install -o www-data -m 644 $(INTERNALS) $(TARGETDIR)/libs/internals + install -o www-data -m 644 $(PLUGINS) $(TARGETDIR)/libs/plugins + + install -m 644 debian/lintian-override $(DESTDIR)/usr/share/lintian/overrides/smarty + + install -d $(DOCPATH) + install -o www-data -m 644 $(TOPFILES) $(DOCPATH) + cp -r demo $(DOCPATH) --- smarty-2.6.26.orig/debian/compat +++ smarty-2.6.26/debian/compat @@ -0,0 +1 @@ +6 --- smarty-2.6.26.orig/debian/control +++ smarty-2.6.26/debian/control @@ -0,0 +1,35 @@ +Source: smarty +Section: web +Priority: optional +Maintainer: Debian QA Group +Standards-Version: 3.8.0 +Build-Depends: debhelper (>= 6) +Homepage: http://www.smarty.net/ + +Package: smarty +Architecture: all +Depends: php5 | php5-cgi | php5-cli | php4 | php4-cli | php4-cgi +Description: Template engine for PHP + Smarty is a template engine for PHP. More specifically, it + facilitates a manageable way to separate application logic and content + from its presentation. + . + This is best described in a situation where the + application programmer and the template designer play different roles, + or in most cases are not the same person. For example, let's say you + are creating a web page that is displaying a newspaper article. The + article headline, tagline, author and body are content elements, they + contain no information about how they will be presented. They are + passed into Smarty by the application, then the template designer + edits the templates and uses a combination of HTML tags and template + tags to format the presentation of these elements (HTML tables, + background colors, font sizes, style sheets, etc.) One day the + programmer needs to change the way the article content is retrieved (a + change in application logic.) This change does not affect the template + designer, the content will still arrive in the template exactly the + same. Likewise, if the template designer wants to completely redesign + the templates, this requires no changes to the application + logic. Therefore, the programmer can make changes to the application + logic without the need to restructure templates, and the template + designer can make changes to templates without breaking application + logic. --- smarty-2.6.26.orig/debian/dirs +++ smarty-2.6.26/debian/dirs @@ -0,0 +1,3 @@ +usr/share/php/smarty +usr/share/doc/smarty +usr/share/lintian/overrides --- smarty-2.6.26.orig/debian/rules +++ smarty-2.6.26/debian/rules @@ -0,0 +1,40 @@ +#!/usr/bin/make -f + +#export DH_VERBOSE=1 + +clean: + dh_testdir + dh_testroot + rm -f Makefile + dh_clean + +build: + +install: + dh_testdir + dh_testroot + dh_clean -k + dh_installdirs + + # Add here commands to install the package into debian/smarty. + cp debian/Makefile . + $(MAKE) install DESTDIR=$(CURDIR)/debian/smarty + +binary-indep: install + dh_testdir + dh_testroot + dh_installchangelogs ChangeLog + dh_installdocs + dh_install + dh_installexamples + dh_compress + dh_fixperms + dh_installdeb + dh_gencontrol + dh_md5sums + dh_builddeb + +binary-arch: install + +binary: binary-indep binary-arch +.PHONY: clean binary-indep binary-arch binary install --- smarty-2.6.26.orig/debian/copyright +++ smarty-2.6.26/debian/copyright @@ -0,0 +1,30 @@ +This package was debianized by Dimitri Fontaine on +Wed, 27 Aug 2003 14:13:02 +0200. + +It was downloaded from http://smarty.php.net/download.php + +Upstream authors: + Monte Ohrt + Andrei Zmievski + +Copyright (c) 2001-2005 New Digital Group, Inc. All rights reserved. + +License: + + This library is free software; you can redistribute it and/or + modify it under the terms of the GNU Lesser General Public + License as published by the Free Software Foundation; either + version 2 of the License, or (at your option) any later version. + + This library is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + Lesser General Public License for more details. + + You should have received a copy of the GNU Lesser General Public + License along with this library; if not, write to the + Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, + MA 02110-1301, USA. + +On Debian systems, the complete text of the GNU Lesser General Public +License, can be found in /usr/share/common-licenses/LGPL. --- smarty-2.6.26.orig/debian/lintian-override +++ smarty-2.6.26/debian/lintian-override @@ -0,0 +1 @@ +smarty: package-contains-empty-directory usr/share/doc/smarty/demo/templates_c/ --- smarty-2.6.26.orig/debian/README.Debian +++ smarty-2.6.26/debian/README.Debian @@ -0,0 +1,14 @@ +Installation + +In order to use Smarty from your php scripts, you'll have to add +/usr/share/php/smarty/libs on the include_path of php5, that is in the +file /etc/php5/{apache,apache2}/php.ini or use +require("smarty/libs/Smarty.class.php"); + + +Update + +On smarty update, please note you will have to clear out all smarty +generated files, by default in a templates_c directory. + + -- Dimitri Fontaine , Fri Jul 2 10:24:31 2004 --- smarty-2.6.26.orig/debian/NEWS +++ smarty-2.6.26/debian/NEWS @@ -0,0 +1,14 @@ +smarty (2.6.20-1.1) unstable; urgency=low + + The smarty logo is trademarked and has been removed. Before + including the smarty logo in your own website(s), ensure you + read http://www.smarty.net/copyright.php and abide by the + logo licence, in particular the restrictions on modifying + the real or apparent size of the image, prevention of use + in screenshots and the requirement for "empty space" around + the logo. See #507316 for more information. The upstream + README relating to the smarty icon is retained, although + the content is misleading - the icon isn't completely free + to use. + + -- Neil Williams Sun, 14 Dec 2008 10:13:50 +0000 --- smarty-2.6.26.orig/debian/docs +++ smarty-2.6.26/debian/docs @@ -0,0 +1,4 @@ +FAQ +NEWS +QUICK_START +README