simplestreams (0.1.0~bzr341-0ubuntu2.3) trusty-security; urgency=high

  * export checksummer in simplestreams.util (LP: #1499749)
    Users of simplestreams.util checksummer would get an AttributeError
    because this was moved.

 -- Scott Moser <smoser@ubuntu.com>  Fri, 25 Sep 2015 11:15:24 -0400

simplestreams (0.1.0~bzr341-0ubuntu2.2) trusty-security; urgency=medium

  * SECURITY UPDATE: insufficient verification of GPG signatures
    allowing malicious injection into images
    - debian/patches/lp1487004-use-checksumming-reader.patch: Ensure
      that users of the BasicMirrorWriter get exceptions when importing
      data that has invalid checksum or sizes. (LP: #1487004)
    - CVE-2015-1337
    - debian/patches/lp1487004-sru-safetynet.patch:
      provide a backwards compatible behavior via setting
      SS_MISSING_ITEM_CHECKSUM_BEHAVIOR=silent. See bug for more info.

 -- Scott Moser <smoser@ubuntu.com>  Tue, 22 Sep 2015 17:12:43 -0400

simplestreams (0.1.0~bzr341-0ubuntu2.1) trusty-proposed; urgency=medium

  * GlanceMirror: identify images as i686 not i386 (LP: #1454775)
    When uploading i386 images to glance, mark their architecture as i686
    rather than i386 so that the openstack scheduler will schedule them.

 -- Scott Moser <smoser@ubuntu.com>  Wed, 13 May 2015 14:33:29 -0400

simplestreams (0.1.0~bzr341-0ubuntu2) trusty-proposed; urgency=medium

  * debian/patches/1-add-item-filter-to-glancemirror.patch: add
    filter support, expose in sstream-mirror-glance (LP: #1339842)

 -- Michael McCracken <mike.mccracken@canonical.com>  Fri, 11 Jul 2014 13:01:54 -0700

simplestreams (0.1.0~bzr341-0ubuntu1) trusty; urgency=medium

  * New upstream snapshot.
    * sstream-mirror: dry-run support
    * sstream-mirror: support for mirroring streams that re-use
      a path across items (such as maas ephemerals)
    * sstream-mirror: show gpg error message on gpg verification
  * debian/control: add build-depends on python-nose and python-yaml
    for running python 2 tests.

 -- Scott Moser <smoser@ubuntu.com>  Wed, 26 Mar 2014 12:25:02 -0400

simplestreams (0.1.0~bzr331-0ubuntu1) trusty; urgency=medium

  * New upstream snapshot.
    * support writing sparse files in FileStore
    * stringitems: make ints and floats available as strings
    * resolvwork: enforce that max and keep must be integers
    * load_keystone_creds: documentation
    * fix bug with contentsource (LP: #1241711)

 -- Scott Moser <smoser@ubuntu.com>  Tue, 18 Mar 2014 17:01:45 -0400

simplestreams (0.1.0~bzr323-0ubuntu2) trusty; urgency=medium

  * Rebuild to drop files installed into /usr/share/pyshared.

 -- Matthias Klose <doko@ubuntu.com>  Sun, 23 Feb 2014 13:54:02 +0000

simplestreams (0.1.0~bzr323-0ubuntu1) trusty; urgency=low

  * New upstream snapshot.
    * fix bug with sstream-sync (LP: #1241711)
    * fix bug in glance mirror (LP: #1243433)
    * fix odd behavior bug when filtering.  The result was that if you
      had ever run with a filter, subsequent runs with modified filter
      would not see different results (LP: #1238227).

 -- Scott Moser <smoser@ubuntu.com>  Tue, 22 Oct 2013 19:35:38 -0400

simplestreams (0.1.0~bzr318-0ubuntu1) saucy-proposed; urgency=low

  * New upstream snapshot.
    * fix odd behavior bug when filtering.  The result was that if you
      had ever run with a filter, subsequent runs with modified filter
      would not see different results (LP: #1238227).

 -- Scott Moser <smoser@ubuntu.com>  Tue, 15 Oct 2013 17:25:40 -0400

simplestreams (0.1.0~bzr316-0ubuntu1) saucy; urgency=low

  * New upstream snapshot.
    * fix bug in resuming a partial download in sstream-mirror
      or anything using the FileObjectStore (LP: #1237990)

 -- Scott Moser <smoser@ubuntu.com>  Thu, 10 Oct 2013 12:07:34 -0400

simplestreams (0.1.0~bzr315-0ubuntu1) saucy; urgency=low

  * New upstream snapshot.
    * fix interpreter written on sstream-sync, sstream-query and
      sstream-mirror. It should be python3, not python2.7. (LP: #1237637)
    * simplestreams/mirrors/__init__.py: fix bug causing resumed downloads
      to stack trace (LP: #1237658)

 -- Scott Moser <smoser@ubuntu.com>  Wed, 09 Oct 2013 17:30:23 -0400

simplestreams (0.1.0~bzr313-0ubuntu1) saucy; urgency=low

  * New upstream snapshot.
    * handle sigpipe gracefully (LP: #1207779)
    * as user-friendly cleanup add a trailing '/' to a url if necessary
    * add --delete flag to sstream-sync
    * add python-simplestreams-openstack metapackage so other packages
      could depend on this, but the python-simplestreams package will
      not incur those dependencies. (LP: #1233269)
    * debian/control: Suggest rather than Depend on python-requests.
      Also, up the version to the actual required version (1.1).

 -- Scott Moser <smoser@ubuntu.com>  Mon, 30 Sep 2013 15:00:54 -0400

simplestreams (0.1.0~bzr307-0ubuntu1) saucy; urgency=low

  * New upstream snapshot.
    * support for progress callbacks in file object store.
    * support for partial download resume support to file object store.
    * inclusion of sstream-mirror
    * support for reading from gpg keyring rather than user's default keyring.
    * sstream-query --pretty output format.
    * fix for python2 if no python-requests is available

 -- Scott Moser <smoser@ubuntu.com>  Wed, 11 Sep 2013 21:55:18 -0400

simplestreams (0.1.0~bzr272-0ubuntu1) saucy; urgency=low

  * New upstream snapshot.
    * fix bug where .sjson files did not work with sstream-query and python3.
    * fix python2 issue in library that resulted in items not having all tags.

 -- Scott Moser <smoser@ubuntu.com>  Wed, 10 Jul 2013 11:20:09 -0400

simplestreams (0.1.0~bzr266-0ubuntu1) saucy; urgency=low

  * New upstream snapshot.
    * include sstream-query, improved sstream-sync
    * supports python3

 -- Scott Moser <smoser@ubuntu.com>  Fri, 28 Jun 2013 16:23:11 -0400

simplestreams (0.1.0~bzr229-0ubuntu1) raring; urgency=low

  * New upstream snapshot.
    * fix a bug in 'products_condense'
    * support http simple and digest auth

 -- Scott Moser <smoser@ubuntu.com>  Thu, 18 Apr 2013 18:19:11 -0400

simplestreams (0.1.0~bzr223-0ubuntu1) raring; urgency=low

  * New upstream snapshot.
    * some fixes to resolvework
    * include upstream work on glance mirror with support for
      writing simplestreams output to swift

 -- Scott Moser <smoser@ubuntu.com>  Thu, 11 Apr 2013 13:05:52 -0400

simplestreams (0.1.0~bzr191-0ubuntu1) raring; urgency=low

  * Initial release

 -- Scott Moser <smoser@ubuntu.com>  Tue, 26 Mar 2013 01:10:01 +0000

