python-flask-httpauth (3.2.4-3.1+deb11u1) bullseye-security; urgency=medium

  * Non-maintainer upload by the LTS Security Team.
  * d/patches/CVE-2026-34531.patch: Add patch for CVE-2026-34531.
    - Flask-HTTPAuth can invoke the application's token verification
    callback function with the token argument set to an empty string and
    this will return. If the application had any users in its database
    with an empty string set as their token, then it could potentially
    authenticate the client request against any of those users (Closes:
    #1132581).
  * d/salsa-ci.yml: Enable salsa-ci.

 -- Emmanuel Arias <eamanu@debian.org>  Wed, 22 Apr 2026 17:04:23 -0300

python-flask-httpauth (3.2.4-3.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Drop Python 2 support (Closes: #937759).

 -- Ondřej Nový <onovy@debian.org>  Sun, 27 Oct 2019 20:37:51 +0100

python-flask-httpauth (3.2.4-3) unstable; urgency=medium

  * debian/control: Put the Breaks/Replaces in the proper place; previous
    upload was a mistake.  Closes: #911444.

 -- Martín Ferrari <tincho@debian.org>  Wed, 24 Oct 2018 13:27:30 +0000

python-flask-httpauth (3.2.4-2) unstable; urgency=medium

  * debian/control: Add missing Breaks/Replaces to new -doc package.
    Closes: #911444.

 -- Martín Ferrari <tincho@debian.org>  Mon, 22 Oct 2018 14:42:58 +0000

python-flask-httpauth (3.2.4-1) unstable; urgency=medium

  [ Ondřej Nový ]
  * d/copyright: Use https protocol in Format field
  * d/control: Set Vcs-* to salsa.debian.org

  [ Martín Ferrari ]
  * New upstream release.
  * debian/gbp.conf: Stop using pristine-tar.
  * Automated packaging fixes by cme.
  * Add support for python3, and fix a few packaging mistakes. Closes:
    #909598.
  * debian/control: Add automatic testsuite.
  * debian/copyright: Separate license texts.
  * Patch the link to an externally-hosted image with an embedded SVG.
  * Move documentation to a separate package.
  * Update DH compat level to 11.

 -- Martín Ferrari <tincho@debian.org>  Mon, 15 Oct 2018 14:14:45 +0000

python-flask-httpauth (3.2.1-1) unstable; urgency=medium

  * New upstream release.
  * Fix watch file.
  * debian/control: Update Standards-Version (no changes). Update Vcs-*.
  * Add examples to the package.

 -- Martín Ferrari <tincho@debian.org>  Fri, 02 Dec 2016 10:28:54 +0000

python-flask-httpauth (2.2.1-1) unstable; urgency=low

  * Initial upload. Closes: #754804.

 -- Martín Ferrari <tincho@debian.org>  Mon, 14 Jul 2014 17:13:01 +0000
