--- drupal6-6.18.orig/debian/drupal6.lintian
+++ drupal6-6.18/debian/drupal6.lintian
@@ -0,0 +1,2 @@
+drupal6: package-contains-upstream-install-documentation usr/share/doc/drupal6/INSTALL.mysql.txt
+drupal6: package-contains-upstream-install-documentation usr/share/doc/drupal6/INSTALL.pgsql.txt
--- drupal6-6.18.orig/debian/drupal6.postrm
+++ drupal6-6.18/debian/drupal6.postrm
@@ -0,0 +1,95 @@
+#! /bin/bash
+# postrm script for ${package_name}
+#
+
+set -e
+
+if [ -f /usr/share/debconf/confmodule ]; then
+	. /usr/share/debconf/confmodule
+fi
+
+# source dbconfig-common stuff
+if [ -f /usr/share/dbconfig-common/dpkg/postrm ]; then
+	. /usr/share/dbconfig-common/dpkg/postrm
+	dbc_go drupal6 $@
+fi
+
+# summary of how this script can be called:
+#        * <postrm> `remove'
+#        * <postrm> `purge'
+#        * <old-postrm> `upgrade' <new-version>
+#        * <new-postrm> `failed-upgrade' <old-version>
+#        * <new-postrm> `abort-install'
+#        * <new-postrm> `abort-install' <old-version>
+#        * <new-postrm> `abort-upgrade' <old-version>
+#        * <disappearer's-postrm> `disappear' <r>overwrit>r> <new-version>
+# for details, see http://www.debian.org/doc/debian-policy/ or
+# the debian-policy package
+
+if [ "$DPKG_DEBUG" = "developer" ]; then
+    set -x
+fi
+
+package_name="drupal6"
+datadir="/var/lib/${package_name}/"
+backupdir="${datadir}backups/"
+nukedir="/usr/share/${package_name}/"
+docdir="/usr/share/doc/${package_name}/"
+sqlfile="${docdir}database/database.mysql"
+upgradesdir="${docdir}upgrades/"
+configdir="/etc/drupal/6/"
+configfile="${configdir}conf.php"
+includefile="${configdir}apache.conf"
+dbconfigfile="${configdir}/sites/default/dbconfig.php"
+cronfile="/etc/cron.d/${package_name}"
+
+webserver="apache2"
+
+case "$1" in
+    purge|remove)
+
+	# Un-configure webservers
+	if [ -L /etc/$webserver/conf.d/drupal6.conf ]; then
+		rm -f /etc/$webserver/conf.d/drupal6.conf || true
+		restart="$i $restart"
+	fi
+      
+	servers="apache2"
+	# may not exist if package was manually installed
+	if [ -r /usr/share/wwwconfig-common/restart.sh ]; then
+		. /usr/share/wwwconfig-common/restart.sh
+	fi
+
+
+	# Remove configuration files (conf.php, $SITE.php)
+    rm -f /etc/drupal/sites/default/settings.php
+
+	if [ "$1" = "purge" ]; then
+		rm -f ${dbconfigfile}
+		if which ucf >/dev/null 2>&1; then
+			ucf --purge ${dbconfigfile}
+		fi
+        
+		db_purge || true
+
+	fi
+
+    ;;
+
+    upgrade|failed-upgrade|abort-install|abort-upgrade|disappear)
+
+    ;;
+
+    *)
+        echo "postrm called with unknown argument \`$1'" >&2
+        exit 1
+    ;;
+esac
+
+# dh_installdeb will replace this with shell code automatically
+# generated by other debhelper scripts.
+
+#DEBHELPER#
+
+exit 0
+
--- drupal6-6.18.orig/debian/rules
+++ drupal6-6.18/debian/rules
@@ -0,0 +1,59 @@
+#!/usr/bin/make -f
+# -*- makefile -*-
+# Sample debian/rules that uses debhelper.
+# GNU copyright 1997 to 1999 by Joey Hess.
+
+# Uncomment this to turn on verbose mode.
+# export DH_VERBOSE=1
+
+PACKAGE=drupal6
+
+include /usr/share/dpatch/dpatch.make
+
+build:  patch
+
+clean-patched:
+	dh_testdir
+	dh_testroot
+	dh_clean
+
+clean:	clean-patched unpatch
+
+install:build
+	dh_testdir
+	dh_testroot
+	dh_prep
+	dh_installdirs -X.svn -XCVS
+	dh_install -XCVS -X.svn
+	# fix permissions
+	find $(CURDIR)/debian/$(PACKAGE)/usr/share/drupal6 \
+	  -name '*.png' -o -name '*.jpg' | xargs chmod a-x
+	chmod +x $(CURDIR)/debian/$(PACKAGE)/usr/share/drupal6/scripts/*
+	# rm $(CURDIR)/debian/$(PACKAGE)/usr/share/drupal6/misc/jquery.js
+
+	install -m640 .htaccess debian/drupal6/etc/drupal/6/htaccess
+	install -m644 debian/drupal6.lintian debian/drupal6/usr/share/lintian/overrides/drupal6
+# Everything else is handled by dh_install
+
+# Build architecture-independent files here.
+binary-indep: build install
+	dh_testdir
+	dh_testroot
+	dh_installchangelogs CHANGELOG.txt
+	dh_installdocs -XCVS -X.svn
+	dh_installexamples
+	dh_installdebconf	
+	dh_installcron
+	dh_link
+	dh_compress
+	dh_fixperms
+	dh_installdeb
+ifeq ($(PO2DEBCONF),yes)
+	po2debconf -e utf8 debian/templates.master > debian/templates
+endif
+	dh_gencontrol -- -V'debconf-depends=debconf (>= $(MINDEBCONFVER))'
+	dh_md5sums
+	dh_builddeb
+
+binary: binary-indep
+.PHONY: build clean binary-indep binary install #PHONY_CONFIGURE#
--- drupal6-6.18.orig/debian/drupal6.postinst
+++ drupal6-6.18/debian/drupal6.postinst
@@ -0,0 +1,73 @@
+#!/bin/bash
+# postinst script for drupal
+
+set -e
+
+dbc_generate_include='php:/etc/drupal/6/sites/default/dbconfig.php'
+dbc_generate_include_owner='root:www-data'
+dbc_generate_include_perms='640'
+dbc_pgsql_createdb_encoding='UTF8'
+
+. /usr/share/debconf/confmodule
+# source dbconfig-common stuff');
+. /usr/share/dbconfig-common/dpkg/postinst
+dbc_go drupal6 $@
+
+if [ "$DPKG_DEBUG" = "developer" ]; then
+    set -x
+fi
+ 
+package_name="drupal6"
+datadir="/var/lib/${package_name}"
+filesdir="${datadir}/files"
+backupdir="${datadir}/backups"
+pkgdir="/usr/share/${package_name}"
+docdir="/usr/share/doc/${package_name}"
+upgradesdir="${docdir}/upgrades"
+configdir="/etc/drupal/6"
+default_configfile="${configdir}/sites/default/settings.php"
+includefile="${configdir}/apache.conf"
+cronfile="/etc/cron.d/${package_name}"
+
+OLDVERSION="$2"
+
+case "$1" in
+    configure)
+
+
+		webserver=`echo $webserver|sed -e 's/,  */ /g'`
+
+		webserver="apache2"
+
+	    if [ ! -d /etc/$webserver/conf.d/ ]; then
+			install -d -m755 /etc/$webserver/conf.d/
+	    fi
+	    if [ ! -e /etc/$webserver/conf.d/drupal6.conf ]; then
+			ln -s ${includefile} /etc/$webserver/conf.d/drupal6.conf
+			restart="$i $restart"
+	    fi
+      
+		servers="apache2"
+		. /usr/share/wwwconfig-common/restart.sh
+
+		# Permissions
+		dpkg-statoverride --list $filesdir || dpkg-statoverride --add --force --update www-data www-data 0750 $filesdir
+
+    ;;
+
+    abort-upgrade|abort-remove|abort-deconfigure)
+
+    ;;
+
+    *)
+         echo "postinst called with unknown argument \`$1'" >&2
+         exit 1
+    ;;
+esac
+
+# dh_installdeb will replace this with shell code automatically
+# generated by other debhelper scripts.
+
+#DEBHELPER#
+
+exit 0
--- drupal6-6.18.orig/debian/cron.d
+++ drupal6-6.18/debian/cron.d
@@ -0,0 +1 @@
+0 * * * *    www-data          if test -x /usr/share/drupal6/scripts/cron.sh ; then /usr/share/drupal6/scripts/cron.sh ; fi
--- drupal6-6.18.orig/debian/control
+++ drupal6-6.18/debian/control
@@ -0,0 +1,23 @@
+Source: drupal6
+Section: web
+Priority: extra
+Maintainer: Luigi Gangitano <luigi@debian.org>
+Build-Depends: debhelper (>= 7), dpatch
+Homepage: http://www.drupal.org/
+Standards-Version: 3.9.1.0
+Xs-Vcs-Svn: svn://alioth.debian.org/svn/pkg-drupal/branches/drupal6
+Xs-Vcs-Browser: http://svn.debian.org/wsvn/pkg-drupal/branches/drupal6
+
+Package: drupal6
+Architecture: all
+Depends: ${misc:Depends}, apache2 | httpd, php5, php5-mysql | php5-pgsql, php5-gd, default-mta | mail-transport-agent, wwwconfig-common (>= 0.0.37), mysql-client | virtual-mysql-client | postgresql-client, dbconfig-common, curl
+Recommends: mysql-server | postgresql
+Description: a fully-featured content management framework
+ Drupal is a dynamic web site platform which allows an individual or
+ community of users to publish, manage and organize a variety of
+ content, Drupal integrates many popular features of content
+ management systems, weblogs, collaborative tools and discussion-based
+ community software into one easy-to-use package.
+ .
+ This package contains version 6 of Drupal.
+
--- drupal6-6.18.orig/debian/examples
+++ drupal6-6.18/debian/examples
@@ -0,0 +1,2 @@
+sites/default/default.settings.php
+
--- drupal6-6.18.orig/debian/dirs
+++ drupal6-6.18/debian/dirs
@@ -0,0 +1,5 @@
+etc/drupal/6/sites/default
+var/lib/drupal6/files
+var/lib/drupal6/backups
+usr/share/doc/drupal6
+usr/share/lintian/overrides
--- drupal6-6.18.orig/debian/README.source
+++ drupal6-6.18/debian/README.source
@@ -0,0 +1,3 @@
+This package uses dpatch to manage all modifications to the upstream
+source. Please refer to /usr/share/doc/dpatch/README.source.gz in package
+dpatch for details.
--- drupal6-6.18.orig/debian/drupal6.config
+++ drupal6-6.18/debian/drupal6.config
@@ -0,0 +1,48 @@
+#!/bin/bash
+
+# Debconf config script for Drupal
+
+set -e
+
+
+# Source debconf library
+. /usr/share/debconf/confmodule
+
+if [ -f /usr/share/dbconfig-common/dpkg/config ]; then
+	# we support mysql and pgsql
+	dbc_dbtypes="mysql, pgsql"
+	dbc_dbname=drupal6
+	dbc_dbuser=drupal6
+
+	# source dbconfig-common stuff
+	. /usr/share/dbconfig-common/dpkg/config --debconf-ok
+	dbc_go drupal6 $@
+fi
+
+if [ "$DPKG_DEBUG" = "developer" ]; then
+    set -x
+fi
+ 
+##################################################
+# Begin installation directories definition block#
+##################################################
+package_name="drupal6"
+datadir="/var/lib/${package_name}"
+backupdir="${datadir}/backups/"
+docdir="/usr/share/doc/${package_name}"
+upgradesdir="${docdir}/upgrades"
+configdir="/etc/drupal/6"
+configfile="${configdir}/conf.php"
+includefile="${configdir}/apache.conf"
+################################################
+# End installation directories definition block #
+################################################
+
+########################################################################
+# The actual configuration
+
+OLDVERSION="$2"
+
+db_stop
+
+exit 0
--- drupal6-6.18.orig/debian/links
+++ drupal6-6.18/debian/links
@@ -0,0 +1,4 @@
+etc/drupal/6/htaccess	usr/share/drupal6/.htaccess
+etc/drupal/6/sites		usr/share/drupal6/sites
+etc/drupal/6/profiles	usr/share/drupal6/profiles
+var/lib/drupal6/files	etc/drupal/6/sites/default/files
--- drupal6-6.18.orig/debian/drupal6.install
+++ drupal6-6.18/debian/drupal6.install
@@ -0,0 +1,10 @@
+*.php			usr/share/drupal6
+includes		usr/share/drupal6
+misc			usr/share/drupal6
+modules			usr/share/drupal6
+themes			usr/share/drupal6
+robots.txt		usr/share/drupal6
+profiles		etc/drupal/6
+debian/etc/apache.conf	etc/drupal/6
+debian/etc/settings.php	etc/drupal/6/sites/default
+debian/cron.sh		usr/share/drupal6/scripts
--- drupal6-6.18.orig/debian/docs
+++ drupal6-6.18/debian/docs
@@ -0,0 +1,5 @@
+MAINTAINERS.txt
+UPGRADE.txt
+INSTALL.mysql.txt
+INSTALL.pgsql.txt
+scripts
--- drupal6-6.18.orig/debian/README.Debian
+++ drupal6-6.18/debian/README.Debian
@@ -0,0 +1,171 @@
+Drupal for Debian
+-----------------
+
+1.  Introduction
+2.  Manual initial database generation and configuration
+3.  Database population script
+4.  Deleting the Drupal database
+5.  Changes to Apache 2 configuration
+6.  Securing your portal
+7.  Upgrading database from previous versions
+8.  Virtual hosts
+9.  Additional themes and modules
+10. Privacy of session cookies
+
+A.  Customizing themes
+B.  Links for more support
+
+
+1. Introduction
+---------------
+The latest version of Drupal can always be found at
+<http://www.drupal.org>.
+
+A running database server is needed for this package to work. It
+doesn't matter whether the DBMS runs on the same machine as the
+web server. MySQL and PostgreSQL servers are supported by this package.
+
+You can change the DBMS configuration after installation by running
+"dpkg-reconfigure drupal"
+
+
+2. Manual initial database generation and configuration
+-------------------------------------------------------
+This is only necessary if you chose not to automatically create the
+database at installation time or if automatic creation failed.
+
+Directions on how to create a database for you drupal portal can be found
+in INSTALL.mysql.txt and INSTALL.pgsql.txt files in /usr/share/doc/drupal6.
+
+
+3. Database population script
+-----------------------------
+Once a database is set up and configured, drupal needs to create tables and
+insert default records into it.
+
+This can be done running the install.php script on portal web site, e.g.
+
+  http://localhost/drupal6/install.php
+
+
+4. Deleting the Drupal database
+-------------------------------
+The database may be deleted automatically on purging the package
+(debconf prompt the user asking to do it or not).
+
+If you want to purge the data stored at MySQl database manually you
+can use the following command:
+
+'mysqladmin -p drop drupal6'
+
+being the user who admin MySQL.
+
+
+5. Changes to Apache 2 configuration
+------------------------------------
+
+By default, Drupal passes path arguments to itself via its dynamically
+generated URLs. This results in URLs that look like
+"http://www.example.com/?q=node/83." This can make URLs hard to read and it
+prevents some search engines from indexing the pages with these URLs
+
+You can tell Drupal to use "clean URLs", eliminating the "?q=" in internal
+URLs, simply enabling mod_rewrite in apache 2 configuration (a2enmod rewrite).
+Please note that you may need to adjust the /etc/drupal/6/htaccess
+configuration file to match your site configuration.
+
+
+6. Securing your portal
+-----------------------
+It is very good security measure to restrict access to admin.php only
+to trusted IP's and localhost (you can see an example at
+/etc/drupal/6/htaccess) As an added security measure, is a good idea to
+set up a ssl-enabled web server in your apache, and allow access to
+admin page only to ssl streams.
+
+
+7. Upgrading database from previous versions
+--------------------------------------------
+From version 4.7.4 drupal packages will be separated for each major version.
+Automatic upgrading the database will not be attempted anymore.
+
+To upgrade an existing version of drupal, install the new package and manually
+configure the database to point to the existing database, then execute the
+upstream upgrade script by pointing a web browser to
+
+  <http://$SITE/update.php>
+
+Then remove the old package.
+
+WARNING: be sure to _NOT_ remove the old package's database.
+
+
+8. Virtual hosts
+----------------
+Drupal supports a setup with multiple virtual hosts. Each virtual host
+has its own configuration directory in /etc/drupal/6/sites/_virtualhost_.
+At install time the 'default' virtual host is created with the required
+settings.php configuration file.
+
+To create new virtual hosts simply duplicate the default virtual host directory
+and adjust the settings.php and dbconfig.php configuration files.
+
+This package supports running cron scripts on each virtual host, as long as you
+define the $base_url variable in the virtual host settings.php configuration
+file.
+
+
+9. Additional modules and themes
+--------------------------------
+
+Drupal looks for modules and themes in the modules/ and themes/
+subdirectories, respectively. However, it would be a bad idea to put
+additional modules and themes into those directories because they
+might be overwritten on upgrades. Instead, create links to another
+directory that won't be touched by dpkg, e.g. in the /usr/local
+hierarchy:
+
+ # ln -s /usr/local/share/drupal/modules /usr/share/drupal6/modules/local
+ # ln -s /usr/local/share/drupal/themes /usr/share/drupal6/themes/local
+
+
+10. Privacy of session cookies
+------------------------------
+
+Drupal does not set the secure flag for the session cookie in an https
+session, which can cause the cookie to be sent in http requests and make
+it easier for remote attackers to capture this cookie.
+
+If you are using drupal on an https connection you can fix this issue
+setting the session.cookie_secure PHP properties to on either in the
+global PHP configuration file or adding the following line to
+/etc/drupal/6/htaccess:
+
+  php_value session.cookie_secure 1
+
+
+A. Customizing themes
+---------------------
+To create or customize a theme for your site, I recommend to start
+with an existing theme (as exmaple), copy it to a different location
+
+  # cp -ai /etc/drupal/6/themes/example /etc/drupal/6/themes/Custom
+
+and modify this new created theme. You can now select your "Custom"
+theme in the Preferences menu from the admin interface. 
+
+You should not modify and use an included theme in the package
+directly, as your changes could be overwritten next time you upgrade
+drupal.
+
+
+B. Links for more support
+-------------------------
+* http://www.drupal.org/
+  - Drupal's project page for those willing to get involved in the
+    ongoing development
+
+* http://www.drupal.org/node.php?id=253
+  - online installation guidelines
+
+ -- Luigi Gangitano <luigi@debian.org>  Mon, 11 Aug 2008 12:00:12 +0100
--- drupal6-6.18.orig/debian/cron.sh
+++ drupal6-6.18/debian/cron.sh
@@ -0,0 +1,19 @@
+#!/bin/sh
+# $Id: cron.sh 1878 2008-02-12 10:56:45Z luigi $
+
+for site in /etc/drupal/6/sites/* ; do
+	BASE_URL=""
+
+	if [ ! "`basename $site`" = "all" ]; then
+		for file in $site/baseurl.php $site/settings.php; do
+			[ -f "$file" ] && BASE_URL=`grep '^$base_url' $file | cut -d"'" -f2`
+			[ "X$BASE_URL" != "X" ] && break
+		done
+
+		if [ "X$BASE_URL" = "X" ] ; then
+			BASE_URL='http://localhost/drupal6'
+		fi
+
+		curl --fail --silent --compressed --location $BASE_URL/cron.php
+	fi
+done
--- drupal6-6.18.orig/debian/compat
+++ drupal6-6.18/debian/compat
@@ -0,0 +1 @@
+7
--- drupal6-6.18.orig/debian/copyright
+++ drupal6-6.18/debian/copyright
@@ -0,0 +1,44 @@
+This package was debianized by Hugo Espuny <hec@debian.org> on
+Sat, 29 Jun 2002 22:13:16 +0200.
+
+The current Debian Maintainer is Luigi Gangitano <luigi@debian.org>
+
+It was downloaded from http://www.drupal.org
+
+Upstream authors: Dries Buytaert <dries@drupal.org>
+James Walker <walkah@walkah.net>
+Moshe Weitzman <weitzman@tejasa.com>
+Charlie Lowe <cel4145@cyberdash.com>
+Steven Wittens <unconed@drupal.org>
+Károly Négyesi <chx@mail.tvnet.hu>
+Gabor Hojtsy <goba@php.net>
+Richard Archer <drupal@juggernaut.com.au>
+Matt Westgate <drupal@asitis.org>
+Piotr Krukowiecki <pgsql@cvbge.org>
+Károly Négyesi <chx@mail.tvnet.hu>
+Jeremy Andrews <jeremy@kerneltrap.com>
+Károly Négyesi <chx@mail.tvnet.hu>
+Hilko Bengen <bengen@debian.org>
+Gerhard Killesreiter <gerhard@killesreiter.de>
+
+Copyright: 2000-2008 Dries Buytaert
+
+ This program is free software; you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation; either version 2 of the License.
+
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ GNU General Public License for more details.
+
+ You should have received a copy of the GNU General Public License with
+ the Debian GNU/Linux distribution in file /usr/share/common-licenses/GPL-2;
+ if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth
+ Floor, Boston, MA 02110-1301, USA.
+
+On Debian systems, the complete text of the GNU General Public
+License, version 2, can be found in /usr/share/common-licenses/GPL-2.
+
+The Debian packaging is (C) 2006-2008, Luigi Gangitano <luigi@debian.org> and
+is licensed under the GPL, see above.
--- drupal6-6.18.orig/debian/changelog
+++ drupal6-6.18/debian/changelog
@@ -0,0 +1,888 @@
+drupal6 (6.18-1) unstable; urgency=high
+
+  [ Luigi Gangitano ]  
+  * Urgency high due to security fixes
+
+  * New upstream release
+    - Fixes multiple remote vulnerabilities (Closes: #592716)
+      (Ref: SA-CORE-2010-002, CVE-TBA)
+
+  * debian/control
+    - Bumped Standard-Version to 3.9.1.0, no change needed
+
+ -- Luigi Gangitano <luigi@debian.org>  Tue, 24 Aug 2010 16:17:22 +0200
+
+drupal6 (6.17-2) unstable; urgency=low
+
+  * debian/control
+    - Removed dependency on exim4, now depends on default-mda (Closes: #587239)
+    - Bumped Standard-Version to 3.9.0, no change needed
+
+  * debian/drupal6.postrm
+    - Made postrm check for restart.sh in case dependencies were not properly
+      installed (thanks to Bhavani Shankar.R, from Ubuntu)
+
+ -- Luigi Gangitano <luigi@debian.org>  Wed, 30 Jun 2010 19:56:57 +0200
+
+drupal6 (6.17-1) unstable; urgency=low
+
+  [ Luigi Gangitano ]  
+  * New upstream release
+
+  * debian/cron.sh
+    - Added --fail option to curl to work around missing base_url in
+      configuration files (Closes: #561419)
+
+  * debian/cron.d
+    - Fixed conditional to avoid warnings on removed package (Closes: #582430)
+
+ -- Luigi Gangitano <luigi@debian.org>  Sun, 06 Jun 2010 22:31:57 +0200
+
+drupal6 (6.16-1) unstable; urgency=high
+
+  [ Luigi Gangitano ]  
+  * Urgency high due to security fixes
+
+  * New upstream release
+    - Fixes multiple vulnerabilities (Closes: #572439)
+      (Ref: SA-CORE-2010-001, CVE-TBA)
+
+ -- Luigi Gangitano <luigi@debian.org>  Fri, 12 Mar 2010 14:04:02 +0100
+
+drupal6 (6.15-2) UNRELEASED; urgency=low
+
+  [ Alexandre De Dommelin ]
+  * Added patch to remove warnings about Drupal core updates (Closes: #521288)
+  * Bump Standards-Version from 3.8.3 to 3.8.4 (no changes needed)
+
+ -- Luigi Gangitano <luigi@debian.org>  Wed, 10 Feb 2010 17:11:35 +0100
+
+drupal6 (6.15-1) unstable; urgency=low
+
+  * New upstream release (Closes: #561726)
+    - Fixes several XSS vulnerabilities (Closes: #562165)
+      (Ref: SA-CORE-2009-009, CVE-2009-4369, CVE-2009-4370, CVE-2009-4371)
+
+  * debian/rules
+    - Use dh_prep instead of dh_clean -k
+
+  * debian/control
+    - Upgraded versioned dependency on debhelper to 7
+
+  * debian/README.source
+    - Added directions on source handling
+
+ -- Luigi Gangitano <luigi@debian.org>  Mon, 11 Jan 2010 19:47:13 +0100
+
+drupal6 (6.14-1) unstable; urgency=low
+
+  * New upstream release
+    - Removed security patches integrate upstream
+      + 20_SA-CORE-2009-007
+    - Fixes multiple vulnerabilities (Ref: SA-CORE-2009-008)
+      (Closes: #547140)
+
+  * debian/control
+    - Bumped Standard-Version to 3.8.3, no change needed
+
+  * debian/compat
+    - Switch debhelper compatibility to 7
+
+  * debian/copyright
+    - Added reference to copyright file with version
+
+ -- Luigi Gangitano <luigi@debian.org>  Sun, 20 Sep 2009 04:57:57 +0200
+
+drupal6 (6.13-1) UNRELEASED; urgency=low
+
+  * New upstream release
+
+ -- Luigi Gangitano <luigi@debian.org>  Mon, 13 Jul 2009 19:42:38 +0200
+
+drupal6 (6.12-1.1) unstable; urgency=high
+
+  * Non-maintainer upload by the Security Team.
+  * Apply upstream patch to fix:
+    - XSS in the forum module
+    - Input format access bypass via signatures
+    - Password leakage via URLs
+    (no CVE id yet; SA-CORE-2009-007; Closes: #535435).
+
+ -- Nico Golde <nion@debian.org>  Mon, 06 Jul 2009 20:27:45 +0200
+
+drupal6 (6.12-1) unstable; urgency=low
+
+  [ Luigi Gangitano ]
+  * New upstream release (Closes: #529309)
+    (Acknoledges NMU by Security Team) (Closes: #531386)
+    - Removed security patch integrate upstream
+      + 20_xss
+
+  * debian/{control,rules,links}
+    - Removed dependency on libjs-jquery and use jquery.js from drupal
+      sources to avoid conflict with newer version of jquery
+      (Closes: #530779)
+
+ -- Luigi Gangitano <luigi@debian.org>  Tue, 02 Jun 2009 18:25:58 +0200
+
+drupal6 (6.11-1.1) unstable; urgency=high
+
+  * Non-maintainer upload by the Security Team.
+  * Fix several XSS issues (SA-CORE-2009-006; Closes: #529190).
+
+ -- Nico Golde <nion@debian.org>  Thu, 28 May 2009 20:45:35 +0200
+
+drupal6 (6.11-1) unstable; urgency=low
+
+  [ Luigi Gangitano ]
+  * New upstream release
+    - Fixes XSS vulnerability (Ref: SA-CORE-2009-005, CVE-2009-1575,
+      CVE-2009-1576) (Closes: #526378)
+
+ -- Luigi Gangitano <luigi@debian.org>  Mon, 04 May 2009 19:56:12 +0200
+
+drupal6 (6.10-1) unstable; urgency=low
+
+  [ Luigi Gangitano ]
+  * New upstream release
+    - This version fixes two Windows-only security issues
+      (Ref: SA-CORE-2009-003, SA-CORE-2009-004)
+      Debian is not affected by this vulnerabilites
+
+ -- Luigi Gangitano <luigi@debian.org>  Sun, 01 Mar 2009 18:26:25 +0100
+
+drupal6 (6.9-1) unstable; urgency=low
+
+  [ Luigi Gangitano ]  
+  * New upstream release
+    - Removed security patch integrate upstream
+      + 12_SA-2008-073
+      + 13_SA-CORE-2009-001
+
+  * debian/cron.sh
+    - Handle sites/all correctly (Closes: #513522)
+
+ -- Luigi Gangitano <luigi@debian.org>  Mon, 16 Feb 2009 19:37:31 +0100
+
+drupal6 (6.6-3) unstable; urgency=high
+
+  [ Luigi Gangitano ]  
+  * Urgency high due to security fixes
+
+  * debian/patches/13_SA-CORE-2009-001
+    - Added upstream patch fixing multiple vulnerabilities
+      (Ref: SA-CORE-2009-001, CVE-TBD)
+
+ -- Luigi Gangitano <luigi@debian.org>  Fri, 16 Jan 2009 01:49:58 +0100
+
+drupal6 (6.6-2) unstable; urgency=high
+
+  * debian/patches/12_SA-2008-073
+    - Moved NMU changes to dpatch file
+
+  * debian/control
+    - Added dependency on ${misc:Depends} to make lintian happy
+
+  * debian/drupal6.{postinst,postrm}
+    - Changed apache configuration link name to drupal6.conf, to avoid
+      collision with drupal5 (Closes: #509769, #505146)
+    - Set default Postgres encoding to UTF8 (Closes: #508506)
+
+  * debian/README.Debian
+    - Fixed link to installation script (Closes: 507914)
+
+ -- Luigi Gangitano <luigi@debian.org>  Thu, 08 Jan 2009 20:49:51 +0100
+
+drupal6 (6.6-1.1) unstable; urgency=high
+
+  * Non-maintainer upload.
+  * Urgency high because this fixes a security issue
+  * Include upstream patch for SA-2008-073, to fix a security issue:
+    The update system is vulnerable to Cross site request forgeries. Malicious
+    users may cause the superuser (user 1) to execute old updates that may
+    damage the database.
+    (Ref: SA-2008-073, CVE-2008-6170, CVE-2008-6532, CVE-2008-6533) (Closes: #508473)
+
+ -- Patrick Schoenfeld <schoenfeld@debian.org>  Fri, 12 Dec 2008 09:30:28 +0100
+
+drupal6 (6.6-1) unstable; urgency=high
+
+  [ Luigi Gangitano ]  
+  * Urgency high due to security fixes
+
+  * New upstream release
+    - Fixes two security vulnerabilities
+      (Ref: SA-2008-067, CVE-2008-6171) (Closes: #503222)
+
+  * debian/drual6.postrm
+    - Fixed missing -e option to make lintian happy
+
+  * debian/patches/10_cronjob.dpatch
+    - Added patch descritpion to make lintian happy
+
+  * debian/control
+    - Bumped Standard-Version to 3.8.0, no change needed
+
+  * debian/{control,rules,links}
+    - Added dependency on libjs-jquery and use jquery.js from it
+
+ -- Luigi Gangitano <luigi@debian.org>  Fri, 24 Oct 2008 23:06:15 +0200
+
+drupal6 (6.5-1) unstable; urgency=low
+
+  [ Luigi Gangitano ]
+  * New upstream release
+    - Removed security patch integrate upstream
+      + 11-SA-2008-060
+
+ -- Luigi Gangitano <luigi@debian.org>  Mon, 20 Oct 2008 23:59:27 +0200
+
+drupal6 (6.4-2) unstable; urgency=high
+
+  [ Luigi Gangitano ]
+  * Urgency high due to security fixes
+
+  * debian/patches/11-SA-2008-060
+    - Added upstream patch fixing several security vulnerabilities
+      (Ref: SA-2008-060, CVE-TBA) (Closes: #501640)
+
+  * debian/README.Debian
+    - Added a notice about cookie security and session.cookie_secure
+      configuration (Ref: CVE-2008-3661) (Closes: #501058)
+
+ -- Luigi Gangitano <luigi@debian.org>  Fri, 14 Oct 2008 15:47:20 +0200
+
+drupal6 (6.4-1) unstable; urgency=low
+
+  [ Luigi Gangitano ]
+  * New upstream release
+    - Fixes several XSS vulnerabilities
+      (Ref: SA-2008-047, CVE-TBD)
+
+ -- Luigi Gangitano <luigi@debian.org>  Fri, 15 Aug 2008 01:35:59 +0200
+
+drupal6 (6.3-1) unstable; urgency=low
+
+  [ Luigi Gangitano ]
+  * New upstream release (Closes: 465833)
+
+  * debian/links
+    - Changed files directory link to match new upstream configuration
+
+  * debian/README.Debian
+    - Fixed references to database population script and added instructions
+      to enable apache2 mod_rewrite.
+
+ -- Luigi Gangitano <luigi@debian.org>  Mon, 11 Aug 2008 19:16:04 +0200
+
+drupal6 (6.0-1) UNRELEASED; urgency=low
+
+  [ Luigi Gangitano ]
+  * New upstream branch 6.0
+
+  * debian/*
+    - Rename file and directories from 5 to 6
+    - In debian/control switch to Source: drupal6
+
+ -- Luigi Gangitano <luigi@debian.org>  Mon, 11 Aug 2008 12:00:12 +0100
+
+drupal5 (5.7-1) unstable; urgency=low
+
+  [ Luigi Gangitano ]
+  * New upstream release
+    - Fixes several non-security related bugs (Closes: #464876)
+
+  * debian/po/hu.po
+    - Updated Hungarian debconf templates translation (Thanks to Miklos
+      Lukacs) (Closes: #459378)
+
+  * debian/cron.sh
+    - Fixed cron script for multisite setup (thanks to Fernando Lucas
+      Rodriguez) (Closes: #464599)
+
+  * debian/watch
+    - Removed unused 'uupdate' token
+
+ -- Luigi Gangitano <luigi@debian.org>  Tue, 12 Feb 2008 11:40:29 +0100
+
+drupal5 (5.6-2) unstable; urgency=low
+
+  [ Luigi Gangitano ]
+  * debian/cron.d
+    - Fix typo in cron script that makes it running every minutes, set it
+      to one hour (Closes: #456182)
+
+ -- Luigi Gangitano <luigi@debian.org>  Sat, 26 Jan 2008 20:51:39 +0100
+
+drupal5 (5.6-1) unstable; urgency=high
+
+  [ Luigi Gangitano ]
+  * Urgency high due to security fixes
+  
+  * New upstream release
+    - Fixes Cross site request forgery in Aggregator module
+      (Ref: SA-2008-005, CVE-TBA)
+    - Fixes Cross site scripting vulnerability with IE6 and user submitted
+      UTF8 input (Ref: SA-2008-006, CVE-TBA)
+
+  * debian/cron.d
+    - Run cron script every hour and not every 5 minutes (Closes: #456182)
+
+  * debian/rules
+    - Removed binary-arch section, moved all actions to binary-indep
+
+  * debian/control
+    - Swapped httpd | apache2 order to comply with policy
+    - Bumped Standard-Version to 3.7.3, no change needed
+
+ -- Luigi Gangitano <luigi@debian.org>  Fri, 11 Jan 2008 15:02:09 +0100
+
+drupal5 (5.5-1) unstable; urgency=high
+
+  [ Luigi Gangitano ]
+  * Urgency high due to security fixes
+  
+  * New upstream release
+    - Fixes SQL Injection vulnerability in contributed modules
+      (Ref: DRUPAL-SA-2007-031, CVE-2007-6299)
+
+  * debian/cron.sh
+    - Added check of BASE_URL in baseurl.php (Closes: #448774)
+
+ -- Luigi Gangitano <luigi@debian.org>  Fri, 07 Dec 2007 21:29:18 +0100
+
+drupal5 (5.3-1) unstable; urgency=high
+
+  [ Luigi Gangitano ]
+  * Urgency high due to security fixes
+  
+  * New upstream release
+    - Fixes several security vulnerabilities
+      + DRUPAL-SA-2007-024 (Ref: CVE-2007-5595)
+      + DRUPAL-SA-2007-025 (Ref: CVE-2007-5593)
+      + DRUPAL-SA-2007-026 (Ref: CVE-2007-5596)
+      + DRUPAL-SA-2007-029 (Ref: CVE-2007-5594)
+      + DRUPAL-SA-2007-030 (Ref: CVE-2007-5597)
+
+
+ -- Luigi Gangitano <luigi@debian.org>  Sat, 20 Oct 2007 09:52:38 +0200
+
+drupal5 (5.2-3) unstable; urgency=low
+
+  * debian/drupal5.install
+    - Install default robots.txt (Closes: #440291)
+
+  * debian/control
+    - Changed Recommends to postgresql
+
+ -- Luigi Gangitano <luigi@debian.org>  Thu, 23 Aug 2007 15:44:15 +0200
+
+drupal5 (5.2-2) unstable; urgency=low
+
+  * debian/README.Debian
+    - Fixed references to configuration directory
+
+  * debian/etc/settings.php
+    - Apply fixes from upstream version (Closes: #435433)
+
+ -- Luigi Gangitano <luigi@debian.org>  Fri, 27 Jul 2007 02:12:20 +0200
+
+drupal5 (5.2-1) unstable; urgency=high
+
+  [ Luigi Gangitano ]
+  * Urgency high due to security fixes
+
+  * New upstream release
+    - Fixes XSS in server variables (Ref: DRUPAL-SA-2007-018, CVE: TBD)
+    - Fixes XSRF in Forms API (Ref: DRUPAL-SA-2007-017, CVE: TBD)
+
+  * debian/copyright
+    - Fixed FSF address to make lintian happy
+
+  * debian/control
+    - Removed dependencies on php4
+    - Updated httpd real package dependency to apache2
+    - Changed Build-Depend-Indep to Build-Depend (policy 7.6)
+
+ -- Luigi Gangitano <luigi@debian.org>  Fri, 27 Jul 2007 01:48:04 +0200
+
+drupal5 (5.1-3) unstable; urgency=low
+
+  [ Luigi Gangitano ]
+  * debian/control
+    - Removed dependencies on 8.1 version of postgresql packages
+    - Fixed typo in postgresql-server package (Closes: #429229)
+
+ -- Luigi Gangitano <luigi@debian.org>  Wed, 29 Jun 2007 21:39:33 +0200
+
+drupal5 (5.1-2) unstable; urgency=low
+
+  [ Luigi Gangitano ]
+  - debian/control
+    * Added Xs-Vcs-{Svn,Browser} tags
+
+  - debian/README.Debian
+    * Added istructions on Postgres database install and PHP memory limit
+      (Closes: #427001)
+
+  [ Bart Cornelis (cobaco) ]
+  - New Norwegian Bokmael translation by Hans Fredrik Nordhaug
+
+ -- Luigi Gangitano <luigi@debian.org>  Tue, 13 Mar 2007 00:21:14 +0100
+
+drupal5 (5.1-1) unstable; urgency=low
+  
+  [ Luigi Gangitano ]
+  * New upstream release (Closes: #409522)
+
+  * debian/{links,drupal5.install,cron.d,etc/apache.conf}
+    - Applied patch from Karl-Heinz Nirschl fixing paths
+
+  [ Bart Cornelis ]
+  Translations
+  * Updated Dutch translation by Bart Cornelis
+  * Updated Japanese translation by Hideki Yamane
+  * Updated German translation by  Helge Kreutzmann (Closes: #413891)
+  * Updated Portuguese translation by Miguel Figueiredo (Closes: #413905)
+  * New Swedisch Translation by Daniel Nylander
+  * New Tamil translation by Tirumurti Vasudevan (Closes: #413824)
+  * New Czech translation by Miroslav Kure (Closes: #413798)
+  * New Russion translation by Yuriy Talakan (Closes: #414063)
+  * New Basque translation by  Piarres Beobide (Closes: #413966)
+  * New Galician translation by Jacobo Tarrio (Closes: #413764)
+
+ -- Luigi Gangitano <luigi@debian.org>  Sat, 10 Mar 2007 20:04:24 +0100
+
+drupal5 (5.0-1) UNRELEASED; urgency=low
+
+  * (NOT RELEASED YET) New upstream release
+
+  * debian/*
+    - Rename file and directories from 4.7 to 5
+    - In debian/control switch to Source: drupal5
+    - Add watch file
+
+  * debian/control
+    - Removed Suggests on ssl enabled packages
+    - Removed dependencies on apache and added dependency on httpd | apache
+    - Added dependency on php4-gd | php5-gd
+
+  * debian/{rules,drupal5.install}
+    - Removed reference to not-existing directory 'database'
+
+  * debian/patches/10_cronjob.dpatch
+    - Updated patch to new cron script
+
+ -- Luigi Gangitano <luigi@debian.org>  Fri, 26 Jan 2007 20:04:24 +0100
+
+drupal (4.7.5-2) UNRELEASED; urgency=low
+
+  [ Luigi Gangitano ]
+  * NOT RELEASED YET
+
+  * debian/control
+    - Bumped Standards-Version to 3.7.2 (no change needed)
+    - Removed dependency on postgsql-{client,server}-8.0 which is not in
+      the archive anymore
+
+  * Translations
+    - Updated Dutch translations by Bart Cornelis
+
+ -- Bart Cornelis (cobaco) <cobaco@linux.be>  Tue, 23 Jan 2007 11:50:45 +0100
+
+drupal (4.7.5-1) unstable; urgency=low
+
+  * New upstream release
+    - Fixes Denial of Service (DRUPAL-SA-2007-002)
+    - Fixes CSS Vulnerability (DRUPAL-SA-2007-001)
+
+ -- Luigi Gangitano <luigi@debian.org>  Sun,  7 Jan 2007 00:33:33 +0100
+
+drupal (4.7.4-3) unstable; urgency=low
+
+  * debian/po/fr.po
+    - Updated French debconf templates translation (Thanks to Thomas Huriaux)
+      (Closes: #404967)
+  
+  * debian/control
+    - Add php5 dependency (Closes: #405162)
+
+ -- Luigi Gangitano <luigi@debian.org>  Sun,  7 Jan 2007 00:13:36 +0100
+
+drupal (4.7.4-2) unstable; urgency=low
+
+  * debian/control
+    - Fixed dependency on postgresql-client
+    - Removed dependency on makepasswd (not needed since we use
+      dbconfig.common)
+    - Removed dependency on php4-cli (not needed with new cron script)
+    - Promote Recommends: php4 to Depends: php4
+
+  * debian/etc/settings.php
+    - Fix warning if baseurl.php does not exists
+
+  * debian/copyright
+    - Fixed copyright information as requested by ftp-master
+
+ -- Luigi Gangitano <luigi@debian.org>  Tue,  5 Dec 2006 15:37:25 +0100
+
+drupal (4.7.4-1) unstable; urgency=low
+
+  * Prepare package for new inclusion in Debian
+    - Thanks to Karl-Heinz Nirschl for keeping this package in his repository
+      and allowing me to start from his work
+    - Change (binary) package name to drupal-4.7 allowing for multiple version
+      to be installed concurrently, so admins can control upgrade between
+      releases
+    - Add dependency on dbconfig-common and switch custom config script to use
+      functions provided by dbconfig-common (Closes: #366692)
+    - Removed unused templates
+    - Added dependency on curl for cron script execution
+    - Take over removal request (Closes: #375496)
+    - Update to latest revision (Closes: #307821, #365047, #365709)
+
+ -- Luigi Gangitano <luigi@debian.org>  Thu, 23 Nov 2006 21:53:19 +0100
+
+drupal (4.7.4-0brainlog1) unstable; urgency=low
+
+  * new upstream release because patches do not apply cleanly
+  * fixes: DRUPAL-SA-2006-024, DRUPAL-SA-2006-025, DRUPAL-SA-2006-026
+
+ -- Karl-Heinz Nirschl <khn@bluejack.ath.cx>  Fri, 20 Oct 2006 19:26:16 +0200
+
+drupal (4.7.2-0brainlog4) unstable; urgency=low
+
+  * add security fix DRUPAL-SA-2006-011
+    XSS Vulnerability in user module
+  * move scripts dir to doc
+
+ -- Karl-Heinz Nirschl <khn@bluejack.ath.cx>  Thu,  3 Aug 2006 19:46:57 +0200
+
+drupal (4.7.2-0brainlog3) unstable; urgency=low
+
+  * fix initial database generation - now checks for mysql version
+
+ -- Karl-Heinz Nirschl <khn@bluejack.ath.cx>  Sat,  8 Jul 2006 13:13:12 +0200
+
+drupal (4.7.2-0brainlog2) unstable; urgency=low
+
+  * Using a fresh tarball and no .svn files.
+  * Fix x. permissions.
+  * Use debian mysql maint password for mysql install
+
+ -- Tzafrir Cohen <tzafrir@cohens.org.il>  Fri,  7 Jul 2006 15:59:41 +0300
+
+drupal (4.7.2-0brainlog1) unstable; urgency=low
+
+  * new upstream release
+  * add patch handling to package
+    - make cron job less verbose
+
+ -- Karl-Heinz Nirschl <khn@bluejack.ath.cx>  Fri, 16 Jun 2006 17:13:50 +0200
+
+drupal (4.7.1-0brainlog1) unstable; urgency=low
+
+  * new upstream version
+
+ -- Karl-Heinz Nirschl <khn@manatorg.ath.cx>  Mon, 29 May 2006 14:01:48 +0200
+
+drupal (4.6.5-0brainlog1) unstable; urgency=low
+
+  * update to drupal 4.6.5 (new upstream)
+
+ -- Karl-Heinz Nirschl <khn@maggie.ubi>  Mon, 29 May 2006 13:58:55 +0200
+
+drupal (4.6.3-0brainlog1) unstable; urgency=low
+
+  * New upstream version (Closes: #307821)
+  * based on the drupal 4.5.2-4 debian package
+  * remove the auto update database stuff
+  * added debconf entry for the base_url
+
+ -- Karl-Heinz Nirschl <khn@bluejack.ath.cx>  Thu, 29 Sep 2005 19:10:17 +0200
+
+drupal (4.5.2-4) unstable; urgency=low
+
+  * [Miguel Figueiredo <elmig@debianpt.org>] Added Portuguese translation
+    (Closes: #301394)
+  * [Valentina Commissari <ayor@quaqua.net>] Added Italian translation 
+    (Closes: #301946)
+  * [Gleydson Mazioli da Silva <gleydson@debian.org>] Updated Brazilian
+    Portuguese translation.
+  * Fixed typo in package description (Closes: #306997)
+
+ -- Hilko Bengen <bengen@debian.org>  Thu, 19 May 2005 21:23:27 +0200
+
+drupal (4.5.2-3) unstable; urgency=high
+
+  * Fixes "Bypass access via comments" problem mentioned in
+    http://drupal.org/node/19009.  Patch from Gerhard Killesreiter, thanks.
+    I consider this a critical bug, hence urgency=high.
+  * [Sergio Talens-Oliag <sto@debian.org>] Updated Spanish and Catalan
+    Debconf translations and converted them to UTF-8.
+
+ -- Hilko Bengen <bengen@debian.org>  Tue, 22 Mar 2005 11:14:36 +0100
+
+drupal (4.5.2-2) unstable; urgency=low
+
+  * Changed includes/bootstrap.inc: conf.php (or $site.php) is loaded from
+    /etc/drupal directly, without the need for any link.
+  * Removed indentations from sed script which is used to edit the
+    configuration file.
+  * Rolled back session.inc to version found in 4.5.1; fixes bug documented
+    in http://drupal.org/node/15666
+  * Added documentation about manual update procedure in README.Debian
+    and Debconf templates (Closes: #293804)
+  * Added documentation about adding modules and themes that are not
+    part of the package.
+  * NEWS.Debian mentions where to get Marvin and UnConeD themes that used
+    to be part of the Drupal distribution.
+
+ -- Hilko Bengen <bengen@debian.org>  Tue, 15 Mar 2005 15:16:26 +0100
+
+drupal (4.5.2-1) unstable; urgency=low
+
+  * New upstream version (Closes: #290745; That was fast, wasn't it?)
+  * Updates Japanese Debconf template, thanks to Hideki Yamane 
+    (Closes: #290439)
+  * The config file /etc/drupal/conf.php is only generated if it hasn't
+    existed. It is no longer edited.
+
+ -- Hilko Bengen <bengen@debian.org>  Sun, 16 Jan 2005 14:49:50 +0100
+
+drupal (4.5.1-2) unstable; urgency=low
+
+  * /etc/drupal/conf.php is no longer a conffile (Closes: #289624)
+  * Should install with mysql-client-4.1 now (Closes: #285733)
+
+ -- Hilko Bengen <bengen@debian.org>  Wed, 12 Jan 2005 02:16:28 +0100
+
+drupal (4.5.1-1) unstable; urgency=low
+
+  * New upstream version (Closes: #277547, #289216, #278345)
+  * Marvin and UnConeD have been split off into separate packages, as they
+    are not officially supported by upstream any longer.
+  * Added Japanese Debconf template (Closes: #288040)
+
+ -- Hilko Bengen <bengen@debian.org>  Sun,  9 Jan 2005 04:21:03 +0100
+
+drupal (4.4.2-2) unstable; urgency=low
+
+  * Bump version dependency to 0.0.37 where better support for PostgreSQL
+    is included (Closes: 263730)
+  * Another patch to node.module for DB-independennce (Closes: 258015)
+
+ -- Hilko Bengen <bengen@debian.org>  Wed, 18 Aug 2004 00:39:58 +0200
+
+drupal (4.4.2-1) unstable; urgency=low
+
+  * New upstream bugfix release
+    - PostgreSQL support fixed in node.module
+      (Closes: #258015, #258016)
+  * Fixed sed statement in postinst so it will work with woody's sed.
+    (Closes: #257529)
+  * Depends: sharutils (Closes: #258156)
+  * Cron script checks whether /usr/share/drupal/scripts/cron.sh exists
+    and is executable (Closes: #251853)
+
+ -- Hilko Bengen <bengen@debian.org>  Tue, 20 Jul 2004 00:03:06 +0200
+
+drupal (4.4.1-3) unstable; urgency=low
+
+  * Included Marvin and Unconed themes from contrib (Closes: #255039)
+
+ -- Hilko Bengen <bengen@debian.org>  Mon, 28 Jun 2004 14:34:40 +0200
+
+drupal (4.4.1-2) unstable; urgency=high
+
+  * Applied admin_node.patch from <http://drupal.org/node/view/7096>
+    against the "Invalid argument supplied for foreach() in
+    /usr/share/drupal/modules/node.module" error (Closes: #242992)
+  * Fixed removal of links in webserver directories
+  * Shut up cron.sh (Closes: #251853)
+  * Install misc/ directory (images and css) (Closes: #253550)
+  * Fixed PostgreSQL removal, added some docs (Closes: #253282)
+
+ -- Hilko Bengen <bengen@debian.org>  Thu, 10 Jun 2004 16:06:47 +0200
+
+drupal (4.4.1-1) unstable; urgency=low
+
+  * New upstream version (Closes: #246307)
+  * Added <CR> to cron.d (Closes: #242199)
+  * Create language in database/database.pgsql (Closes: #242572)
+  * Fixed dependencies (Closes: #242622):
+    - Depends on php4-cgi (since it's used by maintainer scripts)
+    - Recommends: php4 | libapache2-mod-php4 (After all, one _can_ run
+      Drupal with a PHP-CGI setup
+  * Fixed generation of links in webserver directories (Closes: #249488)
+  * Out-of-the-box support for multiple sites (Closes: #246009)
+  * Put themes directory under /usr/share/drupal. Themes are no longer
+    handled as conffiles.
+  * Fixed path to database.mysql in README.Debian (Closes: #246414)
+
+ -- Hilko Bengen <bengen@debian.org>  Tue, 25 May 2004 10:12:34 +0200
+
+drupal (4.3.2-3) unstable; urgency=low
+
+  * Rewrote README.Debian, copying substantial parts from the INSTALL file
+    (Closes: #240505)
+  * Re-added a (commented-out) directive for restricting access to
+    admin.php to htaccess file
+
+ -- Hilko Bengen <bengen@debian.org>  Sun, 28 Mar 2004 17:38:11 +0200
+
+drupal (4.3.2-2) unstable; urgency=low
+
+  * [Bart Cornelis <cobaco@linux.be>] Added Dutch debconf translation
+    (Closes: #232230)
+  * [Sergio Talens-Oliag <sto@debian.org>] Added Spanish and Catalan
+    debconf translations (Closes: #235018
+  * [Gleydson Mazioli da Silva <gleydson@debian.org>] Added Brazilian
+    Portugese debconf translation (Closes: #185829)
+  * [Christian Perrier <bubulle@debian.org>] Added French debconf translation
+    (Closes: #200722)
+  * Added German debconf translation
+
+ -- Hilko Bengen <bengen@debian.org>  Tue, 16 Mar 2004 00:43:55 +0100
+
+drupal (4.3.2-1) unstable; urgency=low
+
+  * New maintainer (Closes: #227771)
+  * New upstream release (Closes: #204241, #220066)
+    - Test shows that kuro5hin RSS feed can be imported just fine
+      (Closes: #184252)
+    - The encoding bug in ping.module appears to have been fixed
+      (Closes:  #215643)
+  * Revamped installation and automatic upgrade procedure
+    - Update sets password in config.php _and_ database (Closes: #193545)
+    - It's possible to install the package without performing any database
+      setup at all (Closes: #201202)
+  * Fixed /etc/drupal/apache.conf (Closes: #219143)
+  * Basic PostgreSQL support -- user and database are created
+    (Closes: #186563)
+  * Should work with apache2 (Closes: #235912)
+
+ -- Hilko Bengen <bengen@debian.org>  Thu, 11 Mar 2004 17:30:11 +0100
+
+drupal (4.1.0-10) unstable; urgency=low
+
+  * Maintainer field set to QA Group
+  * New Brazilian Portuguese debconf template translation, provided by
+    Andre Luis Lopes <andrelop@debian.org>. Closes: #228109
+ 
+ -- Emanuele Rocca <ema@debian.org>  Sun,  1 Feb 2004 20:35:04 +0100
+
+drupal (4.1.0-9.1) unstable; urgency=low
+
+  * NMU
+  * French debconf templates translation. Closes: #200722
+  * Correction to english templates for (I guess) better english and
+    formulations. Closes: #186566
+  * Brazilian portuguese debconf tempaltes translation. Closes: #185829
+
+ -- Christian Perrier <bubulle@debian.org>  Tue, 16 Sep 2003 08:55:38 +0200
+
+drupal (4.1.0-9) unstable; urgency=low
+
+  * Two corrections in postinst to allow manually setting up the DB 
+    on upgrade.
+  
+ -- Hugo Espuny <hec@debian.org>  Wed, 19 Mar 2003 22:02:50 +0100
+
+drupal (4.1.0-8) unstable; urgency=low
+
+  * Added patch from drupal.org (Closes: #185217)
+  * Minor typo on apache.conf 
+  * Now htaccess is set up dynamically.
+  * Example of restricted admin.php is now at htaccess
+  * Debconf now does not repeat questions after preconfiguring.
+
+ -- Hugo Espuny <hec@debian.org>  Wed, 19 Mar 2003 20:09:45 +0100
+
+drupal (4.1.0-7) unstable; urgency=high
+
+  * Added securing point to README.Debian
+  * Alias directive on /etc/drupal/apache.conf now is changed
+    dynamically according with debconf question.
+
+ -- Hugo Espuny <hec@debian.org>  Fri, 14 Mar 2003 20:33:29 +0100
+
+drupal (4.1.0-6) unstable; urgency=high
+
+  * Corrected postrm problem whe downgrading to certain versions.
+
+ -- Hugo Espuny <hec@debian.org>  Fri, 14 Mar 2003 19:38:15 +0100
+
+drupal (4.1.0-5) unstable; urgency=low
+
+  * Corrected mv themes order in rules file.
+
+ -- Hugo Espuny <hec@debian.org>  Fri, 14 Mar 2003 19:22:12 +0100
+
+drupal (4.1.0-4) unstable; urgency=low
+
+  * Corrected themes moving engine. (Closes: #184752)
+  * Themes are now configfiles (since 4.1.0-2). I forgot to say...
+
+ -- Hugo Espuny <hec@debian.org>  Fri, 14 Mar 2003 17:30:45 +0100
+
+drupal (4.1.0-3) unstable; urgency=low
+
+  * Updated to policy version 3.5.9
+
+ -- Hugo Espuny <hec@debian.org>  Fri, 14 Mar 2003 00:28:18 +0100
+
+drupal (4.1.0-2) unstable; urgency=low
+
+  * Corrected directive "AllowOverride None" to "AllowOverride All" in
+    /etc/drupal/apache.conf. (Closes: #184183)
+  * Corrected directive <DirectoryMatch> to <Directory> in
+    /etc/drupal/apache.conf.
+  * Corrected cron file, postinst and templates. Now debconf asks for the
+    whole URL, not only TCP port. (Closes: #184182) (Closes: #184182)
+    Thanks to John Goerzen <jgoerzen@complete.org> to point me those.  
+  * News feed now works properly. (Closes: #184252) (Closes: #184253)
+
+ -- Hugo Espuny <hec@debian.org>  Wed, 12 Mar 2003 18:25:35 +0100
+
+drupal (4.1.0-1) unstable; urgency=high
+
+  * New upstream version (Closes: #178506) (Closes: #173107)
+  * Moved to use po-debconf.
+  * Fixed README.Debian (Closes: #173103) (Closes: #184111)
+
+ -- Hugo Espuny <hec@debian.org>  Fri,  7 Mar 2003 21:09:02 +0100
+
+drupal (4.0-4) unstable; urgency=low
+
+  * Corrected a bug on cron.d file. 
+
+ -- Hugo Espuny <hec@debian.org>  Wed, 11 Dec 2002 22:39:16 +0100
+
+drupal (4.0-3) unstable; urgency=low
+
+   * Corrected /etc/cron.d/drupal (thanx to  Paul van Tilburg
+     <paulvt@debian.org>). (Closes: #172153)
+   * Corrected link in README.Debian. (Closes: #169949)
+   * Changed priority to extra.
+   * postrm now executes an abort install properly.
+   * Updated policy standars to 3.5.8
+
+ -- Hugo Espuny <hec@debian.org>  Tue, 10 Dec 2002 00:38:36 +0100
+
+drupal (4.0-2) unstable; urgency=low
+
+  * Minor typo correction in templates file.
+  * Minor bug correction about webserver port in postinst.
+  * Added versioned dependency on wget to support HTTPS
+  * Moved update.php to /usr/share/doc/drupal/upgrades
+
+ -- Hugo Espuny <hec@debian.org>  Wed, 30 Oct 2002 16:54:06 +0100
+
+drupal (4.0-1) unstable; urgency=low
+
+  * New debian package. (Closes: #164676)
+  * Code taken from phpnuke package.
+
+ -- Hugo Espuny <hec@debian.org>  Tue, 29 Oct 2002 21:21:26 +0100
+
--- drupal6-6.18.orig/debian/watch
+++ drupal6-6.18/debian/watch
@@ -0,0 +1,2 @@
+version=2
+http://ftp.osuosl.org/pub/drupal/files/projects/drupal-(6[\d\.]+)\.tar\.gz
--- drupal6-6.18.orig/debian/drupal6.prerm
+++ drupal6-6.18/debian/drupal6.prerm
@@ -0,0 +1,14 @@
+#! /bin/bash
+# prerm script for ${package_name}
+#
+
+set -e
+
+. /usr/share/debconf/confmodule
+. /usr/share/dbconfig-common/dpkg/prerm
+dbc_go drupal6 $@
+
+#DEBHELPER#
+
+exit 0
+
--- drupal6-6.18.orig/debian/etc/apache.conf
+++ drupal6-6.18/debian/etc/apache.conf
@@ -0,0 +1,8 @@
+Alias /drupal6 /usr/share/drupal6
+
+<Directory /usr/share/drupal6/>
+	Options +FollowSymLinks
+	AllowOverride All
+	order allow,deny
+	allow from all
+</Directory>
--- drupal6-6.18.orig/debian/etc/settings.php
+++ drupal6-6.18/debian/etc/settings.php
@@ -0,0 +1,170 @@
+<?php
+// $Id: settings.php,v 1.39.2.3 2007/07/09 04:28:12 drumm Exp $
+
+/**
+ * @file
+ * Drupal site-specific configuration file.
+ *
+ * IMPORTANT NOTE:
+ * This file may have been set to read-only by the Drupal installation
+ * program. If you make changes to this file, be sure to protect it again
+ * after making your modifications. Failure to remove write permissions
+ * to this file is a security risk.
+ *
+ * The configuration file to be loaded is based upon the rules below.
+ *
+ * The configuration directory will be discovered by stripping the
+ * website's hostname from left to right and pathname from right to
+ * left. The first configuration file found will be used and any
+ * others will be ignored. If no other configuration file is found
+ * then the default configuration file at 'sites/default' will be used.
+ *
+ * For example, for a fictitious site installed at
+ * http://www.drupal.org/mysite/test/, the 'settings.php'
+ * is searched in the following directories:
+ *
+ *  1. sites/www.drupal.org.mysite.test
+ *  2. sites/drupal.org.mysite.test
+ *  3. sites/org.mysite.test
+ *
+ *  4. sites/www.drupal.org.mysite
+ *  5. sites/drupal.org.mysite
+ *  6. sites/org.mysite
+ *
+ *  7. sites/www.drupal.org
+ *  8. sites/drupal.org
+ *  9. sites/org
+ *
+ * 10. sites/default
+ *
+ * If you are installing on a non-standard port number, prefix the
+ * hostname with that number. For example,
+ * http://www.drupal.org:8080/mysite/test/ could be loaded from
+ * sites/8080.www.drupal.org.mysite.test/.
+ */
+
+/**
+ * Database settings:
+ *
+ * Note that the $db_url variable gets parsed using PHP's built-in
+ * URL parser (i.e. using the "parse_url()" function) so make sure
+ * not to confuse the parser. If your username, password
+ * or database name contain characters used to delineate
+ * $db_url parts, you can escape them via URI hex encodings:
+ *
+ *   : = %3a   / = %2f   @ = %40
+ *   + = %2b   ( = %28   ) = %29
+ *   ? = %3f   = = %3d   & = %26
+ *
+ * To specify multiple connections to be used in your site (i.e. for
+ * complex custom modules) you can also specify an associative array
+ * of $db_url variables with the 'default' element used until otherwise
+ * requested.
+ *
+ * You can optionally set prefixes for some or all database table names
+ * by using the $db_prefix setting. If a prefix is specified, the table
+ * name will be prepended with its value. Be sure to use valid database
+ * characters only, usually alphanumeric and underscore. If no prefixes
+ * are desired, leave it as an empty string ''.
+ *
+ * To have all database names prefixed, set $db_prefix as a string:
+ *
+ *   $db_prefix = 'main_';
+ *
+ * To provide prefixes for specific tables, set $db_prefix as an array.
+ * The array's keys are the table names and the values are the prefixes.
+ * The 'default' element holds the prefix for any tables not specified
+ * elsewhere in the array. Example:
+ *
+ *   $db_prefix = array(
+ *     'default'   => 'main_',
+ *     'users'     => 'shared_',
+ *     'sessions'  => 'shared_',
+ *     'role'      => 'shared_',
+ *     'authmap'   => 'shared_',
+ *     'sequences' => 'shared_',
+ *   );
+ *
+ * Database URL format:
+ *   $db_url = 'mysql://username:password@localhost/databasename';
+ *   $db_url = 'mysqli://username:password@localhost/databasename';
+ *   $db_url = 'pgsql://username:password@localhost/databasename';
+ */
+require_once('dbconfig.php');
+if (!isset($dbserver) || empty($dbserver))
+	$dbserver='localhost';
+$db_url = "$dbtype://$dbuser:$dbpass@$dbserver/$dbname";
+$db_prefix = '';
+
+/**
+ * Base URL (optional).
+ *
+ * If you are experiencing issues with different site domains,
+ * uncomment the Base URL statement below (remove the leading hash sign)
+ * and fill in the URL to your Drupal installation.
+ *
+ * You might also want to force users to use a given domain.
+ * See the .htaccess file for more information.
+ *
+ * Examples:
+ *   $base_url = 'http://www.example.com';
+ *   $base_url = 'http://www.example.com:8888';
+ *   $base_url = 'http://www.example.com/drupal';
+ *   $base_url = 'https://www.example.com:8888/drupal';
+ *
+ * It is not allowed to have a trailing slash; Drupal will add it
+ * for you.
+ */
+# $base_url = 'http://www.example.com';  // NO trailing slash!
+if (file_exists('baseurl.php')) 
+	include_once('baseurl.php');
+
+/**
+ * PHP settings:
+ *
+ * To see what PHP settings are possible, including whether they can
+ * be set at runtime (ie., when ini_set() occurs), read the PHP
+ * documentation at http://www.php.net/manual/en/ini.php#ini.list
+ * and take a look at the .htaccess file to see which non-runtime
+ * settings are used there. Settings defined here should not be
+ * duplicated there so as to avoid conflict issues.
+ */
+ini_set('arg_separator.output',     '&amp;');
+ini_set('magic_quotes_runtime',     0);
+ini_set('magic_quotes_sybase',      0);
+ini_set('session.cache_expire',     200000);
+ini_set('session.cache_limiter',    'none');
+ini_set('session.cookie_lifetime',  2000000);
+ini_set('session.gc_maxlifetime',   200000);
+ini_set('session.save_handler',     'user');
+ini_set('session.use_only_cookies', 1);
+ini_set('session.use_trans_sid',    0);
+ini_set('url_rewriter.tags',        '');
+
+/**
+ * Drupal automatically generates a unique session cookie name for each site
+ * based on on its full domain name. If you have multiple domains pointing at
+ * the same Drupal site, you can either redirect them all to a single domain
+ * (see comment in .htaccess), or uncomment the line below and specify their
+ * shared base domain. Doing so assures that users remain logged in as they
+ * cross between your various domains.
+ */
+# $cookie_domain = 'example.com';
+
+/**
+ * Variable overrides:
+ *
+ * To override specific entries in the 'variable' table for this site,
+ * set them here. You usually don't need to use this feature. This is
+ * useful in a configuration file for a vhost or directory, rather than
+ * the default settings.php. Any configuration setting from the 'variable'
+ * table can be given a new value.
+ *
+ * Remove the leading hash signs to enable.
+ */
+# $conf = array(
+#   'site_name' => 'My Drupal site',
+#   'theme_default' => 'minnelli',
+#   'anonymous' => 'Visitor',
+# );
+
--- drupal6-6.18.orig/debian/patches/00list
+++ drupal6-6.18/debian/patches/00list
@@ -0,0 +1,2 @@
+10_cronjob
+20_drupal_core_updates
--- drupal6-6.18.orig/debian/patches/20_drupal_core_updates.dpatch
+++ drupal6-6.18/debian/patches/20_drupal_core_updates.dpatch
@@ -0,0 +1,79 @@
+#! /bin/sh /usr/share/dpatch/dpatch-run
+## drupal_core_updates.dpatch by Alexandre De Dommelin <adedommelin@tuxz.net>
+##
+## All lines beginning with `## DP:' are a description of the patch.
+## DP: Remove warnings about available Drupal core updates
+
+@DPATCH@
+diff -urNad drupal6~/modules/update/update.fetch.inc drupal6/modules/update/update.fetch.inc
+--- drupal6~/modules/update/update.fetch.inc	2010-02-10 17:39:19.000000000 +0100
++++ drupal6/modules/update/update.fetch.inc	2010-02-10 22:09:43.000000000 +0100
+@@ -153,12 +153,10 @@
+   $status = update_requirements('runtime');
+   $params = array();
+   $notify_all = (variable_get('update_notification_threshold', 'all') == 'all');
+-  foreach (array('core', 'contrib') as $report_type) {
+-    $type = 'update_'. $report_type;
+-    if (isset($status[$type]['severity'])
+-        && ($status[$type]['severity'] == REQUIREMENT_ERROR || ($notify_all && $status[$type]['reason'] == UPDATE_NOT_CURRENT))) {
+-      $params[$report_type] = $status[$type]['reason'];
+-    }
++
++  if (isset($status['update_contrib']['severity'])
++      && ($status['update_contrib']['severity'] == REQUIREMENT_ERROR || ($notify_all && $status['update_contrib']['reason'] == UPDATE_NOT_CURRENT))) {
++    $params['contrib'] = $status['update_contrib']['reason'];
+   }
+   if (!empty($params)) {
+     $notify_list = variable_get('update_notify_emails', '');
+diff -urNad drupal6~/modules/update/update.module drupal6/modules/update/update.module
+--- drupal6~/modules/update/update.module	2010-02-10 21:42:41.000000000 +0100
++++ drupal6/modules/update/update.module	2010-02-10 22:07:29.000000000 +0100
+@@ -74,15 +74,13 @@
+     case 'admin/build/modules':
+       include_once './includes/install.inc';
+       $status = update_requirements('runtime');
+-      foreach (array('core', 'contrib') as $report_type) {
+-        $type = 'update_'. $report_type;
+-        if (isset($status[$type]['severity'])) {
+-          if ($status[$type]['severity'] == REQUIREMENT_ERROR) {
+-            drupal_set_message($status[$type]['description'], 'error');
+-          }
+-          elseif ($status[$type]['severity'] == REQUIREMENT_WARNING) {
+-            drupal_set_message($status[$type]['description'], 'warning');
+-          }
++
++      if (isset($status['update_contrib']['severity'])) {
++        if ($status['update_contrib']['severity'] == REQUIREMENT_ERROR) {
++          drupal_set_message($status['update_contrib']['description'], 'error');
++        }
++        elseif ($status['update_contrib']['severity'] == REQUIREMENT_WARNING) {
++          drupal_set_message($status['update_contrib']['description'], 'warning');
+         }
+       }
+       return '<p>'. t('See the <a href="@available_updates">available updates</a> page for information on installed modules and themes with new versions released.', array('@available_updates' => url('admin/reports/updates'))) .'</p>';
+@@ -203,7 +201,7 @@
+       module_load_include('inc', 'update', 'update.compare');
+       $data = update_calculate_project_data($available);
+       // First, populate the requirements for core:
+-      $requirements['update_core'] = _update_requirement_check($data['drupal'], 'core');
++      //$requirements['update_core'] = _update_requirement_check($data['drupal'], 'core');
+       // We don't want to check drupal a second time.
+       unset($data['drupal']);
+       if (!empty($data)) {
+diff -urNad drupal6~/modules/update/update.report.inc drupal6/modules/update/update.report.inc
+--- drupal6~/modules/update/update.report.inc	2010-02-10 21:42:41.000000000 +0100
++++ drupal6/modules/update/update.report.inc	2010-02-10 22:07:29.000000000 +0100
+@@ -223,6 +223,13 @@
+     'disabled-theme' => t('Disabled themes'),
+   );
+   foreach ($project_types as $type_name => $type_label) {
++    if ( $type_name == "core" ) {
++            $deb_message = array( array('class' => 'info','data' => array("Drupal core updates (including security patches) are applied by your sysadmin through the Debian package management system, you don't need to manually download them.")));
++            $output .= "\n<h3>". $type_label ."</h3>\n";
++            $output .= theme('table', $header, $deb_message,array('class' => 'update'));
++            continue;
++    }
++
+     if (!empty($rows[$type_name])) {
+       ksort($rows[$type_name]);
+       $output .= "\n<h3>". $type_label ."</h3>\n";
--- drupal6-6.18.orig/debian/patches/10_cronjob.dpatch
+++ drupal6-6.18/debian/patches/10_cronjob.dpatch
@@ -0,0 +1,19 @@
+#! /bin/sh /usr/share/dpatch/dpatch-run
+## 10_cronjob.dpatch by  <khn@bluejack.ath.cx>
+##
+## All lines beginning with `## DP:' are a description of the patch.
+## DP: Disable reporting to system log every cron run
+
+@DPATCH@
+diff -urNad drupal6~/includes/common.inc drupal6/includes/common.inc
+--- drupal6~/includes/common.inc	2008-02-18 12:32:44.000000000 +0100
++++ drupal6/includes/common.inc	2008-02-18 12:37:09.000000000 +0100
+@@ -2540,7 +2540,7 @@
+ 
+     // Record cron time
+     variable_set('cron_last', time());
+-    watchdog('cron', 'Cron run completed.', array(), WATCHDOG_NOTICE);
++    #watchdog('cron', 'Cron run completed.', array(), WATCHDOG_NOTICE);
+ 
+     // Release cron semaphore
+     variable_del('cron_semaphore');
