+userdir-ldap-cgi (0.3.40) UNRELEASED; urgency=medium
+
+ [ Peter Palfrader ]
+ * Add dependency on libcrypt-cbc-perl.
+ * Use $config{maildomain} in update.cgi instead of hardcoded db.d.o.
+ * Use $config{sslcafile} instead of hardcoding the path to the SSL CA
+ in Util.pm.
+
+ [ Paul Wise ]
+ * ravel is no longer recommended for general shell usage
+ * Add a hint about how to merge existing SSH keys
+ * Update LDAP search docs for the usergroups changes
+
+ -- Peter Palfrader <weasel@debian.org> Sat, 03 Jan 2015 13:56:47 +0100
+
+userdir-ldap-cgi (0.3.39) unstable; urgency=medium
+
+ [ Peter Palfrader ]
+ * Fix changelog entries. The previos "UNRELEASED" version
+ was actually released.
+ * Use new CA root cert in Util.pm.
+ * Fix a XSS reported in
+ https://trac.torproject.org/projects/tor/ticket/14037
+ * Fix horrible use of crypto primitives.
+ * Add HMAC authentication to authtoken.
+ * Verify that the uid passed as a get parameters matches the
+ one stored in authtoken.
+
+ [ Hector Oron ]
+ * machines.cgi: add description field, more informative.
+
+ -- Peter Palfrader <weasel@debian.org> Sat, 03 Jan 2015 13:30:18 +0100
+
+userdir-ldap-cgi (0.3.38~20130906+1+nmu1) UNRELEASED; urgency=low
+
+ [ Moritz Naumann ]
+ * Fix XSS bug in search.cgi
+
+ [ Luca Filipozzi ]
+ * rename voipPassword to rtcPassword
+ * store as HA1 hash rather than as plaintext
+
+ [ Tollef Fog Heen ]
+ * Exclude users with accountStatus set from the search.
+
+ [ Paul Wise ]
+ * Fix the type and location of the VCS repository.
+ * Joey is no longer involved in the debian-admin team.
+ * Fix typo in doctype
+ * Switch from http to https links where possible.
+ * Slightly nicer attribute list output
+
+ -- Luca Filipozzi <lfilipoz@emyr.net> Thu, 16 Jan 2014 23:22:03 +0000
+
+userdir-ldap-cgi (0.3.37) unstable; urgency=low