+userdir-ldap-cgi (0.3.39) unstable; urgency=medium
+
+ [ Peter Palfrader ]
+ * Fix changelog entries. The previos "UNRELEASED" version
+ was actually released.
+ * Use new CA root cert in Util.pm.
+ * Fix a XSS reported in
+ https://trac.torproject.org/projects/tor/ticket/14037
+ * Fix horrible use of crypto primitives.
+ * Add HMAC authentication to authtoken.
+ * Verify that the uid passed as a get parameters matches the
+ one stored in authtoken.
+
+ [ Hector Oron ]
+ * machines.cgi: add description field, more informative.
+
+ -- Peter Palfrader <weasel@debian.org> Sat, 03 Jan 2015 13:30:18 +0100
+
userdir-ldap-cgi (0.3.38~20130906+1+nmu1) UNRELEASED; urgency=low
[ Moritz Naumann ]
[ Tollef Fog Heen ]
* Exclude users with accountStatus set from the search.
+ [ Paul Wise ]
+ * Fix the type and location of the VCS repository.
+ * Joey is no longer involved in the debian-admin team.
+ * Fix typo in doctype
+ * Switch from http to https links where possible.
+ * Slightly nicer attribute list output
+
-- Luca Filipozzi <lfilipoz@emyr.net> Thu, 16 Jan 2014 23:22:03 +0000
userdir-ldap-cgi (0.3.37) unstable; urgency=low