X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=debian%2Fchangelog;h=91c2496d8bac80528ea149decf1d72adb388b66b;hb=b676960875b6a9fa079d8f9ce12ab8518f95f420;hp=2f51e5cd18a2275446c80394415ff2a09982b9a9;hpb=805746a65b872033b3d0caa4b8dcfc5dac61208b;p=mirror%2Fuserdir-ldap-cgi.git

diff --git a/debian/changelog b/debian/changelog
index 2f51e5c..91c2496 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,27 @@
+userdir-ldap-cgi (0.3.40) UNRELEASED; urgency=medium
+
+  * 
+
+ -- Peter Palfrader <weasel@debian.org>  Sat, 03 Jan 2015 13:33:46 +0100
+
+userdir-ldap-cgi (0.3.39) unstable; urgency=medium
+
+  [ Peter Palfrader ]
+  * Fix changelog entries.  The previos "UNRELEASED" version
+    was actually released.
+  * Use new CA root cert in Util.pm.
+  * Fix a XSS reported in
+    https://trac.torproject.org/projects/tor/ticket/14037
+  * Fix horrible use of crypto primitives.
+  * Add HMAC authentication to authtoken.
+  * Verify that the uid passed as a get parameters matches the
+    one stored in authtoken.
+
+  [ Hector Oron ]
+  * machines.cgi: add description field, more informative.
+
+ -- Peter Palfrader <weasel@debian.org>  Sat, 03 Jan 2015 13:30:18 +0100
+
 userdir-ldap-cgi (0.3.38~20130906+1+nmu1) UNRELEASED; urgency=low
 
   [ Moritz Naumann ]