X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=debian%2Fchangelog;h=fa01b92612a4942e3661da3034300222002a5dc8;hb=f6529c2ecdc28d6b192138fb26e22dd3699121c9;hp=c072afa908280a3d846f1fd8b263b6c1a218be65;hpb=173d946672400aef8b5230210443f037bea16a4f;p=mirror%2Fuserdir-ldap-cgi.git

diff --git a/debian/changelog b/debian/changelog
index c072afa..fa01b92 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,13 +1,77 @@
-userdir-ldap-cgi (0.3.37) UNRELEASED; urgency=low
+userdir-ldap-cgi (0.3.40) UNRELEASED; urgency=medium
+
+  [ Peter Palfrader ]
+  * Add dependency on libcrypt-cbc-perl.
+  * Use $config{maildomain} in update.cgi instead of hardcoded db.d.o.
+  * Use $config{sslcafile} instead of hardcoding the path to the SSL CA
+    in Util.pm.
+
+  [ Paul Wise ]
+  * ravel is no longer recommended for general shell usage
+  * Add a hint about how to merge existing SSH keys
+  * Update LDAP search docs for the usergroups changes
+  * Drop SSH key fingerprint info from machines.cgi pages
+  * Give an example of the show command
+
+  [ Tollef Fog Heen ]
+  * Use a bit more modern perl in Util.pm, drop defined for an array check.
+  * Add debian/compat with level 10.
+
+ -- Peter Palfrader <weasel@debian.org>  Sat, 03 Jan 2015 13:56:47 +0100
+
+userdir-ldap-cgi (0.3.39) unstable; urgency=medium
+
+  [ Peter Palfrader ]
+  * Fix changelog entries.  The previos "UNRELEASED" version
+    was actually released.
+  * Use new CA root cert in Util.pm.
+  * Fix a XSS reported in
+    https://trac.torproject.org/projects/tor/ticket/14037
+  * Fix horrible use of crypto primitives.
+  * Add HMAC authentication to authtoken.
+  * Verify that the uid passed as a get parameters matches the
+    one stored in authtoken.
+
+  [ Hector Oron ]
+  * machines.cgi: add description field, more informative.
+
+ -- Peter Palfrader <weasel@debian.org>  Sat, 03 Jan 2015 13:30:18 +0100
+
+userdir-ldap-cgi (0.3.38~20130906+1+nmu1) UNRELEASED; urgency=low
+
+  [ Moritz Naumann ]
+  * Fix XSS bug in search.cgi
+
+  [ Luca Filipozzi ]
+  * rename voipPassword to rtcPassword 
+  * store as HA1 hash rather than as plaintext
+
+  [ Tollef Fog Heen ]
+  * Exclude users with accountStatus set from the search.
+
+  [ Paul Wise ]
+  * Fix the type and location of the VCS repository.
+  * Joey is no longer involved in the debian-admin team.
+  * Fix typo in doctype
+  * Switch from http to https links where possible.
+  * Slightly nicer attribute list output
+
+ -- Luca Filipozzi <lfilipoz@emyr.net>  Thu, 16 Jan 2014 23:22:03 +0000
+
+userdir-ldap-cgi (0.3.37) unstable; urgency=low
 
   [ Martin Zobel-Helas ]
   * use libjs-jquery-tablesorter to sort machines.cgi
   * promote documentation on searchform.wml
+  * auto-generate html/domains.tab
+
+  [ Ramakrishnan Muthukrishnan ]
+  * typo: mail default handling incorrectly pointing to the greylist option.
 
   [ Nick Mathewson ]
   * Use the changes@ address consistently in preference to change@.
 
- -- Peter Palfrader <weasel@debian.org>  Sun, 10 Jun 2012 22:03:14 +0200
+ -- Martin Zobel-Helas <zobel@debian.org>  Sun, 25 Aug 2013 13:47:23 +0200
 
 userdir-ldap-cgi (0.3.36) unstable; urgency=low