Add a hint about how to merge existing SSH keys

[mirror/userdir-ldap-cgi.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index 816caf2..40b62b2 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,35 @@
+userdir-ldap-cgi (0.3.40) UNRELEASED; urgency=medium
+
+  [ Peter Palfrader ]
+  * Add dependency on libcrypt-cbc-perl.
+  * Use $config{maildomain} in update.cgi instead of hardcoded db.d.o.
+  * Use $config{sslcafile} instead of hardcoding the path to the SSL CA
+    in Util.pm.
+
+  [ Paul Wise ]
+  * ravel is no longer recommended for general shell usage
+  * Add a hint about how to merge existing SSH keys
+
+ -- Peter Palfrader <weasel@debian.org>  Sat, 03 Jan 2015 13:56:47 +0100
+
+userdir-ldap-cgi (0.3.39) unstable; urgency=medium
+
+  [ Peter Palfrader ]
+  * Fix changelog entries.  The previos "UNRELEASED" version
+    was actually released.
+  * Use new CA root cert in Util.pm.
+  * Fix a XSS reported in
+    https://trac.torproject.org/projects/tor/ticket/14037
+  * Fix horrible use of crypto primitives.
+  * Add HMAC authentication to authtoken.
+  * Verify that the uid passed as a get parameters matches the
+    one stored in authtoken.
+
+  [ Hector Oron ]
+  * machines.cgi: add description field, more informative.
+
+ -- Peter Palfrader <weasel@debian.org>  Sat, 03 Jan 2015 13:30:18 +0100
+
 userdir-ldap-cgi (0.3.38~20130906+1+nmu1) UNRELEASED; urgency=low
 
   [ Moritz Naumann ]
@@ -15,6 +47,7 @@ userdir-ldap-cgi (0.3.38~20130906+1+nmu1) UNRELEASED; urgency=low
   * Joey is no longer involved in the debian-admin team.
   * Fix typo in doctype
   * Switch from http to https links where possible.
+  * Slightly nicer attribute list output
 
  -- Luca Filipozzi <lfilipoz@emyr.net>  Thu, 16 Jan 2014 23:22:03 +0000