Verify HMAC of invirt-vnc token before unpickling anything.

[invirt/packages/invirt-vnc-server.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index a98c1cf..435adf2 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,8 +1,83 @@
+invirt-vnc-server (0.0.11) unstable; urgency=low
+
+  * Verify HMAC of invirt-vnc token before unpickling anything.
+    Thanks to Nelson Elhage for the report.
+
+ -- Joshua Oreman <oremanj@mit.edu>  Mon, 14 Mar 2011 23:49:06 -0400
+
+invirt-vnc-server (0.0.10) unstable; urgency=low
+
+  * Add missing dependency on python-openssl.
+
+ -- Evan Broder <broder@mit.edu>  Mon, 19 Apr 2010 18:20:55 -0400
+
+invirt-vnc-server (0.0.9) unstable; urgency=low
+
+  * Prepare for a Xen 3.3 world by allowing either 3.2 or 3.3 packages.
+
+ -- Evan Broder <broder@mit.edu>  Fri, 20 Feb 2009 17:38:31 -0500
+
+invirt-vnc-server (0.0.8) unstable; urgency=low
+
+  * Depend on openssl - it's needed for the postinst.
+
+ -- Evan Broder <broder@mit.edu>  Fri, 30 Jan 2009 05:58:12 -0500
+
+invirt-vnc-server (0.0.7) unstable; urgency=low
+
+  * Generate certificates that last for 2 years
+
+ -- Quentin Smith <quentin@mit.edu>  Fri, 09 Jan 2009 11:22:14 -0500
+
+invirt-vnc-server (0.0.6) unstable; urgency=low
+
+  * Include the VNC host and port in the authentication token
+
+ -- Quentin Smith <quentin@mit.edu>  Thu, 08 Jan 2009 16:15:46 -0500
+
+invirt-vnc-server (0.0.5) unstable; urgency=low
+
+  * Use the generated certificate instead of the old /usr/share location
+
+ -- Evan Broder <broder@mit.edu>  Tue, 04 Nov 2008 04:23:51 -0500
+
+invirt-vnc-server (0.0.4) unstable; urgency=low
+
+  * Deprecate /etc/invirt/secrets in favor of /etc/invirt/vnc
+  * Include the hostname in the generated SSL certs so that the Java
+    keytool will accept them
+
+ -- Evan Broder <broder@mit.edu>  Tue, 28 Oct 2008 23:59:57 -0400
+
+invirt-vnc-server (0.0.3) unstable; urgency=low
+
+  * Fix a typo in the new init script
+
+ -- Evan Broder <broder@mit.edu>  Tue, 28 Oct 2008 22:58:59 -0400
+
+invirt-vnc-server (0.0.2) unstable; urgency=low
+
+  * Cleanup the init script to use /lib/init/std-init.sh
+  * Generate the SSL certificates at install-time
+  * File reads are cheap. Especially when the file is short. Don't cache
+    the token key
+
+ -- Evan Broder <broder@mit.edu>  Tue, 28 Oct 2008 22:48:24 -0400
+
+invirt-vnc-server (0.0.1) unstable; urgency=low
+
+  * sipb-xen-vnc-server -> invirt-vnc-server
+  * Generate the VNC token key at install-time instead of hard-coding
+  * Add a script for generating VNC auth tokens, to be exposed over remctl
+
+ -- Evan Broder <broder@mit.edu>  Tue, 28 Oct 2008 19:45:35 -0400
+
 sipb-xen-vnc-server (1.2) unstable; urgency=low
 
   * Move certificate files into /usr/share/sipb-xen-vnc-server
+  * Switch to distutils-based package
 
- -- Evan Broder <broder@mit.edu>  Tue, 28 Oct 2008 14:59:24 -0400
+ -- Evan Broder <broder@mit.edu>  Tue, 28 Oct 2008 15:07:33 -0400
 
 sipb-xen-vnc-server (1.1) unstable; urgency=low