fix pts mem vulnerability, with new -encrypt option

[invirt/packages/invirt-web.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index 13bb4bd..f7ad007 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,37 @@
+invirt-web (0.0.16) unstable; urgency=low
+
+  * Fix a security vulnerability: traditional `pts mem` is in cleartext
+    and could be spoofed.  Use new -encrypt option, which needs tokens.
+
+  * make initscript stop command not leave apache2 processes lying around
+    (so that restart works)
+
+ -- Greg Price <price@mit.edu>  Tue, 30 Dec 2008 17:31:48 -0500
+
+invirt-web (0.0.15) unstable; urgency=low
+
+  * config.{authn[0] => kerberos}.realm
+
+ -- Evan Broder <broder@mit.edu>  Wed, 10 Dec 2008 23:30:46 -0500
+
+invirt-web (0.0.14) unstable; urgency=low
+
+  * Depend on invirt-web-iptables
+
+ -- Evan Broder <broder@mit.edu>  Sun, 07 Dec 2008 09:12:45 -0500
+
+invirt-web (0.0.13) unstable; urgency=low
+
+  * Add cron dependency
+
+ -- Evan Broder <broder@mit.edu>  Thu, 20 Nov 2008 11:01:12 -0500
+
+invirt-web (0.0.12) unstable; urgency=low
+
+  * Whoops - forgot to drop an option to k5start
+
+ -- Evan Broder <broder@mit.edu>  Mon, 17 Nov 2008 04:59:31 -0500
+
 invirt-web (0.0.11) unstable; urgency=low
 
   * Use daemon/$HOSTNAME for the svn repository instead of the first