X-Git-Url: http://xvm.mit.edu/gitweb/invirt/packages/invirt-web.git/blobdiff_plain/cca2307bae362ac6e3b76b14c753d9c775b6d7fb..eb558ecccf88e5606ecb3f961b624dd33c4a1faf:/debian/changelog

diff --git a/debian/changelog b/debian/changelog
index 216ed72..f7ad007 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,8 +1,18 @@
+invirt-web (0.0.16) unstable; urgency=low
+
+  * Fix a security vulnerability: traditional `pts mem` is in cleartext
+    and could be spoofed.  Use new -encrypt option, which needs tokens.
+
+  * make initscript stop command not leave apache2 processes lying around
+    (so that restart works)
+
+ -- Greg Price <price@mit.edu>  Tue, 30 Dec 2008 17:31:48 -0500
+
 invirt-web (0.0.15) unstable; urgency=low
 
   * config.{authn[0] => kerberos}.realm
 
- --
+ -- Evan Broder <broder@mit.edu>  Wed, 10 Dec 2008 23:30:46 -0500
 
 invirt-web (0.0.14) unstable; urgency=low