Author: Christoph Berg
Revision Date: 2015-09-04 16:48:18 UTC

Security fix release:
New auth_user functionality introduced in 1.6 allows login as auth_user
when client presents unknown username. It's quite likely auth_user is
superuser. Affects only setups that have enabled auth_user in their
config.

Author: Christoph Berg
Revision Date: 2015-09-04 16:48:18 UTC

Security fix release:
New auth_user functionality introduced in 1.6 allows login as auth_user
when client presents unknown username. It's quite likely auth_user is
superuser. Affects only setups that have enabled auth_user in their
config.

Author: Christoph Berg
Revision Date: 2015-05-23 22:58:29 UTC

Fix remote crash - invalid packet order causes lookup of NULL pointer.
Not exploitable, just DoS. (CVE-2015-4054)
Cherry-picked from upstream 1.5.5.

Author: Christoph Berg
Revision Date: 2015-05-23 22:58:29 UTC

Fix remote crash - invalid packet order causes lookup of NULL pointer.
Not exploitable, just DoS. (CVE-2015-4054)
Cherry-picked from upstream 1.5.5.

Author: Christoph Berg
Revision Date: 2013-03-22 15:27:42 UTC

[ Peter Eisentraut ]
* Use log_daemon_msg and log_end_msg to print output from init script.
* Fix watch file (from Bart Martens <bartm@debian.org> via
  qa.debian.org)
* Disable silent make rules, per buildd log scanner

[ Christoph Berg ]
* On restart, loop until the PID of the process changed instead of sleeping
  a fixed time. Closes: #698942.
* Do not use start-stop-daemon --status yet as it is not available in
  squeeze. Use ssd --stop --signal 0 instead.
* debian/tests/connect: Test online restart.

Author: Peter Eisentraut
Revision Date: 2010-08-05 21:57:00 UTC

* Added myself to uploaders
* Fixed debian/copyright to match reality
* Updated standards version
* Install configuration files with more secure permissions (closes: #548887)