Change log for krb5-strength package in Ubuntu

krb5-strength (3.3-1) unstable; urgency=medium

  * New upstream release.
    - Increase hash iterations for heimdal-history.
    - Explicitly clear another password before freeing.

 -- Russ Allbery <email address hidden>  Mon, 25 Dec 2023 19:12:56 -0800

Available diffs

• diff from 3.2-4 to 3.3-1 (209.7 KiB)

krb5-strength (3.2-4) unstable; urgency=medium

  * Run make maintainer-clean during debian/rules clean, since
    debian/rules build runs ./bootstrap and thus regenerates test files.
    (Closes: #1048564)
  * Update to standards version 4.6.2 (no changes required).
  * Refresh upstream signing key.

 -- Russ Allbery <email address hidden>  Sun, 22 Oct 2023 12:37:47 -0700

Available diffs

• diff from 3.2-3 to 3.2-4 (10.3 KiB)

krb5-strength (3.2-3) unstable; urgency=medium

  [ Helmut Grohne ]
  * Fix FTBFS with nocheck profile. (Closes: #983701)

 -- Russ Allbery <email address hidden>  Sun, 28 Feb 2021 11:27:30 -0800

Available diffs

• diff from 3.2-2 to 3.2-3 (655 bytes)

krb5-strength (3.2-2) unstable; urgency=medium

  * Mark build dependencies used only for the test suite with <!nocheck>.
    Thanks, Helmut Grohne.  (Closes: #978723)
  * Remove Build-Dependency on libfile-slurp-perl, which was not used.
  * Add debian/upstream/metadata file.
  * Change the Debian packaging branch to debian/unstable.
  * Change canonical packaging repository to Salsa.
  * Update to standards version 4.5.1 (no changes required).
  * Refresh upstream signing key.

 -- Russ Allbery <email address hidden>  Wed, 30 Dec 2020 18:11:26 -0800

Available diffs

• diff from 3.2-1 to 3.2-2 (11.4 KiB)

krb5-strength (3.2-1) unstable; urgency=medium

  * New upstream release.
    - New --check-only option to heimdal-history.
    - Increase hash iterations for heimdal-history for new hashes.
    - Use explicit_bzero to overwrite copies of passwords.
  * Drop upstream patch to modify the test suite, since the upstream test
    suite now correctly handles a system CrackLib library.
  * Include the full text of the license of the embedded copy of cracklib
    (not used in the Debian build) in debian/copyright, since it's not
    identical to the Artistic license included in common-licenses.
  * Update to debhelper compatibility level V13.
  * Update to standards version 4.5.0 (no changes required).
  * Refresh upstream signing key.

 -- Russ Allbery <email address hidden>  Sun, 17 May 2020 10:27:44 -0700

Available diffs

• diff from 3.1-2 to 3.2-1 (159.8 KiB)

krb5-strength (3.1-2) unstable; urgency=medium

  * Update standards version to 4.2.1.
    - Enable verbose test output.
    - Install the upstream release notes as NEWS.gz, not changelog.gz.
    - Add Rules-Requires-Root: no.
    - Use https for URLs in debian/copyright.
    - Change priority to optional.
  * Update to debhelper compatibility levl V11.
  * Bump debian/watch version to 4 and use https.
  * Add upstream-vcs-tag configuration to debian/gbp.conf.
  * Remove obsolete debian/source/options that was forcing the compression
    format to xz (now the default).
  * Refresh upstream signing key.

 -- Russ Allbery <email address hidden>  Fri, 31 Aug 2018 17:07:43 -0700

Available diffs

• diff from 3.1-1 to 3.1-2 (3.9 KiB)

krb5-strength (3.1-1) unstable; urgency=medium

  * New upstream release.
    - New configuration option cracklib_maxlen.
    - require_classes now supports requiring a minimum number of classes.
    - Capitalize the first letter of error messages.
    - Apply SuSE patch for a security vulnerability in the embedded
      CrackLib.  This didn't affect the way it was used in this package,
      but best to be sure anyway.
    - Configuration instructions are now provided in installed man pages,
      including a new krb5-strength man page, to make them more accessible
      after installation.
  * Patch the upstream test suite to change the expected results for a few
    passwords that are rejected by the embedded CrackLib but accepted by
    the system CrackLib (which the Debian package is built with).
  * Re-enable treating test suite failures as package build failures now
    that bug #724570 in CrackLib was fixed in Debian.
  * Switch to the DEP-14 branch layout and update debian/gbp.conf and
    Vcs-Git accordingly.
  * Prefer *.tar.xz in debian/watch to match packaging.
  * Fix Upstream-Contact email address in debian/copyright.
  * Switch to https for all package URLs.
  * Run wrap-and-sort -ast.
  * Refresh upstream signing key.
  * Enable all hardening flags.
  * Update to debhelper compatibility level V10.
    - Remove explicit dh-autoreconf dependency and invocation.
    - Remove explicit --parallel flags.
  * Update standards version to 3.9.8 (no changes required).

 -- Russ Allbery <email address hidden>  Sun, 25 Dec 2016 12:40:41 -0800

Available diffs

• diff from 3.0-1 to 3.1-1 (306.6 KiB)

krb5-strength (3.0-1) unstable; urgency=medium


  * New upstream release.
    - SQLite password dictionaries are now supported and can be used to
      reject passwords within edit distance one of any dictionary word.
    - cdbmake-wordlist has been renamed to krb5-strength-wordlist and can
      also generate SQLite databases compatible with this plugin and
      Heimdal quality check program.
    - heimdal-history, a password history implementation for Heimdal, has
      been added and can be stacked with heimdal-strength to check both
      history and password strength.
    - New configuration option, minimum_different, which sets the minimum
      number of different characters required in a password.
  * Add the upstream signing key to debian/upstream/signing-key.asc and
    configure uscan to do signature validation.  Configure uscan to
    download the xz tarball instead of the gz tarball.
  * Create a _history user and group and a /var/lib/heimdal-history
    directory on package installation for the use of heimdal-history,
    remove the user and the standard database on purge, and remove the
    directory if empty on package purge or removal.

 -- Russ Allbery <email address hidden>  Wed, 26 Mar 2014 00:04:13 -0700

Available diffs

• diff from 2.2-1 to 3.0-1 (86.4 KiB)

krb5-strength (2.2-1) unstable; urgency=low


  * New upstream release.
    - Support for more complex length-sensitive character class
      restrictions using the new require_classes configuration setting.
    - cdbmake-wordlist now supports filtering out words based on maximum
      length and user-supplied regular expressions, and supports running
      in filter mode to generate a new word list.
  * Update to standards version 3.9.5 (no changes required).

 -- Russ Allbery <email address hidden>  Mon, 16 Dec 2013 15:36:29 -0800

Available diffs

• diff from 2.1-1 to 2.2-1 (45.5 KiB)

krb5-strength (2.1-1) unstable; urgency=low


  * New upstream release.
    - Improve some of the password rejection error messages.

 -- Russ Allbery <email address hidden>  Thu, 10 Oct 2013 17:09:37 -0700