lemonldap-ng (2.0.13+ds-3ubuntu1) jammy; urgency=medium

  * d/p/Use-stronger-encryption-alg-for-new-certificates.patch:
    Cherry-picked from upstream to fix the compatibility with OpenSSL 3.0
    (LP: #1956753)

 -- Simon Chopin <simon.chopin@canonical.com>  Tue, 11 Jan 2022 09:55:18 +0100

lemonldap-ng (2.0.13+ds-3) unstable; urgency=medium

  * Install /var/lib/lemonldap-ng/cache (Closes: #995949)
  * Update lintian-overrides
  * Drop unneeded version dependency constraints
  * Remove sources of doc files from lemonldap-ng-doc package
  * Rename systemd *.tmpfile into *.tmpfiles

 -- Yadd <yadd@debian.org>  Sat, 09 Oct 2021 09:06:19 +0200

lemonldap-ng (2.0.13+ds-2) unstable; urgency=medium

  * Add lintian overrides for false positive "embedded-javascript-library":
    these files are built by Sphinx from Debian files
  * Fix 2.0.13 regression when portalRequireOldPassword=0

 -- Yadd <yadd@debian.org>  Fri, 27 Aug 2021 23:25:43 +0200

lemonldap-ng (2.0.13+ds-1) unstable; urgency=medium

  [ lintian-brush ]
  * Remove 2 obsolete maintscript entries in 1 files.

  [ Yadd ]
  * Declare compliance with policy 4.6.0
  * Add debian/gbp.conf
  * New upstream version 2.0.13+ds

 -- Yadd <yadd@debian.org>  Mon, 23 Aug 2021 06:24:10 +0200

lemonldap-ng (2.0.12+ds-2) unstable; urgency=medium

  * Back to unstable

 -- Yadd <yadd@debian.org>  Sat, 14 Aug 2021 13:13:11 +0200

lemonldap-ng (2.0.12+ds-1) experimental; urgency=medium

  * New upstream version 2.0.12+ds
  * Remove security patches included in upstream

 -- Yadd <yadd@debian.org>  Fri, 23 Jul 2021 16:50:29 +0200

lemonldap-ng (2.0.11+ds-4) unstable; urgency=high

  * Import security fixes from 2.0.12
    * Session cache corruption can lead to authorization bypass or spoofing
      (Closes: CVE-2021-35472)
    * OAuth2 handler does not verify access token validity
      (Closes: CVE-2021-35473)
    * Fix XSS on register form
    * Don't display TOTP secret to connected user, neither in logs

 -- Yadd <yadd@debian.org>  Thu, 22 Jul 2021 22:13:38 +0200

lemonldap-ng (2.0.11+ds-3) unstable; urgency=medium

  * Add Breaks+Replaces in lemonldap-ng-handler for
    lemonldap-ng-fastcgi-server < 2.0.5 (Closes: #985107)

 -- Yadd <yadd@debian.org>  Sat, 13 Mar 2021 08:15:38 +0100

lemonldap-ng (2.0.11+ds-2) unstable; urgency=medium

  * Add recommended dependency to gsfonts, needed to enable Captcha images
    when using GD::SecurityImage (upstream ref: #2459)

 -- Yadd <yadd@debian.org>  Thu, 11 Feb 2021 10:57:38 +0100

lemonldap-ng (2.0.11+ds-1) unstable; urgency=medium

  * New upstream version 2.0.11+ds
  * Refresh patches
  * Update lintian overrides

 -- Xavier Guimard <yadd@debian.org>  Sun, 31 Jan 2021 16:54:48 +0100

# For older changelog entries, run 'apt-get changelog liblemonldap-ng-common-perl'
