1 files changed, 20 insertions, 0 deletions

diff --git a/debian/changelog b/debian/changelog
index 573dc927c..787d2dd0f 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -86,6 +86,26 @@ openssh (1:3.8.1p1-9) experimental; urgency=low
 
  -- Colin Watson <cjwatson@debian.org>  Mon,  2 Aug 2004 20:48:54 +0100
 
+openssh (1:3.8.1p1-8.sarge.4) unstable; urgency=high
+
+  * Fix timing information leak allowing discovery of invalid usernames in
+    PAM keyboard-interactive authentication (backported from a patch by
+    Darren Tucker; closes: #281595).
+  * Make sure that there's a delay in PAM keyboard-interactive
+    authentication when PermitRootLogin is not set to yes and the correct
+    root password is entered (closes: #248747).
+
+ -- Colin Watson <cjwatson@debian.org>  Sun, 28 Nov 2004 12:37:16 +0000
+
+openssh (1:3.8.1p1-8.sarge.3) unstable; urgency=low
+
+  * Enable threading for PAM, on Sam Hartman's advice (closes: #278394).
+  * debconf template translations:
+    - Update Dutch (thanks, cobaco; closes: #278715).
+  * Correct README.Debian's ForwardX11Trusted description (closes: #280190).
+
+ -- Colin Watson <cjwatson@debian.org>  Fri, 12 Nov 2004 10:31:12 +0000
+
 openssh (1:3.8.1p1-8.sarge.2) unstable; urgency=low
 
   * Preserve /etc/ssh/sshd_config ownership/permissions (closes: #276754).