changelog: Retrospectively some items missing from 0.4.1

Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>

diff --git a/debian/changelog b/debian/changelog
index 24e103d6e43b10403c17d24405c211d49fe948c2..cd9bac820fab025979a42785108d79c38ccdf9da 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,18 +1,31 @@
-secnet (0.4.2~) unstable; urgency=medium
+secnet (0.4.2~) unstable; urgency=low
 
   Build etc. fixes:
   * #include <limits.h> (fixes the build on jessie).
   * Tolerate building from a git checkout, but with git not installed.
     (This can happen in chroots.)
+  * Retrospectively include in changelog some items missing from
+    0.4.1's description of 0.4.1.
   * Release checklist fixes.
 
- -- Ian Jackson <ijackson@chiark.greenend.org.uk>  Sat, 25 Nov 2017 14:04:42 +0000
+ -- Ian Jackson <ijackson@chiark.greenend.org.uk>  Sat, 25 Nov 2017 14:17:21 +0000
 
 secnet (0.4.1) unstable; urgency=low
 
+  Security improvement:
+  * Use `mpz_powm_sec' for modexps.
+
+  Enhancements:
   * Implement comm-info and dedicated-interface-addr feature, for
     benefit of hippotat.
   * Implement `keepalive' site option, to try to keep link always up.
+
+  Build etc. fixes:
+  * Turn off -Wsign-compare for bison output.
+  * Makefile.in: Fix `check-ipaddrset' rule to get reference from
+    $(srcdir).  (Makes out-of-tree builds work properly.)
+
+  Bugfixes:
   * When printing messages about dropping IPv6, do not print anything
     about ihl.  (Check the IP version field first!)
   * When turning on debug, turn on verbose too.