From 7ef2ac1561f5a2bee9444e4d4ff3f03ba7566630 Mon Sep 17 00:00:00 2001 From: Juliusz Chroboczek Date: Wed, 22 Jan 2025 00:01:19 +0100 Subject: [PATCH] Update CHANGES for 0.96.2. --- CHANGES | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/CHANGES b/CHANGES index a0e4653..6d2b2a7 100644 --- a/CHANGES +++ b/CHANGES @@ -1,3 +1,15 @@ +21 January 2025: Galene 0.96.2 + + * Fix a bug, introduced in 0.96.1, that could cause plaintext passwords + to be erroneously accepted even when incorrect. + * Implement background blur on Safari. + * Change the default hashing algorithm to bcrypt. We use a cost of 8 in + order to keep hashing times under 25ms, even though 10 is currently + the recommended minimum. + * Limit the number of concurrent password hashing operations to the + number of CPUs. This avoids using excessive memory when many users + log in at the same time. + 18 January 2025: Galene 0.96.1 * Avoid path traversal in disk writer.