Give the full path to the hyperestraier helpfile in estseek.conf.

[ikiwiki.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index 613640f60bcebee54166fec552071440cfceafb8..5c32df9b86f89ec7c3732a01c476ae9cc4f4aec8 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,8 +1,21 @@
-ikiwiki (2.42) UNRELEASED; urgency=low
+ikiwiki (2.43) UNRELEASED; urgency=low
+
+  * Fix missing import of escapeHTML in userlink. (Scott Bronson)
+  * Fix broken rcs_update for bzr. (Scott Bronson)
+  * Use bzr --quiet to avoid it outputting stuff and messing up http headers.
+    (Scott Bronson)
+  * Give the full path to the hyperestraier helpfile in estseek.conf.
+
+ -- Joey Hess <joeyh@debian.org>  Thu, 10 Apr 2008 17:36:53 -0400
+
+ikiwiki (2.42) unstable; urgency=high
 
   * aggregate: Correct a mistake in the code that dummy up a guid for feeds
     lacking one.
   * inline: Correct handling of urls relative to baseurl in feeds.
+  * Fix CSRF attacks against the preferences and edit forms. The fix involved
+    embedding the session id in the forms, and not allowing the forms to be
+    submitted if the embedded id does not match the session id. Closes: #475445
 
  -- Joey Hess <joeyh@debian.org>  Thu, 03 Apr 2008 02:35:39 -0400