releasing version 2.14

[ikiwiki.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index 5fddab9638cc14c806146c11f538e50856d99701..299d7d571bc87fb58de35cf79996ca5fceae4570 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,4 +1,16 @@
-ikiwiki (2.13) UNRELEASED; urgency=low
+ikiwiki (2.14) unstable; urgency=high
+
+  * Let CC be used to control what compiler is used to build wrappers.
+  * Use 'cc' instead of gcc as the default compiler.
+  * Security fix: Ensure that there are no symlinks anywhere in the path
+    to the top of the srcdir. In certian unusual configurations, an attacker
+    who could commit to one of the parent directories of the srcdir could
+    use a symlink attack to cause ikiwiki to publish files elsewhere in the
+    filesystem. More details at <http://ikiwiki.info/security/#index29h2>
+
+ -- Joey Hess <joeyh@debian.org>  Mon, 26 Nov 2007 15:26:06 -0500
+
+ikiwiki (2.13) unstable; urgency=low
 
   The ikiwiki zombie army release.
 
@@ -27,7 +39,7 @@ ikiwiki (2.13) UNRELEASED; urgency=low
   * toc: Handle html elements embedded inside a header, rather than
     stopping collecting the header text at the first element.
 
- -- Joey Hess <joeyh@debian.org>  Sat, 17 Nov 2007 19:56:46 -0500
+ -- Joey Hess <joeyh@debian.org>  Sat, 24 Nov 2007 16:06:22 -0500
 
 ikiwiki (2.12) unstable; urgency=low