X-Git-Url: https://sipb.mit.edu/gitweb.cgi/ikiwiki.git/blobdiff_plain/c041e97c29eca03d7d932c21426dcc89bfbc1dc7..0a35e8a3525db58bf38cd6ffdc45c7baaae04dd8:/debian/NEWS diff --git a/debian/NEWS b/debian/NEWS index 658fc0041..878489547 100644 --- a/debian/NEWS +++ b/debian/NEWS @@ -1,3 +1,22 @@ +ikiwiki (2.48) unstable; urgency=high + + If you allowed password based logins to your wiki, those passwords were + stored in cleartext in the userdb. To guard against exposing users' + passwords, I recommend you install the Authen::Passphrase perl module, and + then run `ikiwiki-transition hashpassword /path/to/srcdir` to replace all + existing cleartext passwords with strong (blowfish) hashes. + + -- Joey Hess Thu, 29 May 2008 14:39:34 -0400 + +ikiwiki (2.46) unstable; urgency=low + + There were some significant template changes in ikiwiki 2.42 (and 1.33.5). + If you have locally modified versions of the templates, they need to be + updated. Most notably, the editpage.tmpl has a new FIELD-SID added to it, + without which web editing will fail. + + -- Joey Hess Tue, 06 May 2008 14:30:14 -0400 + ikiwiki (2.40) unstable; urgency=low ikiwiki now has an new syntax for preprocessor directives, using the @@ -49,8 +68,8 @@ ikiwiki (2.30) unstable; urgency=low from this version. If you were subscribed to commit mails, you should be able to accomplish the same thing by subscribing to a RecentChanges feed. - The "svnrepo" and "notify" fields in setup files are no longer used, and - silently ignored. You may want to remove them from your setup file. + The "notify" field in setup files is no longer used, and + silently ignored. You may want to remove it from your setup file. -- Joey Hess Tue, 29 Jan 2008 17:18:31 -0500 @@ -80,7 +99,7 @@ ikiwiki (2.14) unstable; urgency=low This version of ikiwiki is more picky about symlinks in the path leading to the srcdir, and will refuse to use a srcdir specified by such a path. - This was necessary to avoid some potential exploits, but could potentially + This was necessary to avoid some potential exploits, but could potentially break (semi-)working wikis. If your wiki has a srcdir path containing a symlink, you should change it to use a path that does not.