X-Git-Url: https://sipb.mit.edu/gitweb.cgi/ikiwiki.git/blobdiff_plain/e943812dc9802d134f2d9627a6c4fc94fe9c26f9..c1289de1eff4c0b4b2cd47e61b2273970e327009:/debian/changelog?ds=sidebyside diff --git a/debian/changelog b/debian/changelog index cdd8f8221..02796394b 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,14 +1,19 @@ -ikiwiki (2.48) UNRELEASED; urgency=high +ikiwiki (2.49) UNRELEASED; urgency=low + + * haiku: Generate valid xhtml. + * ikiwiki-mass-rebuild: Don't trust $! when setting $) + * inline: The optimisation in 2.41 broke nested inlines. Detect those + and avoid overoptimising. + + -- Joey Hess Fri, 30 May 2008 19:08:54 -0400 + +ikiwiki (2.48) unstable; urgency=high * Fix security hole that occurred if openid and passwordauth were both enabled. passwordauth would allow logging in as a known openid, with an - empty password. + empty password. Closes: #483770 (CVE-2008-0169) * Add rel=nofollow to edit links. This may prevent some spiders from pounding on the cgi following edit links. - * When calling decode_utf8 on known-problimatic content in aggregate, - explicitly pass 0 (FB_DEFAULT) as the second parameter. Apparently perl - 5.8 needs this to avoid crashing on malformed utf-8, despite its docs - saying it is the default. * passwordauth: If Authen::Passphrase is installed, use it to store password hashes, crypted with Eksblowfish. * `ikiwiki-transiition hashpassword /path/to/srcdir` can be used to @@ -17,8 +22,9 @@ ikiwiki (2.48) UNRELEASED; urgency=high * The password_cost config setting is provided as a "more security" knob. * teximg: Fix logurl. * teximg: If the log isn't written, avoid ugly error messages. + * Updated French translation. Closes: #478530 - -- Joey Hess Wed, 28 May 2008 03:07:37 -0400 + -- Joey Hess Fri, 30 May 2008 17:36:07 -0400 ikiwiki (2.47) unstable; urgency=low