From 5f750e16b8c32d2fd69209f433e7d19efa53a71f Mon Sep 17 00:00:00 2001 From: Joey Hess Date: Fri, 12 Nov 2010 10:25:21 -0400 Subject: [PATCH] CVE id --- debian/changelog | 6 +++--- doc/security.mdwn | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/debian/changelog b/debian/changelog index f8dc04eca..582a8e36a 100644 --- a/debian/changelog +++ b/debian/changelog @@ -10,11 +10,11 @@ ikiwiki (3.20101112) unstable; urgency=HIGH (Thanks, Tuomas Jormola) * Fix htmlscrubber_skip to be matched on the source page, not the page it is inlined into. Should allow setting to "* and !comment(*)" to scrub - comments, but leave your blog posts unscrubbed, etc. + comments, but leave your blog posts unscrubbed, etc. CVE-2010-1673 * comments: Make postcomment() pagespec work when previewing a comment, - including during moderation. + including during moderation. CVE-2010-1673 * comments: Make comment() pagespec also match comments that are being - posted. + posted. CVE-2010-1673 -- Joey Hess Fri, 12 Nov 2010 00:36:06 -0400 diff --git a/doc/security.mdwn b/doc/security.mdwn index 2c342b199..4fa531eb1 100644 --- a/doc/security.mdwn +++ b/doc/security.mdwn @@ -452,4 +452,4 @@ Additionally, it was discovered that comments' html was never scrubbed during preview or moderation of comments with such a configuration. These problems were discovered on 12 November 2010 and fixed the same -hour with the release of ikiwiki 3.20101112. +hour with the release of ikiwiki 3.20101112. ([[!cve CVE-2010-1673]]) -- 2.44.0