Merge remote-tracking branch 'smcv/pagestats-show'

[git.ikiwiki.info.git] / doc / news / version_3.20150329.mdwn

diff --git a/doc/news/version_3.20150329.mdwn b/doc/news/version_3.20150329.mdwn
index 0ac19a88ddf6b93dc5f2ef3d05b9ee5be0f347f1..7e0d3e0bc768da3ddc138eff419b70d782e3bf8e 100644 (file)
--- a/doc/news/version_3.20150329.mdwn
+++ b/doc/news/version_3.20150329.mdwn
@@ -1,4 +1,6 @@
-ikiwiki 3.20150329 released with [[!toggle text="these changes"]]
+ikiwiki 3.20150329 released with [[!toggle text="these changes"]]. This is a
+security update fixing a cross-site scripting vulnerability.
+
 [[!toggleable text="""
   [ [[Joey Hess|joey]] ]
 
@@ -25,3 +27,8 @@ ikiwiki 3.20150329 released with [[!toggle text="these changes"]]
   * Fix XSS in openid selector. Thanks, Raghav Bisht.
     (Closes: [[!debbug 781483]])
 """]]
+
+In addition, version 3.20141016.2 was released on the same day to backport
+the cross-site-scripting fix to Debian 8.
+
+[[!meta date="2015-03-29 22:46:39 +0100"]]