web commit by buo: libdir does have an effect

[git.ikiwiki.info.git] / doc / news / version_2.48.mdwn

diff --git a/doc/news/version_2.48.mdwn b/doc/news/version_2.48.mdwn
index d78b42c54aba4f1b54e438c9ae7bc20534da016c..76dbd7ddc340b20f590cae9df6fe9a60cdfd6e89 100644 (file)
--- a/doc/news/version_2.48.mdwn
+++ b/doc/news/version_2.48.mdwn
@@ -4,7 +4,7 @@ News for ikiwiki 2.48:
 
    If you allowed password based logins to your wiki, those passwords were
    stored in cleartext in the userdb. To guard against exposing users'
 
    If you allowed password based logins to your wiki, those passwords were
    stored in cleartext in the userdb. To guard against exposing users'

-   passwords, I recommend you install the Authen::Passphrase perl module, and
+   passwords, I recommend you install the [[cpan Authen::Passphrase]] perl module, and

    then run `ikiwiki-transition hashpassword /path/to/srcdir` to replace all
    existing cleartext passwords with strong (blowfish) hashes.
 
    then run `ikiwiki-transition hashpassword /path/to/srcdir` to replace all
    existing cleartext passwords with strong (blowfish) hashes.
 


@@ -13,6 +13,7 @@ ikiwiki 2.48 released with [[toggle text="these changes"]]
    * Fix security hole that occurred if openid and passwordauth were both
      enabled. passwordauth would allow logging in as a known openid, with an
      empty password. Closes: #[483770](http://bugs.debian.org/483770)
    * Fix security hole that occurred if openid and passwordauth were both
      enabled. passwordauth would allow logging in as a known openid, with an
      empty password. Closes: #[483770](http://bugs.debian.org/483770)

+     (CVE-2008-0169)

    * Add rel=nofollow to edit links. This may prevent some spiders from
      pounding on the cgi following edit links.
    * passwordauth: If Authen::Passphrase is installed, use it to store
    * Add rel=nofollow to edit links. This may prevent some spiders from
      pounding on the cgi following edit links.
    * passwordauth: If Authen::Passphrase is installed, use it to store