-ikiwiki (3.20170111) UNRELEASED; urgency=medium
+ikiwiki (3.20170112) UNRELEASED; urgency=medium
+
+ * t/git-cgi.t: Wait 1 second before doing a revert that should work.
+ This hopefully fixes a race condition in which the test failed
+ around 6% of the time. (Closes: 862494)
+ * Guard against set-but-empty REMOTE_USER CGI variable on
+ misconfigured nginx servers, and in general treat sessions with
+ a set-but-empty name as if they were not signed in.
+ * When the CGI fails, print the error to stderr, not "Died"
+ * mdwn: Don't mangle <style> into <elyts> under some circumstances
+ * mdwn: Enable footnotes by default when using the default Discount
+ implementation. A new mdwn_footnotes option can be used to disable
+ footnotes in MultiMarkdown and Discount.
+
+ -- Simon McVittie <smcv@debian.org> Sun, 14 May 2017 15:34:52 +0100
+
+ikiwiki (3.20170111) unstable; urgency=high
* passwordauth: prevent authentication bypass via multiple name
parameters (CVE-2017-0356, OVE-20170111-0001)
* remove: make it clearer that repeated page parameter is OK here
* t/passwordauth.t: new automated test for passwordauth
- -- Simon McVittie <smcv@debian.org> Wed, 11 Jan 2017 18:12:05 +0000
+ -- Simon McVittie <smcv@debian.org> Wed, 11 Jan 2017 18:16:53 +0000
ikiwiki (3.20170110) unstable; urgency=medium