-ikiwiki (1.42) UNRELEASED; urgency=low
+ikiwiki (1.42) unstable; urgency=low
* Fix several more missing translations of Discussion.
* Fix for missing backlinks() in pagestats plugin.
"anonok" plugin. Anyone with a wiki allowing anonymous edits should
change their configs to enable this new plugin.
* Add an opendiscussion plugin that allows anonymous users to edit
- discussion pages, on a wiki that is otherwise wouldn't allow it.
+ discussion pages, on a wiki that otherwise wouldn't allow it.
* Lots of CGI code reorg and cleanup.
* Avoid using lots of memory when copying large non-html files.
Yes, you can keep videos in the wiki..
* Add "reverse" option to inline to invert sort orders.
* Drop the BSD license for the templates and basewiki, and just allow them
to be used as close to public domain as possible.
-
- -- Joey Hess <joeyh@debian.org> Thu, 8 Feb 2007 14:46:17 -0500
+ * viewcvs is now viewvc (in Debian unstable), update everything to use the
+ new name.
+ * Fix a security hole that allowed a web user to edit images and other
+ non-page format files in the wiki. To exploit this, the file already had
+ to exist in the wiki, and the web user would need to somehow use the web
+ based editor to replace it with malicious content.
+ (Sorry Josh, this means you can't edit style.css directly anymore,
+ although I do appreciate your fixes, actually..)
+
+ -- Joey Hess <joeyh@debian.org> Sat, 10 Feb 2007 15:37:39 -0500
ikiwiki (1.41) unstable; urgency=low