htmlscrubber: Security fix: In data:image/* uris, only allow a few whitelisted image...

[git.ikiwiki.info.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index cacb65aedd3a38b88c6243dc39915d19e6e17e0b..c01b697e367e3c80b1d97b93a595d745f510c0e5 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,7 +1,14 @@
+ikiwiki (2.53.5) stable-security; urgency=high
+
+  * htmlscrubber: Security fix: In data:image/* uris, only allow a few
+    whitelisted image types. No svg.
+
+ -- Joey Hess <joeyh@debian.org>  Fri, 12 Mar 2010 15:19:29 -0500
+
 ikiwiki (2.53.4) stable-security; urgency=high
 
   * teximg: Replace the insufficient blacklist with the built-in security
-    mechanisms of TeX.
+    mechanisms of TeX. (CVE-2009-2944)
   * img: Don't generate new verison of image if it is scaled to be
     larger in either dimension.