update changelog after cherry-picking all relevent fixes

[git.ikiwiki.info.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index 027785277e4da79e620ddbe079b9b98443d5ea8e..d2dbe592db31b1cc469f4d8660a381cee9915cd5 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,14 @@
+ikiwiki (1.33.4) stable-security; urgency=high
+
+  * htmlscrubber security fix: Block javascript in uris. Closes: #465110
+  * meta: Check that the urls provided for authorurl, permalink, and openid
+    are safe and can't contain javascript.
+  * Add htmlscrubber test suite.
+  * Thanks to Josh Triplett for pointing out the holes and for his help
+    in implementing and checking fixes.
+
+ -- Joey Hess <joeyh@debian.org>  Sun, 10 Feb 2008 13:34:28 -0500
+

 ikiwiki (1.33.3) testing-proposed-updates; urgency=medium
 
   * Fix a security hole that allowed insertion of unsafe content via the meta
 ikiwiki (1.33.3) testing-proposed-updates; urgency=medium
 
   * Fix a security hole that allowed insertion of unsafe content via the meta