fixed most of the xapian todos

[git.ikiwiki.info.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index cdd8f8221db24696a1ca92af59d94d0b90081969..d80f780624dd0c7dd34d531c83dd2b818c11ac32 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,14 +1,20 @@
-ikiwiki (2.48) UNRELEASED; urgency=high
+ikiwiki (2.49) UNRELEASED; urgency=low
+
+  * haiku: Generate valid xhtml.
+  * ikiwiki-mass-rebuild: Don't trust $! when setting $)
+  * inline: The optimisation in 2.41 broke nested inlines. Detect those
+    and avoid overoptimising.
+  * search: Converted to use xapian-omega.
+
+ -- Joey Hess <joeyh@debian.org>  Fri, 30 May 2008 19:08:54 -0400
+
+ikiwiki (2.48) unstable; urgency=high

 
   * Fix security hole that occurred if openid and passwordauth were both
     enabled. passwordauth would allow logging in as a known openid, with an
 
   * Fix security hole that occurred if openid and passwordauth were both
     enabled. passwordauth would allow logging in as a known openid, with an

-    empty password.
+    empty password. Closes: #483770 (CVE-2008-0169)

   * Add rel=nofollow to edit links. This may prevent some spiders from
     pounding on the cgi following edit links.
   * Add rel=nofollow to edit links. This may prevent some spiders from
     pounding on the cgi following edit links.

-  * When calling decode_utf8 on known-problimatic content in aggregate,
-    explicitly pass 0 (FB_DEFAULT) as the second parameter. Apparently perl
-    5.8 needs this to avoid crashing on malformed utf-8, despite its docs
-    saying it is the default.

   * passwordauth: If Authen::Passphrase is installed, use it to store
     password hashes, crypted with Eksblowfish.
   * `ikiwiki-transiition hashpassword /path/to/srcdir` can be used to
   * passwordauth: If Authen::Passphrase is installed, use it to store
     password hashes, crypted with Eksblowfish.
   * `ikiwiki-transiition hashpassword /path/to/srcdir` can be used to


@@ -17,8 +23,9 @@ ikiwiki (2.48) UNRELEASED; urgency=high
   * The password_cost config setting is provided as a "more security" knob.
   * teximg: Fix logurl.
   * teximg: If the log isn't written, avoid ugly error messages.
   * The password_cost config setting is provided as a "more security" knob.
   * teximg: Fix logurl.
   * teximg: If the log isn't written, avoid ugly error messages.

+  * Updated French translation. Closes: #478530

 
 

- -- Joey Hess <joeyh@debian.org>  Wed, 28 May 2008 03:07:37 -0400
+ -- Joey Hess <joeyh@debian.org>  Fri, 30 May 2008 17:36:07 -0400

 
 ikiwiki (2.47) unstable; urgency=low
 
 
 ikiwiki (2.47) unstable; urgency=low