Correct a bug in pagespec matching, where a empty pagespec matched all pages.

[git.ikiwiki.info.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index 2b3b756f8e2de91d2dba1ef506dac6612762ab57..d851f35f61c8ed0ef3996b42c005ce9ebcf9876c 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,7 +1,13 @@
-ikiwiki (2.44) UNRELEASED; urgency=low
+ikiwiki (2.44) unstable; urgency=medium
 
   * Bring back the svnrepo setup file option. This is needed for
     recentchangediff to work with svn repos.
+  * Allow libtext-markdown-perl to satisfy dependencies, as a
+    an alternative to the markdown package.
+  * Correct a bug in pagespec matching, where a empty pagespec matched all
+    pages. This manifested as wikis with no locked pages treating them all as
+    locked. The bug was introduced in version 2.41.
+  * Medium urgency upload due to above fix.
 
  -- Joey Hess <joeyh@debian.org>  Thu, 17 Apr 2008 14:33:54 -0400
 
@@ -24,6 +30,7 @@ ikiwiki (2.42) unstable; urgency=high
   * Fix CSRF attacks against the preferences and edit forms. The fix involved
     embedding the session id in the forms, and not allowing the forms to be
     submitted if the embedded id does not match the session id. Closes: #475445
+    (CVE-2008-0165)
 
  -- Joey Hess <joeyh@debian.org>  Thu, 03 Apr 2008 02:35:39 -0400