X-Git-Url: http://git.vanrenterghem.biz/git.ikiwiki.info.git/blobdiff_plain/0438de905b1009c02e653f11983f2ad501b02a30..ce826411b20f94a6ff95b87574b355f897547840:/debian/changelog

diff --git a/debian/changelog b/debian/changelog
index 6e8e550df..5e833d090 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,4 +1,38 @@
-ikiwiki (2.47) UNRELEASED; urgency=low
+ikiwiki (2.49) UNRELEASED; urgency=low
+
+  * haiku: Generate valid xhtml.
+  * ikiwiki-mass-rebuild: Don't trust $! when setting $)
+  * inline: The optimisation in 2.41 broke nested inlines. Detect those
+    and avoid overoptimising.
+  * search: Converted to use xapian-omega.
+  * Filter hooks are no longer called during the scan phase. This will
+    prevent wikilinks added by filters from being scanned properly. But
+    no known filter hook does that, and calling filters unncessarily during
+    scan slowed down complex filters such as the one used to update the xapian
+    index.
+
+ -- Joey Hess <joeyh@debian.org>  Fri, 30 May 2008 19:08:54 -0400
+
+ikiwiki (2.48) unstable; urgency=high
+
+  * Fix security hole that occurred if openid and passwordauth were both
+    enabled. passwordauth would allow logging in as a known openid, with an
+    empty password. Closes: #483770 (CVE-2008-0169)
+  * Add rel=nofollow to edit links. This may prevent some spiders from
+    pounding on the cgi following edit links.
+  * passwordauth: If Authen::Passphrase is installed, use it to store
+    password hashes, crypted with Eksblowfish.
+  * `ikiwiki-transiition hashpassword /path/to/srcdir` can be used to
+    hash existing plaintext passwords.
+  * Passwords will no longer be mailed, but instead a password reset link.
+  * The password_cost config setting is provided as a "more security" knob.
+  * teximg: Fix logurl.
+  * teximg: If the log isn't written, avoid ugly error messages.
+  * Updated French translation. Closes: #478530
+
+ -- Joey Hess <joeyh@debian.org>  Fri, 30 May 2008 17:36:07 -0400
+
+ikiwiki (2.47) unstable; urgency=low
 
   * mdwn: Add a multimarkdown setup file option.
   * If PERL5LIB is set to the libdir when building ikiwiki, calculate and 
@@ -12,9 +46,14 @@ ikiwiki (2.47) UNRELEASED; urgency=low
   * git: Skip over signed-off-by and similar lines in commit messages
     when generating recentchanges.
   * ENV can be used in the setup file to override environment variable
-    setting, such as TZ or PATH.
-
- -- Joey Hess <joeyh@debian.org>  Tue, 13 May 2008 12:30:18 -0400
+    settings, such as TZ or PATH.
+  * Perls older than 5.10 need to use the old method of decoding utf-8 in CGI
+    values. Neither method will work for all versions of perl, so check
+    version number at runtime.
+  * Avoid unsightly warning message when evaling broken pagespecs.
+  * Improve error message when a pagespec fails to parse.
+
+ -- Joey Hess <joeyh@debian.org>  Sun, 25 May 2008 14:25:42 -0400
 
 ikiwiki (2.46) unstable; urgency=low