X-Git-Url: http://git.vanrenterghem.biz/git.ikiwiki.info.git/blobdiff_plain/2217e3d5bbb377bb40a5701e90341f011c49a536..e15e3202eb04048feb302b39d946f1ae1a15c306:/debian/changelog

diff --git a/debian/changelog b/debian/changelog
index 5fddab963..299d7d571 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,4 +1,16 @@
-ikiwiki (2.13) UNRELEASED; urgency=low
+ikiwiki (2.14) unstable; urgency=high
+
+  * Let CC be used to control what compiler is used to build wrappers.
+  * Use 'cc' instead of gcc as the default compiler.
+  * Security fix: Ensure that there are no symlinks anywhere in the path
+    to the top of the srcdir. In certian unusual configurations, an attacker
+    who could commit to one of the parent directories of the srcdir could
+    use a symlink attack to cause ikiwiki to publish files elsewhere in the
+    filesystem. More details at <http://ikiwiki.info/security/#index29h2>
+
+ -- Joey Hess <joeyh@debian.org>  Mon, 26 Nov 2007 15:26:06 -0500
+
+ikiwiki (2.13) unstable; urgency=low
 
   The ikiwiki zombie army release.
 
@@ -27,7 +39,7 @@ ikiwiki (2.13) UNRELEASED; urgency=low
   * toc: Handle html elements embedded inside a header, rather than
     stopping collecting the header text at the first element.
 
- -- Joey Hess <joeyh@debian.org>  Sat, 17 Nov 2007 19:56:46 -0500
+ -- Joey Hess <joeyh@debian.org>  Sat, 24 Nov 2007 16:06:22 -0500
 
 ikiwiki (2.12) unstable; urgency=low